SSO for multi domain

[Former Member]

Hi, all

I have four R/3 backends connected to our portal using SSO. two of them and Portal are on same Domain. Other two are in different Domain. I followed SSO guide for all. I checked Connection Test forl all. They all are successfull. There is a full trust relationship between the two domains. When I go to System Administration-->Support >Sap Transaction> SAP GUI for HTML to test other two systems which are in the diffrent domain, I have a warning "No switch to HTTPS occurred, so it is not secure to send a password" . But When I followed same thing SAP GUI for WINDOWS instead of SAP GUI for HTML. It works.

did I miss anything on the Portal side or R3 side or is there any Log for SSO or do I have to modify ume.login.mdc.hosts

Regards

ABH

[desiree_matas]

Hello ABH,

SAP GUI for HTML is not related with ume.login.mdc.hosts, as it is html for abap, not java, and the UME is used in the java side.

You should check the SSO configuration for the integrated ITS in the abap web server.

Regarding the SSO for multiple domain, if you have already set the configuration, you can easily see whether the cookies are passing correctly or not by using some tool like HttpWatch or similar.

Regards,

Désiré

[thunder_feng]

Hi ABH

If you test all the systems with "SAP GUI for Windows" works, then it shows that the SSO configuration has been done successuflly.

Regarding the error of "No switch to HTTPS occurred, so it is not secure to send a password" when you test with SAP GUI for

HTML, it should be some other issue, but not SSO-relevant.

To check further, could you please reproduce it once more and then check the lastest defaulttrace file of your portal system?

is there any other error recorded?

Thanks

Thunder

[Former Member]

Hi Thunder,

here is Default trace but I could not find any related error mesages with SSO

#

#1.5 #00215E099698006E00000035000012BC000493FA9CD3EEA7#1288604489169#com.sap.tc.lm.ctc.metamodel.process.controller.ProcessRegistry#sap.com/tc_wddispwda#com.sap.tc.lm.ctc.metamodel.process.controller.ProcessRegistry#btc-support#162##n/a##f7374ed1e59b11df80720000005d59da#SAPEngine_Application_Thread[impl:3]_19##0#0#Error##Plain###configuration resource testcases/NetWeaver/Wizard/relatedLinksWithExpressionTest.cproc [sap.com/tc_lmconfig~bs] can not be loaded as it is not a Process!#

#1.5 #00215E099698006E00000036000012BC000493FA9CD4EC39#1288604489232#com.sap.tc.lm.ctc.resourceAccessor.CTCAppContentResourceLoaderCM#sap.com/tc_wddispwda#com.sap.tc.lm.ctc.resourceAccessor.CTCAppContentResourceLoaderCM#btc-support#162##n/a##f7374ed1e59b11df80720000005d59da#SAPEngine_Application_Thread[impl:3]_19##0#0#Error##Java###CTCAppContentResourceLoader->getStreamForResource error.

[EXCEPTION]

