RedirectApp SPNego Configuration in NW 7.3 portal

[former_member214858]

1. Overview

     This bolg describes how to configure RedirectApp application in NW 7.3 portal.

2. Project Structure

     Below diagram shows the project structure of RedirectApp application

main.jsp

main.jsp
<%@ page language="java" %> <% String redirectURL = request.getParameter ("redirectURL"); response.sendRedirect (redirectURL); %>

web.xml

web.xml

<?xml version="1.0" encoding="UTF-8"?> <web-app xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://java.sun.com/xml/ns/javaee" xmlns:web="http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd" id="WebApp_ID" version="2.5"> <display-name>RedirectApp</display-name> <servlet> <servlet-name>main.jsp</servlet-name> <jsp-file>/main.jsp</jsp-file> </servlet> <servlet-mapping> <servlet-name>main.jsp</servlet-name> <url-pattern>/</url-pattern> </servlet-mapping> <session-config> <!-- 1 minute timeout --> <session-timeout>1</session-timeout> </session-config> <security-constraint> <display-name>SecurityConstraint</display-name> <web-resource-collection> <web-resource-name>WebResource</web-resource-name> <url-pattern>*</url-pattern> </web-resource-collection> <auth-constraint> <role-name>DefaultSecurityRole</role-name> </auth-constraint> <user-data-constraint> <transport-guarantee>NONE</transport-guarantee> </user-data-constraint> </security-constraint> <security-role> <role-name>DefaultSecurityRole</role-name> </security-role> </web-app>

3. Build and deploy the application

4. Configuration of RedirectApp

     1. Logon to NWA

     2. Navigate to Configuration->Security->Authentication and Single Sign-On

    

     3. Assign SPNego_Template to the Redirect application

    

     4. Logon to Portal and Modify the action

     Goto User Administration – Select Action and search for “*Redirect*. Click on modify and cancel button. Surprisongly, if you skip this step “RUN_AS_Redirect” role will not appear in the list (next step)

    

     5. Now, search for "RUN_AS_Redirect" role and Assign “Everyone” Group to this role.

    

    

Example for the Redirectapp URL

http://hostname:<port>/RedirectApp/?redirectURL=http://hostnameNew:<port>/sap/bc/bsp/sap/ytest

Pre-requisite

     SSO between both the servers are already established.