Error Runging the Transaction iview using SSO logon ticket

Hi I am getting the follwoing error  in log file. when i am running the Transaction iview using SAP Loggon ticket.
#1.5 #005056A33F2000840000000500000600000456BC1060683F#1221265635404#com.sap.security.core.umap.imp.UserMappingDataImp#sap.com/irj#com.sap.security.core.umap.imp.UserMappingDataImp.getAuthenticationTicket()#Guest#0##n/a##28a92320812111ddb972005056a33f20#Thread[UWL Pooled Thread:2,5,SAPEngine_Application_Thread[impl:3]_Group]##0#0#Error#1#/System/Security/Usermanagement#Java###The attribute "" of the backend system with alias "" has the invalid value "".
Cannot generate an SAP authentication assertion ticket for user and the specified backend system.
Please adjust the value of the system attribute. Supported values are "" and "".#6#AuthenticationTicketType#"KPMGVM005_ALIAS"##"Stokkeland, Pauline" (unique ID: "USER.PRIVATE_DATASOURCE.un:P00024384")#SAP Logon Ticket#SAP Assertion Ticket#
I have imported the .der file of the portal in to the SAP ECC sytem.using STRUSTSSO2
Created the profile parameters using rz10 trnsaction.
login/create_sso2_ticket
login/accept_sso2_ticket
restarted the ECC system.
Created the system object using the follwoing parameters
WAS
Connector
Usermanagement
Under usermanagement
Authentication Ticket Type - SAP Logon TicketSAP 
Logon Method -SAPLOGONTICKET 
User Mapping Fields  :<not selected>
User Mapping Type    :<not selected>
when i test the sytem object under connection test:showing the following error.
Test Details:
The test consists of the following steps:
1. Retrieve the default alias of the system
2. Check the connection to the backend application using the connector defined in this system object
  Results
Retrieval of default alias successful
Connection failed. Make sure that Single Sign-On is configured correctly
But WAS, ITS, Connector are successfull. but above message is showing.
what could be the problem.
When i run one transaction iview with this system it is showing following error.
com.sap.portal.appintegrator.sap.Transaction::Transaction/WebGuiSSOITS640Layer
Parameter Dump
$DebugAction  
$TimeStamp  1221268987126
ALLOW_BROWSER  Yes
Alias  
ApplicationParameter  
ApplicationVariants  GuiType
AuthScheme  default
Authentication  ******
AutoStart  false
CachingLevel  
ClassName  com.sapportals.portal.appintegrator.layer.SingleSignOnLayer
ClientWindowID  
CodeLink  com.sap.portal.appintegrator.sap.Transaction
CommandField  YTIME
CurrentWindowId  WID1221260007272
CustomerExit.ParameterProvider  
DR.TargetIDPropertyName  TCode
DebugMode  false
DynamicParameter  
DynproFields  
ExecutionLocation  KPMGVM005_ALIAS
ExportParameters  Authentication, LogonUser, RequestMethod
FederationAlias  
ForcedRequestLanguage  
ForwardParameters  
ForwardParameters.Always  sap-config-mode
ForwardParameters.Excluded  
ForwardParameters.Forbidden  ClientWindowID, Command, DebugSet, DynamicParameter, Embedded, InitialNodeFirstLevel, SerAttrKeyString, SerKeyString, SerPropString, SessionKeysAvailable, iview_id, iview_mode, windowId, sap-pp-producerid, sap-pp-consumerBaseURL, sap-pp-returnToConsumer, login_submit, j_user, j_password, j_authscheme, uidPasswordLogon, MappedUser, MappedPassword
GUSID  
GuiType  WebGui
GuiType.default  WebGui
ITSVersion  640
JREPluginDownloadLocation  
JREPluginMimeType  application/x-java-applet;version=1.4.1_02
JavaGuiCodeBase  
JavaGuiTraceFile  
JavaGuiTraceKey  
LAF  
LoadingCacheKey  <Portal.Version><LAF.Theme>
LogonMethod  SAPLOGONTICKET
MandatoryParameters  System
NavMode  1
NavigationTarget  navurl://21635c17e11df05c58e1c07deaf5bed1
NextLayer  Transaction/WebGuiESIDLayer
OkCode  
OkCodeField  
OptionalParameters  
ParameterTemplate  <ApplicationParameter[PROCESS_RECURSIVE]>;<ForwardParameters[QUERYSTRING]>;<DynamicParameter[PROCESS_RECURSIVE]>;
Portal  
ProducerLocation  Remote
REFRESH_CONTENT  -1
ReuseWinguiConnection  false
RoundtripURL  
SSO2Template  
SessionManagementVersion  
SupportedUserAgents  (MSIE, >=5.5, *) (Netscape, *, ) (Mozilla,,*)
SupportsUnicodeCodePages  false
System  KPMGVM005_ALIAS
System.type  lookup:com.sapportals.portal.appintegrator.lookup.SystemLookup
TCode  YTIME
Technique  Standard
TopLayer  Transaction/DragAndRelateLayer
Transactions_Require_SSF  RRMX,RRMXP
URL  
UnsupportedUserAgents  
UseFrog  true
UseSPO1  false
UserMappingTemplate  sap-user=<MappedUser>&sap-password=<MappedPassword>
ValidityPeriod  -1
Wizard.ApplicationVariantPane.Description  
Wizard.ApplicationVariantPane.Title  
Wizard.MandatoryParameters  System, TCode, GuiType
Wizard.OptionalParameters  ApplicationParameter, UseFrog, Technique
Wizard.ParameterPane.Description  
