Need help on SAP SSO with SAML & SSO2

Dear expert,
We met an SSO issue on launchpad.
Here is our scenario and SSO structure. We use fiori launchpad to display all SAP apps.
1. When  an user visit launchpad URL, URL will redirect user to identity provider (IDP) for SAML authentication.
2. Then IDP authenticate with SAML2.0 token back to gateway.
3. Gateway accept the SAML2.0 token and issue SSO2 logon ticket.
4. Use logon ticket to backend ABAP ERP system for transaction apps.
5. Use logon ticket to HANA system for factsheet.
Now the first step above is OK as SAML token can be authenticated back to gateway. But after that, the basic form authentication pop-up for user credential on both backend system and HANA, which should not. We found out that launchpad was stucked with error message "/sap/es/ina/GetServerInfo HTTP/1.1 401 Unauthorized" at ERP backend service "GetServerInfo". By checking the cookies, we found out that after SAML token accepted by gateway, gateway did not issue any MYSAPSSO2 ticket.
However, when we disabled SAML and use form authentication for launchpad, SSO2 logon ticket works perfectly among GW, ERP and HANA.  So, there should be no issue configuration regarding SSO2 logon ticket in SAP GUI.
here is the system information:
GW: NW740 SP5
ERP: ECC6 on NW740 SP5
HANA: v70
Please kindly help us out on this issue. Please ask if other information is needed. thanks.
Best regards,
Xian' an

This discussion thread belongs to the SAP Gateway space. For generic SSO related queries where portal is not involved the correct space is SAP NetWeaver Application Server. This space is for NetWeaver Single Sign-On (NWSSO, the separately purchasable product) topics only.

Similar Messages

  • I have misplaced my iPod Touch 4th Generation. According to Find my iPhone, it should show up in offline mode. I need help on locating it with a software or some other way. Help?

    I have misplaced my iPod Touch 4th Generation. According to Find my iPhone, it should show up in offline mode. I need help on locating it with a software or some other way. Help?

    There is no other way.
    Sorry

  • Need help on struts configuration with ColdFusion 10 using IIS

    We need help on struts configuration with ColdFusion 10 using IIS.
    Earlier we were using ColdFusion 8 with IIS 6 for one of our application.  This application internally calls struts. After upgrading to ColdFusion 10 struts calls are not loading. We get 404 error.
    In ColdFusion 8 struts were configured using  actions extension .do in IIS from this file-
    C:\ColdFusion8\runtime\lib\wsconfig\jrun_iis6.dll.
    But in ColdFusion 10 this file is not present as ColdFusion 10 uses Tomcat in place of Jrun.
    Also there is no information in ColdFusion log file.

    Duane wrote:
    doctormirabilis, Welcome to the discussion area!
    1) how can i configure the time capsule in order to operate as a remote base station synchronizing with the relay using the ethernet port?
    Configure the Time Capsule to act as a bridge (not distributing IP addresses). Also configure the Time Capsule to create an 802.11n wireless network with a unique network name (SSID). That's it.
    2) how can i avoid that my powerbook while accessing my wireless network does connect through the relay station instead of using the time capsule?
    Configure the Time Capsule to use a different network name than the WDS link between the 2 AirPort Express (AX). Configure the PowerBook to use the Time Capsule network.
    There are 2 pieces of information that you should be aware of...
    (1) None of the PowerBooks are capable of 802.11n.
    (2) The WDS link cuts your available bandwidth in half. So the wireless link to your neighbor's has a maximum potential of 27 Mbps.
    Let's for a minute assume that you have a Mac compatible with 802.11n. In your configuration the time you could take advantage of the 802.11n speed is when the Mac is sending/recieving data directly from/to the Time Capsule.
    There would be NO speed increase in Internet access. The speed of Internet access is going to be controlled by the slowest link in the path to the Internet. That is probably the connection to the ISP. The next slowest path is the WDS link to your neighbor's.
    Duane,
    I am in a similar situation, sharing internet with my neighbor. Do you think it would be plausible to hook up a vonage phone adapter to time capsule's ethernet port if time capsule is bridging from my neighbor's router in the configuration you have described? A check of my upload speed shows 1.67Mbps (powerbookG4 w/ airport extreme). Vonage reccommends 90kbps minimum upload speed. Am I going to lose some speed putting the Vonag adapter behind time capsule?
    Thank you

  • Need help re-synching iPods with new computer and getting iTunes to...

