Logon ticket missing; Single Sign-On is not correctly configured

Dear Experts,
we have tried to configure SSO on SAP PI environment, but without success.
Can you pls advise where to look for fixing the SSO?
regards,
PM

Hi
Have you checked below links
SSO between .Net and SAP PI
http://help.sap.com/saphelp_nwpi71/helpdata/en/32/1c1041a0f6f16fe10000000a1550b0/content.htm
http://help.sap.com/saphelp_nw70/Helpdata/en/32/1c1041a0f6f16fe10000000a1550b0/content.htm
Regards,
Venkata Ramesh

Similar Messages

JSF mapping missing. ExtensionsFilter not correctly configured.

I am new to JSF's and using JBoss 4.2.0 application server.
I trying to use <t:panelTabbedPane> and <t:panelTab> in my page like this:
<%@ taglib uri="http://myfaces.apache.org/tomahawk" prefix="t"%>
<t:panelTabbedPane id= "tbParticipant" selectedIndex = "0">
     <t:panelTab id = "ptFirstName" label = "First Name"></t:panelTab>
     <t:panelTab id = "ptLastName" label = "Last Name"></t:panelTab>
</t:panelTabbedPane>
When I open my page i get this error
ExtensionsFilter not correctly configured. JSF mapping missing. JSF pages not covered.
Please see: http://myfaces.apache.org/tomahawk/extensionsFilter.html
I have my web.xml configured exactlly as described at http://myfaces.apache.org/tomahawk/extensionsFilter.html
Actually I copied and paste the whole text word by word as shown below but still getting that error.
<filter>
     <filter-name>MyFacesExtensionsFilter</filter-name>
     <filter-class>org.apache.myfaces.webapp.filter.ExtensionsFilter</filter-class>
<init-param>
<param-name>maxFileSize</param-name>
<param-value>20m</param-value>
<description>Set the size limit for uploaded files.
Format: 10 - 10 bytes
10k - 10 KB
10m - 10 MB
1g - 1 GB
</description>
</init-param>
</filter>

<filter-mapping>
<filter-name>MyFacesExtensionsFilter</filter-name>

<servlet-name>Faces Servlet</servlet-name>
</filter-mapping>

<filter-mapping>
<filter-name>MyFacesExtensionsFilter</filter-name>
<url-pattern>/faces/myFacesExtensionResource/*</url-pattern>
</filter-mapping>
     Alternate mapping using a url-pattern instead of a servlet-name (you still need the /faces/myFacesExtensionResource/* mapping as well):

<filter-mapping>
<filter-name>MyFacesExtensionsFilter</filter-name>
<url-pattern>*.jsf</url-pattern>
</filter-mapping>
Please help and thank you in advance.

Please post the configuration of the FacesServlet in the web.xml.

Tomahawk1.1.3 ugrade exception...ExtensionsFilter not correctly configured.

