Domino Website/SAP Portal : SSO Integration

HCL Domino Domino Forum
1

Hello,

I am a sap Administrator , with no knowldedge at all of Domino infrastructure, so I might be in the incorrect section of the forum,

we have been asked to investigate ways to implement SSO , Domino Website would be the entry point :

Here are our high-level expectations:

  1. User logs into eSMP (IBM Domino Website) and authenticates using Domino authentication.

2, User is now authenticated in Domino and can access the Domino website functions as normal.

  1. User now clicks a link that takes them into the SAP Portal and we need the user to be ‘cross-authenticated’ / ‘mapped’ to a SAP back-end user (on the ABAP system).

This will allow the user to complete SAP transactions without having to log into the SAP portal again.

I have spent this time this morning, reading IIBM documentations referring to SSO to SAP Portal,

Most of those documents mentions Websphere Portal like : http://infolib.lotus.com/resources/portal/8.0.0/doc/nl_NL/PT800ACD002/admin/sap_int.html http://infolib.lotus.com/resources/portal/8.0.0/doc/nl_NL/PT800ACD002/admin/sap_int.html

and the need to install some specific addon like : IBM® WebSphere® Portal Express® Integrator for SAP to integrate

What about Lotus Domino SSO to SAP Portal, is there an add-on to install ?

What are the possiblestrategies ?

Thanks you very much

2

Subject: SAML and Domino and SAP

Hi doemer, have you found a solution to SSO? We are actively looking at the same project, but must also include Active Directory as well. Let me know if your organization has implemented something:-)

3

Subject: SAML SSO

It seems most likely that an SSO solution would be built around SAML. Domino 9.01 supports SAML, and SAP does as well.

The Alloy feature compatible with Domino 8.5x is used to integrate SAP features into Notes/Domino, so it is not what you are looking for…however I mention it because it already incorporates SAML SSO. The Alloy feature used SAML to support SSO and impersonation from Domino to SAP.

See here to learn more about Domino 9.01 SAML:
http://www-10.lotus.com/ldd/dominowiki.nsf/xpDocViewer.xsp?lookupName=Administering+IBM+Domino+9.0.1+Social+Edition#action=openDocument&res_title=Using_Security_Assertion_Markup_Language_SAML_to_configure_federatedidentity_authenticationd901&content=pdcontent http://www-10.lotus.com/ldd/dominowiki.nsf/xpDocViewer.xsp?lookupName=Administering+IBM+Domino+9.0.1+Social+Edition#action=openDocument&res_title=Using_Security_Assertion_Markup_Language_SAML_to_configure_federatedidentity_authenticationd901&content=pdcontent

best regards,
Jane Marcus