Skip to Content

Archived discussions are read-only. Learn more about SAP Q&A

Issuer of SSO ticket is not authorized

Hi Experts,

we have a problem with the logon ticket.

For the BI ABAP+Java stack installtion we given the same SID for both the systems.

After the installation of BI Java we run the standard post BI implementation steps. At this time due to the BI ABAP and Java systems same SID we took the precaution in BI java side and we changed the ume service --> login.ticket_client parameter value to 100 (non existing client) instead of j2ee default 000 value.

Then we regenarated the portal certificate and import it into ABAP side and vice versa.

But when we logon to the portal and run any BW iview we are getting error message "Issuer of SSO ticket is not authorized"

Caused by:

com.sap.mw.jco.JCO$Exception: (103) RFC_ERROR_LOGON_FAILURE: Issuer of SSO ticket is not authorized

Can anyone help me to fix this problem.

ADV Thanks

Ravi.

Former Member
Former Member replied

please do the following:

DELETE EXPIRED PORTAL CERTIFICATE IN ABAP:

ABAP System:

TA: STRUSTSSO2

Delete all expired J2EE certificates u201CCN=<SID>, OU=J2EEu201D in u201CSystem PSEu201D and u201CSSL server Standardu201D

GENERATE AND EXPORT PORTAL CERTIFICATE:

Go to Visual Administrator

Choose <SID> - Server - Services - Key Storage - from the tree Select the view TicketKeystore under Views

If the SAPLogonTicketKeypair exist, delete it.

If the SAPLogonTicketKeypair-cert exist, delete it.

Generate a portal certificate using the following steps:

Under Entry choose Create.

Enter the folowing values in u201CKey and Certificate Generationu201D

Organization Unit Name (OU) = J2EE

Common Name (CN) = <SID>

Entry Name = SAPLogonTicketKeypair

Store Certificate: X

Algorithm: DSA

Click u201CGenerateu201D

IMPORT PORTAL CERTIFICATE IN ABAP

TA: STRUSTSSO2

System PSE:

u201CImport Certificateu201D - Choose your exported .crt file - File format = Binary

Click u201CAdd to Certificate Listu201D

Click u201CAdd to ACLu201D - System ID = <SID>, Client = 000

save it.

SSL server Standard:

u201CImport Certificateu201D - Choose your exported .crt file - File format = Binary

Only click u201CAdd to Certificatre Listu201D

save it.

ensure that u restart the ICM (TA: SMICM).

Maybe you have also restart your ABAP+JAVA instance.

...had the same problem. The steps above solves the problems.

1 View this answer in context
Not what you were looking for? View more on this topic or Ask a question