    Need help re-synching iPods with new computer and getting iTunes to recognize our iPods (it doesn't even recognize them when they're plugged in).
    Hubby wiped my harddrive for me, so now I need to get everything back in proper places. I'm using windows XP and installed iTunes once again (I believe it's version 8). I also installed all of my iTunes songs. Now I need to know where to go from here. We have 3 iPods and I need to get them all synched once again. I know how to create different libraries for each of us, but I can't figure out how to get our songs back into our iTunes libraries. When I open iTunes and plug in an iPod, iTunes doesn't even show that an iPod is plugged in.
    What do I do now to get each of our iPods synched with our own libraries?
    TIA
    Brandy

    Thanks Zevoneer. The "Restart ipod service" worked and itunes is now recognizing my ipod! Hooray!
    Okay, now how do I synch all of our ipods with our individual libraries (I don't want all of my kids' songs and vice versa)? We each have hundreds of songs on our ipods that we don't want to lose.
    Thanks again!

  • Need connectivity of SAP Oracle with Third Party tool with dsn

    Hi Friends,
    We need to access SAP's Oracle database with third party tool with the help of dsn creation. For that we need to create 2 staging tables and need a new segment for these tables. Our data will move from SAP transactions to these 2 tables and we want to fetch this data via dsn into another third party S/W.
    I am unaware of such kind of working, can you please help me how to create new segment and how to create dsn for accessing tables in this segment.
    Our requirement is as follow.
    The staging tables are required in the SAP database with user name and password. The user should have all access to the staging table only.
    Requesting your kind help on this issue. Please suggest for further processing of activity.
    Rgds, Krishan Raheja.

    Hi,
    Common way to integrate SAP (database) with third party Application is to use and implement SAP Connector (Java or .Net).
    Using this, you can fetch the data from SAP database to use it in Third party application.
    As per my understanding the method you mentioned, will void the SAP database license term.
    So Please check before doing such configuraiton. Also that method is NOT recommended..
    Regards.
    Rajesh Narkhede

  • Need to Connect SAP PI with Protocal LU6.2

    Hi ,
              I have interface which is SAP R/3 with Protocal LU6.2 , will any one suggest me using any standard adapters or any conversion i can do this interface other than Iway adapter
    Thanking you
    Sridhar

    >>need to connect SAP R/3 with Mainframes using LU6.2 Protocol
    Check if this helps
    Sending data to a mainframe using APPC-LU6.2 protocol
    Regards
    Jai

  • Need help to create report with jpeg/gif image

    Hello,
    I need help with creating a form with a special jpeg/gif seal. I never done this Java. Until now, I created all forms with ansi C++ with HP escape characters to draw lines, boxs, and text. This form will contain boxes which is populated with database information read from a text file.
    Since this form contains a special seal on the upper right, I don't think it can be done with old fashion ansi C++. How can I create a form with Java and create it as a simple exe to just print the form to a specified printer.
    Thanks,
    John

    Hi,
    I am creating a form with boxes (lines and text). What is special about this form is that it has an image jpeg or gif at the top right corner. Is is a state department seal. Up to this form, I had used ansi C++ and print out escape HP character to print out the lines, boxes, and text. I have no idea how to print out the image. I am new to JAVA and only 1 class in it. Is there sample code out there to create this type of form with the image? I need a starting point.
    Thanks,
    John

  • NEED HELP!!! with my Micro Photo

    i need help i was having problems with my computer recognizing my Micro Photo so i was in to recovery menu so then i accidentally hit the reload firmware option and now i cant get it to work it only goes onto the Recovery Menu and i cant get the firmware updater to work and i cnat find no files of the firmware itself...but the weird thing is i can access the Micro Photo itself through my computer and browse it but idk wat to do some plzzz help me

    themagooshow,
    You don't need USB2.0 but you will need to have at least Service Pack for your Windows XP and Windows Media Player 0 installed.
    Jason

