SSO configuration in BW system

Hi,
We configure SSO between EP and BW system.The basis people maintain th eportal in the below path .
1.In SPRO >select sap netweaver>Business intelligence >Bi integrated Planning>settings for starting the planning modeler.
There u can give free URL prefix: http://select start modeler. (it directs u to portal system)
Performing step 1 and 2 I end up with the missing component error below for portal. According to Note 919850 - Problems with the planning modeler and the planning wizard à Solution 1d) In particular, check the version of the BI-REPPLAN and BI-WDALV software components. These components are missing in portal side and thatu2019s whatu2019s causing the error when clicking on u2018Start Modeler u2018 in RSPLAN.
Here shall we install the missing components directly or any other solutionis available to solve this error ?
Please share your inputs.
Reagrds,
Suresh

Hi Suresh ,
OK SP 18 is latest .
If u have lower SP level then run rsport_setup for BI-Portal integration
if higher then run template from NWA.
1.Run the template .
GO to http://<domain name>:port/nwa
select deploy
Select BI-Java / Technical configuration of BI-Java (repeatable, reproducible)
start the configuration. prerequisites are mentioned there .follow the prerequisites. and start .
the only one step config in higher version.
2. while running the tempaltes system object wil be automatically created ,u need not to create system object in system def.
3. enable BI jco's .
4 Test the system object.
5. now do stteings in SPRO (what i mentioned earlier) .
Regards,
Surekha.

Similar Messages

System connection test in EP: SSO configurated error

hi experts, i get a problem in EP conncet SRM . i don't know too much is this area, please give some advices.
what i have done:
   1 download Certification file from EP (*.der)
   2 import certification firle into SRM system thorugh TCode: STRUSTSSO2, and restart server
   3 Check Tcode：SSO2 in SRM System, get the greed light. then i add this SRM system into Trusted system in the http://hostname:port/ SSO
   4 logon EP(http://hostname:port/irj/portal ) , >>System administration >>system configuration , create New System and maintain related parameters and alias:
      1) Application Host =u201Dgexiaoduu201D
   2)Logical System name=u201DLCSRMu201D
   3)SAP Client= 001
      4)SID=SRM
      5)System type =SAP R3
      6)User mapping type = admin, user
      7)Web AS Protocal = http
5 when i made a "connection test", i got messages as below:
      check the connction to the backend application using defined in the system object results
      Retrival of default alias successful
     Connection failed. make sure that Single Sign-on in configured correctly.
what should i do to correct this problem?
      claud

Hi ,
Please take a look at the below links.
http://wiki.sdn.sap.com/wiki/display/EP/8EstablishSingleSignOnbetweenPortal%28frontend%29andESS6.0%28backend%29
Connecting SAP systems to Enterprise portal with SSO.
http://wiki.sdn.sap.com/wiki/display/EP/HowdoItestSSO
Thanks,
Sandip

11.1.2.1 SSO configuration

We are trying to setup SSO integration between Hyperion and EBS 12.1.3 for seamless drill down.
EBS SSO integration is working fine, but Hyperion integration fails. After OAM authentication the workspace screen is not shown but EPM login screen is shown.
Steps performed:
1. Registered Partner application on OAM.
2. Added mod_osso.conf in http.conf(EPM_ORACLE_INSTANCE/httpConfig/ohs/config/OHS/
ohs_component/httpd.conf)
3. Configure the OID that the OSSO solution uses as an external user directory.
4. Enable SSO in the EPM System - OSSO as the identity management solution (Proxy-
Remote-User as the name of the custom HTTP header)
5. Restart services.
http://<Server>:<port>/interop/index.jsp redirects to OAM screen and after authentication, the EPM application login is shown.
Please help if somebody has any detailed guide(other than EPM security Guide - standard documentation) for SSO setup.

