BI Integrated Planning - Error config logon tickets

Hi,
I am trying to use the Integrated Planning module in 2004s, when I select the start modeler, I get an error relating to the configuration of SAP logon tickets.
Both the required profile parameters are set to the correct value:
login/create_sso2_ticket = 2
login/accept_sso2_ticket = 1
Does Integrated Planning have to use sso?
Thanks
danjl

Hi Dan,
Hope this links gives you better insight on Integrated Planning:
http://help.sap.com/bp_epv170/EP_US/Documentation/How-to/Installation/Upgrade_NW2004s_JavaSR1.pdf
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/c0ac03a4-e46e-2910-f69d-ec5fbb050cbf
Assign points if useful.
Regards
Vishwanath

Similar Messages

Error in the configuration for sap logon tickets

Hi Forum,
I use Tcode crmd_order_bp to see the BP cockpit and the error message displays as
Error in the configuration for SAP logon tickets
But if I click "Yes", system displays cockpit.
How can I avoid this error.
Thanks in advance
Regards
Shridhar

You will still need to configure SSO (either by logon ticket or username/password). The data source access is done using the username/password configured in the UM Config dialog box.
I can see where you're coming from with your thinking, however logon-ticket-based SSO is probably the best approach.
Cheers,
Darren.

Error Runging the Transaction iview using SSO logon ticket

Hi I am getting the follwoing error in log file. when i am running the Transaction iview using SAP Loggon ticket.
#1.5 #005056A33F2000840000000500000600000456BC1060683F#1221265635404#com.sap.security.core.umap.imp.UserMappingDataImp#sap.com/irj#com.sap.security.core.umap.imp.UserMappingDataImp.getAuthenticationTicket()#Guest#0##n/a##28a92320812111ddb972005056a33f20#Thread[UWL Pooled Thread:2,5,SAPEngine_Application_Thread[impl:3]_Group]##0#0#Error#1#/System/Security/Usermanagement#Java###The attribute "" of the backend system with alias "" has the invalid value "".
Cannot generate an SAP authentication assertion ticket for user and the specified backend system.
Please adjust the value of the system attribute. Supported values are "" and "".#6#AuthenticationTicketType#"KPMGVM005_ALIAS"##"Stokkeland, Pauline" (unique ID: "USER.PRIVATE_DATASOURCE.un:P00024384")#SAP Logon Ticket#SAP Assertion Ticket#
I have imported the .der file of the portal in to the SAP ECC sytem.using STRUSTSSO2
Created the profile parameters using rz10 trnsaction.
login/create_sso2_ticket
login/accept_sso2_ticket
restarted the ECC system.
Created the system object using the follwoing parameters
WAS
Connector
Usermanagement
Under usermanagement
Authentication Ticket Type - SAP Logon TicketSAP
Logon Method -SAPLOGONTICKET
User Mapping Fields :<not selected>
User Mapping Type :<not selected>
when i test the sytem object under connection test:showing the following error.
Test Details:
The test consists of the following steps:
1. Retrieve the default alias of the system
2. Check the connection to the backend application using the connector defined in this system object
Results
Retrieval of default alias successful
Connection failed. Make sure that Single Sign-On is configured correctly
But WAS, ITS, Connector are successfull. but above message is showing.
what could be the problem.
When i run one transaction iview with this system it is showing following error.
com.sap.portal.appintegrator.sap.Transaction::Transaction/WebGuiSSOITS640Layer
Parameter Dump
$DebugAction
$TimeStamp 1221268987126
