Creation of SAP Logon Ticket

[lokesh_kamana]

Hi,

I am thinking of creating a SAP transaction iview.

I want to Configure SAP logon ticket between R/3 and portal.

So that when i preview the iview it should not ask for the credentails.

It should check the logon ticket and access the iview.

For this what i did is.

1.In Key store administration i downloaded verify.der.

2.And i logged into the R/3 system in transaction

3.went to transaction STRUSTSSO2

4.Added the certificate

5.Created an ACL entry.

Now i created a sytem for R/3.

Firstly i kept the setting of LOGONMETHOD as userid,password and checked the connection its working.

when i changed the settings to SAPLOGONTICKET

Its not working.Am i missing anything.

or have to do anything more?

One more doubt is when using saplogonticket is there a condition that we must have the same user in both R/3 and portal?

or we can have different users.

Thanks & regarsd,

Lokesh.

[Former Member]

Hi Lokesh..

SSO enables the use of SAPLOGON TICKETS that bypasses the UIDPW logon method, this usually done in three parts..

But

Before starting please keep in mind that to enable SSO your portal user and backend user has to be the same.

1) Retrieving Verify.der file from your portal.

2) Running Transaction RZ10 & STRUSTSSO2 in your backend that you want to connect.

Here logon to your R/3 backend you want to connect and run the transaction RZ10,

here you will find two properties named

Login/accept_sso2_ticket = 1

Login/accept_sso2_create = 1 (You can keep this = 2 if you don't want to generate ticket)

Now run the transaction STRUSTSSO2, this is the trust manager; here you can select the certificate file i.e. Verify.der,

Now click on Add certificate to list and Add certificate, provide the path of Verify.der file and tick option binary.

Once done now click on Add to AC provide the SID and client number and click OK.

3) Creating system & SAP Transaction ivew in your portal...

Thanks....

Edited by: Chetna Verma on Sep 11, 2008 11:56 AM

[Former Member]

Hi Lokesh,

If you are working with logon tickets, it would work only if the users in the portal an the backend are same.

If the users are different, you can do a user mapping instead.

Cheers,

Sandeep Tudumu