| Autor | SSO von Enterprise Portal zu Outlook WebMail |
PHoefer
Beiträge: 1 verfasst:
08.01.2004, 16:09 Uhr
|
Ich möchte SingleSignOn vom SAP Enterprise Portal zu OutlookWebAccess erreichen, dazu habe ich die Anleitung auf dieser Site unter Downloads/Technische Beiträge verwendet,
Nachdem die Data Source und das .NET custom iView eingerichtet sind,
popt beim Neuanmelden am Portal eine Anmeldemaske für OWA auf. Kann
das daran liegen, dass der Portalserver und der ExchangeServer in
unterschiedlichen Domains stehen? Müssen dazu die iis_sso.*-Filter
eingerichtet sein?
Gruss Jens Matthiessen
Anmerkung Patrick Hoefer: Ich verschiebe diesen Beitrag von Jens Matthiessen aus der News Zone in die Community Zone, da es sich um eine Frage zu der Anleitung "SSO zwischen dem SAP EP und Outlook Web Access" im Downloadbereich handelt. |
| |
PHoefer
Beiträge: 1verfasst:
08.01.2004, 16:14 Uhr |
Hallo,
die Anleitung beschreibt die Integration von Outlook Web Access über http get. D.h. es werden nicht, wie bei einer Kommunikation zwischen SAP System die Benutzernamen und die Authentizität (welche die von Ihnen erwähnten Bibliotheken erfordert), übertragen sondern nur Benutzernamen und Passwort.
Um einem User den Zugriff auf das Outlook Web Access zu erlauben muss leider für jeden Benutzer individuell die Datenquelle gemappt werden und der Name (evtl. incl. Domain/) sowie das Passwort eingetragen werden. Dazu gehen Sie folgendermaßen vor:
1. Loggen Sie sich mit dem betreffenden Benutzer ein
2. Personalisieren:Portal
3. Benutzerzuordung
4. Wählen Sie die Datenquelle Outlook Web Access
5. Geben Sie Domain/Name und Passwort ein
Fertig!
Viele Grüße,
Patrick Höfer |
| |
bregne
Beiträge: verfasst:
24.02.2004, 13:27 Uhr |
Hi PHoefer
I have recent implemented the EP6.0 Sp2 portal in our company and would like to intregrate the Outlook Web Access (Exchange 2003 server) - how should I do that when I don't have the "datasource" option as under EP5.0???
Please help me....
Best regards - and a big salute to your web site (I am from Denmark, so I do have some challange in the German language - but what the heck...)
Lars Bregnedal
|
| |
PHoefer
Beiträge: 1verfasst:
24.02.2004, 13:48 Uhr |
Hello Lars,
i think for EP 6.0 you must use the Application Integrator to Implement OWA. I dont make it up to now and so i dont know how it works exactly, but i try to make a manual in the next Days.
For the Application Integrator programm and manual go to http://sdn.sap.com and search for "Application Integrator". Then take the fourth result " The Application Integrator in EP 6.0 (604 Kb), November 27, 2003 Created by Will Carlton, Public Release". This includes the par file and the Manual.
Here is a direct link: Application Integrator Download
A first hint for the technique behind: For login to Systems with basic authentification (=system popup with username and password field) you can use this syntax for automatically login:
http://username:password@domainname.dk
For Username and Password each user must set Individual values.
Thanks for the flowers to my website.
Best Regards,
Patrick |
| |
bregne
Beiträge: verfasst:
24.02.2004, 15:07 Uhr |
Dear Patrick
Thanks a lot for the quick and usefull respond!
I have now tryed to follow the guide from SDN... The Iview do come up and are making the usermapping correctly (through the properties on the Iframe) - but somehow our exchangeserver isn't to happy with the context? Here are a clipout from the Iview: (respond is "Action canceled")
res://C:\WINDOWS\System32\shdoclc.dll/navcancl.htm#http://lbr@applicon.local:PW@mail.applicon.dk/exchange
(I have removed my real password wiht "PW")  )
Can you see anything wrong ?
Best regards
Lars
|
| |
PHoefer
Beiträge: 1verfasst:
24.02.2004, 18:32 Uhr |
Hello Lars,
this makes it complicate. There are very much konfigurations possible. For example with different Mailbox and Usernames, with a seperate Mailboxname login page etc.
An other reason for the failure can be that your username includet a "@" sign. I dont try before an user with an "@". So you have two "@"s in you URL.
Try to use the Link without the Portal, it must work from your Browser. Witch URL you need depends from the configuration of the OWA on your Exchange Server. I have seen some OWA Servers who need to add one or two parameter to the url.
For example this URL with two parameters (mailbox and isnewwindow):
http://lbr@applicon.local:PW@mail.applicon.dk/exchange?mailbox=USERNAME&isnewwindow=0
For Username enter your username.
What we can do:
Make a normal OWA Login and write down all URL that you are seen during the login procedure and post it (without Password is a good Idea ). Then i can take a look on it.