Hello,
Actually the config of SSO, it is not for EAS, but rather for the addin 'in excel, but I have to create my cubes in eas of sudden I pass by adding essbase server, so when I add my I leave server essbase Use Single Sign On, but I checked the error message.
So I thought it was due to provisioning, I added in my file css_config.xml lines above but
<msad name="msad1">
<trusted> false </ trusted>
<url> ldap :/ / w2k8-6: 389/DC = local, DC = lan </ url>
<userDN> cn = ssouser </ userDN>
<password> password123% </ password>
<authtype> simple </ authType>
<authProtocol> </ authProtocol>
<identityAttribute> dn </ identityAttribute>
<user>
<url> CN = Users </ url>
<loginAttribute> sAMAccountName </ loginAttribute>
<fnAttribute> givenName </ fnAttribute>
<snAttribute> </ snAttribute>
<emailAttribute> </ emailAttribute>
<objectclass>
<entry> person </ entry>
<entry> organizationalPerson </ entry>
<entry> user </ entry>
</ objectclass>
</ user>
<group>
<url> CN = Builtin </ url>
<nameAttribute> cn </ nameAttribute>
<objectclass>
<entry> group? member </ entry>
</ objectclass>
</ group>
<property>
<key> com.hyperion.css.followReferral </ key>
<value> true </ value>
</ property>
</ MSAD>
But nothing.
In summary I have a essbase standalone, and I want to configure SSO for add'in essbase and connected with my past without MSAD by shared services.
Thank you in advance for your sharing!

SSO Configuration in UNIX Environment

Hi,
We are planning to impliment SSO between 2004s Portal with R/3, BW, and host of other non SAP application which supports SSO. All the applications are hosted in UNIX environment.
Could anyone help us in understanding the pros and cons of having SSO in unix envrionment. Also you could give us any document (other than help.sap.com) which guides us in configuring will be of great help.
Thanks
Vivek Raj.

Hi,
There are no pros and cons for <b>SSO on Unix</b>. Needless to mention, the pros and cons of different operating systems supported by SAP.
The steps involved to configure SSO remains the same for any of the SAP backend systems:
1) Create a system on Portal and give a system alias to it.
2) Download the verify.der file from Portal (System Administration -> System Configuration -> Keystore Administration)
3) Log on to the backend SAP system.
4) Use transaction STRUSTSSO2 and import the Portal certifcate (verify.der) to the SAP R3 or SAP BW or SAP CRM or for that matter any SAP system with ABAP stack.
5) Give the values for EP system ID, client and language. Refer to this link : http://help.sap.com/saphelp_nw2004s/helpdata/en/78/f1a8490e7011d6999500508b6b8a93/content.htm
6) Configure the backend SAP systems to accept and verify the logon ticket. Use RZ10 and set the parameters : login/accept_sso2_ticket=1 and login/create_sso2_ticket=1
7) Restart your R3 or BW system.
For non-SAP systems, can you just let me know which systems are you referring to ?
Incase you need a document for SSO configuration, do send me your email address. You can also find documents in SDN Library.
Regards,
Sunil

SAP CRM to ECC - SSO Configuration - Logon Language Setup

Hi All,
I am a BASIS consultant currently handling one CRM project. I need a help in configuring SSO between CRM and ECC. Now SSO is not configured, so When I click on the External Link created in CRM calling an ECC transaction, it requests for Client/UserID/Password/LogonLang for the ECC system. Here it takes Logon Language as same as what I have logged in CRM. Hope once SSO configured it will check only for the userID and log into ECC without requesting any further details. But the issue here is we are planning to have additional languages in CRM but not in ECC. So whenenver user logs in CRM with language other than EN - english (eg. FR), and when tried to login to ECC with the external link from CRM, by default ECC login needs to be logged in with language EN, as FR will not be available in ECC. I do not find any logon language configuration in SSO, how can we achieve this, logging into language FR in CRM, logging in EN when clicking External ECC link? Configuring Logon Data defaults (in SU01) in ECC, restricting to logon language EN, will not help I hope. Please advise.
Thanks in advance.
Regards,
Shahul

