SSO is not working for an Alias URL but is working for original portal URL

Hello,
We have a BSP running inside the portal and expects authentication.
When I run this BSP using the portal regular address everything is working OK and SSO is working after logging into the portal.
At next step, we have configured an alias for the portal URL at the DNS Server.
When activating the BSP from the alias URL it asks for 2nd authentication. Meaning, SSO is not working after logging into the portal.
I have activated an HTTP trace in order to see why and it seems like when running it from the alias name it recognizes it as a different domain and I assume this is why the authentication is coming up.
I would like to suppress this for the alias URL but don't know how.
I found this UME property on the server:ume.logon.security.relax_domain.level
This UME property controls the amount of sub domains to remove from the server name to obtain the domain for which the logon ticket is valid.
I have changed this property from its default value 1 to 3 (and restarted the server of course) which, in our case, leaves only ourCompany.com for the ticket in the original server URL. Yet, the authentication pop up is still not supressed when browsing through the alias URL.
Any idea what can I do next?
Thanks,
Roy

Hi Dezso,
I found the 401 let me know if I look on it right:
I have an entry node with two subnodes: request and response.
The response has:
<responseStatus>HTTP/1.1 401 Unauthorized</responseStatus>
And the request before that doesn't have any MYSAPSSO2 in it, all it has which is related to cookies is this:
<header name="Cookie">UserUniqueIdentifier=1174345919524; alreadyLogged=1179560552416</header>
<cookies>
<cookie name="alreadyLogged">1179560552416</cookie>
<cookie name="UserUniqueIdentifier">1174345919524</cookie>
</cookies>
Can you advice what to do next?

Similar Messages

  • When I go to yahoo with my iPhone 6  the pages will not enlarge when I pinch them but it works on my iPad. Does anyone know what's wrong?

    When I go to yahoo with my iPhone 6  the pages will not enlarge when I pinch them but it works on my iPad. Does anyone know what's wrong? Also the same on boyfriends phone he's eith Virgin and I'm with Vodafone do it cant be the providers.

    Thanks for the link but none of those described the problem. No error message pops up. It just says "Accessing Itunes Store" but it never actually does. This only occurs when my iPhone is plugged in though.

  • HT201412 Safari could not open the page because the server stopped responding- new ipad mini's (2 from separate places) are not working with At & T router but computers work. Can you please help me. I've tried everything. Thanks ya'll!

    Safari could not open the page on my new ipad mini's because the server stopped responding- new ipad mini's (2 from separate places) are not working with At & T router but computers work fine. Yesterday I got it to work. Weird. Can you please help me. I've tried everything. Thanks ya'll!

    Hello SavannahSweetie,
    I was looking into the issue you are desribing, and found a great article for troubleshooting wifi connections with iOS devices. It's called iOS: Troubleshooting Wi-Fi networks and connections and can be found here: http://support.apple.com/kb/ts1398.
    Start with this section, and work your way down if needed.
    Basic troubleshooting
    Tap Settings > Wi-Fi and turn Wi-Fi off and then on again.
    Verify that you are in range of your Wi-Fi router or base station.
    Confirm that your Wi-Fi router and Cable/DSL modem are connected to power and turned on.
    Check whether other devices (portable computers, for example) are able to connect to the Wi-Fi network and access the Internet.
    Update your Wi-Fi router to the latest firmware.For AirPort Base Stations, refer to this article for information about firmware updates. For third-party Wi-Fi routers, check the manufacturer's website for details on updating your firmware.
    Restart your iOS deviceHold the On/Off button until "slide to power off" appears. Slide to power off your device. When it is off, press the On/Off button to turn it back on.
    All the best,
    Sterling

  • My icloud account keeps telling me that my user name or password for icloud is incorrect but it works for downloading apps etc and joining this forum

    my icloud account keeps telling me that my user name or password for icloud is incorrect but it works for downloading apps etc and joining this forum

    Accessing the itunes store and joining this forum are different accounts than an icloud account, so it's not necessarily true that your ID for icloud is the same as for itunes.
    Did you set up an icloud account?
    To create a new icloud account, go to
    http://www.apple.com/icloud/setup/

  • Apps are not working on my iPhone 4S but they work on my wifes iPhone 4

    Apps are not working on my iPhone 4S but the work on my wife's iPhone 4.

    You have to swipe once more (left to right motion).

