SAP Knowledge Base Article - Public

2278694 - Is it Possible to Login Directly to SAP Jam?

Symptom

Is it possible to login directly to SAP Jam?

Environment

  • SuccessFactors Platform/BizX
  • SAP Jam Collaboration

Resolution

Yes, this is possible via Single sign-on and deep linking.

Deep linking occurs when a hypertext link points to a page on a web site other than its home page that involves some navigation into the structure of the web site. For SAP Jam Collaboration, deep linking is dependent on the single sign-on (SSO) configuration, which is typically done by Professional Services upon implementation. This can be, for example, a standard SAML 2.0-based single log on. If SSO is configured correctly, most SAP Jam URLs should take the user directly to the indicated SAP Jam page after a series of redirects from SAP Jam to the company IDP and back to SAP Jam.

1. SAP Jam handling of deep linking:

In normal SAP Jam usage, a user logs in and SAP Jam sets a cookie in the user's browser that indicates which company the user belongs to. When a user clicks on a deep link such as https://jam#.sapjam.com/groups/wall/0Hm4gyKS4********, SAP Jam looks for that cookie, but it might not be found if:

  • The user is new to SAP Jam and hasn't logged in before.
  • The user's browser configuration is set to delete all cookies on shutdown.
  • The user has manually deleted the required cookie or all cookies from their browser.

So, when a user clicks a deep link for a page within SAP Jam, it looks for the cookie that identifies which company a user belongs to. One of two things happen:

  1. If SAP Jam finds the cookie: it will know which company the user belongs to and it will forward the user to their company-specific SSO page.
  1. If SAP Jam cannot find the cookie, it will do one of two things:
    • SAP Jam will determine which company the content belongs to by analyzing the URL. There are two possible actions:
      1. If the URL is to a private internal group, SAP Jam forwards the user to that company's SSO page.
      1. If the URL is to an external group, a challenge is encountered because internal users (company employees) and external users (guest members) are authenticated in different SSO log-in pages. To deal with this, SAP Jam presents a screen to the user, asking them if they are an employee of the company or if they are a guest:
        • If they answer that they are an employee, they are forwarded to the employees' SSO log on page.
        • If they answer that they are a guest, they are forwarded to the guests' SSO log on page.
    • If SAP Jam finds one of the very few URLs that it cannot determine what company the user belongs to, such as happens if the link is to a user's home page (which is always something like https://jam4.sapjam.com/auth/status), then there needs to have been extra information added to the URL to allow deep linking to work properly even in such a situation.

      Here is an example of how to build a deep link URL for SAP Jam:
          1. https://[jam4.sapjam.com]/c/[CompanyID.cubetree.biz].companyname.biz/auth/status where:
            • [jam4.sapjam.com] is your associated data center.
            • [CompanyID.cubetree.biz] is the assigned SAP Jam domain, which can be located via the SAP Jam Admin Console > Compliance & Security > Security > System assigned domain field. 
          1. https://[jam4.sapjam.com]/auth/status?companyId=[CompanyID_here]&idp=[SuccessFactors_data_center_here] where:
            • [jam4.sapjam.com] is your associated data center.
            • [CompanyID_here] is your SuccessFactors Company ID (e.g. ABCD0000XYZ).
            • [SuccessFactors_data_center_here] is your SuccessFactors Data Center URL (e.g., performancemanager4.successfactors.com).

 

More details on Single Sign-On and deep linking in SAP Jam, please refer to SAP Jam Admin & User Guides: http://help.sap.com/sapjam).

 

2. Setting Start Page to SAP Jam via SuccessFactors:

If a user wants to bypass the SuccessFactors Home screen and be redirected to SAP Jam after login, please follow these steps:

  1. Login to SuccessFactors;
  2. Click "Options" (drop down under your Username upper right corner);
  3. Click Start Page (left menu);
  4. Select "SAP Jam";
  5. Hit "Save" button.

The next time the user logs into SuccessFactors, they will automatically be directed to SAP Jam.

3. Use a Custom Subdomain URL for SAP Jam:

If a user clicks on Custom Subdomain, the server will identify for which instance it is calling SAP Jam. Using new custom subdomain URL, system will directly take Users to required SAP Jam system.

To implement Custom Subdomain on your SAP Jam, please follow the KBA - https://launchpad.support.sap.com/#/notes/2565665

Keywords

SAP Jam, BizX Start Page, SSO, Deep Linking, Login, direct login , KBA , sap jam , direct login sap jam , LOD-SF-JAM , SAP Jam , LOD-SF-JAM-SSO , SSO - Single Sign On , How To

Product

SAP Jam Collaboration all versions