ALLOW_BROWSER Yes
Alias
ApplicationParameter
ApplicationVariants GuiType
AuthScheme default
Authentication ******
AutoStart false
CachingLevel
ClassName com.sapportals.portal.appintegrator.layer.SingleSignOnLayer
ClientWindowID
CodeLink com.sap.portal.appintegrator.sap.Transaction
CommandField YTIME
CurrentWindowId WID1221260007272
CustomerExit.ParameterProvider
DR.TargetIDPropertyName TCode
DebugMode false
DynamicParameter
DynproFields
ExecutionLocation KPMGVM005_ALIAS
ExportParameters Authentication, LogonUser, RequestMethod
FederationAlias
ForcedRequestLanguage
ForwardParameters
ForwardParameters.Always sap-config-mode
ForwardParameters.Excluded
ForwardParameters.Forbidden ClientWindowID, Command, DebugSet, DynamicParameter, Embedded, InitialNodeFirstLevel, SerAttrKeyString, SerKeyString, SerPropString, SessionKeysAvailable, iview_id, iview_mode, windowId, sap-pp-producerid, sap-pp-consumerBaseURL, sap-pp-returnToConsumer, login_submit, j_user, j_password, j_authscheme, uidPasswordLogon, MappedUser, MappedPassword
GUSID
GuiType WebGui
GuiType.default WebGui
ITSVersion 640
JREPluginDownloadLocation
JREPluginMimeType application/x-java-applet;version=1.4.1_02
JavaGuiCodeBase
JavaGuiTraceFile
JavaGuiTraceKey
LAF
LoadingCacheKey <Portal.Version><LAF.Theme>
LogonMethod SAPLOGONTICKET
MandatoryParameters System
NavMode 1
NavigationTarget navurl://21635c17e11df05c58e1c07deaf5bed1
NextLayer Transaction/WebGuiESIDLayer
OkCode
OkCodeField
OptionalParameters
ParameterTemplate <ApplicationParameter[PROCESS_RECURSIVE]>;<ForwardParameters[QUERYSTRING]>;<DynamicParameter[PROCESS_RECURSIVE]>;
Portal
ProducerLocation Remote
REFRESH_CONTENT -1
ReuseWinguiConnection false
RoundtripURL
SSO2Template
SessionManagementVersion
SupportedUserAgents (MSIE, >=5.5, *) (Netscape, *, ) (Mozilla,,*)
SupportsUnicodeCodePages false
System KPMGVM005_ALIAS
System.type lookup:com.sapportals.portal.appintegrator.lookup.SystemLookup
TCode YTIME
Technique Standard
TopLayer Transaction/DragAndRelateLayer
Transactions_Require_SSF RRMX,RRMXP
URL
UnsupportedUserAgents
UseFrog true
UseSPO1 false
UserMappingTemplate sap-user=<MappedUser>&sap-password=<MappedPassword>
ValidityPeriod -1
Wizard.ApplicationVariantPane.Description
Wizard.ApplicationVariantPane.Title
Wizard.MandatoryParameters System, TCode, GuiType
Wizard.OptionalParameters ApplicationParameter, UseFrog, Technique
Wizard.ParameterPane.Description
Wizard.ParameterPane.Title
X509Template
com.sap.application_integration.ConfigurationServiceID Transaction_Configuration
com.sap.portal.ComponentType com.sapportals.portal.iview
com.sap.portal.activityreport.MonitorHits true
com.sap.portal.admin.propertyeditor.categoryName
com.sap.portal.iview.AccessibilitySupport
com.sap.portal.iview.Availability VISIBLE
com.sap.portal.iview.DisableChildrenDYN
com.sap.portal.iview.DisableChildrenRL
com.sap.portal.iview.DisableChildrenTC
com.sap.portal.iview.DragAndRelate false
com.sap.portal.iview.ExpansionMode Open
com.sap.portal.iview.HasContentPadding true
com.sap.portal.iview.Height 80
com.sap.portal.iview.HeightScale PIXELS
com.sap.portal.iview.HeightType FIXED
com.sap.portal.iview.HelpURL
com.sap.portal.iview.IsTemplate false
com.sap.portal.iview.MainObject
com.sap.portal.iview.MaxAutoHeight 1000
com.sap.portal.iview.MinAutoHeight 0
com.sap.portal.iview.SMiViewURL com.sap.portal.epsolman.EPSolman
com.sap.portal.iview.ShowDetails true
com.sap.portal.iview.ShowExpand true
com.sap.portal.iview.ShowHelp false