  • Need help - I2C write/read with TAOS TCS3414 light sensor using USB-8451

    Hello, I'm new to labview and need help setting up a vi that will allow me to communicate with a digital light sensor (TAOS TCS3414) using a USB-8451. I need to use the sensor to measure light from a light source that I designed and built as part of a project im working on. I've tried looking at several labview I2C exampled but find them to be very confusing. I've used an arduino to interface with the sensor successfully but need to use labview and dont understand how to write the program. The actions are simple; I need initialize the sensor with a simple command and then request data from 8 data registers and then read that data. The data will then be used in further calculations. The portion i need help with is writing and reading from the sensor. I've attached the datasheet for the sensor as a guide. I can also provide the arduino code that i use to read data from the sensor if that would help. 
    Pleae keep in mind that i am completely new to labVIEW. I really do want to learn from this but need quick results so the more help the better. It would greately appreciate any help or explaination. 
    Attachments:
    TCS3414_Datasheet_EN_v1.pdf ‏1806 KB

    Hi Aaron,
    Here you go, this is made with a USB-8452.
    When you run the code tick the power en dac enable box on.
    Maybe you can help me with my problem, I want to use a fiber to sense light from a led.
    Do you use any fiber hardware with the TCS3414?
    gr,
    Attachments:
    TCS3414.vi ‏63 KB

  • Need to identify SAP Netweaver with PI installed

    Hi All,
    I need to identify SAP component version in ABAP code. for that I am retrieving status of the system fr0m CVERS_TXT table.
    but for identifying PI system  it is returning u2018SAP Netweaveru2019 which is not valid because if it only Netweaver without PI installed then also it will consider SAP system as PI.
    So need to figure out exact table or transaction from where i can get this information.
    I need to differentiate the pure SAP netweaver system and SAP netweaver with PI.
    Please guide on the same.
    Thanks in advance,
    Arati.
    Edited by: Arati Kale on Jan 3, 2012 6:49 AM

    Hi Shantanu,
    Thanks for your response.
    I checked SXMB_ADMIN transaction and on PI system it is showing role of busniess system as 'Integration server'. I checked the same on other system without PI it is showing role of busniess system as 'Not yet configured'.
    So I want to just check what will be role of busniess system when PI is installed but basic configuration is not yet done.
    Thanks,
    Arati.

  • Need help in text field with 2D array

    text field with 2D array
    Hi
    I need help to represent (i) in from field and (j) in to field
    I and j are 2D an array indices.
    This code are not complated
    import java.applet.*;
    import java.awt.*;
    import java.awt.event.*;
    //declaring class
    public class test3 extends Applet implements ActionListener
    { //declaring the TextField
    private TextField fromField ,toField;
    //declaring an array
    int weight[][];
    int m = 99; // m is infinity
    int N; // Set of Nodes
    int d; // distance
    int i; // source Node
    int j; // destition Node
    //declaring values of text field
    private int from = i; // start Node
    private int to = j; // end node
    public void init()
    setBackground(Color.white);
    setForeground(Color.red);
    //giving labels
    Label TITLE2,TITLE1;
    TITLE1 = new Label("from:");
    add(TITLE1);
    fromField = new TextField(5);
    add(fromField);
    // register listener using void add actionListener
    fromField.addActionListener(this);
    TITLE2 = new Label("to");
    add(TITLE2);
    toField = new TextField(5);
    add(toField);
    // register listener using void add actionListener
    toField.addActionListener(this);
    // event handler methods
    public void actionPerformed(ActionEvent event) {
    //declaring textfield
    from=Integer.parseInt(fromField.getText());
    to=Integer.parseInt(toField.getText());
    weight =new int[7][7];
    weight[1][1] = 0; weight[2][1]= 2;
    weight[1][2]= 2; weight[2][2]= 0;
    weight[1][3]= 5; weight[2][3]= 3;
    weight[1][4]= 1; weight[2][4]= 2;
    weight[1][5]= 99; weight[2][5]= 99;
    weight[1][6]= 99; weight[2][6]= 99;
    weight[3][1]= 5;
    weight[3][2]= 3;
    weight[3][3]= 0;
    weight[3][4]= 3;
    weight[3][5]= 1;
    weight[3][6]= 5;
    for (int i=1; i<7; ++i) {
    for (int j=1; j<7; ++j)