Hi Experts,
I new to the world of JSF and im presently playing around with MyFaces Tomhawk implementation.
I tried the tree example using tomahawk.jar ,myfaces-api and myfaces-impl.
I was able to get the tree working with these version of jars.
But now when i upgraded to the latest jars i.e
myfaces-api 1.1.3
myfaces-imple1.1.3 and
tomahawk-1.1.3
I'm getting the following error...see the stack trace below:
java.lang.IllegalStateException: ExtensionsFilter not correctly configured. JSF mapping missing. JSF pages not covered. Please see: http://myfaces.apache.org/tomahawk/extensionsFilter.html
org.apache.myfaces.renderkit.html.util.AddResourceFactory.throwExtensionsFilterMissing(AddResourceFactory.java:371)
org.apache.myfaces.renderkit.html.util.AddResourceFactory.checkEnvironment(AddResourceFactory.java:333)
org.apache.myfaces.renderkit.html.util.AddResourceFactory.getInstance(AddResourceFactory.java:288)
org.apache.myfaces.custom.tree2.HtmlTreeRenderer.encodeJavascript(HtmlTreeRenderer.java:611)
org.apache.myfaces.custom.tree2.HtmlTreeRenderer.encodeBegin(HtmlTreeRenderer.java:152)
javax.faces.component.UIComponentBase.encodeBegin(UIComponentBase.java:512)
I googled for this also did the required changes.
here are the links i visited.
1) http://wiki.apache.org/myfaces/Upgrading_to_Tomahawk_1.1.3
2) http://www.mail-archive.com/[email protected]/msg23110.html
3) http://www.mail-archive.com/[email protected]/msg23094.html
Here's my web.xml
<?xml version="1.0" encoding="UTF-8"?>
<web-app version="2.4" xmlns="http://java.sun.com/xml/ns/j2ee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee
http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">
<context-param>
<param-name>javax.faces.STATE_SAVING_METHOD</param-name>
<param-value>client</param-value>
</context-param>
<context-param>
<param-name>org.apache.myfaces.ALLOW_JAVASCRIPT</param-name>
<param-value>true</param-value>
</context-param>
<context-param>
<param-name>org.apache.myfaces.DETECT_JAVASCRIPT</param-name>
<param-value>false</param-value>
</context-param>
<context-param>
<param-name>org.apache.myfaces.PRETTY_HTML</param-name>
<param-value>true</param-value>
</context-param>
<context-param>
<param-name>org.apache.myfaces.AUTO_SCROLL</param-name>
<param-value>true</param-value>
</context-param>
<context-param>
<param-name>javax.faces.CONFIG_FILES</param-name>
<param-value>/WEB-INF/faces-config.xml</param-value>
</context-param>

<listener>
<listener-class>org.apache.myfaces.webapp.StartupServletContextListener</listener-class>
</listener>

<filter>
<filter-name>MyFacesExtensionsFilter</filter-name>
<filter-class>org.apache.myfaces.webapp.filter.ExtensionsFilter</filter-class>
<init-param>
<param-name>maxFileSize</param-name>
<param-value>20m</param-value>
</init-param>
</filter>

<filter-mapping>
<filter-name>MyFacesExtensionsFilter</filter-name>

<url-pattern>*.jsp</url-pattern>
</filter-mapping>

<filter-mapping>
<filter-name>MyFacesExtensionsFilter</filter-name>
<url-pattern>/faces/myFacesExtensionResource/*</url-pattern>
</filter-mapping>

<servlet>
<servlet-name>Faces Servlet</servlet-name>
<servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
<load-on-startup>1</load-on-startup>
</servlet>
<servlet-mapping>
<servlet-name>Faces Servlet</servlet-name>
<url-pattern>*.faces</url-pattern>
</servlet-mapping>
</web-app>
Please help me out in fixing this exception.....im sure lot of people must have encountered this exception.
Thanks
Ved