#1#com.sap.engine.frame.core.configuration.NameNotFoundException: A file entry with the name "content/BusinessSuite/Scenarios/BS/BS_CRM_ERP_DEFAULT_POC/BS_CRM_ERP_DEFAULT_POC_MaintainUI.cproc" cannot be found in the configuration "apps/sap.com/tc_lmconfig~bs/CTCContainer". at com.sap.engine.core.configuration.impl.ConfigurationData.getFileEntry(ConfigurationData.java:333) at com.sap.engine.core.configuration.impl.ReadAccessConfiguration.getFile(ReadAccessConfiguration.java:955) at com.sap.tc.lm.ctc.resourceAccessor.CTCAppContentResourceLoaderCM.getStreamForResource(CTCAppContentResourceLoaderCM.java:259) at com.sap.tc.lm.ctc.metamodel.process.controller.ProcessRegistry.loadProcess(ProcessRegistry.java:313) at com.sap.tc.lm.ctc.metamodel.process.controller.ProcessRegistry.getVisibleProcessesInternal(ProcessRegistry.java:283) at com.sap.tc.lm.ctc.metamodel.process.controller.ProcessRegistry.getVisibleRootProcesses(ProcessRegistry.java:226) at com.sap.tc.lm.ctc.metamodel.process.controller.ProcessEngine.getVisibleRootProcesses(ProcessEngine.java:412) at com.sap.tc.lm.ctc.ccl.wd.TemplateInstallerCompController.supplyResourceIdentifier(TemplateInstallerCompController.java:513) at com.sap.tc.lm.ctc.ccl.templateinstaller.TemplateInstallerComp.supplyResourceIdentifier(TemplateInstallerComp.java:231) at com.sap.tc.lm.ctc.ccl.templateinstaller.wdp.InternalTemplateInstallerComp.supplyResourceIdentifier(InternalTemplateInstallerComp.java:381) at com.sap.tc.lm.ctc.ccl.templateinstaller.wdp.IPublicTemplateInstallerComp$IResourceIdentifierNode.doSupplyElements(IPublicTemplateInstallerComp.java:2917) at com.sap.tc.webdynpro.progmodel.context.Node.supplyElements(Node.java:406) at com.sap.tc.webdynpro.progmodel.context.Node.getElementList(Node.java:345) at com.sap.tc.webdynpro.progmodel.context.Node.createMappedElementList(Node.java:498) at com.sap.tc.webdynpro.progmodel.context.Node.supplyElements(Node.java:393) at com.sap.tc.webdynpro.progmodel.context.Node.getElementList(Node.java:345) at com.sap.tc.webdynpro.progmodel.context.Node.getElements(Node.java:333) at com.sap.tc.webdynpro.progmodel.context.Node.getElementAtInternal(Node.java:615) at com.sap.tc.webdynpro.progmodel.context.Node.getCurrentElementInternal(Node.java:868) at com.sap.tc.webdynpro.progmodel.context.Node.getCurrentElement(Node.java:875) at com.sap.tc.lm.ctc.ccl.templateinstaller.wdp.IPrivateSummaryView$IContextNode.currentResourceIdentifierElement(IPrivateSummaryView.java:147) at com.sap.tc.lm.ctc.ccl.wd.SummaryViewController.getProcessSummary(SummaryViewController.java:213) at com.sap.tc.lm.ctc.ccl.wd.SummaryViewController.modifyView(SummaryViewController.java:74) at com.sap.tc.lm.ctc.ccl.templateinstaller.SummaryView.wdDoModifyView(SummaryView.java:137) at com.sap.tc.lm.ctc.ccl.templateinstaller.wdp.InternalSummaryView.wdDoModifyView(InternalSummaryView.java:223) at com.sap.tc.webdynpro.progmodel.generation.DelegatingView.doModifyView(DelegatingView.java:78) at com.sap.tc.webdynpro.progmodel.view.View.modifyView(View.java:337) at com.sap.tc.webdynpro.clientserver.cal.ClientComponent.doModifyView(ClientComponent.java:481) at com.sap.tc.webdynpro.clientserver.cal.ClientComponent.doModifyView(ClientComponent.java:488) at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.doModifyView(WindowPhaseModel.java:551) at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.processRequest(WindowPhaseModel.java:148) at com.sap.tc.webdynpro.clientserver.window.WebDynproWindow.processRequest(WebDynproWindow.java:335) at com.sap.tc.webdynpro.clientserver.cal.AbstractClient.executeTasks(AbstractClient.java:143) at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doProcessing(ApplicationSession.java:333) at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessingStandalone(ClientSession.java:741) at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessing(ClientSession.java:694) at com.sap.tc.webdynpro.clientserver.session.ClientSession.doProcessing(ClientSession.java:253) at com.sap.tc.webdynpro.clientserver.session.RequestManager.doProcessing(RequestManager.java:149) at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doContent(DispatcherServlet.java:62) at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doPost(DispatcherServlet.java:53) at javax.servlet.http.HttpServlet.service(HttpServlet.java:760) at javax.servlet.http.HttpServlet.service(HttpServlet.java:853) at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401) at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266) at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386) at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364) at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039) at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265) at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95) at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175) at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33) at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41) at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37) at java.security.AccessController.doPrivileged(Native Method) at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104) at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176) # #1.5 #00215E099698006E00000037000012BC000493FA9CD4ED85#1288604489232#com.sap.tc.lm.ctc.metamodel.process.controller.ProcessRegistry#sap.com/tc_wddispwda#com.sap.tc.lm.ctc.metamodel.process.controller.ProcessRegistry#btc-support#162##n/a##f7374ed1e59b11df80720000005d59da#SAPEngine_Application_Thread[impl:3]_19##0#0#Error##Plain###configuration resource content/BusinessSuite/Scenarios/BS/BS_CRM_ERP_DEFAULT_POC/BS_CRM_ERP_DEFAULT_POC_MaintainUI.cproc [sap.com/tc_lmconfig~bs] can not be loaded as it is not a Process!# #1.5 #00215E099698006E00000038000012BC000493FA9CD74E1C#1288604489388#com.sap.tc.lm.ctc.resourceAccessor.CTCAppContentResourceLoaderCM#sap.com/tc_wddispwda#com.sap.tc.lm.ctc.resourceAccessor.CTCAppContentResourceLoaderCM#btc-support#162##n/a##f7374ed1e59b11df80720000005d59da#SAPEngine_Application_Thread[impl:3]_19##0#0#Error##Java###CTCAppContentResourceLoader->getStreamForResource error. [EXCEPTION] #1#com.sap.engine.frame.core.configuration.NameNotFoundException: A file entry with the name "testcases/NetWeaver/Wizard/relatedLinksTest.cproc" cannot be found in the configuration "apps/sap.com/tc_lmconfig~bs/CTCContainer".

