5.5 Adding the SAP Portal as a Protected Resource in Access Manager

You must configure the SAP Portal as a protected resource in the Access Gateway.

  1. In the Administration Console, click Devices > Access Gateways, then click the name of your Access Gateway.

  2. (Conditional) If you have a Proxy Service defined for the SAP Portal, skip to Step 3. Otherwise, complete the following steps to create the Proxy Service for the SAP Portal:

    1. Click New in the Proxy Service List.

    2. Fill in the following fields:

      Proxy Service Name: Specify a name to identify the SAP Portal as a Proxy Service.

      Multi-Homing Type: Select Domain-Based.

      Published DNS Name: Specify the DNS name for the SAP Portal server.

      Path: Specify the SAP Portal’s application context.

      Web Server IP Address: Specify the IP address of the Web server.

      Host Header: Select Web Server Host Name to publish the DNS name that the user sent in the request to be replaced by the DNS name of the Web server.

      Web Server Host Name: Specify the DNS name of the Web server.

    3. Click OK to create the Proxy Service for the SAP Portal.

  3. Click the display name of the SAP Portal Proxy Service.

  4. Click the Protected Resources tab, then click New.

  5. Specify the name of the protected resource, then click OK.

  6. Fill in the following fields on the Overview tab:

    Description: Specify a description for the protected resource.

    Contract: Select the Kerberos contract created in Creating a Kerberos Contract for the Identity Server.

    URL Path: Click the /* path, then define the application context for the SAP Portal.The default application context is /irj/portal. You need to have two entries. For example:

    /*

    /irj/portal.

  7. Click the Identity Injection tab, then click Manage Policies.

  8. Select the policy created in Creating a SAML Identity Injection Policy, then click Apply Changes.

  9. Click Close to close the policies window.

  10. Click OK twice to save the changes to the protect resource.

5.5.1 Refreshing the Access Gateway

In order for the changes for the protect resource to take effect, you must refresh the Access Gateway.

  1. In the Administration Console, select Devices > Access Gateways.

  2. Select your Access Gateway, then select Refresh.

  3. Click Close.