I would like to share some steps that I followed in my project to implement SSO.
Here we have implemented SSO that connect to SAP from BI Launch Pad directly and all the data security we added at SAP BW server-side.
Step1: Login CMC in BO. Click on Authentication.
Step 2: Double click on SAP. In Entitlement Systems tab, Enter System ID, Client, Application Server Name, System No, Username, Password and Click on Update Button as shown below.
Step 3: Click the tab Import Roles. The Logical System Name automatically appears. All the available roles will be listed below and you need to select the respective role for the SSO user to imported roles by clicking the add button. Once roles added then click on Update button as shown below.
Step 4: In Options tab, you can set some Option parameters as required as shown below. The Content Folder root is the default folder and you can set another folder location if you wish too. In connection Options you can set the no of incorrect login attempts and no of users per connection as shown below.
Step 5: Whenever any role is created or updated in SAP BW server, you can schedule the User updates as shown below so that it can be updated automatically in SSO or you can manually update.
Once you created you can logon into BI Launchpad using authentication as SAP and provide SAP User Credentials.
Hope this helps you in creating SSO on BO 4.0