Hi Srikishan,
Thanks for the response. When user from CRM logged in another language than EN for eg. FR, clicks on external link in CRM, takes to EN, only if that language FR is not installed in ECC, else it will take to the same language in which CRM user logged in. This cannot be controlled in SSO configuration. Is this correct?
In case if FR is installed in both the systems, ie CRM and ECC, but user wants to log only to EN when clicked the external link(to ECC) from CRM, how we can configure this, Is any parameter can control or SSO setup configuration available? Please advice.
Regards,
Shahul Hameed

SAP Best Practices for SSO Configuration

Hello There,
Are there any SAP Best Practices available for SSO Configuration. If so, Kindly help me with those..
And also any Third party tools available in the market for SSO Configuration..
Appriciate your Help on this.. Thanks in advance.
Regards,
Pranay S
Edited by: Pranay Subedari on Apr 29, 2011 9:12 AM

Hello,
Types on the SSO are classified with the systems involved in configuration (i.e.) SSO between ABAP Stack and Java stack or LDAP, OS
Refer the link for more details [Document Deleted]
Regards,
Anand
Message was edited by: Jason Lax

SSO Configuration Error

Hi,
I have installed Oracle 9iAS Release2.For installation of the infrastructure and 9iAS, it needed a fully qualified domain name of the machine(say,9iASMachine and InfraMachine).To enable this, we made entries in the host files of these machines as
ip1 InfraMachine.com
ip2 9iASMachine.com
And using these virtual names,the installation went fine.
The problem now is that when we configure any J2EE application as SSO app,by making entries in mod_osso.conf,
and access the app as say,
http://9iASMachine:7778/myapp/index.html
then for authentication,it goes to http://InfraMachine.com:7777/pls/orasso/orasso.wwsso_app_admin.ls_login
After the user authentication,instead of coming back to
http://9iASMachine:7778/myapp/index.html
it goes to
http://9iASMachine.com:7778/myapp/index.html
and we get an error as :
Oracle SSO Warning - Unable to process request
Either the requested URL was not specified in terms of a fully-qualified host name or OHS single sign-on is incorrectly configured.
The same things works perfectly fine,if we access the SSO J2EE App as
http://9iASMachine.com:7778/myapp/index.html
Can we do some configuration setting in 9iASMachine Apache,so that both,9iASMachine.com and 9iASMachine, give the same results?
Thanks,
Shipra
Please notify your administrator.

Hi
Did you import the portal certificate into ECC using transcation STRUSTSSO2
login/create_sso2_ticket parameter is set in ur profiles.
Login to the below url - ECC
http://servername:Port/nwa
click on configuration
select Trusted Systems
add the Trusted system "portal" by selecting the " BY Querying the SELECTED SYSTEMS"
it will add the portal certificate to ECC
Test your connection again
Hope it works this time.
Thanks
Kiran Nekkanti

Error configuring a Managed System

Hello everybody
When I try to configure a manged system in SMD I get this error in the SSO configuration:
Failed to access RFC meta data of ADD_TRUSTED_TICKET_ISSUER on ABAP Host=xxx.yyy.net sys=00 client=550 admUser=job_admin rfcUser=job_admin gwHost=xxx.yyy.net gwPort=3300
Does anyone know what this error means and how to solve it?
Solution Manager version 701
Thank you in advanced.
Best regards
Rubé

Hello
These are our installed SP:
SAP_ABA     700     0017     SAPKA70017
SAP_BASIS     700     0017     SAPKB70017
PI_BASIS     2005_1_700     0017     SAPKIPYJ7H
ST-PI     2008_1_700     0000     -
SAP_BW     700     0019     SAPKW70019
ST-A/PI     01L_BCO700     0000     -
And the function was:
ADD_TRUSTED_TICKET_ISSUER
Hope this help you
Best regards.