Hi,
I have made some changes and it is now working.But i want it work in a portlet.There it is showing the text box but not the pop up button.It works fine as a stand alone application.How can i resolve this??
My code is as follows...
<?xml version="1.0" encoding="UTF-8"?>
<web-app id="conference-room" version="2.4"
     xmlns="http://java.sun.com/xml/ns/j2ee"
     xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
     xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">
     <display-name>Conference Room</display-name>
     <context-param>
          <param-name>
               org.apache.myfaces.CHECK_EXTENSIONS_FILTER
          </param-name>
          <param-value>false</param-value>
     </context-param>
     <context-param>
          <param-name>javax.faces.STATE_SAVING_METHOD</param-name>
          <param-value>server</param-value>
     </context-param>
     <context-param>
          <param-name>javax.faces.application.CONFIG_FILES</param-name>
          <param-value>/WEB-INF/faces-config.xml</param-value>
     </context-param>
     <context-param>
          <description>
               This parameter tells MyFaces if javascript code should be
               allowed in the rendered HTML output. If javascript is
               allowed, command_link anchors will have javascript code that
               submits the corresponding form. If javascript is not
               allowed, the state saving info and nested parameters will be
               added as url parameters. Default: "true"
          </description>
          <param-name>org.apache.myfaces.ALLOW_JAVASCRIPT</param-name>
          <param-value>true</param-value>
     </context-param>
     <context-param>
          <description>
               This parameter tells MyFaces if javascript code should be
               allowed in the rendered HTML output. If javascript is
               allowed, command_link anchors will have javascript code that
               submits the corresponding form. If javascript is not
               allowed, the state saving info and nested parameters will be
               added as url parameters. Default: "false"
               Setting this param to true should be combined with
               STATE_SAVING_METHOD "server" for best results.
               This is an EXPERIMENTAL feature. You also have to enable the
               detector filter/filter mapping below to get JavaScript
               detection working.
          </description>
          <param-name>org.apache.myfaces.DETECT_JAVASCRIPT</param-name>
          <param-value>false</param-value>
     </context-param>
     <context-param>
          <description>
               If true, rendered HTML code will be formatted, so that it is
               "human readable". i.e. additional line separators and
               whitespace will be written, that do not influence the HTML
               code. Default: "true"
          </description>
          <param-name>org.apache.myfaces.PRETTY_HTML</param-name>
          <param-value>true</param-value>
     </context-param>
     <context-param>
          <description>
               If true, a javascript function will be rendered that is able
               to restore the former vertical scroll on every request.
               Convenient feature if you have pages with long lists and you
               do not want the browser page to always jump to the top if
               you trigger a link or button action that stays on the same
               page. Default: "false"
          </description>
          <param-name>org.apache.myfaces.AUTO_SCROLL</param-name>
          <param-value>true</param-value>
     </context-param>
     
     <filter>
          <filter-name>extensionsFilter</filter-name>
          <filter-class>
               org.apache.myfaces.component.html.util.ExtensionsFilter
          </filter-class>
          <init-param>
               <description>
                    Set the size limit for uploaded files. Format: 10 - 10
                    bytes 10k - 10 KB 10m - 10 MB 1g - 1 GB
               </description>
               <param-name>uploadMaxFileSize</param-name>
               <param-value>100m</param-value>
          </init-param>
          <init-param>
               <description>
                    Set the threshold size - files below this limit are
                    stored in memory, files above this limit are stored on
                    disk.
                    Format: 10 - 10 bytes 10k - 10 KB 10m - 10 MB 1g - 1 GB
               </description>
               <param-name>uploadThresholdSize</param-name>
               <param-value>100k</param-value>
          </init-param>
     </filter>
     
     <filter-mapping>
          <filter-name>extensionsFilter</filter-name>
          <url-pattern>*.jsf</url-pattern>
     </filter-mapping>
     <filter-mapping>
          <filter-name>extensionsFilter</filter-name>
          <url-pattern>/faces/*</url-pattern>
     </filter-mapping>
     
     <listener>
          <listener-class>
               org.apache.myfaces.webapp.StartupServletContextListener
          </listener-class>
     </listener>
     
     <servlet>
          <servlet-name>Faces Servlet</servlet-name>
          <servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
          <load-on-startup>1</load-on-startup>
     </servlet>
     
     <servlet>
          <description>
               MVC Servlet for Jetspeed Portlet Applications
          </description>
          <display-name>Jetspeed Container</display-name>
          <servlet-name>JetspeedContainer</servlet-name>
          <servlet-class>
               org.apache.jetspeed.container.JetspeedContainerServlet
          </servlet-class>
          <init-param>
               <param-name>contextName</param-name>
               <param-value>conference-room</param-value>
          </init-param>
          <load-on-startup>0</load-on-startup>
     </servlet>
     
     <servlet-mapping>
          <servlet-name>Faces Servlet</servlet-name>
          <url-pattern>*.jsf</url-pattern>
     </servlet-mapping>
     <servlet-mapping>
          <servlet-name>JetspeedContainer</servlet-name>
          <url-pattern>/container/*</url-pattern>
     </servlet-mapping>
     <welcome-file-list>
          <welcome-file>index.html</welcome-file>
          <welcome-file>index.htm</welcome-file>
          <welcome-file>index.jsp</welcome-file>
          <welcome-file>default.html</welcome-file>
          <welcome-file>default.htm</welcome-file>
          <welcome-file>default.jsp</welcome-file>
     </welcome-file-list>
</web-app>
Thanks and regards,
Gaurav Goel.

