SSO Abap

[Former Member]

Hello,

Using ECC6, I would like to provide SSO to connect SAP system for our users. The goal is the users have to select the system they want connect to in their SAPlogon, then use Windows / MS Active Directory data for credentials.

Do you know where I can find a guide about it ?

Thank you

Xavier

[Former Member]

Hi,

Please check out the following link

http://help.sap.com/saphelp_nwce10/helpdata/en/9f/75b1c1cb174e4d87182d8223a6bd88/content.htm

Hope this helps.

Manoj

[Former Member]

Hello Manoj,

Thanks for your reply. Many documents are talking about http or java SSO. I just want to made SAPGUI connection easier.

I also found this url : http://help.sap.com/saphelp_nw70/helpdata/EN/44/0e2ab4c7330d19e10000000a114a6b/frameset.htm

But after changing my profile parameters, and restarting the instance, the disp+work goes from yellow to grey.

In dev_w log, I get :

N Mon Feb 16 11:09:52 2009

N SncInit(): Initializing Secure Network Communication (SNC)

N PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 16/64/64)

N SncInit(): found snc/data_protection/max=3, using 3 (Privacy Level)

N SncInit(): found snc/data_protection/min=2, using 2 (Integrity Level)

N SncInit(): found snc/data_protection/use=9, using 3 (Privacy Level)

N SncInit(): found snc/gssapi_lib=c:\Windows\sysWow64\gx64krb5.dll

N File "c:\Windows\sysWow64\gx64krb5.dll" dynamically loaded as GSS-API v2 library.

N The internal Adapter for the loaded GSS-API mechanism identifies as:

N Internal SNC-Adapter (Rev 1.0) to Kerberos 5/GSS-API v2

N SncInit(): found snc/identity/as=p:SAPServiceFG1[at]CIE.GROUP.FR

N *** ERROR => SncPAcquireCred()==SNCERR_GSSAPI [sncxxall.c 1432]

N GSS-API(maj): No valid credentials provided (or available)

N GSS-API(min): SSPI u2u-problem: please add Service principal for own account

N Could't acquire ACCEPTING credentials for

N

N name="p:SAPServiceFG1[at]CIE.GROUP.FR"

M *** ERROR => ErrISetSys: error info too large [err.c 969]

M Mon Feb 16 11:09:52 2009

M LOCATION SAP-Server tftstsapsql1_FG1_02 on host tftstsapsql1 (wp 18)

M ERROR GSS-API(maj): No valid credentials provided (or available)

M GSS-API(min): SSPI u2u-problem: please add Service principal for own a

M name="p:SAPServiceFG1[at]CIE.GROUP.FR"

M TIME Mon Feb 16 11:09:52 2009

M RELEASE 700

M COMPONENT SNC (Secure Network Communication)

M VERSION 5

M RC -4

M MODULE sncxxall.c

M LINE 1432

M DETAIL SncPAcquireCred

M SYSTEM CALL gss_acquire_cred

M ERRNO

M ERRNO TEXT

M DESCR MSG NO

M DESCR VARGS GSS-API(maj): No valid credentials provided (or available);;;;

M ;;;;GSS-API(min): SSPI u2u-problem: please add Service principal for own a;;;;

M ;;;;name="p:SAPServiceFG1[at]CIE.GROUP.FR"

M DETAIL MSG N

M DETAIL VARGS

M COUNTER 1

N SncInit(): Fatal -- Accepting Credentials not available!

N <<- ERROR: SncInit()==SNCERR_GSSAPI

N sec_avail = "false"

M ***LOG R19=> ThSncInit, SncInitU ( SNC-000004) [thxxsnc.c 230]

M *** ERROR => ThSncInit: SncInitU (SNCERR_GSSAPI) [thxxsnc.c 232]

M in_ThErrHandle: 1

M *** ERROR => SncInitU (step 1, th_errno 44, action 3, level 1) [thxxhead.c 10524]

Any idea ?

Xavier

ps : in log, @ has been replaced by [at] to meet forum requirements.