The Portal Installation Process Installation SAPNetweaver 2004s Usage Type EP and EPCore With database SQL Server 2005 SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› The Portal Installation Process Important is the setting for SQL collations SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› The Portal Installation Process JAVA SDK and Database Client Installation of JAVA SDK 1.4.2.13 and Database Client on all involved hosts • • • • Central Services Instance Host Database Instance Host Central Instance Host Dialog Instance Host SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› The Portal Installation Process SAPInst Installation as Domain Administrator Call SAPInst on the global host SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› The Portal Installation Process SAPInst on SAP global Host Necessary software packages • Installation Master • Unicode Kernel • SQL Server 2005 Client Install SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› The Portal Installation Process SAPInst Choose Custom Installation SAP System ID and Installation Drive SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› The Portal Installation Process SAPInst Local Installation only for a single Instance Installation Passwords for user <SID>adm and user SAPService<SID> SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› The Portal Installation Process SAPInst SCS Instance Number Don‘t use: 43 ( used by MSCS ) 60 ( used by iSCSI ) 89 ( used by Windows Terminal Server The internal SCS Messaging Service Port is listening on Port 39<Instance Number> ( Is needed for internal communications ) SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› The Portal Installation Process SAPInst Starting Tasks Installation is complete SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› The Portal Installation Process SAPInst on Database Instance Host Necessary software packages • Installation Master • Unicode Kernel • Java Component NW2004s • JCE Unlimited Strength Jurisdiction Policy Archive SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› The Portal Installation Process SAPInst Profile directory of the SAP system Master Password for all J2EE-Users SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› The Portal Installation Process SAPInst Database Connection Password for database schema user SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› The Portal Installation Process SAPInst Database Files Temp Database Files SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› The Portal Installation Process SAPInst Key Phrase for generating of Keypair Tasks are running SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› The Portal Installation Process SAPInst on SAP Central Instance Necessary software packages • Installation Master • Unicode Kernel • JAVA Component NW2004s SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› The Portal Installation Process SAPInst on SAP Central Instance Usage Type • EP and • EP Core SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› The Portal Installation Process SAPInst on SAP Central Instance Instance Number Central Instance UME Configuration SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› The Portal Installation Process SAPInst on SAP Central Instance Passwords for J2EE engine Users NWDI Integration SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› The Portal Installation Process SAPInst on SAP Central Instance SLD Configuration Password for SLD User SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› The Portal Installation Process SAPInst on SAP Central Instance Tasks starting Provide the Solutionmanager Key • System has to be created with TA SMSY in the Solutionmanager before SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› Directory Structure for a distributed System SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› SAP Enterprise Portal Start Page URL: http://<hostname.domain>:5<Instancenumber>00/irj SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› SAP Enterprise Portal Start Page SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› The Portal Promise User-Centric, Role-Specific Webtops SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› Software Architecture of SAP Enterprise Portal SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› Scaleable SAP Enterprise Portal Infrastructure SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› Secure Network Architecture SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› SAP Portal Landscape Network Communications using a DMZ SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› Security TCP / IP Ports Protocols Communication Single-Sign On SSO variants within the EP framework SSO with SAP Logon Tickets Without User Mapping (preferred, when possible) With User Mapping SSO with User ID and Password SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› SSO variants outside the SAP Portal Framework X.509 digital certificates SPNego ( Kerberos Authentication ) SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› What are SAP Logon Tickets? They represent the user credentials They are implemented as a non-persistent cookie in the client web-browser They are sent with each request of the client to a web server in the same domain as the portal server that issued the ticket They can be used by connected external systems to authenticate the portal user to those systems without any further logons SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› The SAP Logon Ticket contains Portal user ID and if required, one mapped user ID for external applications Highest authentication scheme of the user Ticket Validity period (default value = 8 hours) Information identifying the issuing system (the unique credentials of the portal) Digital signature The Portal Server issues a SAP logon ticket for the Internet domain or the Internet sub-domain of the Portal Server only. SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› The SAP Logon Ticket SSO Process SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› The SAP User Management Architecture SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› CCMS Monitoring Architecture Overview Non-SAP Component Shared Memory Segment Other SAP Components (EP6.0) SAPCCMSR SAPCCMSR Push Shared Memory Segment Central Monitoring SAP Solution Manager 3rd Party Tools SAP Web AS 6.20 SAP Web Application Server SAP Web Application Server Push SAP Instance SAPCCM3X Shared Memory Segment SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› SAP Instance SAPCCM4X Shared Memory Segment Availability Monitoring Using GRMG: Overview SAP Web AS Central Monitoring System Solution Manager GRMG Application SAP J2EE Engine GRMG Application Other Components CCMS GRMG Infrastructure HTTPRequest HTTPResponse SAP System GRMG Application SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› Local CCMS Web Dynpro – Main Goals Deliver an Enterprise Quality Web Development Environment minimize coding, maximize design Web Dynpro Tools Web Dynpro Meta-Data support reuse of components separate layout and logic support arbitrary backends Achieve Independence... Web Dynpro Runtime J2EE ABAP from platform from UI technology Improve User Experience through a "High Fidelity Web UI" browser based, zero footprint screen updates w/o page reloads client-side dynamics performance through caching personalization 508 accessibility compliance SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› Multi Device Internet Development Layers: Advantages and Examples Easy integration into SAP Enterprise Portal EP Adapt Portal theme for Web Dynpro application WD Application The user-interface technology for SAP EP Web Dynpro Efficient tools within SAP NW Developer Studio & ABAP Workbench Designtime Wizards and graphical tools Sophisticated business Web applications Performant user-interface development services Platform-independent metadata generation SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› Web Dynpro Runtime Web Dynpro Metadata Integration into SAP Web AS Declarative programming Model View Controller (MVC) Design pattern for decoupling presentation and logic of an application Handles events Updates application data Defines control flow Request Controller Defines application data Usually connected to business functionality Model Response View SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› Visualizes the application data Web Dynpro Component Based UI Design View Web Dynpro Component View Predefined UI Elements Constitute the look & feel Build-In functions in UI Elements UI Elements Controller Graphical Navigation flow Controller Data flow – automatic data transport Graphical Data Model ABAP Java Web Navigation Services Graphical modeling tools replace code editors more design, less maintenance SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› ABAP DB Java Web Service Model SAP Portal: Content Portal Content Studio provides a central environment for developing and managing the following types of portal content iViews Pages Roles Worksets Layouts Folder Content management browse and search tool enables you to view and manage portal content stored in the Portal Content Directory (PCD) Content maintainance wizards, editors and user interfaces enable you to create and edit portal content SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› SAP Portal: iViews iViews (integrated View) is a logical portal content building block representing a visual application or part thereof assigned to a portal page; page is then assigned to any number of user roles or worksets assigned via Copy-Paste or Copy-Paste as Delta Link Portal components from PAR files (portal archives) Types: Web Dynpro (Java, ABAP), Web based URL, XML, SAP BSP-iView, SAP transaction, etc. Properties: Isolation method (embedded, URL), Cache level (None, Session, User, Shared, Roles) SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› SAP Portal: Content Portal Content Studio provides a central environment for developing and managing the following types of portal content iViews Pages Roles Worksets Layouts Business objects Business object operations Content management browse and search tool enables you to view and manage portal content stored in the Portal Content Directory (PCD) Content maintainance wizards, editors and user interfaces enable you to create and edit portal content SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› SAP Portal: User Administration User Management Engine (UME) support multiple data sources: e.g. LDAP directory, database of the SAP NetWeaver Application Server, ABAP system manage users, groups, roles and additional data support mapping of portal user IDs (SSO) SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› EP Praxis: KAGes SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#› EP Praxis: KAGes SAP Österreich GmbH 2007, Andreas Lindenbauer, Karl M. Falb / ‹#›