Integrate tomahawk into sun jsf ,extensionsFilter not correctly configured.

Hi,All
I find a issue when I integrate tomahawk 1.1.3 into sun jsf 1.1_02:
tomcat 5.0.28
java.lang.IllegalStateException: ExtensionsFilter not correctly configured. Resource mapping missing. Resources cant be delivered. Please see: http://myfaces.apache.org/tomahawk/extensionsFilter.html
org.apache.myfaces.renderkit.html.util.AddResourceFactory.throwExtensionsFilterMissing(AddResourceFactory.java:371)
org.apache.myfaces.renderkit.html.util.AddResourceFactory.checkEnvironment(AddResourceFactory.java:352)
org.apache.myfaces.renderkit.html.util.AddResourceFactory.getInstance(AddResourceFactory.java:288)
org.apache.myfaces.custom.tree2.HtmlTreeRenderer.encodeJavascript(HtmlTreeRenderer.java:611)
I read information about it from "http://myfaces.apache.org/tomahawk/extensionsFilter.html"
and reconfiguration my web.xml, but don't work. my code as follow:

<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE web-app PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN" "http://java.sun.com/dtd/web-app_2_3.dtd">
<web-app xmlns="http://java.sun.com/xml/ns/j2ee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd" version="2.4">
<display-name>Web Configuration Info</display-name>
<description>Platform</description>
     <context-param>
<param-name>javax.faces.CONFIG_FILES</param-name>
<param-value>/WEB-INF/Config/faces-config.xml,/WEB-INF/Config/faces-managed-beans.xml,/WEB-INF/Config/faces-config-validators.xml,/WEB-INF/Config/faces-config-taglibs.xml</param-value>
</context-param>
     <filter>
          <filter-name>ExtensionsFilter</filter-name>
          <filter-class>org.apache.myfaces.webapp.filter.ExtensionsFilter</filter-class>
          <init-param>
               <param-name>maxFileSize</param-name>
               <param-value>20m</param-value>
          </init-param>
     </filter>
     <filter-mapping>
     <filter-name>ExtensionsFilter</filter-name>
          
          <servlet-name>FacesServlet</servlet-name>
     </filter-mapping>
     <filter-mapping>
<filter-name>ExtensionsFilter</filter-name>
<url-pattern>*.jsf</url-pattern>
</filter-mapping>
<servlet>
<servlet-name>FacesServlet</servlet-name>
<servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
          <load-on-startup>1</load-on-startup>
</servlet>
     <servlet-mapping>
<servlet-name>FacesServlet</servlet-name>
<url-pattern>*.jsf</url-pattern>
</servlet-mapping>
     <welcome-file-list>
          <welcome-file>index.jsp</welcome-file>
     </welcome-file-list>
</web-app>

<%@ page session="false" contentType="text/xml;charset=utf-8"%>
<%
response.sendRedirect("./test/tree.jsf");
%>
I write web.xml reference to extensionsFilter.html, but doesn't work!
what's make this issue?

I think you need the following additional mapping:
    <filter-mapping>
        <filter-name>MyFacesExtensionFilter</filter-name>
        <url-pattern>/faces/myFacesExtensionResource/*</url-pattern>
    </filter-mapping>

JSF + Facelets + Tomahawk: ExtensionsFilter not correctly configured.

