ActiveDirectory(AD)SAP R/3 (SSO) SAP-
Agenda 1. Microsoft 2. MicrosoftSAP 3. SAP R/3AD SSO 4. AD+SAP R/3 SSO 5. AD+SAP R/3 SSO 6. AD+SAP R/3 7. Tips
Agenda Microsoft MicrosoftSAP SAP R/3AD SSO AD+SAP R/3 SSO AD+SAP R/3 SSO AD+SAP R/3 Tips
Microsoft (1) 2002.6 IA Platform Solution Blueprint SAP mysap.com (PRIMERGY+MSCS+SQL+Systemwalker+ETERNUS ) AD
Microsoft (2) SAP R/3 STARPAQ SAP R/3 PRIMERGY H450 ETERNUS NR1000F 220 SAP SAP R/3 R/3 4.6C 4.6C :FI/CO :FI/CO 30 30 Microsoft Microsoft SQL SQL Server Server 2000 2000 Microsoft Microsoft Windows Windows 2000 2000 Sever Sever CPU CPU XeonMP XeonMP1.9GHz 2 2 2.5GB 2.5GB LTO
Agenda Microsoft MicrosoftSAP SAP R/3AD SSO AD+SAP R/3 SSO AD+SAP R/3 SSO AD+SAP R/3 Tips
MicrosoftSAP Web Microsoft IE EXCEL SAPR/3 SAP R/3
Webフロントソリューション シームレスなビジネス連携を実現するために WebサブシステムをSAP R/3にボルトオン 社内購買システム MS Market 業務経費清算システム MS Expense 社内イントラネットサイト 基幹業務システム SAP R/3 業務用 Web アプリケーション 受注管理システム MOET 人事管理システム HeadTrax 販売情報データウエアハウス MS Sales 各種標準レポート Excel
SAP R/3 BizTalk Server (Adapter for SAP) CRM MSDE Mobile Windows Client.NET Connector EBP SAP R/3 SEM SAP/Microsoft BW APO SQL Server Analysis Services EP SharePoint Portal Server SQL Server2000 Active Directory Windows Server2003
SAP R/3サーバソリューション アプリケーション開発 EAI システム連携 ディレクトリ Windows Server 2003 Active Directory 右の Interface,Connector,Brid geは全て無償で入手可能 ただし利用するには ユーザーライセンスが必要 LDAP Connector, MOLAP Bridgeは最新の SAPの カーネル Web AS 6.20 に のみ同梱.NET Connector IDOC インター フェース LDAP コネクタ SSO ツール OLAP分析 SQL Server 2000 Analysis Services MOLAP Bridge Microsoft テクノロジ SAP R/3 アプリケーション SAPテクノロジ
Agenda Microsoft MicrosoftSAP SAP R/3AD SSO AD+SAP R/3 SSO AD+SAP R/3 SSO AD+SAP R/3 Tips
SAP SAP GUI for Windows SAP GUI for HTML SAP GUI for Java ITSEnterprisePortal Web SAP SAP MS
Agenda Microsoft MicrosoftSAP SAP R/3AD SSO AD+SAP R/3 SSO AD+SAP R/3 SSO AD+SAP R/3 Tips
AD+SAP R/3 SSO Active Directory SSO* SAP SAP + Active Directory ITS ITS+PAS EnterprisePortal SSO SSO* Single Sign-On
AD SSO Microsoft Active Directory winuser TGT winuser winuser Windows IIS Web Exchange Server SQL Server SharePoint Microsoft NT4 Windows2000 AD
SAP SAP R/3, BW, APO ) 2 r3user N N SAP R/3 SAP BW SAP APO N SAP GUI for Windows SAP R/3 r3user N winuser TGT winuser winuser Microsoft NT4 Windows2000 AD
SAP +Active Directory Windows2000(NT4.0) SAP GUI for Windows w2kuserr3user SAP GUI for Windows SAP R/3 Basis3.1 w2kuser w2kuser w2kuser w2kuser TGT Microsoft Web AS : Web Application Server NT4 Windows2000 AD
ITS SAP 1 MS SSO ITS+Workplace r3user SAP GUI for HTML Cookie r3user SAP R/3 winuser TGT ITS: Internet Transaction Server winuser winuser Microsoft NT4 Windows2000 AD
ITS+ PAS 1 PAS : Pluggable Authentication Service winuserr3user ITS4.6D +Workplace winuser +PAS SAP GUI for HTML r3user SAP R/3 winuser TGT winuser winuser Microsoft ITS: Internet Transaction Server NT4 Windows2000 AD
SAP Enterprise Portal SSO 1 BSP JSP winuserr3user SAP GUI for Windows winuser Enterprise portal r3user SAP R/3 winuser winuser TGT winuser Microsoft NT4 Windows2000 AD
Agenda Microsoft MicrosoftSAP SAP R/3AD SSO AD+SAP R/3 SSO AD+SAP R/3 SSO AD+SAP R/3 Tips