at com.sap.engine.core.configuration.impl.ConfigurationData.getFileEntry(ConfigurationData.java:333)

at com.sap.engine.core.configuration.impl.ReadAccessConfiguration.getFile(ReadAccessConfiguration.java:955)

at com.sap.tc.lm.ctc.resourceAccessor.CTCAppContentResourceLoaderCM.getStreamForResource(CTCAppContentResourceLoaderCM.java:259)

at com.sap.tc.lm.ctc.metamodel.process.controller.ProcessRegistry.loadProcess(ProcessRegistry.java:313)

at com.sap.tc.lm.ctc.metamodel.process.controller.ProcessRegistry.getVisibleProcessesInternal(ProcessRegistry.java:283)

at com.sap.tc.lm.ctc.metamodel.process.controller.ProcessRegistry.getVisibleRootProcesses(ProcessRegistry.java:226)

at com.sap.tc.lm.ctc.metamodel.process.controller.ProcessEngine.getVisibleRootProcesses(ProcessEngine.java:412)

at com.sap.tc.lm.ctc.ccl.wd.TemplateInstallerCompController.supplyResourceIdentifier(TemplateInstallerCompController.java:513)

at com.sap.tc.lm.ctc.ccl.templateinstaller.TemplateInstallerComp.supplyResourceIdentifier(TemplateInstallerComp.java:231)

at com.sap.tc.lm.ctc.ccl.templateinstaller.wdp.InternalTemplateInstallerComp.supplyResourceIdentifier(InternalTemplateInstallerComp.java:381)

at com.sap.tc.lm.ctc.ccl.templateinstaller.wdp.IPublicTemplateInstallerComp$IResourceIdentifierNode.doSupplyElements(IPublicTemplateInstallerComp.java:2917)

at com.sap.tc.webdynpro.progmodel.context.Node.supplyElements(Node.java:406)

at com.sap.tc.webdynpro.progmodel.context.Node.getElementList(Node.java:345)

at com.sap.tc.webdynpro.progmodel.context.Node.createMappedElementList(Node.java:498)

at com.sap.tc.webdynpro.progmodel.context.Node.supplyElements(Node.java:393)

at com.sap.tc.webdynpro.progmodel.context.Node.getElementList(Node.java:345)

at com.sap.tc.webdynpro.progmodel.context.Node.getElements(Node.java:333)

at com.sap.tc.webdynpro.progmodel.context.Node.getElementAtInternal(Node.java:615)

at com.sap.tc.webdynpro.progmodel.context.Node.getCurrentElementInternal(Node.java:868)

at com.sap.tc.webdynpro.progmodel.context.Node.getCurrentElement(Node.java:875)

at com.sap.tc.lm.ctc.ccl.templateinstaller.wdp.IPrivateSummaryView$IContextNode.currentResourceIdentifierElement(IPrivateSummaryView.java:147)

at com.sap.tc.lm.ctc.ccl.wd.SummaryViewController.getProcessSummary(SummaryViewController.java:213)

at com.sap.tc.lm.ctc.ccl.wd.SummaryViewController.modifyView(SummaryViewController.java:74)