Wizard.ParameterPane.Title  
X509Template  
com.sap.application_integration.ConfigurationServiceID  Transaction_Configuration
com.sap.portal.ComponentType  com.sapportals.portal.iview
com.sap.portal.activityreport.MonitorHits  true
com.sap.portal.admin.propertyeditor.categoryName  
com.sap.portal.iview.AccessibilitySupport  
com.sap.portal.iview.Availability  VISIBLE
com.sap.portal.iview.DisableChildrenDYN  
com.sap.portal.iview.DisableChildrenRL  
com.sap.portal.iview.DisableChildrenTC  
com.sap.portal.iview.DragAndRelate  false
com.sap.portal.iview.ExpansionMode  Open
com.sap.portal.iview.HasContentPadding  true
com.sap.portal.iview.Height  80
com.sap.portal.iview.HeightScale  PIXELS
com.sap.portal.iview.HeightType  FIXED
com.sap.portal.iview.HelpURL  
com.sap.portal.iview.IsTemplate  false
com.sap.portal.iview.MainObject  
com.sap.portal.iview.MaxAutoHeight  1000
com.sap.portal.iview.MinAutoHeight  0
com.sap.portal.iview.SMiViewURL  com.sap.portal.epsolman.EPSolman
com.sap.portal.iview.ShowDetails  true
com.sap.portal.iview.ShowExpand  true
com.sap.portal.iview.ShowHelp  false
com.sap.portal.iview.ShowMinimize  true
com.sap.portal.iview.ShowPersonalize  true
com.sap.portal.iview.ShowRefresh  false
com.sap.portal.iview.ShowRemove  true
com.sap.portal.iview.ShowSMiView  false
com.sap.portal.iview.ShowTitle  true
com.sap.portal.iview.ShowTray  true
com.sap.portal.iview.TitleURL  
com.sap.portal.iview.TrayType  PLAIN
com.sap.portal.iview.Width  400
com.sap.portal.iview.WidthScale  PIXELS
com.sap.portal.iview.WidthType  FIXED
com.sap.portal.iview.family  
com.sap.portal.navigation.DragRelate  0
com.sap.portal.navigation.ExtWindowHeight  710
com.sap.portal.navigation.ExtWindowWidth  1014
com.sap.portal.navigation.Invisible  false
com.sap.portal.navigation.JScript  
com.sap.portal.navigation.MergeId  
com.sap.portal.navigation.MergePriority  100.0
com.sap.portal.navigation.Mergible  true
com.sap.portal.navigation.NavigationHierarchyMetadata  Cacheable
com.sap.portal.navigation.Priority  100.0
com.sap.portal.navigation.QuickLink  
com.sap.portal.navigation.ShowAddToFavorites  true
com.sap.portal.navigation.ShowType  1
com.sap.portal.navigation.WindowName  
com.sap.portal.navigation.view  
com.sap.portal.pcd.gl.Collection  IP_PTL_INITIAL_CONTENT
com.sap.portal.pcd.gl.CreatedAt  Sat Sep 22 11:32:17 EDT 2007
com.sap.portal.pcd.gl.CreatedBy  Administrator
com.sap.portal.pcd.gl.DeltaLinkState  -1
com.sap.portal.pcd.gl.Domain  EP
com.sap.portal.pcd.gl.LastChangedAt  Fri Sep 12 19:24:19 EDT 2008
com.sap.portal.pcd.gl.LastChangedBy  ksingh
com.sap.portal.pcd.gl.ObjectClass  com.sapportals.portal.iview
com.sap.portal.pcd.gl.OriginalCountry  
com.sap.portal.pcd.gl.OriginalLanguage  en
com.sap.portal.pcd.gl.Responsible  Administrator
com.sap.portal.pcd.gl.TransportDependencies  pcd:com.sap.portal.system/archives/com.sap.portal.appintegrator.sap.par
com.sap.portal.pcd.role.EntryPoint  false
com.sap.portal.pcm.Description  VRB_com.sap.portal.pcm.Description
com.sap.portal.pcm.Title  myTime
com.sap.portal.pcm.admin.Capabilities  com.sap.portal.capability.delete,com.sap.portal.capability.link,com.sap.portal.capability.copy,com.sap.portal.capability.edit,com.sap.portal.capability.cut,com.sap.portal.capability.transportable,com.sap.portal.capability.launch,com.sap.portal.capability.editpermissions
com.sap.portal.pcm.admin.UseDefaultCapabilities  true
com.sap.portal.private.iview.PropertiesUrl  pcd:com.sap.portal.system/applications/com.sap.portal.appintegrator.sap/components/Transaction
com.sap.portal.reserved.iview.ButtonsURL  
com.sap.portal.reserved.iview.EditorURL  pcd:portal_content/com.sap.pct/admin.templates/iviews/editors/com.sap.portal.pcmEditor
com.sap.portal.reserved.iview.IconName  
com.sap.portal.reserved.iview.IsolationMode  URL
com.sap.portal.reserved.iview.NavPanelStatus  Automatic
com.sap.portal.reserved.iview.ParamList  *
com.sap.portal.reserved.iview.WizardURL  com.sap.portal.appintegrator.iViewWizard
com.sap.portal.workDistributionTopic  
com.sapportals.portal.navigation.FolderEntry  false
com.sapportals.portal.navigation.Pictogram  
com.sapportals.portal.navigation.WinFeatures  resizable=yes,toolbar=no,menubar=no
propertyIdMapping  
com.sap.portal.appintegrator.sap.Transaction::Transaction/WebGuiSSOITS640Layer
MandatoryParameters
System   SAP_LocalSystem KPMGSBBW_alis KPMGVM005_ALIAS SAP_BW SAP_CRM SAP_ECC SAP_RPM SAP_WEBDYNPRO_CRM_ALIAS TestECC_Alias Test_CRM_Alias WebEx XBICLNT100 XCRCLNT100 XECCLNT100 
Is it required to add  ECC certificate to Portal sytem?
we have created the same user id in both the sytems.
Please let me know what could be the error.
Regards