  • We have two company user,till now there are using same URL.but they wanted to access particular URL to related company user in single server

    Hi Experts,
    We have two company user,till now there are using same URL.but they wanted to access particular URL to related company user in single server.
    As per my knowledge ,it is possible through create new aliases with different URLs in network.
    But i dont how to create. Please help on this.
    Thanks in advance.
    Regards,
    Prasad

    Hi Prasad,
    Please explain in clear english as to what is your requirement. I got lost after "two company user" . I suppose it means there are users from two separate company: A and B. They were using same portal till now: http://commonportal:50000/irj/portal.
    Now they need different urls - specific for each company say companyAportal.com and companyBportal.com. But still the same old common portal in the end.
    If that's your requirement please search the forum with correct terms, else "Google".
    Thanks,

  • Incoming Email not working for one web app, but IS working for others in same farm.

    I have enabled incoming email in a large multi-web application farm running SharePoint 2013 SP1 and the Feb 2015/March 2015 CUs that were pushed down in Windows Updates.  It works just fine for two web applications, but it will not work for one particular
    web application. I see the email land in the /drop folder. If I remove the email address from the library in http://nonworkingapp web
    application and use it on a library in a http://working web application, then the email is processed successfully. Conversely,
    if I take an address from a library in http://working and move it to a library inhttp://nonworkingapp it
    does not work. I've tried multiple site collections on http://nonworkingapp. This rules out any SMTP issues, etc. and means
    the issue is bound to this web application. Permissions are the same between the "non-working" and "working" locations: domain users are members on the site, and the library inherits permissions from the site.  The App Pool and Timer
    Service accounts have rights to the folder and to the library.
    The error in the ULS log is the typical error processing message, but it gives no additional information even though I have enabled Verbose logging.
    The Incoming E-Mail service has completed a batch. The elapsed time was 00:00: 00.0156294. The service processed 2 message(s) in total. Errors occurred processing 2 message(s): Message ID: Message
    ID:
    Typically, you see "alias not found" or some permissions or quota issue here, but this issue is NOT the same as those. In this case NO additional information is provided in ULS.
    Edit: running stsadm.exe -o refreshdms -url http://one/failing/site fixed some similar issues where "Unknown alias" was
    reported even though the list did have an alias (see here:http://blogs.technet.com/b/vinitt/archive/2009/07/15/e-mail-enabled-list-alias-information-is-not-synchronized-between-configuration-database-and-content-database.aspx).
    This did not fix the issue for the case mentioned above.
    What could possibly be the issue preventing incoming email from working on this one web application?

    Thanks for your reply.  Incoming E-Mail was running on all 3 WFE, however I do not think this was the cause.  As noted, _other_ emails send to http://workingapp are working just fine.  I can send two emails - one to a library on http://workingapp
    and another on http://notworkingapp.  The email to http://notworkingapp will sit in the drop folder, while the one to http://workingapp will be processed correctly.  In addition, the ULS log on WFE1 indicates an attempt to process the file fails.
     So clearly, the timer job on WFE1 is running and attempting to process the file.  For kicks, I disabled the service on WFE2 and WFE3, but with no change in the behavior.
    WRT to #1, I have done this already (as noted in the original post).  I can remove an alias from http://workingapp and place it on http://nonworkingapp and it is not processed.  If I return it to http://workingapp it is processed.  In other
    words, I go into Library Settings -> Incoming Email for a working library, and copy the alias, then disable incoming email for that library.  I then go to Library Settings -> Incoming Email for a non-working library, enable incoming email, and paste
    the alias.  Once done, emails sent to the alias are not processed.  I then do the reverse, and it works again.
    On #2, I have already tried multiple libraries on http://nonworkingapp (also as noted in the original post).
    In my environment, incoming email does not work for any library on http://nonworkingapp, but does work for any library on http://workingapp.  Troubleshooting listed above has ruled out any problem with basic mail server configuration or library settings
    - the problem is bound to http://nonworkingapp
    I'm not sure what you mean by "steps to reproduce the issue".  If I knew that, I would probably be able to solve the issue.  The best I could come up with to describe the situation would be:
    Set up SP 2010 in a three-node configuration with multiple web apps
    Enable incoming email and confirm it works
    Migrate to a SP2013 SP1 farm in a three node configuration.
    Enable a new email alias for a library
    Observe that it doesn't work for one web application.
    Obviously, it's pretty unlikely that attempting that in a lab would actually have the same result.

