EP – ESS Configuration Guide

Table of Contents

1. Introduction .............................................................................................................. 4

2. Scope...................................................................................................................... 4

3. Pre Requisites of ESS/MSS Business Package Installation ......................................... 5

4. Configuration Guide................................................................................................... 6

Step 1: Upload the base packages and patches for ESS/MSS below. ................................ 6

Step 2: Configure the AS JAVA (EP) and AS ABAP (ECC6) connection to SLD. ................. 6

Step 3: Setup url of Internet Gateway Server (IGS). (OSS Note 704604) ............................10

Step 4: Install the business package for ESS and MSS. ..................................................11

Step 5: Repeat step 4 to install the latest supplementary packages for: ............................13

Step 6: Setup the SAP JAVA Connector (JCo) for EP – ECC6 integration. ........................13

Step 7: Create and configure the Systems used in Enterprise Portal. ................................18

Step 8: Assigning security roles and establishing system permissions. ............................23

Step 9: Setting up Single Sign On between EP and ECC6 Server .....................................24

Step 10: Configuring Transaction iView with SAPGUI for HTML ..........................................27

1. INTRODUCTION

This document describes the entire configuration process of the SAP NetWeaver 2004s

Enterprise Portal (EP) for the SAP employee self service (ESS) and manager self service

(MSS) function.

2. SCOPE

This document only covers the configuration of the EP side for SAP ESS/MSS and not the

customizations on the SAP HR ECC6 side.

3. PRE REQUISITES OF ESS/MSS BUSINESS PACKAGE INSTALLATION

The following needs to be set up prior to the business package installation:

a) SAP NetWeaver 2004s with

Enterprise Portal

Web Application Server (AS) Java

Internet Graphic Service (provided in the steps below)

System Landscape Directory (SLD) (steps below will setup the client side)

b) Web Dynpro development components:

PCUI_GP (SAPPCUIGP06_*)

ESS (SAPESS06_*)

MSS (SAPMSS06_*)

c) Business packages:

Business Package for Manager Self-Service (mySAP ERP) 1.0

Business Package for Employee Self-Service (mySAP ERP) 1.0

Business Package for Common Parts (mySAP ERP) 1.0

d) SAP ECC 6.0 components:

Financials Extension (EA-FIN)

Human Resources Extension (EA-HR)

e) An existing System Landscape Directory (SLD) to which SAP ECC6.0 is connected

to.

4. CONFIGURATION GUIDE

STEP 1: UPLOAD THE BASE PACKAGES AND PATCHES FOR ESS/MSS BELOW.

STEP 2: CONFIGURE THE AS JAVA (EP) AND AS ABAP (ECC6) CONNECTION TO SLD.

AS JAVA

2.1.1. For AS JAVA, go to the J2EE Visual Administrator at:

<drive>:\usr\sap\<SID>\JC<Inst.

number>\j2ee\admin\go.bat

2.1.2. Connect using default connection.

2.1.3. Key in password for login using user id J2EE_ADMIN. Click Connect.

2.1.4. Go to the Cluster Tab. Select Server <id> > Services > SLD Data

Supplier.

2.1.5. Select the HTTP Settings Tab.

2.1.6. Enter the Host and Save. Click on Refresh and click to transfer data to

SLD.

2.1.7. Switch to the CIM Client Generation Settings.

1

2

3

4

2.1.8. Enter the Host and Save. Click on Refresh and click to transfer data to

SLD.

AS ABAP

2.2.1. On the ECC6, go to tcode RZ70.

2.2.2. Enter the Host. Activate and Start the sending of SLD data.

System Landscape Directory (SLD)

2.3.1. Check entries in the SLD through the url:

http://<host computer>.<domain>:50000/sld

using:

User Id: J2EE_ADMIN

Password: XXXXXXXX

1

2

3

1

2

3

2.3.2. Click on Technical Systems.

2.3.3. Select All technical system type and press Go. Make sure AS ABAP

(ECC6) and AS JAVA (EP) hosts are there.

STEP 3: SETUP URL OF INTERNET GATEWAY SERVER (IGS). (OSS NOTE 704604)

3.1. Go to the J2EE Visual Administrator as in Step 2.1.1. – 2.1.3.

3.2. Go to the Cluster Tab. Select Server <id> > Services > Configuration

Adapter.