    all your base are belong to us

  • Help  - SPENGO - Microsoft SSO with WLS 9.2

    Friends,
    I am trying to integrate Microsoft SSO with WLS with SPENGO. I followed the steps given in http://edocs.bea.com/wls/docs92/secmanage/sso.html and even in 8.x documentation where I had to create a LDAP authenticator etc.
    However, instead of SPENGO token, I get the NTLM token. It looks like when Kerberos fails, WLS tries to invoke NTLM. But I am not sure where I am doing wrong. It would be great if someone could look at the following logs and suggest some workaround.
    <<WLS Kernel>> <> <> <1183957002830> <000000> <NegotiateIdentityAsserterServletAuthenticationFilter.doFilter() called>
    <<WLS Kernel>> <> <> <1183957002830> <000000> <CERT auth type found for webapp>
    <<WLS Kernel>> <> <> <1183957002830> <000000> <All request headers:>
    <<WLS Kernel>> <> <> <1183957002830> <000000> < Header: Accept : image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*>
    <<WLS Kernel>> <> <> <1183957002830> <000000> < Header: Accept-Language : en-us>
    <<WLS Kernel>> <> <> <1183957002830> <000000> < Header: UA-CPU : x86>
    <<WLS Kernel>> <> <> <1183957002830> <000000> < Header: Accept-Encoding : gzip, deflate>
    <<WLS Kernel>> <> <> <1183957002830> <000000> < Header: User-Agent : Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322)>
    <<WLS Kernel>> <> <> <1183957002830> <000000> < Header: Host : 10.31.252.182:7001>
    <<WLS Kernel>> <> <> <1183957002830> <000000> < Header: Connection : Keep-Alive>
    <<WLS Kernel>> <> <> <1183957002862> <000000> <Negotiate filter: new session, no negotiation has started>
    <<WLS Kernel>> <> <> <1183957002862> <000000> <PrincipalAuthenticator.getChallengeToken will use common security service>
    <<WLS Kernel>> <> <> <1183957002862> <000000> <com.bea.common.security.internal.service.ChallengeIdentityAssertionServiceImpl.getChallengeToken(WWW-Authenticate.Negotiate)>
    <<WLS Kernel>> <> <> <1183957002862> <000000> <com.bea.common.security.internal.service.ChallengeIdentityAssertionTokenServiceImpl.getChallengeToken(WWW-Authenticate.Negotiate)>
    <<WLS Kernel>> <> <> <1183957002862> <000000> <com.bea.common.security.internal.legacy.service.ChallengeIdentityAssertionProviderImpl$ChallengeIdentityAsserterV2Adapter.getChallengeToken(WWW-Authenticate.Negotiate)>
    <<WLS Kernel>> <> <> <1183957002862> <000000> <Unauthorized, sending WWW-Authenticate: Negotiate>
    <<WLS Kernel>> <> <> <1183957003268> <000000> <NegotiateIdentityAsserterServletAuthenticationFilter.doFilter() called>
    <<WLS Kernel>> <> <> <1183957003268> <000000> <CERT auth type found for webapp>
    <<WLS Kernel>> <> <> <1183957003268> <000000> <All request headers:>
    <<WLS Kernel>> <> <> <1183957003268> <000000> < Header: Accept : image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*>
    <<WLS Kernel>> <> <> <1183957003268> <000000> < Header: Accept-Language : en-us>
    <<WLS Kernel>> <> <> <1183957003268> <000000> < Header: UA-CPU : x86>
    <<WLS Kernel>> <> <> <1183957003268> <000000> < Header: Accept-Encoding : gzip, deflate>
    <<WLS Kernel>> <> <> <1183957003268> <000000> < Header: User-Agent : Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; .NET CLR 1.1.4322)>
    <<WLS Kernel>> <> <> <1183957003268> <000000> < Header: Host : 10.31.252.182:7001>
    <<WLS Kernel>> <> <> <1183957003268> <000000> < Header: Connection : Keep-Alive>
    <<WLS Kernel>> <> <> <1183957003268> <000000> < Header: Cookie : JSESSIONID=0nRcGRQKvcpzV8wQPVX584Pxwly4GrpTdQGGGYGGb4Z62Rs1GLVv!542382297>
    <<WLS Kernel>> <> <> <1183957003268> <000000> < Header: Authorization : Negotiate TlRMTVNTUAABAAAAB7IIogoACgAvAAAABwAHACgAAAAFAs4OAAAAD0RFU0tUT1BGRURFUkFUSU9O>
    <<WLS Kernel>> <> <> <1183957003268> <000000> < processing header: Negotiate TlRMTVNTUAABAAAAB7IIogoACgAvAAAABwAHACgAAAAFAs4OAAAAD0RFU0tUT1BGRURFUkFUSU9O>
    <<WLS Kernel>> <> <> <1183957003283> <000000> <SPNEGONegotiateToken.discriminate: not Application Constructed Object, not SPNEGO NegTokenInit token>
    <<WLS Kernel>> <> <> <1183957003283> <000000> <Token not supported by Negotiate Filter, ignoring: NTLM>