com.sap.portal.iview.ShowMinimize true
com.sap.portal.iview.ShowPersonalize true
com.sap.portal.iview.ShowRefresh false
com.sap.portal.iview.ShowRemove true
com.sap.portal.iview.ShowSMiView false
com.sap.portal.iview.ShowTitle true
com.sap.portal.iview.ShowTray true
com.sap.portal.iview.TitleURL
com.sap.portal.iview.TrayType PLAIN
com.sap.portal.iview.Width 400
com.sap.portal.iview.WidthScale PIXELS
com.sap.portal.iview.WidthType FIXED
com.sap.portal.iview.family
com.sap.portal.navigation.DragRelate 0
com.sap.portal.navigation.ExtWindowHeight 710
com.sap.portal.navigation.ExtWindowWidth 1014
com.sap.portal.navigation.Invisible false
com.sap.portal.navigation.JScript
com.sap.portal.navigation.MergeId
com.sap.portal.navigation.MergePriority 100.0
com.sap.portal.navigation.Mergible true
com.sap.portal.navigation.NavigationHierarchyMetadata Cacheable
com.sap.portal.navigation.Priority 100.0
com.sap.portal.navigation.QuickLink
com.sap.portal.navigation.ShowAddToFavorites true
com.sap.portal.navigation.ShowType 1
com.sap.portal.navigation.WindowName
com.sap.portal.navigation.view
com.sap.portal.pcd.gl.Collection IP_PTL_INITIAL_CONTENT
com.sap.portal.pcd.gl.CreatedAt Sat Sep 22 11:32:17 EDT 2007
com.sap.portal.pcd.gl.CreatedBy Administrator
com.sap.portal.pcd.gl.DeltaLinkState -1
com.sap.portal.pcd.gl.Domain EP
com.sap.portal.pcd.gl.LastChangedAt Fri Sep 12 19:24:19 EDT 2008
com.sap.portal.pcd.gl.LastChangedBy ksingh
com.sap.portal.pcd.gl.ObjectClass com.sapportals.portal.iview
com.sap.portal.pcd.gl.OriginalCountry
com.sap.portal.pcd.gl.OriginalLanguage en
com.sap.portal.pcd.gl.Responsible Administrator
com.sap.portal.pcd.gl.TransportDependencies pcd:com.sap.portal.system/archives/com.sap.portal.appintegrator.sap.par
com.sap.portal.pcd.role.EntryPoint false
com.sap.portal.pcm.Description VRB_com.sap.portal.pcm.Description
com.sap.portal.pcm.Title myTime
com.sap.portal.pcm.admin.Capabilities com.sap.portal.capability.delete,com.sap.portal.capability.link,com.sap.portal.capability.copy,com.sap.portal.capability.edit,com.sap.portal.capability.cut,com.sap.portal.capability.transportable,com.sap.portal.capability.launch,com.sap.portal.capability.editpermissions
com.sap.portal.pcm.admin.UseDefaultCapabilities true
com.sap.portal.private.iview.PropertiesUrl pcd:com.sap.portal.system/applications/com.sap.portal.appintegrator.sap/components/Transaction
com.sap.portal.reserved.iview.ButtonsURL
com.sap.portal.reserved.iview.EditorURL pcd:portal_content/com.sap.pct/admin.templates/iviews/editors/com.sap.portal.pcmEditor
com.sap.portal.reserved.iview.IconName
com.sap.portal.reserved.iview.IsolationMode URL
com.sap.portal.reserved.iview.NavPanelStatus Automatic
com.sap.portal.reserved.iview.ParamList *
com.sap.portal.reserved.iview.WizardURL com.sap.portal.appintegrator.iViewWizard
com.sap.portal.workDistributionTopic
com.sapportals.portal.navigation.FolderEntry false
com.sapportals.portal.navigation.Pictogram
com.sapportals.portal.navigation.WinFeatures resizable=yes,toolbar=no,menubar=no
propertyIdMapping
com.sap.portal.appintegrator.sap.Transaction::Transaction/WebGuiSSOITS640Layer
MandatoryParameters
System SAP_LocalSystem KPMGSBBW_alis KPMGVM005_ALIAS SAP_BW SAP_CRM SAP_ECC SAP_RPM SAP_WEBDYNPRO_CRM_ALIAS TestECC_Alias Test_CRM_Alias WebEx XBICLNT100 XCRCLNT100 XECCLNT100
Is it required to add ECC certificate to Portal sytem?
we have created the same user id in both the sytems.
Please let me know what could be the error.
Regards

