How to - SSO to CRM WebUI via SAP GUI for Windows

Great! It's working well.

But it opens a SAPGUI window and I do not know how to get rid off automatically.

 Regards. Carsten

Hi Carsten,

you can write a wrapper report around the transaction and put the command:

 CALL 'SYST_LOGOFF'.

after the call transaction.

Best regards
Gregor

Hi Gregor,

thanks for the hint. We did so: AND IT's WORKING PERFECT.

Thanks a lot!

Best Regards, Carsten

Hi Gregor,

it's working - but there's another "wish". How to start this automatically with HTTPS (not HTTP)?

Thanks in advance.

Hi Carsten,

 I've opened an OSS Message requesting this feature. Perhaps you or your customer can do that too. Perhaps we get it into standard.

Best regards
Gregor

Hi Gregor,

thank you for the description - this works good.

 Some of our users are assigned to  more than one businessrole. Do you have an idea how to create a shortcut using this single sign on and also including a businessrole?

Thank you

Kind regards

Manfred

Hi Manfred,

I've added that request to my OSS Message (Which is still waiting to be processed). But what we also can do is create our own Report which does implement all that features and publish it on SAP CodeExchange.

Regards
Gregor

Hi Gregor,

Good news! Do you already have a note-number for this?

Regards,

Carsten

Thanks, Gregor ... Then ... we will sit and wait.

I was wondering if there may be another possibilty to do SSO with this CRM_UI_START or CRM_LOGON.

But it seems, that it is not possible to do SSO with this ... right?

Regards,

Carsten

I didn't get your point here. SSO is enabled by applying Note 1467488 - Start WebClient UI with user credentials of SAP GUI. If you don't have a Windows based environment another SSO option is the NetWeaver Java Stack where you can enable Kerberos Authentication.

If that does not answer your question please provide more details.

Hi Gregor,

Thanks for the steps,its really helpful and easy to implement.In my application we are currently launchin CRM through EP(Enterprise portal)

But now we want to launch it directly from WebUI using SSO,which is working fine as per the steps given above,provided I have installed the required client  in my sysem i.e. say CRD 200 in my case.But when we take this to live for end users,we cannot install the client seperately for each user..since our application is accessed across the globe by over 10,000 users.

Is there any way to have this server in a centralised location to enable SSO,without asking the enduser community to install  the CRM client in their machines...

Regards

Anu

Hi Anu,

for such a large user base I think your current solution with the portal is the right way. If you have the problem that the Portal frame is around the CRM UI try the SSO solution described in the BlogSingle Sign On to BSP pages from Duet's Action Pane. Distributing the SAP GUI to all users make only sense if they have to use it also for other SAP Business Suite applications like ERP. But if you have a Citrix Terminal Server that could be also a possible solution.

Best regards
Gregor

hi gregor,

thanks for your response,I have a doubt related to removing the SAPGUI window.Though the window doesnt launch anymore..is there any way to  remove the SAPLOGON PAD that is also launching auotmatically along with the UI.

Also how do I create a link from this shortcut file to be used as  a link to intranet

Regards

Anu

Hi Charsten,

regarding your question if HTTPS (SSL) can also be an option I've made a strange observation. First I've set the HTTPS Option for the default.htm page of BSP Application crm_ui_start. That caused the CRM Web UI to use SSL only. But I've traced the network and discovered that regardless of this setting the /sap/public/myssocntl Service was still accessed using HTTP. In the report BSP_WD_APPL_STARTER the SSO option calls the method ENABLE_SAPSSO of class CL_GUI_HTML_VIEWER. I've set a breakpoint at the call of cl_http_server=>get_location but when I did a single step debugging into this call I was forwarded to the function module TH_GET_VIRT_HOST_DATA. I would like to ask if you also face this behaviour.

Best regards
Gregor

Hello Gregor,

works fine so far, thanks for this solution!
One question: if i lunch the WebUI with the report BSP_WD_APPL_STARTER, the url used is "http://srv123.x.y.com/..." (which is the real server name).
We defined a DNS alias "sapcrt", which is also set in the parameter icm/host_name_full = sapcrt.x.y.com.

How can i teach BSP_WD_APPL_STARTER to use the host of icm/host_name_full?

Best regards
Florian