    Another question.
    When you configure Spnego and sso, do you also need to configure an active directory authenticator ??
    I think I have the SSO part working - it does kerberos authentication and gets the username, howerver after taht it fails because it tries to do an LDAP authentication with that username.
    <LDAP Atn Login username: kerbuser01>
    <[Security:090300]Identity Assertion Failed: User kerbuser01 does not exist
    Any pointers ?

  • New and need help - drag and drop with dynamic text

    So I'm doing this project and as an animator I'm not familiar with the whole action script side of flash
    Okay so far I've managed to create the whole Drag and Drop feature and it works well, the thing is I want to make it so when you drag in object in the correct spot and new text appears, and I need like six different object with the dynamic text. but I have no idea how to integrated it in my code or where I should start!
    So i based myself on some tutorial so theres some code in there that had dynamic text, but not exactly what i wanted
    Your help would be much appreciated!
    This is my code:
    var counter:Number = 0;
    var startX:Number;
    var startY:Number;
    six_mc.addEventListener(MouseEvent.MOUSE_DOWN, pickUp);
    six_mc.addEventListener(MouseEvent.MOUSE_UP, dropIt);
    five_mc.addEventListener(MouseEvent.MOUSE_DOWN, pickUp);
    five_mc.addEventListener(MouseEvent.MOUSE_UP, dropIt);
    four_mc.addEventListener(MouseEvent.MOUSE_DOWN, pickUp);
    four_mc.addEventListener(MouseEvent.MOUSE_UP, dropIt);
    three_mc.addEventListener(MouseEvent.MOUSE_DOWN, pickUp);
    three_mc.addEventListener(MouseEvent.MOUSE_UP, dropIt);
    two_mc.addEventListener(MouseEvent.MOUSE_DOWN, pickUp);
    two_mc.addEventListener(MouseEvent.MOUSE_UP, dropIt);
    one_mc.addEventListener(MouseEvent.MOUSE_DOWN, pickUp);
    one_mc.addEventListener(MouseEvent.MOUSE_UP, dropIt);
    function pickUp(event:MouseEvent):void {
        event.target.startDrag(true);
    reply_txt.text = "";
    event.target.parent.addChild(event.target);
    startX = event.target.x;
    startY = event.target.y;
    function dropIt(event:MouseEvent):void {
        event.target.stopDrag();
    var myTargetName:String = "target" + event.target.name;
    var myTarget:DisplayObject = getChildByName(myTargetName);
    if (event.target.dropTarget != null && event.target.dropTarget.parent == myTarget){
        reply_txt.text = "Good Job!";
    event.target.removeEventListener(MouseEvent.MOUSE_DOWN, pickUp);
    event.target.removeEventListener(MouseEvent.MOUSE_UP, dropIt);
    event.target.buttonMode = false;
    event.target.x = myTarget.x;
    event.target.y = myTarget.y;
    } else {
    reply_txt.text = "Try Again!";
    event.target.x = startX;
    event.target.y = startY;
        if(counter == 6){
            reply_txt.text = "Congrats, you're finished!";
    six_mc.buttonMode = true;
    five_mc.buttonMode = true;
    four_mc.buttonMode = true;
    three_mc.buttonMode = true;
    two_mc.buttonMode = true;
    one_mc.buttonMode = true;

    where you have
    xxx.text = ....
    is where you're assigning text.