Vijay,
Please follow these steps and lemme know what you observe.
Go to system administration->support->sap application-> under test and configuration tools choose sap transaction
under the mandatory fields choose the system that you have created, choose a tcode (se16) and choose sap gui for windows and click go.
If you are able to logon to your ecc system, your sso works!
P.S Make sure the user name with which you are testing this, exists in the backend as well.
Good luck
Cheers,
Sandeep Tudumu

Error logging for Integrated Planning

Can I turn on error logging for Integrated Planning. Users get errors and forget to screenshot it to me, so I have no way of finding out what their error was unless I get them to duplicate it. It would be nice to look up a log of errors by user. Do they have something like that in Integrated Planning?
Thanks!

Hi Dustin,
Few comments :
1. UPDATE TASK means that a new background task is create and the function is performed asyncronisly ,with that the user will not wait for the update of the DB to finish ,you can read in SAP help about CALL FUNCTION IN UPDATE
2. Be aware that the table that you create will be extremely large in no time ,you will have to delete data on a regular basis
3. The same concept of the thread can be applied to function module 'RRMS_MESSAGE_HANDLING' this function module is responsible of messaging in BEX 'some times IP related messages are invoked from it.
Regards,
Eitan.

Errors with Integrated Planning authorizations

Dear experts,
We are working with Integration Planning, and when we try to create or
modify whatever object (by the modeler or the wizard) we receive an error message like this:
"You have no authorization for Multiprovider XXXX"
Not only Multiprovider, but InfoCube....whatever object.
The curious thing is that we have with the user we are working a SAP ALL.
With the T-CODE bps0 we can do everything, but with T-CODE rsplan is
impossible.
Weve checked in the T-CODE su53 and everything is OK.
Weve checked in the T-CODE rsecadmin and nothing there.
Weve checked as well in the T-CODE st01, followed the actions with the
trace and all the return codes are 0.
Does anyone know what happens?
Thanks in advance
Cecilia

Hello Cecilia,
if you keep a carott in front of a donkey he will run faster... this is the same what I mean if I talked from experts: Men like to be the hero and instead of carott you need to need to laud him as an expert, he will reply faster
Lets come back to authorization: I am not sure whether RSECADMIN is a newer version of RSSM. Reason: In RSSM you can activate authorization check for a cube or MP but in RSECADMIN you administrate authorization for an user.
I am not sure, but I think that your problem is related to this issue. If not, there are very strange problems with the web authroization, its true: What we have done is to copy an exisiting BW user and assign him the same authorization like in web. Reason: To create a new user in the web does not work in all cases. We had very much problems with SP7, since we have SP10 we dont have those problems.
regards
Eckhard

No auth error while executing BI integrated planning Query

Hi to all,
I have created integrated planning Query in Bex Query designer.
But while executing BI integrated planning query in portal, its giving errror.
1.     No authorization for query "IP"
2.     You are not authorized to edit this aggregation level CUBE_IP
3.     Cannot load query u201CIPu201D (data provider u201CDP_1u201D: No authorization for requested service)
Can any one tell me the solution for that.
Regards
Pavneet Rana

Hi.
For to check the authorization errors, you have to use the transaction ST01 (System Trace) The Steps are:
ST01 --> Trace ON --> In Trace Components, active "Authorization Check" --> Execute the query with the user --> Trace Off > Analysis> In User Name, put the user that execute the query --> F8
You can see the authorization errors in Dark Green.
Regards !!!

