Configuring Single Sign-on (SSO) and Secure Network Communications (SNC) for SAP connector

Before you begin

In Cast Iron version 6.3.0.2 and later versions, you can connect to SAP through the SAP connector in the following ways:
  • By providing user name and password
  • By providing an SSO ticket (for Invoke RFC, Invoke BAPI, and Send IDOC activities only).
    Note: Enable the SAP server for SSO. The SAP SSO ticket can be obtained by logging into the SAP system using a web browser and fetching the value of session cookie named MYSAPSSO2.
  • Using the SNC feature, by providing the SNC name, the SNC partner name, and one of the following:
    • X509 certificate
    • X509 certificate, username (user of the certificate), and a dummy password
    • User name and password
Note: Enable the SAP server for SNC.

Procedure

For SNC:

  1. Add SECUDIR as a system variable and set it to the PATH: WHERE SECUDIR = <PATH OF EXTRACTED SAP CRYPTO lib file>.
  2. Add the system credentials to the .pse file: sapgenpse seclogin -p <PSE LOCATION>.pse -O <SYSTEM USERNAME>.
  3. In Cast Iron Studio, go to Tools > Install Module Providers and upload sapcrypto.dll file to the SAP connector.
  4. In the endpoint page, complete the following:
    1. Specify the distinguished name for client PSE (created while generating client PSE) in the SNC name field.
    2. Specify the distinguished name for client PSE (created while generating client PSE) in the SNC partner field.
    3. Specify the level of security in SNC security level. Security level support is provided by Cryptographic Library and all security levels may not be supported by a particular library file. Select the required option from the drop-down list.
    4. Optional: Specify the X509 certificate to be used as the log on ticket, if required. Remove the extra lines such that the certificate is in a single line.
    5. Complete the rest of the fields and click Test Connection.



Feedback | Notices


Timestamp icon Last updated: Thursday, December 17, 2015


http://pic.dhe.ibm.com/infocenter/wci/v7r0m0/topic/com.ibm.wci.doc/SAP_configuring_SNC.html