AD+SAP R/3SSO ITS6.1 ActiveDirectory ITS SNC Logon Ticket SSL PASNTLM PASID/ PASNTLM PASID/ PAS* Pluggable Authentication Service
SSO START SAP WindowsNT4.0
GUI for Win (NTLM Kerberos)
Logon Ticket
PASNTLM
PASID/
X.509 X.509
Active Directory ITS ITS PAS SNC Logon Ticket SSL PAS NTLM PAS ID/Password GUI for Win SSO(NTLM GUI for Win SSO(Kerberos )
ActiveDirectory ITS SNC Logon Ticket SSL PASNTLM PASID/
(1) Active Directory
Active Directory OU
Active Directory ID SAP R/3 AD Microsoft 415097 - [NT] Active Directory
Active Directory DNS 0-9,a-z,A-Z,-( ) ASCII ASCII /[]: <>+=;,?* UNICODE UNICODE #,+ <>;
(2) ITS IIS ITS / ITS ITSSETUP - ITS - (Single Host or Dual Host) - (PAS ) ITS
(3) SNC SAP SNCDLL Windows SAP ITS NTLMDLL Windows ITS ITS ITS SAP ACL
(4) Logon Ticket ITS ITS
(5) SSL SAP TCS SSL W-Gate
(6) PASNTLM ITS PAS ITS PAS Web IIS
(7) PASID/ ITS PAS ITS PAS Web IIS
(8) GUI for Win SSO(NTLM ) SAP SAP SNCDLL Windows SAP NTLMDLL Windows GUI R/3
(9) GUI for Win SSO(Kerberos ) SAP SAP SNCDLL Windows SAP KerberosDLL Windows GUI R/3
PASNTLM PASID/ X.509
PASNTLM.NO1 Basis 4.xWPS
PASNTLM.NO2 Basis 4.xWPS
PASNTLM.NO3 Basis 4.xWPS
PASNTLM.NO4 Basis 4.xWPS
PASNTLM.NO5 Basis 4.xWPS
PASNTLM.NO6 Basis 4.xWPS
PAS-ID/.NO1
PAS-ID/.NO2
X.509.NO1
X.509.NO2
Agenda Microsoft MicrosoftSAP SAP R/3AD SSO AD+SAP R/3 SSO AD+SAP R/3 SSO AD+SAP R/3 Tips
AD+SAP R/3 Basis4.6 AD WebASActive Directory AD
Basis4.6 AD COM SAP GUI for Windows SAP Apps R/3 BAPI Basis 4.0B NT4/AD DCOM ADSI Connector BAPI SAP r3user ADSI winuser Microsoft NT4 Windows2000 AD
WebASActive Directory SAP SAP Apps SAP r3user Web AS LDAP Connector LDAP ( w2kuser ) SAP GUI for Windows LDAP LDAP Active Directory w2kuser LDAP winuser Microsoft NT4 Windows2000 AD
LDAP LDAP
LDAP AD R/3 LDAP SAP AD DC
LDAP SAP R/3 AD
Base Entry: (DN ) OU=employee, OU=Company, DC=domain, DC=com DC (Domain Component) OU (Organization Unit) CN (Common NAME) DN (Distinguished Name)
R/3 AD
LDAP SSO SSO Active Directory SAP
SSO SSO
SSO SSO
LDAP CA com domain DC/GC/DNS R/3 Active Directory OS : Windows 2000 : ( ) SAP R/3 SAP Basis, ITS + PAS,, Workplace OS : Windows 2000 or Windows XP Pro : ( ) Default-first-site-name
LDAP LDAP R/3 DC LDAP PortID:389
LDAP AD
Agenda Microsoft MicrosoftSAP SAP R/3AD SSO AD+SAP R/3 SSO AD+SAP R/3 SSO AD+SAP R/3 Tips
Active Directory SAP Directory Service Active Directory SAP
Tips ITS+PAS Web AS6.20+ActiveDirectory APPENDIX MMS SAP
ITS+PAS NT4 Active Directory NTLM ID/Password Web - SAP GUI for Windows IE PAS - X.509 - LDAP Active Directory 4.6D ITS +Workplace*) SAP GUI for HTML NT4
Web AS6.20+AD Active Directory SAP GUI for Windows Web AS 6.20 NT4 Active Directory
APPDENDIX Microsoft Metadirectory Services2003 SAP ID SAP R/3 HR MMS 2003 Active Directory ID ADAM iplanet RDB Notes
MA AD / Exchange 2000 ADAM iplanet / Sun ONE Directory Server SQL Oracle XML / DSML 2.0 LDAP Directory Interchange Format (LDIF) Delimited Text Fixed-Width Text Attribute-Value Pair Text NT 4 Exchange 5.5 Lotus Notes Novell NDS Generic LDAP
SAP < ms sap microsoft.com > < http://www.microsoft-sap.com > -SAP < http://segroup.fujitsu.com/sap/index.html > < fj-sapr3@ml.cs.fujitsu.co.jp >