  • Iphone/ipad/ipod charger wire wont work for iphone or ipod but does work for ipad very strange

    guys this is so odd and pointless but for some reason my charger wont let my iphone charge or ipod but it works for iphone. iphone running ios 7 same with ipad. any solutions?

    Hello there, Kareem77.
    The following Knowledge Base article provides some great steps for troubleshooting your issue:
    iPhone and iPod touch: Charging the battery
    http://support.apple.com/kb/HT1476
    If the issue persists, the first article also refers to this:
    iOS: Not responding or does not turn on
    http://support.apple.com/kb/TS3281
    Thanks for reaching out to Apple Support Communities.
    Cheers,
    Pedro.

  • My i pod will not play videos they just freeze but they work on itunes

    my i pod will not play any videos that i put on but they work fine on i tunes, they play but 1 second in to the video it just frezzes and you can hear anything so what is wrong.

    Have yu tried the standard fixes:
    - Rest. Nothing will be lost
    Reset iPod touch:  Hold down the On/Off button and the Home button at the same time for at
    least ten seconds, until the Apple logo appears.
    -Restore from backup
    - Restore to factory defaults/new iPod

  • Historical Data Viewer does not show Alarms/Events after date but trace working.

    Dear users
    The DSC Historical Data Viewer no longer shows any Alarms or Events after 31/10/06 using Citadel 5 Universe.  The trace still works to current  time and you can search for the alarms by tag names in the trace and it works fine.  Therefore the database data is there. Does the Alarms/Events View use a different file?  Any help would be much appreciated as I'm a novice working with a predecessors project.
    Please keep the answer simple.
    Thanks
    Dave

    Hi Integrators,
    Well I had drafted out a whole long post and it then died in me.  Sometimes I hate windows... anyway...
    http://digital.ni.com/public.nsf/websearch/A4F007F96AB1EB1E862569C30080C731?OpenDocument
    Might help.. maybe someone has turned off the Alarm viewing?
    http://digital.ni.com/public.nsf/websearch/E6611BC10294608886256A4800724210?OpenDocument
    It may be a corrupt database.
    The files you need to look at with all of the alarms in are files with the extensions "ale"
    http://ae.natinst.com/operations/ae/public.nsf/web/searchinternal/6fc62f75b74d706d8625694900768f69?O...
    This link will give you a bit more information as to which of the file extensions apply to which database files.
    Hope this all helps. (I am also handeling your e-mail query into NIUK so feel free to e-mail me back)
    I'll keep looking into the problem.
    Post back if you need more help.
    AdamB
    Applications Engineering Team Leader | National Instruments | UK & Ireland

  • Feature setting Masterpage & CSS doesn't work when included in SiteTemplate - but does work when activated manually

    Hi,
    I'm experiencing a strange behaviour recently. I wrote a feature with an EventReceiver that sets the masterpage and alternate css file for the current spweb it is activated for. When I activate that feature manually it works like expected. But if I include
    the same feature in a SiteTemplate and it is called during site-creation, it doesn't work. I debugged it and stepped through it. As far as I can tell everything looks right. It sets the masterpage and css file like it should and throws no error. But when the
    site loads in the end, it suddenly still uses the v4.master and no alternateCSS. How can that be?
    If I deactivate the feature then manually and activate it again, it works...
    Here's the feature:
    const string masterPage = MyOfficeProcess.master";
    const string searchMasterPage = "MyMinimal.master";
    const string alternateCss = "MyOfficeAlternateProcess.css";
    public override void FeatureActivated(SPFeatureReceiverProperties properties)
    SPWeb web = (SPWeb)properties.Feature.Parent;
    using (SPWeb topLevelSite = web.Site.RootWeb)
    string relativePath = topLevelSite.ServerRelativeUrl;
    if (!relativePath.EndsWith("/"))
    relativePath += "/";
    if (web.WebTemplate == "SRCHCENTERLITE" || web.WebTemplate == "SRCHCEN" || web.WebTemplate == "SRCHCENTERFAST")
    web.CustomMasterUrl = relativePath + "_catalogs/masterpage/" + searchMasterPage;
    else
    web.MasterUrl = relativePath + "_catalogs/masterpage/" + masterPage;
    web.CustomMasterUrl = relativePath + "_catalogs/masterpage/" + masterPage;
    web.AlternateCssUrl = relativePath + "Style Library/My/" + alternateCss;
    web.UIVersion = 4;
    web.Update();

