Single Sign On ECC6 & Portal7

[Former Member]

Hi,

Recently I have done two homogeneous system copy from ECC6 (ABAP+JAVA) system copy & Portal 7.0 from there respective production system.

Now I have to configure SSO with new portal & ECC.I have done following steps

In Portal

1. I have created systems in Portal & there WebAS & ITS connection tests are successful Issue is with Connector.

2. In Portal Visual admin I have created new certificate

3. Downloaded it from keystore

4. Imported certificate in ECC & distributed.Added ACL with Portal SID & client 000

In ABAP parameters are correctly configured

login/accept_sso2_ticket=1

login/create_sso2_ticket=2

But still itu2019s not working.It would be helpful to know the correct steps if I missed above.

Regards

Santosh

[Former Member]

Completed

[Former Member]

Hi,

Please go through the following link will be helpful to verify your configuration steps for SSO

http://help.sap.com/saphelp_nw70/helpdata/en/89/6eb8deaf2f11d5993700508b6b8b11/content.htm

Thanks & Regards,

Vidyadhar K

[JPReyes]

And whats the error?

[Former Member]

Hi Juan,

Pleasze find test detail

Test Connection with Connector

Test Details:

The test consists of the following steps:

1. Retrieve the default alias of the system

2. Check the connection to the backend application using the connector defined in this system object

Results

Retrieval of default alias successful

Connection failed. Make sure that Single Sign-On is configured correctly

Regards

Santosh

[JPReyes]

Did you get any errors when trying to open a transactional iview to the backend system? does it ask you for loging ans password?

Regards

Juan

[Former Member]

Hi

Check the following links:

Single Sign-On with SAP Logon Tickets on help.sap.com:

http://help.sap.com/saphelp_nw04/helpdata/en/89/6eb8e1af2f11d5993700508b6b8b11/frameset.htm

User Authentication and Single Sign-On:

http://help.sap.com/saphelp_nw04/helpdata/en/e5/4344b6d24a05408ca4faa94554e851/frameset.htm

Security Guide:

https://service.sap.com/~sapdownload/011000358700004812692003E/SecurityGuide_60_SP2_v33.pdf

Regards

[ajjunit84]

Are you using a user for this connection test which is present in both the systems?

Try with the same user id in both systems ECC and Portal and test SSO .

Regards

Ajay

[Former Member]

Hi Juan,

I created PSE in ECC 6 system client 000.But after system restart whne I executed strustsso2 trnsaction it was asking for password.

Si I deleted System PSE folder & tried recreating But I am getting error as Error while creating PSE

Regards

santosh

[JPReyes]

Whats the error?... also you need to import the certificate of the portal into ECC and add it to the ACL.

Regards

Juan

[Former Member]

Hi Juan,

Certificate Import was successful & tested in portal connector test was alos sucessful.But after system restart it I went to strustsso2.it was asking for a password.

& only ACL entry was present & others are not present.

When I tried to create again I am getting following error PSE missing on database

Regards

Santosh

[ajjunit84]

Hello,

Delete the PSE and recreate ,if you are not using it anywhere else.

Have you set the SAP Crypto Library and the required parameter in the system.

Set them and then create the PSE again ..link for your reference

http://help.sap.com/saphelp_nw2004s/helpdata/en/32/431c3aadda4f25e10000000a11402f/frameset.htm

Regards

Ajay

Edited by: Ajay Sandal on Sep 15, 2009 4:54 PM

[Former Member]

Hi,

Following two parameters setup in ECC

sec/libsapsecu E:\usr\sap\GD1\SYS\exe\uc\NTAMD64\sapcrypto.dll

ssf/name SAPSECULIB

ssf/ssfapi_lib E:\usr\sap\GD1\SYS\exe\uc\NTAMD64\sapcrypto.dll

Regards

Santosh

[ajjunit84]

Now delete the Old PSe and create it again then distribute.

After that import the Logon certificate.Pls let us know the connection results of SSO then.

Regards

Ajay

Edited by: Ajay Sandal on Sep 15, 2009 5:09 PM

[Former Member]

Hi Ajay,

SSO was setup & it was working fine but after restart of server PSE was asking for password.

So I deleted PSE & tried to recreate & I am getting message as

PSE MISSING IN DATABASE.

Regards

santosh

[ajjunit84]

Hello Santosh ,

Check this note 354819 ,could be of any help.

Access the tcoce STRUSTSSO2 and then see the logs SM21 and trace file of the dialog processes.Increase the trace level as well.

Regards

Ajay

[Former Member]

You should install 'Diagtool' (Note 957666) and 'Support desk Tool' (Note 937697) tools.

I have recently configured SSO, and these tools helped me a lot.

If you say to me exactly what are your errors, maybe, I could give you a hand...

[JPReyes]

have you upgraded the kernel?... maybe you forgot to move the sapcryptolib software?

Also check,

Note 354819 - Collective note SAPSECULIB

Note 508307 - Trust Manager: Problems importing certificate responses

Regards

Juan