BI Integrated Planning - Formula - Formula error: } expected

Hi
BI Integrated Planning -
While defining the Formula (FOX), we are getting the below error
'Formula error: } expected'
Kindly inform if any one has faced the similar problem / any solution
Thanks in advance
G K Mohata

Giriraj,
This seems like a syntax error in your formula. It must be specifying a line number where it is finding the error. Please check that or maybe the previous line, for any data processing statement where you missed a }. Could be that you missed in a statement, one or more characteristics. If you cant find it, please paste your whole code here along with complete error message.
Hope this helps.

Date entry error in BI Integrated planning 2004s

Hello,
I am trying to fill a date field in BI Integrated Planning via mannual planning. The ratio was created as Dec type. When I introduce for example the value 01.01.2006 or 01/01/2006 and save the data, the new value is not saved in the infocube, so I suppose there is some kind of format issue. The same value in the former layout in BPS Web Interface was introduced as 01.01.2006.
Morever, if I introduce the value as 20060101 or 01012006, BEx is close immediatly with a fatal error message.
Other ratios in the layout like %of growth are save properly in the infocube.
I have installed SapGui NW 2004s SR1 Presentation - 6.40 Compilation 5 and SAP Netweaver 2004s BI AddOn Patch Level 801 (Bw700SP08P_801-10001615.exe).
Thank you for your help.
Regards.
Message was edited by: Ignacio Arroyo
Message was edited by: Ignacio Arroyo

Thank you Leon,
In fact, I had already checked that the value was represented in BEx as 01.01.2005, after introducing the value from former Web Interface layout. However if I change the value to 01.02.2005 and save data, the value return to 01.01.2005. I don't think it is a definition issue, since other ratios in the same layout are defined with the same restrictions and are saved OK.
Moreover If I introduced 01012005 BEx is closed with "Business Explorer critical program error occurred. The program has to close. Please refer to the trace for further information" and of course that is not a good point for our final users ......
The following lines appear in the BEx trace log file:
+RSR_XLS_RFCtrc: 7.1875
RSR_XLS_RFCtrc: 1.09375
BExApplication.GetTemplate: DecimalSep = .
RSR_XLS_RFCtrc: 14.0625
BExApplication.GetTemplate: Instantiating Serializer: 0
BExApplication.GetTemplate: DecimalSep = .
RSR_XLS_RFCtrc: 1.09375
BExApplication.GetTemplate: Instantiating Serializer: 0
BExGrid.CreateFromDeSer: Deserializing
BExGrid.CreateFromDeSer: DecimalSep = .
RenderingGridCells: 907
RenderedCells: 907
BExExcelApplication.BeforeRender: Trying to set Display Alerts to false
BExExcelApplication.SetNameAddress: ComException thrown El servidor lanzó una excepción. (Exception from HRESULT: 0x80010105 (RPC_E_SERVERFAULT))
RenderValues: 0.15625
RenderFormats: 0.46875
RenderIndent: 0.15616
RenderBuildInputRectangles1: 0
RenderBuildInputRectangles2: 0
RenderBorders: 0.156288
Rendering Shape: 1
Rendering Shape: 2
Rendering Shape: 3
Rendering Shape: 4
Rendering Shape: 5
Rendering Shape: 6
Rendering Shape: 7
Rendering Shape: 8
Rendering Shape: 9
Rendering Shape: 10
RenderHierarchyShapes: 0
BExExcelApplication.SetNameAddress: ComException thrown El servidor lanzó una excepción. (Exception from HRESULT: 0x80010105 (RPC_E_SERVERFAULT))
RenderData: 10.78125Count:
BExExcelApplication.SetNameAddress: ComException thrown El servidor lanzó una excepción. (Exception from HRESULT: 0x80010105 (RPC_E_SERVERFAULT))
BExItemGrid.ProtectSheet: Protect Sheet
BExExcelApplication - OpenQueryThreaded -
Windows visible is set to true
RSR_XLS_RFCtrc: 0.15625
BExConnect.Dispose: Disposing BExConnect+
Thank you for your help
Message was edited by: Ignacio Arroyo
++
Message was edited by: Ignacio Arroyo

Data Manager - SAP NW Conn. - Error: "Fail to retrieve the logon ticket"

Hi,
I am using Xcelsius 2008 SP2 and I am testing the new way to connect to SAP BW. When Browsing for a BW Query, I get the error "Fail to retrieve the logon ticket". When using QaaWS, everything works fine. Does anybody know this error?
Greetings,
Simon.

