Problems with Single Sign On

[Former Member]

To SAP Portal Support Team.

Dear Sirs:

I need your help with an issue in our SAP Portal. We have configured

Single Sign-On, using the domain user to authenticate the login and it

worked just fine until very recently when it started to behave

erratically, some days authenticating correctly and others prompting the

user for login data.

While trying to solve this problem, I've checked the following:

1. Logon ticket is not expired.

2. SPnego setup is correct.

3. There aren't error alerts in the portal server log.

Please tell me if there are other things that I should check or steps

that I could follow to better understand and/or solve this problem.

Thanks in advance.

Regards,

Priscila Flores

[Former Member]

Has this ever been resolved? I know its an old post, but we seem to be facing the exact same issues at my current client. Any updates would be greatly appreciated!

Nick

[Former Member]

Hi,

Check also the users web browsers.

We had a lot of trouble with spnego/Kerberos SSO until we discovered that, even if Internet Explorer 8 is our only company approved web browser, a lot of users were using the portable version of Chrome "because it is cool".

Unfortunately Chrome does not support spnego/Kerberos.

Finally, I had to use the SAP web dispatcher of the portal to detect the used browser (with the user-agent) and to display an error page if the browser is not the official one.

PS : You cant' contact the SAP Portal Support Team here. we are just a community of people volontary trying to help.

Regards,

Olivier

[grace_leslie]

Hi Olivier,

Is there any official note records that Chrome doesn't support spnego/Kerberos.

Because I meet the same issue,  the same fiori web site can log on with IE10, and we log with Chrome, the SSO is failed and a new authentication box popped up, and I got trace,

**************

authentication log: Your browser does not support SPNEGO

Certificate could not be authenticated

**************

But no official note is found.

Do you have any idea.

Best Regards,

Yanyan

[Former Member]

Hi Yanyan,

There is a workaround for configuring Chrome to support SPNego in SAP Note: 1887193 (see under "Resolution").

If Chrome SPNego support is required this should resolve the issue. Please also ensure the Chrome version is up to date

Regards

Nick

Active Global Support

[Former Member]

Intermittent errors like you seem to have are often caused by different configurations on multiple application servers (or multiple server processes).

Cheers Michael

[cathal_ohare]

I recommend you run the webdiagtool traces from note 1045019, This trace will highlight in red the exact error causing the failed SSO, If it is the initial login that is failing then it is a problem with the spnego so it might also be worth running the spnego wizard again.

[Former Member]

Hi,

Try to run support desk tool .. by following below link

http://www.netweavercentral.com/index.php/2009/sap-netweaver-bi-diagnostics-support-desk-tool/

That will give you good idea about the problem.

Thanks,

Deepthi