3.3. Expand the Configurations > webdynpro > sap.com > tc~wd~dispwda

part of the tree on the right.

3.4. Press the button, on the top left of the right part of the screen.

1

2

3.5. Double click on the sub node Propertysheet default.

3.6. Click on IGSUrl. Enter the default url, http://HOST:4<Sys. No>80. Check

on Custom.

STEP 4: INSTALL THE BUSINESS PACKAGE FOR ESS AND MSS.

4.1. Go to the Software Deployment Manager at:

<drive>:\usr\sap\<SID>\JC<Inst. Number>\SDM\program

\RemoteGui.bat

4.2. Click on the login button. Enter the password to the window pop-up and

click Login.

1

2

3

4

4.3. Go to the Deployment tab and click to add business package. Upon pop-

up, select the ESS/MSS business package (BPERP5ESS*/BPERPMSS*).

Click on Next.

4.4. On next screen, click to Start Deployment.

4.5. After completely deploying the business packages, click to Confirm.

1

2

3

1

2

3

4

4.6. Patch the remaining MSS business package by repeating step 4.1 – 4.5 and

selecting the relevant MSS package in step 4.3.

STEP 5: REPEAT STEP 4 TO INSTALL THE LATEST SUPPLEMENTARY PACKAGES FOR:

PCUI_GP (SAPPCUIGP06_*)

ESS (SAPESS06_*)

MSS (SAPMSS06_*)

STEP 6: SETUP THE SAP JAVA CONNECTOR (JCO) FOR EP – ECC6 INTEGRATION.

6.1. Log into the Web Dynpro Content Administrator using the J2EE_ADMIN

user id and url:

http://<hostname>.<Domain>:50000/webdynpro/dispatcher/sap.com/

tc~wd~tools/Explorer

6.2. Click on Maintain JCo Destinations.

6.3. Select the JCo Destination, SAP_R3_Financial_MetaData. Click on Create.

6.4. Enter the client to connect EP to the backend ECC client. Click on Next.

1

2

6.5. Click on Next.

6.6. Click on Next. Note: Before doing this, refer to step 7.10.

6.7. Select the backend ECC Message Server. Click on Next.

1

2

6.8. Enter an ECC user id with sufficient RFC authorization. Click on Next.

6.9. Click on Finish.

6.10. Repeat step 7.3 – 7.9 to setup JCo connection for:

SAP_R3_HumanResources

SAP_R3_HumanResources_MetaData

SAP_R3_Financials

SAP_R3_SelfServiceGenerics

SAP_R3_SelfServiceGenerics_MetaData

SAP_R3_Travel

SAP_R3_Travel_MetaData

Note: For MetaData connections, you may use the above steps. For Non-

MetaData connections, on step 7.6, select Application Data data

1

2

type. Then, on step 7.8, select Logon Ticket as User Method

authentication type.

6.11. Test all connections by click on TEST.

STEP 7: CREATE AND CONFIGURE THE SYSTEMS USED IN ENTERPRISE PORTAL.

7.1. Login as Administrator to the Enterprise Portal.

7.2. Go to the tab, System Administrator > System Configuration.

7.3. Right click on System and create new System (from template).

7.4. Select template SAP System using dedicated application server. (Note: For

Production, select SAP system with load balancing)

7.5. Enter the System Name, System ID, System ID prefix. Click on Next.

1

7.6. Double click on the newly created system and the property editor will

appear on the right.

2

1

7.7. Maintain the following properties (for connection to ECC6):

Web AS Host Name: <portal hostname>.<domain>:8000

Web AS Path: /webdynpro/dispatcher/

Web AS Protocol: HTTP

7.8. Click Save and select display type System Aliases.

7.9. Enter alias name, SAP_WebDynpro_XSS. Click Add. Then Click Save

and select display type Connection Tests.

