Configure SAP SSO in SAP BO 4.0

To Set up SSO access for SAP authentication:

1. Login to CMC with Administrator privilege.
2. Go To Authentication -> SAP from the Home Page
3. Entitlement Systems Dialog Box opens up
4. Choose  Role Import Tab and add the required roles
5. Check if SAP Authentication is enabled on the Option tab
6. Import keystore file
   The message No key store file has been uploaded indicates no previous uploads
7. Setup Key Store/Private Key password, Private Key Alias and System ID
8. Setup Security Token Service
   The Security Token Service is running as part of Adaptive Processing Server (APS)
   Go to CMC -> Servers and check if APS has Security Token Service.If not, stop APS and add Security Token Service, then start APS

Generate keystore and certificate

1. Run PKCS12Tool program to generate keystore
   PKCS12Tool Windows location: <INSTALLDIR>\SAP BusinessObjects Enterprise XI4.0\java\lib
   PKCS12Tool Unix location: <INSTALLDIR>/sap_bobj/enterprise_xi40/java/lib
   (Windows command line example: "C:\Program Files (x86)\SAP BusinessObjects\SAP BusinessObjects Enterprise XI 4.0\win64_x64\sapjvm\bin\java" -jar PKCS12Tool.jar -alias mywin -storepass admin1 -dname CN=palmtree )

Keystore File is generated at this location:

2.     Generate certificate with keytool
Enter keystore password which is defined in the previous step. (In this example the password is: admin1)
(Windows command line example: "C:\Program Files (x86)\SAP BusinessObjects\SAP BusinessObjects Enterprise XI 4.0\win64_x64\sapjvm\bin\keytool" -exportcert -keystore keystore.p12 -storetype pkcs12 -file cert.der -alias mywin )