Unable to view BI Publisher report with SSO configuration enabled

Hi All,
Can anybody let us know the configuration of the BI publisher with SSO enabled. We are unable to see any of the BI Publisher reports. without SSO configuration we have integration working perfectly fine with the OBIEE and Publisher.
We followed the configuration steps to integrate BI Publisher with Oracle SSO. The following are the steps:
1. deploy analytics.ear as a new application 'analyticsSOAP' in OAS
2. protect analyticsSOAP in mod_osso.conf file under OAS
3. change OBIEE Presentation services configuration to use analyticsSOAP/saw.dll
4. run credstore utility to encrypt password
5.restart xmlp server
6.restart http server
7.restart obiee server
8. restart obiee presentation service
Still we have issues when we try to accesses BI Publisher reports by clicking more Products -> BI Publisher or view reports directly on the OBIEE Dashboard
Thanks in advance.

configure one more virtual path which is unprotected from site minder. we had similar issue for Marketing and resolved by this virtual path.
ref:
http://vaandun-analytics.blogspot.com/2009/11/obi-publisher-with-empty-obi-catalog.html
Thanks
Sarathi

Is there a way to configure NTFS file system on an NSS 324 SmartStorage unit. So far I can setup ext 3 or ext 4 but no option for NTFS

Is there a way to configure NTFS file system on an NSS 324 SmartStorage unit. So far I can setup ext 3 or ext 4 but no option for NTFS. This unit should be joining a Windows Server 2008 R2 network and needs to be shared with all users. This unit will replace a File server running Win 2003 SP2.
Message was edited by: Hermann Koster
Thank you very much for your reply. The idea is to decommission the Windows file server which is running Windows Server 2003 SP2 operating system but is not running as a DC but just a member server. All this server is doing is providing file server services so my idea is to replace it with the NSS 324 box. My only concern is that when my NSS joins the domain all my users would be able to see and access network shares transparently, the same way they saw the former W2003 file server. After I transferred the data from File server I will use the same for NSS that was used for file server as well as same IP address and folders path as before.
Any suggestions or advice?
Once again thank you very much for your reply.
Cheers,

The internal HDDs must be formatted in either EXT3 or EXT4 file system because NSS uses Linux OS. This is mainly because the RAM designed to fit with the customized Linux OS's size.
You can connect to an external HDD via a USB or eSATA port. The external HDD's file system can be NTFS, FAT32, AFT or EXT3/4 to be recognized for read/write. You can connect a 2TB USB/eSATA drive connec to the NSS via USB port to format your HDD for NTFS, AFT, FAT32, or EXT3/4 partition.
You can join the NSS to a Windows domainr so all domain users to access NSS. You cannot replace the NSS for the Windows 2003 SP2 server. They are two different products and do different jobs. Windows server is features sets server while the NSS is the files/data server.
Hope that helps!!

Getting an error while configuring VMM for System Center 2012. error - An internal error has occurred trying to contact an agent on the WIN-NTJU8CNU server: : . Ensure the agent is installed and running.