Vijay,
Please follow these steps and lemme know what you observe.
Go to system administration->support->sap application-> under test and configuration tools choose sap transaction
under the mandatory fields choose the system that you have created, choose a tcode (se16) and choose sap gui for windows and click go.
If you are able to logon to your ecc system, your sso works!
P.S Make sure the user name with which you are testing this, exists in the backend as well.
Good luck
Cheers,
Sandeep Tudumu

Similar Messages

  • Creating destinations in CAF using SSO Logon Ticket/Assertion Ticket

    Hi Experts,
    Am using ECC 6.0 & CE 7.1 EP06
    I have a Composite Application(CAF, using Java) which consumes BAPIs and Enterprise Service.
    For connecting the CAF(Java) layer to communicate with ECC I need to perform mapping between the destinations of the BAPI(RFC destination) and the Web Service destination.
    We have created the Logon Ticket and is working fine, this we can say so because there is a SAP Transaction iView and is running fine. The only problem occurs for RFC and destinations of type 'wsdl'(created for Enterprise Service)
    For authentication, in the case of
    RFC destination if I use Logon ticket I get the error " Error while creating assertion ticket on demand. No logged in user found."
    but when I used the assertion ticket it works fine.
    But for the Web Service Destination, when I try using the Logon Ticket I get the error
    " Error while creating assertion ticket on demand. No logged in user found. "
    and when using the Assertion Ticket I get this error
    " Properties not set:
    NS: http://www.sap.com/webas/630/soap/features/transportguarantee/ Name: IncludeTimestamp "
    Please help me in this issue. Any information is appreciated.
    Thanks
    --- Brian

    Do not cross post in the different forums.

  • HTTP Error 405 - The HTTP verb used to access this page is not .....

    Goodmorning,
    I've installed BO XI R3 SP4 on a 2k3-server with IIS 6.0. I wanted to configurate the SSO. After changing the web.config file and restart of the IIS , I get the following error :
    HTTP Error 405 - The HTTP verb used to access this page is not allowed.
    Internet Information Services (IIS)
    The frame where you normally are using for authentication has this error, the frame around is normal.
    Hope someony can help, thx in advance

