Configuring Single Sign-On for Java Stack

Context

To ensure that Single Sign-On works properly between the PI Web components, you must change their authentication template from basic to ticket . Perform the following steps:

Procedure

  1. Start the SAP NetWeaver Administrator and choose Start of the navigation pathConfiguration  Next navigation step Security Next navigation step AuthenticationEnd of the navigation path
  2. Search for the following Web PI components:

    • sap.com/com.sap.xi.repository*rep

    • sap.com/com.sap.xi.directory*dir

    • sap.com/com.sap.xi.services*run

    • sap.com/com.sap.xi.mdt2*mdt

    • sap.com/com.sap.xi.rwb*rwb

    • sap.com/com.sap.lcr*sld

    • sap.com/com.sap.aii.ib.rprof.app*exchangeProfile

    • sap.com/com.sap.aii.af.app*AdapterFramework

  3. From the dropdown menu, select ticket for each Web PI component.
  4. Search for the service.naming component.
  5. Select the service.naming component and select ticket from the dropdown menu.
  6. Save your changes.

    The changes are effective immediately and will still be effective after subsequent redeployments.

  7. Access the Exchange Profile and expand the IntegrationBuilder node.
  8. Specify the following property as true:

    com.sap.aii.ib.core.sso.enabled

  9. Refresh AII Properties . ( AII is the abbreviation of Application Integration Infrastructure ).
  10. Refresh the PI start page.
  11. From now on, the logon dialog will be displayed only once and then no longer for each available component.