Hi Deepu,
thanks for the feedback.
Yes we have Xcelsius SP2, I checked version and it is 5.2.0.0
How can I check whether it is applied to both ABAP and JAVA steaks?
Today our basis team confirmed that they have implemented EHP1 SPS5. In BI system, if I go to "System" --> "Status" --> "SAP_BW" component has SP "SAPKW70105".
Also I installed diagnosis tool in portal as you advised and all lights are green.
Any other proposal?

Unit Cost Planning (UCP) - Plan Integrated Object error.

Dear All,
Presently I am using Network Planning and have Plan Integrated Object Active. So that system does not allow to use UCP and gives following error.
Error: Unit costing is not allowed in plan integrated objects
My question is how can system will allow to use unit costing in this setting and what will be effect after removing plan integrated object.
Your inputs are appreaciated in advance.
Regards.

Hello Pal,
Thanks for your kind and immediate response. If i remove the integrated planning ticked then my planning will be only for the sake of statistical purpose right and from that i cannot trigger any quotation.
Could you please guide me on this
Regards
Praveen B M

Integrated planning-config guide for a scenario

hi,
Aappreciate if sombody could help me out witha configuration guide for integrated planning for scenarios of cost/profit planning etc...i tried best practice side but the docs were more of BPS
email id:[email protected]
regards
savi

This could be useful.
http://help.sap.com/bp_biv335/BI_EN/html/BW/SalesPlan.htm

Windows Integrated Authentication & SAP Logon tickets

1) We have configured windows authentication and the IISproxy on a SPS frontend server to our SAP portal environment.
2)We have configured SAP logon tickets on the SAP portal (running on hp-ux).
3) Both the IIS server and the sap portal server exist on the same domain inside our firewall (iis_server.lsv.internal_company_name.com and sap_portal_server.lsv.internal_company_name.com)
4) A virtual URL has been created on the IIS server, http://sap_portal.external_company_name.com, using a domain alias.
5) When an authenticated user is passed from the IIS server to the SAP portal the SAP logon ticket that is created is for external_company_name.com alias rather than lsv.internal_company_name.com. This logon ticket is not accepted by any of the backend SAP systems that have been configured to except logon tickets because they all exist in the lsv.internal_company_name.com domain.
6) The portal security guide says:
"The Portal Server issues a SAP logon ticket for the Internet domain or a sub-domain of the
Portal Server only."
Given this scenario, is there some configuration that can be added to allow the use of this alias or is there a bug in the SAP portal code that needs to be addressed?

Hi,
You cannot use the external alias. You can however set SSO on the portal not to look to the total url. For example it would work if you use:
sap_portal_server.lsv.internal.company_name.com
and
sap_portal.external.company_name.com
The prerequisite here is that at least the domain name should be the same i.e. the last two parts.
Greetings,
Vincent

Problems with BI Integrated Planning

Hello, everybody,
We installed BI 7.0 and want to use BI Integrated Planning, but then i connect to Modeler Wizard i get error No JCO Connection. Our BASIS Team can't find an issue.
Maybe there is some kind of configuration in BI side, not just in BASIS?
Could you give us some advice?
Thanks in advance.
Best Regards,
Arunas Stonys

Joanne,
Are you still having issues with BI-IP? I have been troubleshooting with the basis folks in getting BI-IP up on a new system over the last few day to a week and have now gone through the process myself whereas before I had been given a system already set up. I have enclosed some troubleshooting feedback with my counterpart in getting the system up.
What type of issue are you having?
Can the basis folks start the planning modeler or planning wizard in RSPLAN even if you can't?
1. The note mentioned above 919850 and the help documentation in SPRO under
SAP NETWEAVER->Business Intelligence->BI Integrated Planning
are very helpful. They have to set the following Jco Destinations in Web Dynpro Content Administrator:
BI_MODELDATA
BI_METADATA
WD_ALV_MODELDATA_DEST
WD_ALV_METADATA_DEST
And the problem was the connection to the message server. It was not possible to connect without having a Logon group assigned. This had to be done in WI4 ABAP as well as in the SLD for this system. After that assignment connection was no problem.
2. make sure you have the portal ips in your host file.
3. have they have created an account for you in client 001 of the NW04S?
4. Have they created a portal id for you and assign the portal role com.sap.ip.bi.business_planning_showcase to you?
5. have they configured the setting for starting the planning modeler (also under SPRO)..
Hope this helps. If you have more specific questions, feel free to e-mail me directly.
Mary