    I can't fin a upload button , so the file in plain text gepasted
    Hope it is readable :
    #Software: Microsoft Internet Information Services 6.0
    #Version: 1.0
    #Date: 2012-02-29 12:19:21
    #Fields: date time s-sitename s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status
    2012-02-29 12:19:21 W3SVC1 10.13.0.119 GET /InfoViewApp/logon.aspx - 80 - 10.13.0.119 Mozilla/4.0(compatible;MSIE7.0;WindowsNT5.2;Trident/4.0;.NETCLR1.1.4322;.NETCLR2.0.50727;.NETCLR3.0.4506.2152;.NETCLR+3.5.30729) 200 0 0
    2012-02-29 12:19:21 W3SVC1 10.13.0.119 GET /InfoViewApp/res/schema.blue/default.css.ashx - 80 - 10.13.0.119 Mozilla/4.0(compatible;MSIE7.0;WindowsNT5.2;Trident/4.0;.NETCLR1.1.4322;.NETCLR2.0.50727;.NETCLR3.0.4506.2152;.NETCLR+3.5.30729) 200 0 0
    2012-02-29 12:19:21 W3SVC1 10.13.0.119 GET /InfoViewApp/js/utils.js.ashx - 80 - 10.13.0.119 Mozilla/4.0(compatible;MSIE7.0;WindowsNT5.2;Trident/4.0;.NETCLR1.1.4322;.NETCLR2.0.50727;.NETCLR3.0.4506.2152;.NETCLR+3.5.30729) 200 0 0
    2012-02-29 12:19:21 W3SVC1 10.13.0.119 GET /InfoViewApp/js/helpSystem.js.ashx - 80 - 10.13.0.119 Mozilla/4.0(compatible;MSIE7.0;WindowsNT5.2;Trident/4.0;.NETCLR1.1.4322;.NETCLR2.0.50727;.NETCLR3.0.4506.2152;.NETCLR+3.5.30729) 200 0 0
    2012-02-29 12:19:21 W3SVC1 10.13.0.119 GET /InfoViewApp/common/appService.aspx service=skinning&resource=img&img=img.banner.logon.pattern 80 - 10.13.0.119 Mozilla/4.0(compatible;MSIE7.0;WindowsNT5.2;Trident/4.0;.NETCLR1.1.4322;.NETCLR2.0.50727;.NETCLR3.0.4506.2152;.NETCLR+3.5.30729) 200 0 0
    2012-02-29 12:19:21 W3SVC1 10.13.0.119 GET /InfoViewApp/listing/blank.aspx - 80 - 10.13.0.119 Mozilla/4.0(compatible;MSIE7.0;WindowsNT5.2;Trident/4.0;.NETCLR1.1.4322;.NETCLR2.0.50727;.NETCLR3.0.4506.2152;.NETCLR+3.5.30729) 200 0 0
    2012-02-29 12:19:21 W3SVC1 10.13.0.119 GET /InfoViewApp/common/appService.aspx service=skinning&resource=img&img=img.banner.logo 80 - 10.13.0.119 Mozilla/4.0(compatible;MSIE7.0;WindowsNT5.2;Trident/4.0;.NETCLR1.1.4322;.NETCLR2.0.50727;.NETCLR3.0.4506.2152;.NETCLR+3.5.30729) 200 0 0
    2012-02-29 12:19:21 W3SVC1 10.13.0.119 GET /InfoViewApp/logon/logon.aspx parameter=logonService 80 - 10.13.0.119 Mozilla/4.0(compatible;MSIE7.0;WindowsNT5.2;Trident/4.0;.NETCLR1.1.4322;.NETCLR2.0.50727;.NETCLR3.0.4506.2152;.NETCLR+3.5.30729) 200 0 0
    2012-02-29 12:19:21 W3SVC1 10.13.0.119 POST /PlatformServices/Shared/Logon/Logon.aspx - 80 - 10.13.0.119 Mozilla/4.0(compatible;MSIE7.0;WindowsNT5.2;Trident/4.0;.NETCLR1.1.4322;.NETCLR2.0.50727;.NETCLR3.0.4506.2152;.NETCLR+3.5.30729) 405 0 1
    2012-02-29 12:32:05 W3SVC1 127.0.0.1 GET /InfoViewApp/logon.aspx - 80 - 127.0.0.1 Mozilla/4.0(compatible;MSIE8.0;WindowsNT5.2;Trident/4.0;.NETCLR1.1.4322;.NETCLR2.0.50727;.NETCLR3.0.4506.2152;.NETCLR+3.5.30729) 200 0 0
    2012-02-29 12:32:05 W3SVC1 127.0.0.1 GET /InfoViewApp/res/schema.blue/default.css.ashx - 80 - 127.0.0.1 Mozilla/4.0(compatible;MSIE8.0;WindowsNT5.2;Trident/4.0;.NETCLR1.1.4322;.NETCLR2.0.50727;.NETCLR3.0.4506.2152;.NETCLR+3.5.30729) 200 0 0
    2012-02-29 12:32:05 W3SVC1 127.0.0.1 GET /InfoViewApp/js/utils.js.ashx - 80 - 127.0.0.1 Mozilla/4.0(compatible;MSIE8.0;WindowsNT5.2;Trident/4.0;.NETCLR1.1.4322;.NETCLR2.0.50727;.NETCLR3.0.4506.2152;.NETCLR+3.5.30729) 200 0 0
    2012-02-29 12:32:05 W3SVC1 127.0.0.1 GET /InfoViewApp/js/helpSystem.js.ashx - 80 - 127.0.0.1 Mozilla/4.0(compatible;MSIE8.0;WindowsNT5.2;Trident/4.0;.NETCLR1.1.4322;.NETCLR2.0.50727;.NETCLR3.0.4506.2152;.NETCLR+3.5.30729) 200 0 0
    2012-02-29 12:32:05 W3SVC1 127.0.0.1 GET /InfoViewApp/listing/blank.aspx - 80 - 127.0.0.1 Mozilla/4.0(compatible;MSIE8.0;WindowsNT5.2;Trident/4.0;.NETCLR1.1.4322;.NETCLR2.0.50727;.NETCLR3.0.4506.2152;.NETCLR+3.5.30729) 200 0 0
    2012-02-29 12:32:05 W3SVC1 127.0.0.1 GET /InfoViewApp/common/appService.aspx service=skinning&resource=img&img=img.banner.logon.pattern 80 - 127.0.0.1 Mozilla/4.0(compatible;MSIE8.0;WindowsNT5.2;Trident/4.0;.NETCLR1.1.4322;.NETCLR2.0.50727;.NETCLR3.0.4506.2152;.NETCLR+3.5.30729) 200 0 0
    2012-02-29 12:32:05 W3SVC1 127.0.0.1 GET /InfoViewApp/common/appService.aspx service=skinning&resource=img&img=img.banner.logo 80 - 127.0.0.1 Mozilla/4.0(compatible;MSIE8.0;WindowsNT5.2;Trident/4.0;.NETCLR1.1.4322;.NETCLR2.0.50727;.NETCLR3.0.4506.2152;.NETCLR+3.5.30729) 200 0 0
    2012-02-29 12:32:05 W3SVC1 127.0.0.1 GET /InfoViewApp/logon/logon.aspx parameter=logonService 80 - 127.0.0.1 Mozilla/4.0(compatible;MSIE8.0;WindowsNT5.2;Trident/4.0;.NETCLR1.1.4322;.NETCLR2.0.50727;.NETCLR3.0.4506.2152;.NETCLR+3.5.30729) 200 0 0
    2012-02-29 12:32:05 W3SVC1 127.0.0.1 POST /PlatformServices/Shared/Logon/Logon.aspx - 80 - 127.0.0.1 Mozilla/4.0(compatible;MSIE8.0;WindowsNT5.2;Trident/4.0;.NETCLR1.1.4322;.NETCLR2.0.50727;.NETCLR3.0.4506.2152;.NETCLR+3.5.30729) 405 0 1
    2012-02-29 12:33:17 W3SVC1 10.13.0.119 OPTIONS /c$ - 80 - 10.13.8.13 Microsoft-WebDAV-MiniRedir/6.1.7601 200 0 0
    2012-02-29 12:33:17 W3SVC1 10.13.0.119 PROPFIND /c$ - 80 - 10.13.8.13 Microsoft-WebDAV-MiniRedir/6.1.7601 501 0 0
    2012-02-29 12:33:17 W3SVC1 10.13.0.119 PROPFIND /c$ - 80 - 10.13.8.13 Microsoft-WebDAV-MiniRedir/6.1.7601 501 0 0
    2012-02-29 12:33:17 W3SVC1 10.13.0.119 PROPFIND /c$ - 80 - 10.13.8.13 Microsoft-WebDAV-MiniRedir/6.1.7601 501 0 0
    2012-02-29 12:33:17 W3SVC1 10.13.0.119 PROPFIND /c$ - 80 - 10.13.8.13 Microsoft-WebDAV-MiniRedir/6.1.7601 501 0 0
    Thx in advance for your reply

  • SSO to non SAP Application using SAP Logon Ticket

    Hi Experts,
    I Have EP 7 SP 15 using SPNego Wizard to SSO with Active Directory and SSO between EP and ECC using SAP Certificates.
    Now I have a demand to SSO some JAVA based applications (non SAP) to my portal using the SAP Logon Ticket.
    I Have followed some blogs that directed me to use SAPSSOEXT (some libs) to read the MYSAPSSO2 cookie. The problem is that I didn't found this cookie, I even executed the command javascript:document to look for this cookie but the browser just show me the JSESSIONID info.
    Does anybody knows where I can find this cookie or if there's a better way to set up this SSO? It´s necessary to say that I cannot SSO these application to the kerberos protocol because some security reasons on my company.
    Thanks
    Armando