Best regards to Danmark,
Patrick |
| |
bregne
Beiträge: verfasst:
24.02.2004, 21:39 Uhr |
Dear Patrick,
Your decription sounds right. I have tryed to post the long URL(with mailbox and isnewwindow) with out any luck.(responds: page not found...)
When I call our normal OWA with http://mail.applicon.dk/exchange I get our loginbox. Here I write in my ID and PW, and the next window just shows the web access.
I can not track WHAT kind of parameters there are being posted after my login to the final web access picture since it always stays on http://mail.applicon.dk/exchange...
Do you know any tool to track the underlaying URL and parameters there have been send ?
You seam to have a lot of knowlegde in this area - its great!
Best regards
Lars |
| |
bregne
Beiträge: verfasst:
25.02.2004, 10:16 Uhr |
<fieldset style="background-color: #cccccc; text-align: left; border: 1px solid black;"><legend style="font-weight: bold;">Zitat</legend>Dear Patrick,
Your decription sounds right. I have tryed to post the long URL(with mailbox and isnewwindow) with out any luck.(responds: page not found...)
When I call our normal OWA with http://mail.applicon.dk/exchange I get our loginbox. Here I write in my ID and PW, and the next window just shows the web access.
I can not track WHAT kind of parameters there are being posted after my login to the final web access picture since it always stays on http://mail.applicon.dk/exchange...
Do you know any tool to track the underlaying URL and parameters there have been send ?
You seam to have a lot of knowlegde in this area - its great!
Best regards
Lars</fieldset>
Additional information:
Right now I get the popup window for authentication - but should the the Form-based authentication be active in the exchange system manager??
From microsoft.com: "Forms-based authentication will allow Exchange to display the OWA logon screen instead of the popup window asking for username and password. "
Best regards
Lars
|
| |
PHoefer
Beiträge: 1verfasst:
25.02.2004, 10:30 Uhr |
Hallo Lars,
i dont know a tool to monitor the accessed URLs. But I think there must be more than one . When you found one, please post it here.
I do it this way: To look how the OWA-Server works i take a look on the IIS of the Exchange Server and take a look to the special website of the OWA. There i can see to what location the Pages are forwarding.
Basic Authentification is the right way. You must not change it to Form-Based authentification.
Do you try an Username without @-Sign?
Best regards,
Patrick |
| |
bregne
Beiträge: verfasst:
25.02.2004, 13:06 Uhr |
Hello Patrick,
I have found out that there are difference between Windows XP and 2000 on this matter!
If I use my XP my username is "lbr@applicon.local", and if I use a machine with Win 2000 is is only "LBR"... - aint that funny? - this will surely give some challanges since our organisation uses both XP and 2000...
AND : It works fine if I post a string in 2000 with as you have described directly i IE :
http://lbr:PW@mail.applicon.dk/exchange?mailbox=LBR&isnewwindow=0
Thats good!
But the Iview aint to happy if I put the parameters (mailbox=LBR&isnewwindow=0) on the URL template property:
<System.protocol>://<Authentication><System.server><System.uri>?mailbox=lbr&isnewwindow=0
It simple don't get the two parameters solved for the URL! The Iview just solve :
"http://lbr:PW@mail.applicon.dk/exchange"
- Do you have any good idea?
Best regards
Lars
|
| |
PHoefer
Beiträge: 1verfasst:
26.02.2004, 23:05 Uhr |
Hello Lars,
sorry, the communitypage was down for a server-moving today.
You Must nut include the "?" and the "&" in the URL. You must add it as Parameters. The "?" sign for the first parameter and the "&" sign for the folowing parameters in the URL was add automaticly.
The difference between Windows XP and Windows2000 is very Strange
Best Regards,
Patrick
|
| |
bregne
Beiträge: verfasst:
27.02.2004, 11:14 Uhr |
Hi Patrick,
I have heard from others that Microsoft has closed the opputunity to make single sign-on this way (a patch i the IE browser) - so now I am back again... Have you heard about ANOTHER way to access OWA through single sign-on ? maybe a certificate ?
Best Regards
Lars
|
| |
PHoefer
Beiträge: 1verfasst:
29.02.2004, 23:16 Uhr |
Hello Lars,
uhh, that are very bad news. I checked it with several Computers and we are running in the same problems as you, when we upgrade the INET Explorer. I also must find (like you) a new way to integrate OWA in the portal, but next week i haven't time to look for a new solution. On the 8.3. i am back and look for it. When you found a solution earlyer, please post it here.
Best Regads,
Patrick |
| |
PHoefer
Beiträge: 1verfasst:
10.03.2004, 11:30 Uhr |
Hello Lars,
sorry, in the moment i didnt have time to look for it. But it is on my task list. Do you found a soultion?
Best regards,
Patrick |
| |
bregne
Beiträge: verfasst:
10.03.2004, 14:56 Uhr |
Hi Patrick,
I hav'nt had time to solve it yet - and I realy don't have a clue where to start... 
I put all my faith in you 
//Lars |
| |