SSO to non SAP Application using SAP Logon Ticket

Hi Experts,
I Have EP 7 SP 15 using SPNego Wizard to SSO with Active Directory and SSO between EP and ECC using SAP Certificates.
Now I have a demand to SSO some JAVA based applications (non SAP) to my portal using the SAP Logon Ticket.
I Have followed some blogs that directed me to use SAPSSOEXT (some libs) to read the MYSAPSSO2 cookie. The problem is that I didn't found this cookie, I even executed the command javascript:document to look for this cookie but the browser just show me the JSESSIONID info.
Does anybody knows where I can find this cookie or if there's a better way to set up this SSO? It´s necessary to say that I cannot SSO these application to the kerberos protocol because some security reasons on my company.
Thanks
Armando

Hi,
I dont have much info related but i can giv u hint
refer OSS Notes 442401 and 723896.
When using SAP logon tickets for non-SAP applications, two different implementation options are available. The difference lies in where the ticket verification takes place.
In the first case, the SAP logon ticket is submitted to the web server filter located on the web server. The web server filter verifies the portal serveru2019s public key
certificate using its local Personal Security Environment (PSE) and then populates the HTTP header field with the user ID for SSO to the non-sap web application.
In the second case, the SAP logon ticket is sent to the non-SAP application, which then verifies it using the ticket verification DLL and submits the user ID to the application for SSO.
You can refer following link :-
http://help.sap.com/saphelp_nw70/helpdata/EN/89/6eb8deaf2f11d5993700508b6b8b11/frameset.htm
user authentication and SSO
http://help.sap.com/saphelp_nw70/helpdata/EN/8f/ae29411ab3db2be10000000a1550b0/frameset.htm
Authentication Using a Directory with SSO Integration Using Logon Tickets
http://help.sap.com/saphelp_nw70/helpdata/EN/f8/3b514ca29011d5bdeb006094191908/frameset.htm
SSO
SAP Logon Ticket-based Single Sign-On
http://help.sap.com/saphelp_nwce10/helpdata/en/45/b6af743753003ae10000000a11466f/frameset.htm

SSO logon tickets not working in two different OS

HI All,
We have sucessfully implemented SSO logon tickets concept to access a j2ee application through portal on windows OS.
We could able to do the samething on two j2ee instances installed on two different machines on same domain. I mean, deploying our application in one j2ee instance and accessing the application thru portal of another j2ee instance thru SSO logon ticket by adding some configuration steps in Visual administrator given in help.sap.com. This also we did in same OS windows.
But now the problem is, when we try to implement the above scenario in two different OS, say application is deployed on HPUX machine, and accessing that application through Portal from Solaris machine, SSO logontickets is failing. Means we couldnt able to access the application. Both the OS are in same domain only.
What extra configuration steps need to be done in VA, to get work with two different OS?
Please share ur ideas.
Regards,
Satish.

Hi..
I guess probabaly the internet explorer doesnot accept the sso ticket.
What you can probably check is that the compatability of explorer for the solaris and HP UX os with Windows OS.
Also,please check whether the SSO ticket is getting populated and What error are you getting exactly when the SSO fails and that will give some idea to proceed further
deploying our application in one j2ee instance and accessing the application thru portal of another j2ee instance[/u
What the above mean...how are you deploying ?? what tool ?? which J2EE instance out of the two ??
Thanks
Gopal

BI Integrated Planning - Error config logon tickets

Similar Messages

Maybe you are looking for