    Hi,
    I dont have much info related but i can giv u hint
    refer OSS Notes 442401 and 723896.
    When using SAP logon tickets for non-SAP applications, two different implementation options are available. The difference lies in where the ticket verification takes place.
    In the first case,  the SAP logon ticket is submitted to the web server filter located on the web server. The web server filter verifies the portal serveru2019s public key
    certificate using its local Personal Security Environment (PSE) and then populates the HTTP header field with the user ID for SSO to the non-sap web application.
    In the second case,  the SAP logon ticket is sent to the non-SAP application, which then verifies it using the ticket verification DLL and submits the user ID to the application for SSO.
    You can refer following link :-
    http://help.sap.com/saphelp_nw70/helpdata/EN/89/6eb8deaf2f11d5993700508b6b8b11/frameset.htm
    user authentication and SSO
    http://help.sap.com/saphelp_nw70/helpdata/EN/8f/ae29411ab3db2be10000000a1550b0/frameset.htm
    Authentication Using a Directory with SSO Integration Using Logon Tickets
    http://help.sap.com/saphelp_nw70/helpdata/EN/f8/3b514ca29011d5bdeb006094191908/frameset.htm
    SSO
    SAP Logon Ticket-based Single Sign-On
    http://help.sap.com/saphelp_nwce10/helpdata/en/45/b6af743753003ae10000000a11466f/frameset.htm

  • SSO to Web Service using SAP Logon Ticket

    Hi,
    I have to do SSO using SAP Logon Ticket between my portal and a Java Web Service that is accessible over internet. I do have the WSDL file of this Web Service.
    I want to know:
    1. What changes are required in Web Service to configure it to read and accept Logon Ticket?
    2. What am I supposed to do at portal end to enable this process?
    Thanks,
    Vivek

    Hi Vivek & Raja,
    > is it that if the WS is a third party WS and running on a Non-SAP J2EE Server,
    > we can't implement SSO from Portal to it using SAP Logon Ticket?
    Right, if you cannot extend it's functionality, how should it do the ticket verification...
    @Raja:
    > SAP Logon Ticket is for authenticating to a SAP system, since yours in a
    > thirdparty ws, there is not need of SAP logonticket.
    On the other hand, that's not true. It is possible as well as often done to verify the SSO ticket on some third party system. This is also supported, for Java as well as for other systems, different articles about such scenarios have been published, also here on SDN.
    Hope it helps
    Detlev
    PS: Vivek, please consider rewarding points for helpful answers on SDN. Thanks in advance!

  • What are the transactions we use day to day in the bw before go live

    what are the transactions we use most in the bw before go live?
    Tcodes for backend objects like creating infocube and so on.
    Tcodes for front end objects like creating queries and so on.
    Thank you.
    York

    Hi Les,
    check previous posting
    Transaction Codes for BW Developers
    SAP BW n R/3 transactions.
    table TSTCT contains all the transaction codes
    RSA6 Maintain DataSources
    RSA7 BW Delta Queue Monitor
    RSA8 DataSource Repository
    RSA9 Transfer Application Components
    RSD1 Characteristic maintenance
    RSD2 Maintenance of key figures
    RSD3 Maintenance of units
    RSD4 Maintenance of time characteristics
    RSDBC DB connect
    RSDDV Maintaining Aggregates
    RSIMPCUR Load Exchange Rates from File
    RSISET Maintain InfoSets
    RSKC Maintaining the Permittd Extra Chars
    RSLGMP Maintain RSLOGSYSMAP
    RSMO Data Load Monitor Start
    RSMON BW Administrator Workbench
    RSOR BW Metadata Repository
    RSORBCT BI Business Content Transfer
    RSORMDR BW Metadata Repository
    RSPC Process Chain Maintenance
    RSPC1 Process Chain Display
    RSPCM Monitor daily process chains
    RSRCACHE OLAP: Cache Monitor
    RSRT Start of the report monitor
    RSRT1 Start of the Report Monitor
    RSRT2 Start of the Report Monitor
    RSRTRACE Set trace configuration
    RSRTRACETEST Trace tool configuration
    RSRV Analysis and Repair of BW Objects
    SE03 Transport Organizer Tools
    SE06 Set Up Transport Organizer
    SE07 CTS Status Display
    SE09 Transport Organizer
    SE10 Transport Organizer
    SE11 ABAP Dictionary
    SE24 Class Builder
    SE80 Object Navigator
    RSCUSTA Maintain BW Settings
    RSCUSTA2 ODS Settings
    RSCUSTV*
    RSSM Authorizations for Reporting
    SM04 User List
    SM12 Display and Delete Locks
    SM21 Online System Log Analysis
    SM37 Overview of job selection
    SM50 Work Process Overview
    SM51 List of SAP Systems
    SM58 Asynchronous RFC Error Log
    SM59 RFC Destinations (Display/Maintain)
    LISTCUBE List viewer for InfoCubes
    LISTSCHEMA Show InfoCube schema
    DB02 Tables and Indexes Monitor
    DB14 Display DBA Operation Logs
    DB16 Display DB Check Results
    DB20 Update DB Statistics
    r/3 (bw related)
    SBIW BIW in IMG for OLTP
    BD61 Activate Change Pointers - Generally
    BDLS Convert Logical System Names
    BF11 Application Areas
    RSA2 OLTP Metadata Repository
    RSA3 Extractor Checker
    RSA5 Install Business Content
    RSA6 Maintain DataSources
    RSA7 BW Delta Queue Monitor
    RSA8 DataSource Repository
    RSA9 Transfer Application Components
    RSO2 Oltp Metadata Repository
    RSO3 Set Up Deltas for Master Data
    LO setup table
    OLI1BW INVCO Stat. Setup: Material Movemts
    OLI2BW INVCO Stat. Setup: Stor. Loc. Stocks
    OLI3BW Reorg.PURCHIS BW Extract Structures
    OLI4BW Reorg. PPIS Extract Structures
    OLI7BW Reorg. of VIS Extr. Struct.: Order
    OLI8BW Reorg. VIS Extr. Str.: Delivery
    OLI9BW Reorg. VIS Extr. Str.: Invoices
    OLIABW Setup: BW agency business
    OLIFBW Reorg. Rep. Manuf. Extr. Structs
    OLIIBW Reorg. of PM Info System for BW
    OLIQBW QM Infosystem Reorganization for BW
    OLISBW Reorg. of CS Info System for BW
    OLIZBW INVCO Setup: Invoice Verification
    Check out AHP's reply specifically in the link:
    urgent
    Assign Points if Helpful *****
    Regards,
    Ravikanth

  • How to implement SSO to non-SAP systems using SAP logon ticket?