Hello,
I want to use JSF with facelets and tomahawk...
I have a standard facelets configuration like the demo on their website...
But at the moment, there is a tomahawk component in one of the pages I get the following error:
java.lang.IllegalStateException: ExtensionsFilter not correctly configured. Resource mapping missing. Resources cant be delivered. Please see: http://myfaces.apache.org/tomahawk/extensionsFilter.html
I googled the entire internet (two times), but nothing helps...
I'm using Glassfish v2.1
My web.xml
<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns="http://java.sun.com/xml/ns/javaee"
         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
         xsi:schemaLocation="http://java.sun.com/xml/ns/javaee
            http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"
         version="2.5">
    <welcome-file-list>
        <welcome-file>welcome.jsp</welcome-file>
    </welcome-file-list>
    <context-param>
        <param-name>javax.faces.DEFAULT_SUFFIX</param-name>
        <param-value>.xhtml</param-value>
    </context-param>
    <servlet>
        <servlet-name>Faces Servlet</servlet-name>
        <servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
        <load-on-startup>1</load-on-startup>
    </servlet>
    <servlet-mapping>
        <servlet-name>Faces Servlet</servlet-name>
        <url-pattern>*.jsf</url-pattern>
    </servlet-mapping>
    <filter>
        <filter-name>MyFacesExtensionsFilter</filter-name>
        <filter-class>org.apache.myfaces.webapp.filter.ExtensionsFilter</filter-class>
        <init-param>
            <param-name>maxFileSize</param-name>
            <param-value>20m</param-value>
        </init-param>
    </filter>
    <filter-mapping>
        <filter-name>MyFacesExtensionsFilter</filter-name>
        <servlet-name>Faces Servlet</servlet-name>
    </filter-mapping>
    <error-page>
        <error-code>500</error-code>
        <location>/errors/fatal.jsf</location>
    </error-page>
</web-app>It didn't work with the JSF RI or MyFaces.
Hoping, somebody could help me.

I think you need the following additional mapping:
    <filter-mapping>
        <filter-name>MyFacesExtensionFilter</filter-name>
        <url-pattern>/faces/myFacesExtensionResource/*</url-pattern>
    </filter-mapping>

Youtube error message "The server is not correctly configured", what can i do?

I have iPod Touch 3rd Generation with last iOS v4.3.5.
Using the Youtube app i can not read any video!
Always says "The server is not correctly configured" when i try reading any youtube video.
I made some test, it's doing it even with Safari on my iPOD.
My son have the same problem with an older iOS on his 3rd gen iPOD, and my wife have the same problem using her iPAD2.
Does somebody knows what is going on?
Thank you for your help.

With any other device such as my Samsung TV or portable computers, access to Youtube is flawless, everything working perfectly.
So i assume that any Apple iOS device with recent updates have a problem with Youtube.
A bug or else from Apple iOS.
Apple iOS is not compatible with Flash and now it seems it's not compatible with Youtube either.
Maybe Youtube is using to much flash type programs.
If you can help, please do so, because we can not show our Youtube videos with Apple iPod Touch or iPAD2 anymore.
Hey, does Google have Youtube now? If so, maybe Google is giving a hard time to Apple?
Anybody from Apple or the community can't help?
Thanks.

"server is not correctly configured" error play podcast in iTunes?

so my podcast madness radio streams and downloads fine from a desktop computer.
but on the iphone 3gs 3.0.1 i get the "server is not correctly configured" error when i try to play the same podcast in the iTunes iPhone app.
any idea the reason for this?
thanks!
- will hall

what is the name of the podcast and file you're trying to play? i can try it on my 3g and let you know what happens there.

Why I can't to open youtube video that shown the server is not correctly configured?

Youtube has an error the server is not correctly configured. Could you help me to solve this problem?

With any other device such as my Samsung TV or portable computers, access to Youtube is flawless, everything working perfectly.
So i assume that any Apple iOS device with recent updates have a problem with Youtube.
A bug or else from Apple iOS.
Apple iOS is not compatible with Flash and now it seems it's not compatible with Youtube either.
Maybe Youtube is using to much flash type programs.
If you can help, please do so, because we can not show our Youtube videos with Apple iPod Touch or iPAD2 anymore.
Hey, does Google have Youtube now? If so, maybe Google is giving a hard time to Apple?
Anybody from Apple or the community can't help?
Thanks.

Single Sign On is not working when deploying a Wi-Fi profile from Configuration Manager 2012 R2

Hello,
Trying to deploy a wireless profile to a user collection everything works except for the single sign on.
The user will get the wireless profile and be able to connect successfully but when the user signs on again to the same device the Wi-Fi will not connect before the logon process starts.
So GPO processing and home drive mappings are not occurring. The Wi-Fi profile is configured for "Single Sign On - Perform immediately before user logon"
These same settings can be managed successfully by GPO. It would be really nice to be able to use ConfigMgr though!
Thank you.

