ActiveDirectory\(AD\)とSAP R/3によるｼﾝｸﾞﾙｻｲﾝｵﾝ\(SSO\)環境の構築

Size: px

Start display at page:

Download "ActiveDirectory\(AD\)とSAP R/3によるｼﾝｸﾞﾙｻｲﾝｵﾝ\(SSO\)環境の構築"

ゆきいのら
9 years ago
Views:

1 ActiveDirectory(AD)SAP R/3 (SSO) SAP-

2 Agenda 1. Microsoft 2. MicrosoftSAP 3. SAP R/3AD SSO 4. AD+SAP R/3 SSO 5. AD+SAP R/3 SSO 6. AD+SAP R/3 7. Tips

3 Agenda Microsoft MicrosoftSAP SAP R/3AD SSO AD+SAP R/3 SSO AD+SAP R/3 SSO AD+SAP R/3 Tips

4 Microsoft (1) IA Platform Solution Blueprint SAP mysap.com (PRIMERGY+MSCS+SQL+Systemwalker+ETERNUS ) AD

5 Microsoft (2) SAP R/3 STARPAQ SAP R/3 PRIMERGY H450 ETERNUS NR1000F 220 SAP SAP R/3 R/3 4.6C 4.6C :FI/CO :FI/CO Microsoft Microsoft SQL SQL Server Server Microsoft Microsoft Windows Windows Sever Sever CPU CPU XeonMP XeonMP1.9GHz GB 2.5GB LTO

6 Agenda Microsoft MicrosoftSAP SAP R/3AD SSO AD+SAP R/3 SSO AD+SAP R/3 SSO AD+SAP R/3 Tips

7 MicrosoftSAP Web Microsoft IE EXCEL SAPR/3 SAP R/3

8 Webフロントソリューションシームレスなビジネス連携を実現するために WebサブシステムをSAP R/3にボルトオン社内購買システム MS Market 業務経費清算システム MS Expense 社内イントラネットサイト基幹業務システム SAP R/3 業務用 Web アプリケーション受注管理システム MOET 人事管理システム HeadTrax 販売情報データウエアハウス MS Sales 各種標準レポート Excel

9 SAP R/3 BizTalk Server (Adapter for SAP) CRM MSDE Mobile Windows Client.NET Connector EBP SAP R/3 SEM SAP/Microsoft BW APO SQL Server Analysis Services EP SharePoint Portal Server SQL Server2000 Active Directory Windows Server2003

10 SAP R/3サーバソリューションアプリケーション開発 EAI システム連携ディレクトリ Windows Server 2003 Active Directory 右の Interface,Connector,Brid geは全て無償で入手可能ただし利用するにはユーザーライセンスが必要 LDAP Connector, MOLAP Bridgeは最新の SAPのカーネル Web AS 6.20 にのみ同梱.NET Connector IDOC インターフェース LDAP コネクタ SSO ツール OLAP分析 SQL Server 2000 Analysis Services MOLAP Bridge Microsoft テクノロジ SAP R/3 アプリケーション SAPテクノロジ

11 Agenda Microsoft MicrosoftSAP SAP R/3AD SSO AD+SAP R/3 SSO AD+SAP R/3 SSO AD+SAP R/3 Tips

13 SAP SAP GUI for Windows SAP GUI for HTML SAP GUI for Java ITSEnterprisePortal Web SAP SAP MS

14 Agenda Microsoft MicrosoftSAP SAP R/3AD SSO AD+SAP R/3 SSO AD+SAP R/3 SSO AD+SAP R/3 Tips

15 AD+SAP R/3 SSO Active Directory SSO* SAP SAP + Active Directory ITS ITS+PAS EnterprisePortal SSO SSO* Single Sign-On

16 AD SSO Microsoft Active Directory winuser TGT winuser winuser Windows IIS Web Exchange Server SQL Server SharePoint Microsoft NT4 Windows2000 AD

17 SAP SAP R/3, BW, APO ) 2 r3user N N SAP R/3 SAP BW SAP APO N SAP GUI for Windows SAP R/3 r3user N winuser TGT winuser winuser Microsoft NT4 Windows2000 AD

18 SAP +Active Directory Windows2000(NT4.0) SAP GUI for Windows w2kuserr3user SAP GUI for Windows SAP R/3 Basis3.1 w2kuser w2kuser w2kuser w2kuser TGT Microsoft Web AS : Web Application Server NT4 Windows2000 AD

19 ITS SAP 1 MS SSO ITS+Workplace r3user SAP GUI for HTML Cookie r3user SAP R/3 winuser TGT ITS: Internet Transaction Server winuser winuser Microsoft NT4 Windows2000 AD

20 ITS+ PAS 1 PAS : Pluggable Authentication Service winuserr3user ITS4.6D +Workplace winuser +PAS SAP GUI for HTML r3user SAP R/3 winuser TGT winuser winuser Microsoft ITS: Internet Transaction Server NT4 Windows2000 AD

21 SAP Enterprise Portal SSO 1 BSP JSP winuserr3user SAP GUI for Windows winuser Enterprise portal r3user SAP R/3 winuser winuser TGT winuser Microsoft NT4 Windows2000 AD

22 Agenda Microsoft MicrosoftSAP SAP R/3AD SSO AD+SAP R/3 SSO AD+SAP R/3 SSO AD+SAP R/3 Tips

23 AD+SAP R/3SSO ITS6.1 ActiveDirectory ITS SNC Logon Ticket SSL PASNTLM PASID/ PASNTLM PASID/ PAS* Pluggable Authentication Service