    Hello,
    We would like to implement Single Sign On between our SAP Netweaver system and a Siebel which is a non-SAP system using SAP logon tickets.
    Can anyone please give me some leads on this, in particular:
    1. Is there a JAVA API or an SAP plug-in that can be implemented on the Siebel machine to extract the SAP logon ticket?
    2. As the other machine might seat on a complete different domain, is it possible to implement SAP logon ticket without using cookies (perhaps through the HTTP header?
    3. In case you think using SAP logon tickets is not the best solution here I would be happy to hear any other suggestions you might have.
    Roy

    Hi,
    I'm currently using SAML as well. Unfortunately the SAP J2EE cannot work as authority (identity provider) but what you can do is using an open implementation of SAML such as opensso which is an open version of SUNs Java System access manager.
    There are a couple of other projects such as opensaml, apache's wss4j or shibboleth that might be interesting in this context.
    I just installed opensso and got it working with SAP J2EE 7.0 using SAPs JAAS SAMLLoginModule to authenticate users within SAP J2EE.
    In this scenario opensso serves as identity provider just as you need! There are a couple of Policy agents available on SUNs Download site you can use with Apache, Tomcat, JBOSS, WebSphere, Bea Web Logic etc. in order to authenticate! Otherwise you just directly authenticate against opensso. When installing opensso you can configure the type of user store you want  to use! By default it uses LDAP but you can also use different types of user store using JDBC or other mechanisms. Since you have a Directory Service you could easily connect it to your existing directory.
    There is also a way to map user ids directly in opensso by adding a uid mapping class. I created some documentation with lots of screenshots about using opensso with SAP J2EE. You can easily use opensso with any other system that supports SAML. In the case of SAP the usage is currently limited to SAML versions 1.0 and 1.1. Version 2.0 is not yet supported but should be in one of the following versions.
    Here are some links you might want to check:
    OpenSAML: https://spaces.internet2.edu/display/OpenSAML/Home
    wss4j: http://ws.apache.org/wss4j/
    shibboleth: http://shibboleth.internet2.edu/
    opensso: https://opensso.dev.java.net/
    On SDN you will find a documentation on how to connect SUN Java System Access Manager to SAP J2EE (see https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/906d9fc6-31b9-2910-1385-90edad7d7570). As I said opensso is based on the SUN Access Manager code and looks quite the same. So you can adapt this documentation in order to configure opensso or you can just ask me for the documentation.
    Hope this is helpful...
    Let me know if you need further assistance on this topic
    Cheers

  • When starting iTunes I continually get an error message " The registry Settings used by the iTunes drivers for importing and burning CDs and DVDs are missing.  This can happen as a result of installing other CD burning software. Please reinstall iTunes."

    When starting iTunes I continually get an error message " The registry Settings used by the iTunes drivers for importing and burning CDs and DVDs are missing.  This can happen as a result of installing other CD burning software. Please reinstall iTunes."  I have unistalled and reinstalled iTunes several times and have cleaned up the registry using a 3rd party Windows utility.  Any tips on removing this error message for good?

    I'd start with the following document, with one modification. At step 12 after typing GEARAspiWDM press the Enter/Return key once prior to clicking OK. (Pressing Return adds a carriage return in the field and is important.)
    iTunes for Windows: "Registry settings" warning when opening iTunes

  • When opening iTunes, I get the following error message: the registry setting used by the iTunes drivers for importing an burning CDs and DVDs are missing.  This can happen as a result of installing other CD burning software.  Please reinstall iTunes.

    When opening iTunes, I get the following error message: "The registry setting used by the iTunes drivers for importing an burning CDs and DVDs are missing.  This can happen as a result of installing other CD burning software.  Please reinstall iTunes."
    I have reinstalled iTunes twice and still get the message.
    Any clues??
    Thank you.

    I'd start with the following document, with one modification. At step 12 after typing GEARAspiWDM press the Enter/Return key once prior to clicking OK. (Pressing Return adds a carriage return in the field and is important.)
    iTunes for Windows: "Registry settings" warning when opening iTunes

  • Keep getting error message "The registry settings used by the iTunes drivers for importing and burning CDs ....please reinstall iTunes." I have done this several times but it doesn't help.

    Keep getting error message "The registry settings used by the iTunes drivers for importing and burning CDs ....please reinstall iTunes." I have done this several times but it doesn't help.

    Refer to this article:
    iTunes for Windows: "Registry settings" warning when opening iTunes
    http://support.apple.com/kb/TS3299

  • How can I process an SSO Logon Ticket in ColdFusion 9?

