STRUST and STRUSTSSO2 How we use

[Former Member]

Dear All

In Solman 7.1 sp 8 we face error when Basic Cofigurtion -> Configration Automatically-> SSO setup Shwo read How i solved problem

I not much familiyar with STRUT and STRUSTSSO2 Tcode Please Guide me

I send Screen Short Also in attechment

Nainesh

[former_member183107 · Accepted solution]

Hi,

In step 6(enter landscape parameters) of the managed system configuration "Instance DVEBMGSxx (ABAP Instance) " landscape object is missing.

Please send the latest SLD data to Solution Manager, resync the lmdb data with report RLMDB_SYNC_TECHNICAL_SYSTEM and start the managed system configuration again.

About the report RLMDB_SYNC_TECHNICAL_SYSTEM please checkhttps://help.sap.com/saphelp_sm71_sp05/helpdata/en/f6/a41e0402664451b9c4640ff4513527/content.htm

Have you installed diagnostic agent?

If yes then is it running?

Regards,

Himanshu

[Former Member · Accepted solution]

Dear Himansu

My LMDB is Coplite but i need STRUS and STRUSTSSO2 Tcode STEP By STEP

Nainesh

9376998808

[former_member183107 · Accepted solution]

Here are the steps:-

To put it simply we need to take a certificate from the WebAS or EP and then put that into R/3 System. Then we need to configure the R/3 so that they start accepting the logon tickets from the WebAS. Also we need to set up the ACL (Access Control List) to mention the host. Find the detailed step-by-step procedure below.

1.Set the profile parameter login/accept_sso2_ticket = 1. Set login/create_sso2_ticket = 0 unless the server should also be able to issue tickets. (Use DEFAULT.PFL). Remember you need to talk to the ever helpful basis person to get this done.

2.Download certificate from the Web AS (OR) Enterprise Portal. (Talk to your Web AS administrator or the EP System Administrator)

Web AS:

In the Visual Administrator, press on "Export" button "Server -> Services -> Key Storage -> Ticket Keystore -> SAP Logon Ticket Key Pair-Cert" Enterprise Portal:

Press on button "Download verify.der File" - navigate using link given below. "System Administration -> System Configuration -> Keystore Administration-> SAP Logon Ticket Key Pair-Cert"

3.Go to transaction "STRUSTSSO2", add the certificate (Talk to your ABAP Basis person again)

4.Add to the ACL. You have to enter the WPS System and the WPS Client. WPS System: <Instance Name> - click on the certificate and take the "Issued By" value WPS Client: Enter this as "000" (3 Zeroes)

5.If you want to allow access to more than one client using the digitally signed certificates then you need to log into the R/3 system in that client and add to ACL alone again.

6.Create the equivalent user IDs in WebAS/EP as in the R/3. If you don't want to create as many equivalent users then do "User Mapping" (Refer to Help portal). But then to begin with I suggest you to create corresponding users even if you are enabling SSO for many users.

7.In the "Webdynpro Content Administrator" Change JCO connection settings accordingly: I. Set Model data logical destination to UseSSO. II. Set Metadata logical destination to DefinedUser (because metadata is common for all users)

During runtime only the user IDs in the UME and the R/3 are verified. If they are the same then it would allow access as per the authorization for that user in the R/3 system. So the passwords can be different.

Search for "User Authentication and Single Sign-On" in the sap.help.com for complete information.

Also recommended is this excellent articlehttps://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sapportals.km.docs/documents/a1-8-4/sso%2...

Also, please find a very good doc on this:-

http://scn.sap.com/docs/DOC-26144

Regards,

Himanshu

[Former Member · Accepted solution]

Dear Himansu

Thanks

I able to Exprt Cert  form STRUSTSSO2 but where i import it if on portal then wher

and I alos open JAva Visual Admin where i foun Certy ,, i am very Confuse to work...

beacu we have no EP and any other system...

i install solman 7.1 sp8 but In SSO setup is not cmplite please guide me

if it possibla to pl give u r Cell no So i call U

Nainesh

9376998808

[Former Member · Accepted solution]

Hi,

Can you please click on the show button in the line Error while calling Diagnostic web service.

Thanks

Rishi Abrol

[Former Member · Accepted solution]

Hi Rushi

I not undersatd what u r say... pl sys clearly....Thanks

nainesh

[Former Member · Accepted solution]

Hi,

Thanks

Rishi Abrol

[Former Member · Accepted solution]

Dear

Please Find Attechment

nainesh

9376998808

[Former Member · Accepted solution]

HI Rishi

Please Find Attechment

nainesh

9376998808

[Former Member · Accepted solution]

Hi,

I think that you have the error because of this.

1880334 - Error while calling Diagnostics setup web service with HTTP Code 307 : TEMPORARY REDIRECT

Thanks

Rishi Abrol

[karthikeyan_natarajan4 · Accepted solution]

Hi Nainesh,

Please check 1822831  - Web Service Soap Errors in solman_setup

regards

kartik

[karthikeyan_natarajan4 · Accepted solution]

Hi Nainesh,

Please check this note

1121248  - SSO Setup for Diagnostics

[karthikeyan_natarajan4 · Accepted solution]

Hi Nainesh,

Please paste the screenshot of Web dispatcher configuration from system preparation -- configure connectivity -- configure web dispatcher along with the logs section.

regards

kartik

[karthikeyan_natarajan4 · Accepted solution]

Nainesh,

Please check the port number of web dispatcher, make sure you have given port 50000

regards

kartik

[Former Member · Accepted solution]

Dear ALL

Thanks For Support my problem is soved in Change of port no for 8101 to 50000

Thanks To ALL

Nainesh

9376998808