Hi,
Please refer to the links below:
Single Sign-On Profile Sample
http://msdn.microsoft.com/en-us/library/windows/desktop/aa369849(v=vs.85).aspx
Wireless Single Sign-On
http://technet.microsoft.com/en-us/magazine/2007.11.cableguy.aspx
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Missing album artwork / iTunes 12 not correctly synced to iPhone

Hi all.
Earlier, I simply wanted to add a couple of albums to my iPhone 5S (running iOS 8.1.3) that I purchased on CD.
After being unable to add the songs due to the commonly occurring 'ghosting' issue, I checked on my iPhone to see if they had appeared in the Music app. They didn't.
Instead, most of my album artwork was removed, seemingly at random. First thing I tried was deleting and manually adding a few of the affected songs. No luck with that. Secondly, I restored the iPhone from a backup. Again, nothing. I again tried to delete and re-add the tracks, which still didn't work.
Frustrated, I decided I'd just delete all the music through the usage menu on the phone and manually re-add it all. Here's where the main problem occurs: iTunes still lists 8gb and 900+ songs still being on the iPhone despite there being none. I figured this must be part of the issue, the iTunes troubleshoot menu lists everything as being fine, so I decided to update iTunes. Yet again, no luck.
I'm hesitant to delete the "music" on the phone through iTunes as I assume it should detect the music being removed, and I feel it would only cause further problems.
Essentially, after attempting to add 2 albums I'd recently bought and ripped off of a CD (though iTunes), it would not add to the phone and instead is only listed through iTunes with the light grey writing. This randomly broke most album art on the phone, and after restoring the phone/updating iTunes didn't work, I deleted all music off the phone. iTunes still lists all the music as being on there.
Running the latest version of iTunes on Windows 7.

Generally if syncing doesn't work as expected take the following steps:
Backup device.
Restore as a new device.
Restore the backup made earlier.
This assumes all content on the device is in your library. If that isn't the case see Recover your iTunes library from your iPod or iOS device.
tt2

The server is not correctly configured.

I get this error when viewing YouTube videos on my iPad(4.3), while my iPhone (4.2.1) has no issues. Both connected to the same wifi network. How do I troubleshoot/resolve this issue?

Side note: when I clicked the link in the email notification for this thread, it brought me here but signed in under your ID (JimHdk). Weird, guess it's a bug from the new discussions site.
As for the network settings, everything is identical except for the IP (for obvious reasons). This is at my job, so there may be some odd things going on with the network layer (even though the iPad and iPhone are on the same vlan).
I'm going to test this at home and see if I have any luck there.

SSO to non SAP Application using SAP Logon Ticket

Hi Experts,
I Have EP 7 SP 15 using SPNego Wizard to SSO with Active Directory and SSO between EP and ECC using SAP Certificates.
Now I have a demand to SSO some JAVA based applications (non SAP) to my portal using the SAP Logon Ticket.
I Have followed some blogs that directed me to use SAPSSOEXT (some libs) to read the MYSAPSSO2 cookie. The problem is that I didn't found this cookie, I even executed the command javascript:document to look for this cookie but the browser just show me the JSESSIONID info.
Does anybody knows where I can find this cookie or if there's a better way to set up this SSO? It´s necessary to say that I cannot SSO these application to the kerberos protocol because some security reasons on my company.
Thanks
Armando