Hi,
I am trying to install "System Center 2012 - Virtual Machine Manager by Using a Pre-Configured VHD".
I downloaded install guide & the binaries from http://www.microsoft.com/en-us/download/details.aspx?displaylang=en&id=10712
I have followed the installation document & getting an error while configuring VMM for System Center 2012.
error details from log file given below:
01:12:24:VMMPostinstallProcessor threw an exception: Threw Exception.Type: Microsoft.Carmine.WSManWrappers.WSManProviderException, Exception.Message: An internal error has occurred trying to contact an agent on the WIN-NTJTNEJ1UCN.mydomain.com server: : .
Ensure the agent is installed and running. Ensure the WS-Management service is installed and running, then restart the agent.
01:12:24:StackTrace:   at Microsoft.Carmine.WSManWrappers.ErrorContextParameterHelper.ThrowTranslatedCarmineException(WsmanSoapFault fault, COMException ce)
   at Microsoft.Carmine.WSManWrappers.WsmanAPIWrapper.RetrieveUnderlyingWMIErrorAndThrow(SessionCacheElement sessionElement, COMException ce)
   at Microsoft.Carmine.WSManWrappers.WsmanAPIWrapper.Invoke(String actionUri, WSManUri targetUri, Hashtable parameters, Type returnType, Boolean isCarmineMethod, Boolean forceResponseCast)
   at Microsoft.Carmine.WSManWrappers.AgentManagement.AssociateLibrary(WsmanAPIWrapper wsmanObject, String CertificateSubjectName, String& ExportedCertificate, ErrorInfo& ErrorInfo)
   at Microsoft.VirtualManager.Setup.VirtualMachineManagerHelpers.AssociateAgentServer(String fullyQualifiedServerName)
   at Microsoft.VirtualManager.Setup.VirtualMachineManagerHelpers.AssociateDefaultLibraryServer()
   at Microsoft.VirtualManager.Setup.VirtualMachineManagerHelpers.SetupLibraryShare()
   at Microsoft.VirtualManager.Setup.InstallItemCustomDelegates.PangaeaServerPostinstallProcessor()
01:12:24:InnerException.Type: System.Runtime.InteropServices.COMException, InnerException.Message: There is a time and/or date difference between the client and server.
01:12:24:InnerException.StackTrace:   at WSManAutomation.IWSManSession.Invoke(String actionUri, Object resourceUri, String parameters, Int32 flags)
   at Microsoft.Carmine.WSManWrappers.MyIWSManSession.Invoke(String actionUri, Object resourceUri, String parameters, Int32 flags)
   at Microsoft.Carmine.WSManWrappers.WsmanAPIWrapper.Invoke(String actionUri, WSManUri targetUri, Hashtable parameters, Type returnType, Boolean isCarmineMethod, Boolean forceResponseCast)
01:12:24:ProcessInstalls: Running the PostProcessDelegate returned false.
01:12:24:ProcessInstalls: Running the PostProcessDelegate for PangaeaServer failed.... This is a fatal item. Setting rollback.
01:12:24:SetProgressScreen: FinishMinorStep.
01:12:24:ProcessInstalls: Rollback is set and we are not doing an uninstall so we will stop processing installs
I have completed MSSQL server configuration and while configuring VMM the below error displayed in the wizard:
An internal error has occurred trying to contact an agent on the WIN-NTJTNEJ1UCN.mydomain.com server: : .
Ensure the agent is installed and running. Ensure the WS-Management service is installed and running, then restart the agent.
I have checked that the following services are running:
1) Verified WS-Management srvice 2) MSSQL server + MSSQL (agent) 3)SC VM Manager Agent 4) Windows management instrumentation .
I have joined the VM (on which installing SC VMM) in a domain(as per install guide) and installing VMM using domain account & it is in local Administrators group.
Also I would like know if there is any stand alone SC VMM installer. If yes then please let me know the installer location & install guide.
thanks.
====

Have you installed AppController on the same machine with VMM?

Trying to download icloud control panel - only getting so far. Got message: The installer encountered errors before iCloud Control Panel 2.1.2 could be configured. Your system has not been modified. To retry these operations at ltr time, pls run again.

First time on here... so not sure if doing correctly.
I'm tryng to download icloud control panel to my PC (have Windows 7 - so should be ok). I only get so far - 2 times I've tried it. Keep getting message:
The installer encountered errors before iCloud Control Panel 2.1.2 could be configured.
Your system has not been modified. To retry these operations at a later time, please run the installer again.
huh?