  • Need help on ammount formating with num{$z,zzz,zz9.99}

    Hi All
    Need help in formating the amount fields.
    Currently I am using num{$z,zzz,zz9.99} Its working fine for positive ammount value.
    But for negative amount its giving output as $-18,970.50
    Expected out is -$18,970.50
    need '-' sign before $
    Thanks,
    Abhijit

    issue resolved by setting pattern as  = num{z$z,zzz,zz9.99}

  • Need Help ASAP!! with iPod Classic 80GB

    This is my first apple product and it is not giving a good impression. I need help eargently!
    I Sync 2969 songs onto my ipod for first time 2 days ago using latest Itunes it worked great and i was happy just my ipod didnt have all the album art, so the next day i plugged it in and put all the album art to the correct albums which went fine, then i wanted to add another album. I clicked sync to update the library on my ipod and it started transfering at a sluggish speed simular to this 1....2....3....4....5....6 etc it eventually got to 196 out of 1248 and stopped and 2 mins later itunes crashed. so the only way i could remove my ipod was to pull it out without ejecting it i then tried to look for the songs and what do you know it said on my Ipod 0 Music..... I was gob smacked i put it back in, in hope for it to sync again but ever since then it continues to do that, but i can manually transfer max 4 albums by drag and drop, at a time before itunes crashes. I am seriously going to throw it in the bin soon if i cant get it working and i will never ever buy an apple product again, i love the idea of the iPod but there to faffy! compared to a standard MP3 player..
    PLEASE HELP ME i have tried restoring it many times, ive tried resetting it holding menu button and select button. and i have also tried another way were you restard the ipod and during the apple logo you quickly hold play which formats it..
    please help me!! apples help lines are useless!

    You do understand that this is a user-to-user forum? That we're all volunteers? And this is a weekend? You may need to be a bit more patient.
    If I had an answer I would be happy to try to help. When you say you've tried "restoring" it, do you mean that you've hooked it up to your computer and pressed the "Restore" button in iTunes? If not, that's the next thing you should try.
    I know you've tried a few things but it wouldn't hurt to go through the standard trouble shooting steps:
    http://www.apple.com/support/ipod/five_rs/
    Best of luck.

Maybe you are looking for

  • How to use toplink "build expression"  with soundex function

    We are using toplink experssion builder to build the query. can any one help me on build a query with soundex using toplink.. for example : SELECT last_name, first_name FROM hr.employees WHERE SOUNDEX(last_name) = SOUNDEX('SMYTHE');

  • 1:2 Message Mapping WithOut BPM - Split mapping created no messages Error

    Hi, I am a new-bie to SAP PI and am trying out the following scenario without BPM. Make multiple files based on Age received from input file.Input File contains Name,DOB and Output File contains Name, Age. I want to create 2 files, one containing det

  • Loading flat idoc via report RSEINB00 into integration server fails

    Hi, we have PI/700. We get idocs (in flat format NOT XML) via filesystem from an external partner. Now I try to load these idocs with the report RSEINB00 into my integration server. My problem is, that the report says that the sender port + client(of

  • Callibration Grid in EHP5 not showing

    Hi, We are in ECC 6.0 EHP5 SP26. We are implementing Talent Management currently. We have already configured the calibration grid, but the grid is not showing in EP. We have activated the business function and business package required : Business Fun

  • Default a check mark in MARC_XCHPF during Create Material Master

    Hi, We are changing the field setting for MARC_XCHPF to be mandatory for Material Type HAWA.  Is there a way in configuration that the check mark for MARC_XCHPF can be defaulted in during the Material Master Creation (example: MM01, MMH1).  Is it con