    Hi,
    We want to integrate some CouldFusion templates on the SAP portal and I try to process the SSO Logon Ticket using the following code:
    <cfif IsDefined("Cookie.MYSAPSSO2") AND Cookie.MYSAPSSO2 neq "">
    <cfscript>
        ticket = Cookie.MYSAPSSO2;
        sso = createObject("java", "SSO2Ticket");
        version = sso.getVersion();
        Application.CertPath = "/opt/coldfusion9/lib/verify.pse";
    </cfscript>
    <h2>Ticket cookie:</h2>
    <cfdump var="#ticket#">
    <h2>Version:</h2>
    <cfdump var="#version#">
    <h2>Certification path:</h2>
    <cfdump var="#Application.CertPath#">
    <cfscript>
        result = sso.evalLogonTicket (ticket, Application.CertPath,"");
        sapUser   = result[1]; //First element is the SAP system user
        sysID  = result[2]; //Second element is the id of the issuing system
        client = result[3]; //Third element is the client of the issuing system
        portalUser = result[5]; //Portal user
        validityInSeconds = result[7]; //Validity in seconds
    </cfscript>
    <h2>Ticket content:</h2>
    <cfdump var="#result#">
    <cfelse>
        SAP Logon Ticket not found - Extranet content can only be accessed through SAP Portal.   
    </cfif>
    The certificate verify.pse and the current version of the libraries libsapcrypto.so, libsapssoext.so and libslcryptokernel.so are stored at the same location.
    After logging in into a SAP portal I get following error when executing the script:
    Ticket cookie:
      AjExMDAgAAxwb3J0YWw6VG90aEyIABNiYXNpY2F1dGhlbnRpY2F0aW9uAQAFVE9USEwCAAMwMDADAANEUDIEAAwyMDE0MDYyNTEzNTMFAAQAAAAICgAFVE9USEz/AQUwggEBBgkqhkiG9w0BBwKggfMwgfACAQExCzAJBgUrDgMCGgUAMAsGCSqGSIb3DQEHATGB0DCBzQIBATAiMB0xDDAKBgNVBAMTA0RQMjENMAsGA1UECxMESjJFRQIBADAJBgUrDgMCGgUAoF0wGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTQwNjI1MTM1MzQ3WjAjBgkqhkiG9w0BCQQxFgQU2lImEL6oxLc/4ZdXYTDJudUNhOIwCQYHKoZIzjgEAwQvMC0CFQC4ftTFs8COV0ThRZH5lJxY9ITqfQIUMSugOMEkhmQHqBZD!ZHQ1Tb9e90= 
    Version:
    SAPSSOEXT 4 
    Certification path:
    /opt/coldfusion9/lib/verify.pse 
    The web site you are accessing has experienced an unexpected error.
    Please contact the website administrator. 
    The following information is meant for the website developer for debugging purposes.
    Error Occurred While Processing Request
    MySapEvalLogonTicketEx failed: standard error= 9, ssf error= 0
      The error occurred in /opt/coldfusion9/wwwroot/ExtranetMod/authTest.cfm: line 20
    18 : 19 : <cfscript> 20 : result = sso.evalLogonTicket (ticket, Application.CertPath,""); 21 :     sapUser   = result[1]; //First element is the SAP system user 22 :     sysID  = result[2]; //Second element is the id of the issuing system
    Resources:
    Check the ColdFusion documentation to verify that you are using the correct syntax.
    Search the Knowledge Base to find a solution to your problem.
    Browser 
    Mozilla/5.0 (Windows NT 5.1; rv:30.0) Gecko/20100101 Firefox/30.0
    Remote Address 
    172.20.231.111
    Referrer 
    Date/Time 
    25-Jun-14 04:23 PM
    Stack Trace
    at cfauthTest2ecfm1658987646.runPage(/opt/coldfusion9/wwwroot/ExtranetMod/authTest.cfm:20)
    java.lang.Exception: MySapEvalLogonTicketEx failed: standard error= 9, ssf error= 0 at SSO2Ticket.evalLogonTicket(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) at java.lang.reflect.Method.invoke(Unknown Source) at coldfusion.runtime.java.JavaProxy.invoke(JavaProxy.java:97) at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2360) at cfauthTest2ecfm1658987646.runPage(/opt/coldfusion9/wwwroot/ExtranetMod/authTest.cfm:20) at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:231) at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:416) at coldfusion.filter.CfincludeFilter.invoke(CfincludeFilter.java:65) at coldfusion.filter.ApplicationFilter.invoke(ApplicationFilter.java:360) at coldfusion.filter.RequestMonitorFilter.invoke(RequestMonitorFilter.java:48) at coldfusion.filter.MonitoringFilter.invoke(MonitoringFilter.java:40) at coldfusion.filter.PathFilter.invoke(PathFilter.java:94) at coldfusion.filter.ExceptionFilter.invoke(ExceptionFilter.java:70) at coldfusion.filter.ClientScopePersistenceFilter.invoke(ClientScopePersistenceFilter.java:28) at coldfusion.filter.BrowserFilter.invoke(BrowserFilter.java:38) at coldfusion.filter.NoCacheFilter.invoke(NoCacheFilter.java:46) at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38) at coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22) at coldfusion.filter.CachingFilter.invoke(CachingFilter.java:62) at coldfusion.CfmServlet.service(CfmServlet.java:200) at coldfusion.bootstrap.BootstrapServlet.service(BootstrapServlet.java:89) at jrun.servlet.FilterChain.doFilter(FilterChain.java:86) at coldfusion.monitor.event.MonitoringServletFilter.doFilter(MonitoringServletFilter.java:42) at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46) at jrun.servlet.FilterChain.doFilter(FilterChain.java:94) at jrun.servlet.FilterChain.service(FilterChain.java:101) at jrun.servlet.ServletInvoker.invoke(ServletInvoker.java:106) at jrun.servlet.JRunInvokerChain.invokeNext(JRunInvokerChain.java:42) at jrun.servlet.JRunRequestDispatcher.invoke(JRunRequestDispatcher.java:286) at jrun.servlet.ServletEngineService.dispatch(ServletEngineService.java:543) at jrun.servlet.http.WebService.invokeRunnable(WebService.java:172) at jrunx.scheduler.ThreadPool$DownstreamMetrics.invokeRunnable(ThreadPool.java:320) at jrunx.scheduler.ThreadPool$ThreadThrottle.invokeRunnable(ThreadPool.java:428) at jrunx.scheduler.ThreadPool$UpstreamMetrics.invokeRunnable(ThreadPool.java:266) at jrunx.scheduler.WorkerThread.run(WorkerThread.java:66)
    I would be most thankful for any hints that could bring me further...
    Many thanks
    Lajos

