SSO / Logon Ticket: Taking over ITS session

[Former Member]

Hi,

we have an serious SSO issue.

<u><b>SCENARIO:</b></u>

<b>User A</b> logs in the portal and accesses SAP EBP via ITS (HTTP link within Enterprise Portal opening a new Browser Window and launching https://buyer.test.xxx.intranet.com/scripts/wgate/bbpstart/!). <b>User A</b> close the browser window where EBP is launched and logs off the Portal but does not close the browser window where the Portal was accessed. On the same client machine and same browser window <b>User B</b> logs in the Portal and access SAP EBP via ITS the same way the <b>user A</b> did before. If we now look at the users settings in SAP EBP ITS he has the user details from <b>User A</b>. Hence <b>User B</b> has the ITS session of <b>User A</b>. On the other hand within the Portal the users are recognized correctly after login.

<u><b>SETUP:</b></u>

Portal load-balancing.

EP URL: https://portal.test.xxx.intranet.com

ITS EBP URL: https://buyer.test.xxx.intranet.com

<u><b>ISSUE:</b></u>

The SSO ticket should be killed after logging off the portal.

System versions:

6.0.2.33.0.Enterprise_Portal_Support_Package_2

6.0.2.33.0.ContentManagement_Collaboration

J2EE patch level 33

ITS 6200.1017.50954.0, build 730827 (620 patch level 17)

Regards,

Adam Kreuschner

[athavanraja · Accepted solution]

DSM terminator should kill back end sessions. if pop up blocker is activated DSM terminator will not work.

may be post this in EP forum.

Regards

Raja

[Former Member · Accepted solution]

Hi Raja,

There is no Pop-up-blocker running and we can see that the DSM Terminator appears when logging off.

Will also post this in EP Formum but I suppose the problem is ITS related.

Thanks for you help,

Adam

[Former Member · Accepted solution]

Hi Adam,

i actually don't believe that the problem is ITS related. Please see my answer on your EP forum thread.

Hope it helps you resolve the issue,

Robert

PS: Please consider validating answers on SDN by clicking on the colored stars THANKS!