at com.sap.tc.lm.ctc.ccl.templateinstaller.SummaryView.wdDoModifyView(SummaryView.java:137)

at com.sap.tc.lm.ctc.ccl.templateinstaller.wdp.InternalSummaryView.wdDoModifyView(InternalSummaryView.java:223)

at com.sap.tc.webdynpro.progmodel.generation.DelegatingView.doModifyView(DelegatingView.java:78)

at com.sap.tc.webdynpro.progmodel.view.View.modifyView(View.java:337)

at com.sap.tc.webdynpro.clientserver.cal.ClientComponent.doModifyView(ClientComponent.java:481)

at com.sap.tc.webdynpro.clientserver.cal.ClientComponent.doModifyView(ClientComponent.java:488)

at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.doModifyView(WindowPhaseModel.java:551)

at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.processRequest(WindowPhaseModel.java:148)

at com.sap.tc.webdynpro.clientserver.window.WebDynproWindow.processRequest(WebDynproWindow.java:335)

at com.sap.tc.webdynpro.clientserver.cal.AbstractClient.executeTasks(AbstractClient.java:143)

at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doProcessing(ApplicationSession.java:333)

at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessingStandalone(ClientSession.java:741)

at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessing(ClientSession.java:694)

at com.sap.tc.webdynpro.clientserver.session.ClientSession.doProcessing(ClientSession.java:253)

at com.sap.tc.webdynpro.clientserver.session.RequestManager.doProcessing(RequestManager.java:149)

at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doContent(DispatcherServlet.java:62)

at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doPost(DispatcherServlet.java:53)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)

at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)

at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)

at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)

at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)

at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)

at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)

at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)

at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)

at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)

at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)

at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)

at java.security.AccessController.doPrivileged(Native Method)

at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)

at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)

#

#1.5 #00215E099698006E00000039000012BC000493FA9CD74F66#1288604489388#com.sap.tc.lm.ctc.metamodel.process.controller.ProcessRegistry#sap.com/tc_wddispwda#com.sap.tc.lm.ctc.metamodel.process.controller.ProcessRegistry#btc-support#162##n/a##f7374ed1e59b11df80720000005d59da#SAPEngine_Application_Thread[impl:3]_19##0#0#Error##Plain###configuration resource testcases/NetWeaver/Wizard/relatedLinksTest.cproc [sap.com/tc_lmconfig~bs] can not be loaded as it is not a Process!#

Regards

ABH

[Former Member]

Hi ABH,

You will have to edit UME property ume.login.mdc.hosts

Please have go through the documentation in the SAP Library "Configuring Logon Tickets for Multiple Domains"

(http://help.sap.com/saphelp_nw04s/helpdata/en/e0/fa984050a13354e1000000

0a1550b0/frameset.htm)

After editing the ume.login.mdc.hosts please bounce the portal.

Best Regards

Sajjan Kumar

[Former Member]

hi,

I have already looked at the link but I am not clear abut usage of ume.login.mdc.hosts. for example

Portal :Http://portal.domain1.com

ITS of R3 Http://its.domain2.com

what sould ume.login.mdc.hosts be?

Regards,

ABH

[Former Member]

Please be aware that the syntax is:

ume.login.mdc.hosts = [protocol://]host[:port][path]

You must specify the port if it is not equal to the default port; 80

for HTTP or 443 for HTTPS.

The protocol is optional. If you do not specify the protocol, the

system uses the protocol used for the current connection. If you do not

specify the protocol, the receiving system must listen for both HTTP and

HTTPS and only on the default ports.

Path :-

If Ticket-issuing server is Portal server and you do not specify a path,

the default path is /irj/servlet/prt/portal/prtroot

/com.sap.portal.usermanagement.admin.mdc

Please be aware that after the changes you should restart the nodes in

the J2EE Engine cluster for the changes to take effect.

Besides I recommend you to read carefully the info provided in link:

http://help.sap.com/saphelp_nw70/helpdata/en/e0/fa984050a13354e10000000a1550b0/content.htm

and to understand how it works:

http://help.sap.com/erp2005_ehp_04/helpdata/DE/b8/9ba340fa432b54e10000000a1550b0/content.htm

and Sap note 920033 Multi Domain SSO Cookie

Hope it helps

Best Regards

Sajjan Kumar