    Thank you for your assistance in this matter.
    This has been frustrating the crap out of me for the last week (not that the photo is important, it is just that I like to conquer and solve this types of issues)
    I was shooting with an aperture of 7.1. 
    I changed the exposure on the photos as you had done previously but this only blew out the watch and I couldn't recover it afterwards and the alignment was no better any way.  So then I started experimenting as you suggested, and I don't know if what I am about to write is acceptable in an Adobe forum, but here goes.
    I tried Helicon Focus and it was terrible, but I must admit I didn't know how to really use it, it doesn't seem to have any alignment function and is very difficult to try to use and understand.
    then I tried Hugin and I am not even sure if this is image stacking software or just an alignment software, anyway that didn't work either and kept saying the output was a very bad match.
    THEN I downloaded and tried zerestacker (free 30 day trial)  (after reading about it in a google search) and WOW, it worked amazing, see below photo, it was so easy to use and the interface is easy as well and it does the alignment and stacking in the same process and you can see the image output show up on the left of the screen.  Sorry PS but I will be using ZS for photostacking from now on. Adobe need to buy this company and incorporate it in to PS CC6.
    This is just so much better than anything I got out of PS, there is no ghosting or blurring and the alignment is perfect and it is so simple to use.

  • SSO logon tickets not working in two different OS

    HI All,
    We have sucessfully implemented SSO logon tickets concept to access a j2ee application through portal on windows OS.
    We could able to do the samething on two j2ee instances installed on two different machines on same domain. I mean, deploying our application in one j2ee instance and accessing the application thru portal of another j2ee instance thru SSO logon ticket by adding some configuration steps in Visual administrator given in help.sap.com. This also we did in same OS windows.
    But now the problem is, when we try to implement the above scenario in two different OS, say application is deployed on HPUX machine, and accessing that application through Portal from Solaris machine, SSO logontickets is failing. Means we couldnt able to access the application. Both the OS are in same domain only.
    What extra configuration steps need to be done in VA, to get work with two different OS?
    Please share ur ideas.
    Regards,
    Satish.

    Hi..
    I guess probabaly the internet explorer doesnot accept the sso ticket.
    What you can probably check is that the compatability of explorer for the solaris and HP UX os with Windows OS.
    Also,please check whether the SSO ticket is getting populated and What error are you getting exactly when the SSO fails and that will give some idea to proceed further
    <u>deploying our application in one j2ee instance and accessing the application thru portal of another j2ee instance[/u
    What the above mean...how are you deploying ?? what tool ?? which J2EE instance out of the two ??
    Thanks
    Gopal

  • Application Parameters not working in the Transactional iViews

    We had created transactional iViews for calling the standard SAP Transaction: IQS8 and IQS9. Here the issue is that we would like to populate the default screens for these 2 transactions with different set of default values.
    So, we created variants and sending them as an application parameter to these trasnactional iViews. When we call this iView it is displaying these default values as per the variant which we are sending. But when executing that transaction, it seems those application parameters that we send through the iView are not being used to call that transaction.
    How to enforce the transaction to make it use the application parameters as default values, does any one has any idea?
    Please let me know if any one of you have a solution for this.

    Hi Venkat,
    You might want to try the following approach:
    1- Create a new transaction code in your SAP system (using transaction SE93 - maintain transaction) which would be a transaction variant of the transaction you want to call with a specific variant
    2- Create a 'SAP transaction' iview that points to the new transaction code you created (SAP information <a href="http://help.sap.com/saphelp_nw2004s/helpdata/en/88/266a3e54a2e946e10000000a114084/frameset.htm">here</a>)
    Hope this helps.
    Regards,
    Joseph

  • Error "Balance in transaction currency" using T.code J1iex

    Hello all,
                When i am capturing an excise invoice using T.code J1iex, the excise invoice is getting captured, but when we are trying to post the vendor using the same T.code j1iex,it is giving an error"Balance in transaction currency". Please help me and try to solve my problem asap.

    Hai,
    1.Flag the check box for rounding duty on procurement in IMG - Logisitics general - Tax on goods & mvts - India - Basic settings - Company code settings.
    2. Manually round off the excise values to next value in J1IEX - Change mode - item level - excise values.

  • Error in creating Transaction iViews

    I am trying to create two transaction iViews, that connect to R/3 and CRM, but I keep on getting the following error messags:
    An exception occurred while processing a request for :
    iView : N/A
    Component Name : N/A
    Unable to lookup System 'R93CLNT100'. Please check the system object and the alias..
    Unable to lookup System 'C94CLNT100'.

    Hi,
    I am also trying to connect to R/3 system,I am getting ERROR:
    An exception occurred while processing a
    request for :
    iView : N/A
    Component Name : N/A
    Application URL ':///sap(ZT13SDNnblo2MUVha3puRGpmQkp1eDZBJTNEJTNETFZpS2RMbWkyJTJC
    RWIwJTJGTkFvWlZrZkElM0QlM0Q=)
    /bc/gui/sap/its/webgui' is not valid! Please check
    the protocol and host entries for system
    'J_test'..
    See the details for the exception ID in the log file
    what might be the error,any body .....

Maybe you are looking for

  • Windows 7 ultimate 64-bit on early 2008 MacBook

    I've searched all over the internet as well as here on the apple site, I can't find a definitive answer either way on this; can I install windows 7 64-bit on my early 2008 MacBook it has 4GB of ram and a 320GB HD inside of it and I plan on wiping the

  • USer exit for transaction Code APPCHANGE

    I want to include a function module to trigger a workflow in a user exit related to program SAPLHRHAP_UI_DOCUMENT_REPORT (transaction Code APPCHANGE.) The workflow will be triggered when SAVE button  is pressed. Thank your for your help

  • MRP Exception Message Number

    I need to write an ABAP report which uses the details on the MD04 Stock Requirements List detail screen for those items which have an Exception Message number (10, 20,30 etc..). The screen shows this data is held in a structure called MDEZ. I have tr

  • ITunes 8 always opens when I log in/restart

    Ever since I updated to iTunes 8 it always opens upon restart/startup or log in.. how can I make it not do that? THANKS!!

  • Entourage 2008 Mail Import Issues

    Any suggestion on how I can transfer stored email folders on my POP email accounts on Mac Mail over to Entourage 2008? I have years of emails stored in different folders.