7.10. Click Save and select display type Connection Tests.

2

1

3

4

7.11. Select Connection Tests for Connectors. Click on Test.

7.12. Repeat steps 8.1 – 8.10 to create another system for E-Recruit workset with

the alias name, SAP_BSP_EREC following values:

Application Host: (ECC hostname)

Authentication Ticket Type: SAP Logon Ticket

Group

Logical System Name

Logon Method: SAPLOGONTICKET

SAP Client

SAP System ID (SID)

SAP System Number

Server Port

System Type: SAP_R3

Web AS Description

Web AS Host Name: <ECC hostname>.<domain>:8000

Web AS Path: /sap/bc/bsp/sap

Web AS Protocol: HTTP

7.13. Repeat steps 8.1 – 8.10 to create another system with the alias name,

SAP_ECC_Financials following values:

Application Host: (ECC hostname)

Authentication Ticket Type: SAP Logon Ticket

Group

Logical System Name

Logon Method: SAPLOGONTICKET

SAP Client

SAP System ID (SID)

SAP System Number

Server Port

System Type: SAP_R3

Web AS Description:

Web AS Host Name<ECC hostname>.<domain>:8000

Web AS Path: /sap/bc/bsp/sap

Web AS Protocol: HTTP

2

1

7.14. Repeat steps 8.1 – 8.10 to create another system with the alias name,

SAP_ECC_ HumanResources following values:

Application Host: (ECC Hostname)

Authentication Ticket Type: SAP Logon Ticket

Group

Logical System Name

Logon Method: SAPLOGONTICKET

SAP Client

SAP System ID (SID)

SAP System Number

Server Port

System Type: SAP_R3

Web AS Description:

Web AS Host Name: <hostname>.<domain>:8000

Web AS Path:

Web AS Protocol: HTTP

STEP 8: ASSIGNING SECURITY ROLES AND ESTABLISHING SYSTEM PERMISSIONS.

8.1. Login as Administrator to the Enterprise Portal.

8.2. Go to the tab, System Administrator > System Configuration.

8.3. Browse the folder at the Portal Content where system connection resides.

Double click on it. In the Permission Editor, select Roles and click on Go.

8.4. Select Everyone and click on Add.

8.5. Click on Save.

8.6. Repeat step 8.1 – 8.5 for setting up permission to Portal Content > Content

Provided by SAP > srvconfig.

3

1 2

1

2

8.7. From an authorization view and apart from ESS portal roles, user will

need to be assigned with the role Everyone from the above steps. This can

be done by going to workset User Administration > Identity

Management:

STEP 9: SETTING UP SINGLE SIGN ON BETWEEN EP AND ECC6 SERVER

Exporting the Portal Certificate.

9.1. Login to the J2EE Visual Administrator using steps 2.1.1 – 2.1.3.

9.2. Go to the Cluster Tab. Select Server <id> > Services > Key Storage.

9.3. Select views, TicketKeyStore and then entries, SAPLogonTicketKeypair

– cert. Click on Export.

9.4. Select a location and a file name to store the Portal Certificate.

Configuration of the Instance Profile

9.5. In the ECC6, go to tcode RZ10.

9.6. Go to the Instance Profile.

3

1

2

9.7. Set the profile parameter below:

login/create_sso2_ticket = 1

login/accept_sso2_ticket = 1

9.8. Save and activate the changes. Restart the ECC6.

Importing the Portal Certificate

9.9. Go to tcode STRUSTSSO2.

9.10. Click on Import Certificate. Then click on Add to Certificate List and Add

to ACL.

9.11. When prompted below, fill in the Portal System ID and Client 000.

3 1

2

STEP 10: CONFIGURING TRANSACTION IVIEW WITH SAPGUI FOR HTML

10.1. In SAP, enter the tcode SICF to activate services for ITS. Click on execute.

10.2. Activate the services below. Do this by right clicking the service and click

on Activate Service.

/sap/public/bc/its/mimes

/sap/bc/gui/sap/its/webgui

1

10.3. Next publish the services by going to tcode SE80. Select Internet Service at

the drop down. Enter System. Right Click on System and Publish it as a

Complete Service.

10.4. Repeat Step 10.3 with WEBGUI instead of System.

10.5. Login into the Enterprise Portal.

2

3

1

2

10.6. Go to the workset System Adminstration > System Configuration. Under

the portal content, expand on System Landscape and choose the relevant

connection.

10.7. Select Internet Transaction Server (ITS) as the Property Category. Enter

the connected SAP server with its port number (this can be obtained by

going to tcode SMICM > Services).

10.8. Click on Save.

3

1

2