Hello Community,
get stuck while configuring SSO for two seperate Domains.
Problem: integrated ABAP backend Applications do not SSO
We had one Domain and used Active Directory as UME Datasource and SSO to Portal AND to the integrated Portal Applications, which reside on ABAP Systems, worked fine.
Now we get a new Domain and Active Directory but for the next 1 or 2 years we will use both domain's and Active Directory's. So I configured a new datasource.xml (multidomain) and added the second REALM in SPNEGO Wizard AND changed mapping mode from "Principal only" to "Principal@REALM" to get SSO working again with two Domains. Portal SSO does work now but SSO for the integrated ABAP iviews does not.
I think the Problem is that Portal uses Principal@REALM but ABAP Backend needs only the Principal. Is there a way to only hand over the Principal to this Applications? Or am I on the wrong track with this "Principal@REALM" configuration?
more Info:
User in AD and in ABAP System are the same and it worked in the one Domain scenario.
Portal is 7.02 SP11.
AD is 2003 and 2008
thank you in advance
best regards
Christoph Schmitz