SSO
Definition
If an SSO ticket was passed with a call, the validity of this ticket is checked on the Java EE Application side.
To enable the SSO mechanism, you have to perform the following steps:
-
Configure the called application using the SAP-specific SSO Mechanism for server calls.
-
When calling SAP Application Server, you have to activate the use of the SSO tickets with each call using transaction SM59.
If access to the MDB has to be restricted to a specific role, you may add the relevant restrictions in ejb-jar.xml , according to the ejb 2.1 specification:
<assembly-descriptor>
<security-role>
<role-name>Hugo</role-name>
</security-role>
<method-permission>
<description>method-permission</description>
<role-name>Hugo</role-name>
<method>
<ejb-name>MyEjbNameBean</ejb-name>
<method-name>onMessage</method-name>
</method>
</method-permission>
</assembly-descriptor>