User Guide

● “Configuring an SAP Provider” on page 46

● “Configuring an NTLM User Directory” on page 49

Setting Up SSO with SAP Enterprise Portal

Hyperion products handle SSO to SAP Enterprise Portal by issuing an SAP logon ticket. This

action enables users who log in to Hyperion products to navigate seamlessly to SAP applications.

The illustrated concept:

1. When a user logs in to Hyperion products, the Security API implemented on the product

authenticates the user against configured user directories, including Native Directory.

Hyperion product issues a Hyperion logon token, which enables SSO to Hyperion products.

The Hyperion logon token contains an SAP logon ticket.

Note:

For SSO with SAP to work, you must configure SAP as valid provider on Shared Services.

2. When the user subsequently navigates to the SAP system or uses an SAP data source, the

SAP logon ticket contained in the Hyperion token is passed to SAP to enable SSO. At this

point, the SAP system assumes the responsibility to validate the credentials in the SAP logon

ticket.

Hyperion products handle SSO from SAP Enterprise Portal by accepting an SAP logon ticket.

This action enables users who log in to SAP Enterprise Portal to navigate seamlessly between

SAP and Hyperion products. The illustrated concept:

Setting Up SSO with SAP Enterprise Portal