Hi,
I dont have much info related but i can giv u hint
refer OSS Notes 442401 and 723896.
When using SAP logon tickets for non-SAP applications, two different implementation options are available. The difference lies in where the ticket verification takes place.
In the first case, the SAP logon ticket is submitted to the web server filter located on the web server. The web server filter verifies the portal serveru2019s public key
certificate using its local Personal Security Environment (PSE) and then populates the HTTP header field with the user ID for SSO to the non-sap web application.
In the second case, the SAP logon ticket is sent to the non-SAP application, which then verifies it using the ticket verification DLL and submits the user ID to the application for SSO.
You can refer following link :-
http://help.sap.com/saphelp_nw70/helpdata/EN/89/6eb8deaf2f11d5993700508b6b8b11/frameset.htm
user authentication and SSO
http://help.sap.com/saphelp_nw70/helpdata/EN/8f/ae29411ab3db2be10000000a1550b0/frameset.htm
Authentication Using a Directory with SSO Integration Using Logon Tickets
http://help.sap.com/saphelp_nw70/helpdata/EN/f8/3b514ca29011d5bdeb006094191908/frameset.htm
SSO
SAP Logon Ticket-based Single Sign-On
http://help.sap.com/saphelp_nwce10/helpdata/en/45/b6af743753003ae10000000a11466f/frameset.htm

Questions on portlets and Single Sign On access

Can anyone help in answering these questions?
- Is it possible to integrate a SAP application in a portal via portlets (e.g. JSR) oder in Microsoft Sharepoint?
- For Single Sign on: is SAML supported?
- Can a SAP system be integrated into a Single-Sign-On environment that has different organizational units that need to be accessed (e.g. Sibboleth)?
Thanks!

hi tina,
u study thesel links to get some idea on sso....i hope ,its useful to u.......
User Mapping-based Single Sign On
SAP Logon Ticket-based Single Sign-On
regards
bhargava

Questions about Logon Ticket

hi.
As we know, SAP Logon Ticket contains:
Highest Authentication Scheme
Validity
Issuing System
Digital Signature
One Mapped ABAP User ID
User ID
When ABAP has the same user ID with Portal, then ABAP use "User ID" to logon, when different and admin defined user mapping for ABAP, then use "One Mapped ABAP User ID" to logon.
My question is, how do SAP backend system decide which uerid to use for different situation?

Hi,
check the logon ticket possibilities
1)When you use SAP logon tickets for Single Sign-On to SAP Systems, users must have the same user IDs in all SAP Systems that are configured to use SAP logon tickets.
2) If the SAP user IDs are different to the portal user IDs, you must define an SAP reference system. Users then map their portal user ID to the user ID in the SAP reference system.
http://help.sap.com/saphelp_nw04/helpdata/en/ed/845896b89711d5993900508b6b8b11/content.htm
check the result section in the link for logon ticket with user mapping.
When users start the user mapping function, one of the component systems that they can select is the SAP reference system. They can map their portal user ID to their user ID in this reference system. The user mapping function connects to the SAP reference system using the user ID and password to verify that the password entered by the user is correct.
The next time the user logs on to the portal, the portal generates an SAP logon ticket for the user that contains both his or her portal user ID and mapped user ID.
Regards,
Koti Reddy

Deleting Logon Ticket

Hi all,
I am using EP6 here and ECC5. I am using SSO with logon tickets.
My logon ticket has expired. So i have to make a new one in visual administrator.
But it is not letting me delete that or not even rename that.
It gives an error message. I cant copy the error mesage that comes. And I cant find the same error in any file. may be i missed some file. Tell me where can i find that error so that i can paste the error message here.
Please tell me how too delete the logon ticket
Thanks
Tajinder