As I mentioned before you need to start the iTunes installation, then do NOT allow it to complete. In other words go all the way to the point that the installer extract the installation files, then STOP right there.
Now look for the temp folder and the files I mentioned in my initial posting. If you don't find the temp folder it may be because you have "Do not show hidden files and folder" selected under "View Tab" in the "Folder Options". You may need to unselec it. If you don't know about hidden files and folders in Windows XP take a look here: http://txpress.blogspot.com/2007/05/show-hidden-filesfolders-in-windows.html
Another possibility is that you may have a different path for your temp folders. To find out where you temp folders are located please do the following:
- Right click on "my computer"
- Select the "Advanced" tab
- Click on "Environment Variables"
Then look for the path for both variables "TEMP" and "TMP" take note of the path and check them out.
Or you may just go to a DOS Prompt and type the following commands:
1 - %temp% and hit enter
2 - %tmp% and hit enter
to both of these commands you will get a reply such as:
'c:\temp' is not recognized as an internal or external command, operable program or bath files.
So by looking at the reply you can see that my temp folder is c:\temp
The above is the temp folder on my machine which I've customized to my own use. Your machine may be different.
I suggest you check for the iTunes temp folder inside both your temp folders locations "TEMP" and "TMP" as they may be in different locations.
IMPORTANT NOTE: If you allow the iTunes installation to complete you will NOT SEE the iTunes temp folder and files because it will be deleted as soon as iTunes processes the installation.
Hope it helps.

HT1926 After installing the lates version of iTunes, a bubble pops up and says, "iTunes installation complete, Error occured during installation before iTunes could be configured. Your system has not been modified.." How do I correct this?

After installing the lates version of itunes on my Sony Vio, a bubble pops up which says:
iTunes installation complete, ERROR occured during installation before iTunes could be configured. Your system has not been modified. To complete the installation process, run the installation again.
I did this, but this bubble keeps appearing. What do I need to do?

Hello there, glenkram.
The following article outlines great steps to try for troubleshooting your very issue:
Issues installing iTunes or QuickTime for Windows
http://support.apple.com/kb/ht1926
Thanks for reaching out to Apple Support Communities.
Cheers,
Pedro.

Steps to configure R/3 system to Portal implementation

Hi
Please provide steps to configure R/3 system to Portal implementation
when i m opening standard iview in ESS in portal i m getting following runtime error.
com.sap.tc.webdynpro.services.exceptions.WDRuntimeException: Failed to resolve JCO destination name 'SAP_R3_SelfServiceGenerics_MetaData' in the SLD. No such JCO destination is defined in the SLD.
Please help
Thanks

Hello Bhupinder Singh,
To use ESS/MSS services in Portal follow the following Steps
Maintaining jCo Connections
Use
jCo connections are used in iViews to connect directly to a backend. They are delivered with the portal content and must be activated (configured to access a specific system).
jCo connections have two parts: one with <jCo name>, and the other with suffix <jCo Name>_MetaData. The first one transfers user-specific data within the scenario; the other transfers only the needed metadata. For the jCo with name <jCo name>, SAP Logon Ticket is recommended as an authentication method. For the metadata connection, a user ID and password is needed. A system user created before is sufficient.
Procedure
Within this guide we generically describe the step-by-step procedure for an example connection set. Perform all steps for the following jCos:
u2022     SAP_R3_Financials / SAP_R3_Financials_Metadata
u2022     SAP_R3_HumanResources / SAP_R3_HumanResources_MetaData
u2022     SAP_R3_SelfServiceGenerics / SAP_R3_SelfServiceGenerics_MetaData
u2022     SAP_R3_Travel / SAP_R3_Travel_MetaData
u2022     SAP_R3_SelfServiceGenerics_MetaDataFIN
1.     Open the Web Dynpro Tool Applications overview page of your SAP NetWeaver Application Server Java: (http://<host>.<domain>:<port>/webdynpro/welcome)
2.     Select the Content Administrator link (or use a direct link, such as http://<host>.<domain>:<port>/webdynpro/dispatcher/sap.com/tcwdtools/Explorer) and logon with j2ee administrator rights
3.     Choose the Maintain JCo Destinations button.
4.     The available jCos are displayed with a red light, indicating that they are not yet maintained.
5.     In the JCo Destination Details iView, choose the Create button for the jCo you want to create.
6.     In Guided Procedure Section 1: General Data, make the following entries:
Field name     User action and values     Note
Name     <jCo_Name> or <jCo_name>_Metadata     Do not change the client number (for example, 100)
Maximal Pool Size     <keep default value>
Maximum connections     <keep default value>
Connection Timeout (msec.)     <keep default value>
Maximum Waiting Time (msec.)     <keep default value>
7.     Choose Next.
8.     In J2EE Cluster, make the following entries:
Field name     User action and values     Note
Use Local J2EE engine <SID> on <host>     Selected     Keep default values
9.     Choose Next.
10.     In Connection Type u2013 Data Type, make the following entries:
Field name     User action and values     Note
Data Type     Dictionary Meta Data     Dictionary Meta Data selected for <jCo_name>_MetaData; Application Data selected for <jCo_name> maintenance
Destination Type     Load-balanced Connection (recommended)     For Dictionary Meta Data Connection, the value cannot be changed
11.     Choose Next.
12.     In Msg. Server Connection, make the following entries:
Field name     User action and values     Note
Message Server     <select message server for your SAP ERP HR system>     The values are taken from the technical system list of the SLD
Logon Group     <select logon group for your SAP ERP HR system>     The values are taken from the technical system list of the SLD
13.     Choose Next.
14.     In Security u2013 User Authentication, make the following entries:
Field name     User action and values     Note
Used Method     <if using <jCo_name>, select Ticket>
<if using <jCo_name>_Metadata, value cannot be changed>
Name     <enter connection user name>     For example, rfcsysuser
Password/Confirm Password     <enter a password>
Language     English
SNC Mode     Off     For more information on SNC Mode, see the SAP NetWeaver 7.0 Help.
15.     Choose Next.
16.     In the Summary step, verify your settings, then choose Finish. The system displays a positive status message.
17.     In the JCo Destination Details iView, choose the Test link. The system displays a positive status message.
If the test fails, try to ping the ABAP system using the URL link. Check your settings, especially SLD, and certificate upload.
Let me know weather your problem solved or not.
Please reward points if helpful
Please close the thread if problem solved
Thankyou,
Regards
Vijai

