SSO on federated portal

[Former Member]

We have configured a federated portal (EP7SP11, EP7SP12) as follows:

Consumer EP - Producer EP -

---

sso--

---

ECC6

However, when accessing ECC6 frm the consumer EP, SSO is NOT working.

I am prompted for ID/password even the producer EP and ECC6 are

SSO connected.

We have searched the entire SDN and OSS but no findings.

Please advise. Points guaranteed. Thanks!

[Former Member · Accepted solution]

Hi C Z ,

Did you find solution for this , i am also facing the same issue .

[Former Member · Accepted solution]

No. Please let me know your method. Thanks!

[Former Member]

Hi,

The problem is that the issuer of the ticket is the consumer. The consumer should be trusted by the system we're redirecting the browser to (if we're using SSO).

Your setup should look like this:

Consumer EP -- sso -- Producer EP -- <sso - optional> -- ECC6

\--

---

sso--

---

/

Producer EP should be trusted by ECC6 only if direct login to producer (without consumer involved) is a valid scenario.

Best regards,

Oren

Edited by: Oren Root on Apr 23, 2008 6:50 PM

[Former Member]

HI,

SSO in a Federated Portal Network

In a federated portal network, the following should be noted:

1. Communication between a producer portal and a consumer portal requires the use of logon tickets for SSO.

2. To facilitate acceptance of the logon ticket between a producer portal and a consumer portal, you need to set up trust between the portals. For more information.

3. To facilitate SSO authentication between the client and a consumer portal, you can use logon tickets or other forms of authentication, such as X.509 client certificates, SPNego, and SAML.

For more information refer this SAP Help website.

http://help.sap.com/saphelp_nw04s/helpdata/en/43/2232900bb93fece10000000a11466f/content.htm

Thanks,

Padmanaban