hi tajiinder,
Configuring the J2EE Engine to Accept Logon Tickets
Use
The J2EE Engine uses EvaluateTicketLoginModule to accept logon tickets for SSO. After receiving the logon ticket from the users Web browser, the J2EE Engine verifies the ticket signature based on the established trust relationship with the issuing system. Based on the ticket validity, the J2EE Engine authenticates the user.
For the case when you use authentication assertion tickets for SSO between the AS ABAP and the J2EE Engine, the corresponding module is EvaluateAssertionTicketLoginModule.
Prerequisites
To check the validity of a users logon ticket, the J2EE Engine must be able to verify the issuing servers digital signature.
●      If the J2EE Engine is both the ticket-issuing server as well as the accepting server, then it can automatically verify its own digital signature.
●      If the ticket-issuing server is a different one, then this servers public-key certificate must be available in the keystore view that the J2EE Engine uses for verifying logon tickets.
Procedure
The Trusted Systems ® SSO Wizard configuration functions of the SAP NetWeaver Administrator enable you to use wizard-based management of trust relationships for SSO with logon and assertion tickets. The configuration changes made with the wizard have a global effect for ticket-based SSO to the J2EE Engine.
       1.      Open the SSO Wizard.
Note the following:
○       If the ticket-accepting system is SAP NetWeaver 7.0 SP14 or higher, you can access the SSO Wizard by following the path System Management ® Configuration ® Trusted Systems.
○       If the ticket-accepting system is SAP NetWeaver 7.0 SP 13 or lower, first you must deploy the SSO Wizard. More information: SAP note 1083421.
The system which you configure is displayed in the Selected Accepting System section.
There are two ways to add a trusted system:
○       By connecting to the system and requesting its certificate.
If the ticket-issuing system is SAP NetWeaver 2004 SP20 or lower, or SAP NetWeaver 7.0 SP13 or lower, you must configure it so it can send a response to the certificate request. More information: SAP note 1083421.
○       By manually uploading the certificate of the system.
Adding a Trusted System by Connecting to It
                            a.      In the Trusted Systems section, choose Add Trusted System ® By Querying Trusted System.
                            b.      The System Landscape Directory (SLD) opens automatically and lets you select the system you want to add. Select the system and choose OK. The connection details for the selected system are displayed automatically.
If you cannot find the system you want to add, choose Cancel and provide the connection details:
                                                  i.       Select the type of the system from the System Type dropdown list.
                                                ii.       Enter the necessary connection details.
If you want to add an AS ABAP system, the field System Number appears. You can get the system number of an ABAP system by its license key which you received from SAP.
                            c.      Enter your user name and password in the provided fields and choose Next.
                            d.      The details about the selected systems certificate appear. To add the system, choose Finish. If you want to make changes, choose Back.
Adding a Trusted System by Manually Uploading its Certificate
Before you start the following procedure, you must export the trusted systems certificate. More information: Exporting the Ticket-Issuing Server's Public-key Certificate.
                            a.      In the Trusted Systems section choose Add Trusted System ® By Uploading Certificate Manually.
                            b.      Enter the System ID and Client in the provided fields.
                            c.      Browse to the location of the systems certificate. Select the certificate and choose Open.
                            d.      Choose Next. The information about the system and the certificate is displayed. To add the system as trusted, choose Finish. If you want to make changes, choose Back.
       2.      Add the login module EvaluateTicketLoginModule (or EvaluateAssertionTicketLoginModule) to the login module stacks for the J2EE Engine policy configurations of the application components that accept login tickets for SSO. To do this, use the Security Provider Service of the Visual Administrator.
                            a.      In the Security Provider Service choose Runtime ® Policy Configurations ® Authentication tab.
                            b.      Select the policy configuration for the application component to accept logon tickets from the Components list.
                            c.      Choose the Switch to edit mode button.
                            d.      Choose Add New. The list of available login modules for the component appears.
                            e.      Choose the EvaluateTicketLoginModule (or EvaluateAssertionTicketLoginModule) from the list and choose OK.
If you change the options of a login module in the user store, the changes will be inherited by all policy configurations that use this login module.
If you change the options of a login module in a single policy configuration, the change applies only to that policy configuration. In this case the login module will no longer inherit its options from the user store. To restore the inheritance change the options in the policy configuration or in the user store so that they are identical.
Result
After you complete the wizard, the ticket-issuing system is shown in the Trusted Systems list. The J2EE Engine accepts logon tickets that have been issued by the corresponding server.
if you have douts pls go thru the following urls
help.sap.com/saphelp_nw04/helpdata/en/71/c3d53a60ad204ce10000000a114084/content.htm - 30k
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/69d95112-0d01-0010-8297-fa31feea26e0
thanks karthikeya
dont forget to reawrd me if it helps you

Logon ticket missing; Single Sign-On is not correctly configured

Similar Messages

Maybe you are looking for