CRM single sign on (SSO) to R/3 system via ITS 6.20

Hi all
I try to configue CRM2007 single sign on (SSO) to R/3 system via ITS 6.20.
my configuraion process
1. on CRM2007
-profile : login/accept_sso2_ticket = 1
              login/create_sso2_ticket = 2
- t-code : strustsso2 --> export system PSE
2. on R/3 system
- profile : login/accept_sso2_ticket = 1
               login/create_sso2_ticket = 0
- t-code : strust --> import certification --> add certification list --> save
- t-code : oss2 --> execute with crm rfcdestination --> all green.
3. ITS
~appserver      r/3.domain
~client
~clientcert      1
~cookies      1
~exiturl
~hostsecure      itshost.domain
~hostunsecure      itshost.domain
~language
~login
~logingroup
~messageserver
~multiinstanceservices      1
~password
~portsecure      443
~portunsecure      80
~routestring
~runtimemode      pm
~systemname      R/3 SID
~systemnumber      R/3 system no
~theme      99
~timeout      600
~urlimage      /sap/its/graphics
~urlmime      /sap/its/mimes
~usertimeout      240
~xgateway      sapdiag
~xgateways      sapdiag,sapxgwfc,sapxginet,sapextauth
~mysapcomgetsso2cookie
~mysapcomusesso2cookie 1
~mysapcomssonoits 1
for SSO check, execute web ui and then log on web ui
I go to the Interation center and then go to the ERP information.
but ITS log on screen appear.
crm user and r/3 user is same.
how can I do ??

You use Server Port 3600, message server.
It means, while creating a system you used wrong template and picked "SAP system using dedicated application server".
You should use "SAP system with load balancing", since message server is doing load balancing.
Once you selected correct template you will see "Message Server" instead of App and GW servers.
Make sure to fill in
Group - Logon group to use. If not defined in R3, use SPACE
Message Server - ansapdev01
SAP Client = 150
SAP System ID <SID> = DEV
Server Port 3600
System Type = SAP R/3
It should work.
Regards,
Slava

SSO configuration in BW system

Similar Messages

Maybe you are looking for