Monday, 17 August 2009

Setting Up Single Sign On for SharePoint 2007 for Integration with SAP

I'm currently integrating SAP with SharePoint for a client at the moment. One of the requirements for the set up of iView web parts is to set up SSO beforehand. Problem is, some of the articles I looked at miss some important steps or have some incorrect information. I'm not showing the full set of instructions here as it is a very long list. See http://download.microsoft.com/download/b/c/1/bc1939d9-638f-4053-b602-4258f18bb683/CB_045_Interoperability%20between%20SAP%20NetWeaver%20Portal%20and%20Microsoft%20SharePoint%20Server%202007.pdf for the comprehensive listing of steps. While this PDF file is good, see step 6 "Physically log into the box as the SSO account" as it is not mentioned in this PDF or the books I've seen. Also see my section "For the Set up of the Trusted Hosts File" for another correction to the PDF document.

For the set up of the SSO Service
  1. Create a new domain service account for running SSO service. E.g. MYDOMAIN\svc_sso
  2. Add that account to local admins on the box
  3. Give the account system admin permissions on the SQL Box
  4. Change SSO service's Identity to the new service account from the Servicesconsole (Admin Tools->Services), change to automatic start and start the service up
  5. Add SSO service account as a farm administrator by using "Update farm administrator's group" link from share point central admin.
  6. Physically log into the box as the SSO account (you cannot just do a Login as a different user in Central admin – it won’t work. Presumably a bug in MOSS.) NOTE THIS IS AN IMPORTANT Step (otherwise you may get errors such as “Login Failed for user ‘NT AUTHORITY\ANONYMOUS LOGON’” or “You do not have the rights to perform this operation.” In the Manage Server Settings section of SSO setup)
  7. Open up Central admin, and you should now be able to enter and set the SSO account information.Remove the account from farm admins.


For the Set up of the Trusted Hosts File
Also note that instructions say that you have to set up the trusted hosts file or the sample in
c:\Program Files\Microsoft Office Servers\12.0\Config\TrustedSAPHosts.config or
c:\Program Files\Microsoft Office Servers\12.0\Config\TrustedSAPHosts.sample.xml as per
http://technet.microsoft.com/en-us/library/cc262461.aspx

This is not correct - the file is actually in in C:\Program Files\Microsoft Office Servers\12.0\Config\

10 comments:

kulveer said...

Good collection

see this blogs. I liked this blog, it has lots of
nice articles

http://aspnetcsharp4.blogspot.com/

Anonymous said...

hi, how are you? synthroid online [url=http://dotnet.org.za/members/cheap-synthroid-online.aspx]cheap synthroid[/url] http://dotnet.org.za/members/cheap-synthroid-online.aspx online

Anonymous said...

[url=http://bariossetos.net/][img]http://hopresovees.net/img-add/euro2.jpg[/img][/url]
[b]adobe acrobat 9 trial, [url=http://vonmertoes.net/]adobe acrobat 9 for free[/url]
[url=http://hopresovees.net/][/url] kaspersky download plus cd free macromedia flash 5 software
discounted software [url=http://vonmertoes.net/]store keeper software[/url] microsoft software store
[url=http://vonmertoes.net/]shop 7 software[/url] microsoft software service
[url=http://vonmertoes.net/]the best educational software[/url] were to buy software
buy ms software [url=http://hopresovees.net/]quarkxpress 5[/b]

Anonymous said...

[url=http://vonmertoes.net/][img]http://hopresovees.net/img-add/euro2.jpg[/img][/url]
[b]is academic software, [url=http://vonmertoes.net/]hacking software for sale[/url]
[url=http://vonmertoes.net/][/url] store register software buy dreamweaver cs
Creative Suite 4 Design [url=http://bariossetos.net/]software for a retail store[/url] oem softwares
[url=http://bariossetos.net/]tailor shop software[/url] academic software project
[url=http://vonmertoes.net/]software reseller discount[/url] microsoft office 2007 enterprise sv
quarkxpress 4, torrents [url=http://vonmertoes.net/]software for downloading[/b]

Anonymous said...

[url=http://vonmertoes.net/][img]http://bariossetos.net/img-add/euro2.jpg[/img][/url]
[b]or cheap software, [url=http://bariossetos.net/]Mac Box[/url]
[url=http://bariossetos.net/][/url] discount software ms discount software for sale
retail store software [url=http://hopresovees.net/]discount microsoft office professional[/url] free adobe softwares
[url=http://hopresovees.net/]list of adobe software[/url] microsoft office oem software
[url=http://vonmertoes.net/]cheapest accounting software[/url] shop software trial
adobe photoshop cs3 classroom in a book [url=http://vonmertoes.net/]store register software[/b]

Kimberly said...

Hola me gusto mucho su informacion sobre esto....hace algun tiempo hice un trabajo llamado wine production que hablaba de lo mismo...agradezco mucho su post y espero que sigan poniendo mas sobre el tema

Liz said...

Problem is, some of the articles I looked at miss some important steps or have some incorrect information.

best electric car

Liz said...

Also see my section "For the Set up of the Trusted Hosts File" for another correction to the PDF document.

mbt shoes

Dean said...

greetings to all.
I would first like to thank the writers of this blog by sharing information, a few years ago I read a book called guanacaste costa rica in this book deal with questions like this one.

niz said...

Hello .. firstly I would like to send greetings to all readers. After this, I recognize the content so interesting about this article. For me personally I liked all the information. I would like to know of cases like this more often. In my personal experience I might mention a book called Generic Viagra in this book that I mentioned have very interesting topics, and also you have much to do with the main theme of this article.