25 SSO START SAP WindowsNT4.0

26 GUI for Win (NTLM Kerberos)

27 Logon Ticket

28 PASNTLM

29 PASID/

30 X.509 X.509

31 Active Directory ITS ITS PAS SNC Logon Ticket SSL PAS NTLM PAS ID/Password GUI for Win SSO(NTLM GUI for Win SSO(Kerberos )

32 ActiveDirectory ITS SNC Logon Ticket SSL PASNTLM PASID/

33 (1) Active Directory

34 Active Directory OU

35 Active Directory ID SAP R/3 AD Microsoft [NT] Active Directory

36 Active Directory DNS 0-9,a-z,A-Z,-( ) ASCII ASCII /[]: <>+=;,?* UNICODE UNICODE #,+ <>;

37 (2) ITS IIS ITS / ITS ITSSETUP - ITS - (Single Host or Dual Host) - (PAS ) ITS

38 (3) SNC SAP SNCDLL Windows SAP ITS NTLMDLL Windows ITS ITS ITS SAP ACL

39 (4) Logon Ticket ITS ITS

40 (5) SSL SAP TCS SSL W-Gate

41 (6) PASNTLM ITS PAS ITS PAS Web IIS

42 (7) PASID/ ITS PAS ITS PAS Web IIS

43 (8) GUI for Win SSO(NTLM ) SAP SAP SNCDLL Windows SAP NTLMDLL Windows GUI R/3

44 (9) GUI for Win SSO(Kerberos ) SAP SAP SNCDLL Windows SAP KerberosDLL Windows GUI R/3

45 PASNTLM PASID/ X.509

46 PASNTLM.NO1 Basis 4.xWPS

47 PASNTLM.NO2 Basis 4.xWPS

48 PASNTLM.NO3 Basis 4.xWPS

49 PASNTLM.NO4 Basis 4.xWPS

50 PASNTLM.NO5 Basis 4.xWPS

51 PASNTLM.NO6 Basis 4.xWPS

52 PAS-ID/.NO1

53 PAS-ID/.NO2

54 X.509.NO1

55 X.509.NO2

56 Agenda Microsoft MicrosoftSAP SAP R/3AD SSO AD+SAP R/3 SSO AD+SAP R/3 SSO AD+SAP R/3 Tips

57 AD+SAP R/3 Basis4.6 AD WebASActive Directory AD

58 Basis4.6 AD COM SAP GUI for Windows SAP Apps R/3 BAPI Basis 4.0B NT4/AD DCOM ADSI Connector BAPI SAP r3user ADSI winuser Microsoft NT4 Windows2000 AD

59 WebASActive Directory SAP SAP Apps SAP r3user Web AS LDAP Connector LDAP ( w2kuser ) SAP GUI for Windows LDAP LDAP Active Directory w2kuser LDAP winuser Microsoft NT4 Windows2000 AD

60 LDAP LDAP

61 LDAP AD R/3 LDAP SAP AD DC

62 LDAP SAP R/3 AD

63 Base Entry: (DN ) OU=employee, OU=Company, DC=domain, DC=com DC (Domain Component) OU (Organization Unit) CN (Common NAME) DN (Distinguished Name)

64 R/3 AD

65 LDAP SSO SSO Active Directory SAP

66 SSO SSO

67 SSO SSO

68 LDAP CA com domain DC/GC/DNS R/3 Active Directory OS : Windows 2000 : ( ) SAP R/3 SAP Basis, ITS + PAS,, Workplace OS : Windows 2000 or Windows XP Pro : ( ) Default-first-site-name

69 LDAP LDAP R/3 DC LDAP PortID:389

70 LDAP AD

71 Agenda Microsoft MicrosoftSAP SAP R/3AD SSO AD+SAP R/3 SSO AD+SAP R/3 SSO AD+SAP R/3 Tips

72 Active Directory SAP Directory Service Active Directory SAP

74 Tips ITS+PAS Web AS6.20+ActiveDirectory APPENDIX MMS SAP

75 ITS+PAS NT4 Active Directory NTLM ID/Password Web - SAP GUI for Windows IE PAS - X LDAP Active Directory 4.6D ITS +Workplace*) SAP GUI for HTML NT4

76 Web AS6.20+AD Active Directory SAP GUI for Windows Web AS 6.20 NT4 Active Directory

77 APPDENDIX Microsoft Metadirectory Services2003 SAP ID SAP R/3 HR MMS 2003 Active Directory ID ADAM iplanet RDB Notes

78 MA AD / Exchange 2000 ADAM iplanet / Sun ONE Directory Server SQL Oracle XML / DSML 2.0 LDAP Directory Interchange Format (LDIF) Delimited Text Fixed-Width Text Attribute-Value Pair Text NT 4 Exchange 5.5 Lotus Notes Novell NDS Generic LDAP

79 SAP < ms sap microsoft.com > < > -SAP < > < >

Windows Oracle -Web - Copyright Oracle Corporation Japan, All rights reserved.

Windows Oracle -Web - Copyright Oracle Corporation Japan, 2004. All rights reserved. Agenda Oracle Windows Windows Oracle 1 / Active Directory/Enterprise User Security 1-1 Windows 1-2 Kerberos 1-3 Enterprise