    Hi,
    You can put a copy of your master page within the template site, use that for the site's master page, and then save the site as a template then check whether it works.
    Here is a similar thread for your reference:
    http://sharepoint.stackexchange.com/questions/30699/featureactivated-not-called-for-site-template
    Thanks,
    Dennis Guo
    TechNet Community Support
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
    [email protected]
    Dennis Guo
    TechNet Community Support

  • Cant get scroll to work, any tricks t scroll, but is works sometimes and do

    I have tried for a few days now with my magic mouse to get the hang of it but at work now and I want it to scroll every time, how can i get my finger action sorted out

    Many thanks. must say that this was not what I expected to do on such a new printer, just shows that we cant take things for granted on anything these days!!
    The firmware update did the trick, problem solved.

  • Mapping links wont work in Opera and IE but do work in Safari.

    Hi,
    What can I do to fix the code below? The links wont work in IE and Opera, but OK in safari.
    The error message is:
    in tag: map the following required attributes are missing: id[XHTML 1.0 Transitional]
    Code
    <div id="mainContentLeft1b">
    <div id="mainContentArticle2">
    <h3>Locate Region</h3>
    <p>National Contacts</p>
    <img src="Images1/MapAustralia.png" width="600" height="490" alt="stateregion" usemap="stateregion" />
    <map name="stateregion" id="stateregion">
    <area shape="rect" coords="508,282,554,345" alt="NSW" href="http://www.1" />
    <area shape="rect" coords="421,397,506,485" alt="QLD" href="http://www.2" />
    <area shape="rect" coords="233,1,389,163" alt="QLD" href="http://www.3" />
    <area shape="rect" coords="220,179,372,306" alt="NSW" href="http://www.4" />
    <area shape="rect" coords="379,218,597,284" alt="NSW" href="http://www.5" />
    <area shape="rect" coords="458,284,509,325" alt="NSW" href="http://www.6" />
    <area shape="rect" coords="-5,-3,217,227" alt="WA" href="http://www.7" />
    <area shape="rect" coords="353,323,505,371" alt="NSW" href="http://www.8" />
    <area shape="rect" coords="398,16,590,211" alt="NSW" href="http://www.9" /></map>
    </div>
    Thanks
    Karin

    Can we see a URL to your test page where the "links don't work." 
    Unfortunately, code fragments don't help us help you. 
    Nancy O.
    Alt-Web Design & Publishing
    Web | Graphics | Print | Media  Specialists 
    http://alt-web.com/

  • TS3899 I still can not send email from my ipad but iPhone works on those accounts

    I still can not send email from my .mac account or a .comcast.net from my ipad. I how 2 people so far that has brought to my attention. We have exchange accounts setup on the ipads for work. I compare the settings from iPad to iPhone from my view it appears identical. I am looking at an iPad 2 and a Mini.
    I turned on and off the ipads and nothing really changed. The emails come into those accounts.
    Any suggestions?
    Thanks
    VickiHTC

    When you say you can't send...as in they never get the email?  Does the email appear to send?  Error message?  When?
    It may be more than one iPad that has a problem....

  • SSO for some SAP Apps, but forced login for the sensitive data application

    We have R/3 4.7 (Enterprise), with EP 6.0 and Web AS 6.40.  We have implemented Employee Self Service, as well as CRM, and some BW reports through EP 6.0.  We have a Broadvision Portal that is on top of EP 6.0.  In other words, the employees login to the Broadvision Portal, and authenticate against our Active Directory user store.  Then they will choose the SAP apps listed above, which go through the SAP Portal (EP 6.0)
    We want to allow SSO through EP when users choose either CRM, or BW reports, but we want to force a login when they choose ESS, since this data is more sensitive.  The problem we have had is that when we turn on SSO, it allows the user through for all 3 SAP apps.  My question is: How can we force a login for just ESS, but not for the other 2 apps.
    Thanks.

    Rick,
    I suppose, Eric meant Authentication Schemes ("authschemes") instead of security zones.
    An authentication scheme is essentially a pointer to a JAAS logon stacks on the J2EE Engine plus a frontend ("login screen"). Authentication schemes are assigned numbers ("priorities"), the higher the number the more trustworthy the authentication of the underlying JAAS stack is regarded.
    Example:
    Let's assume you use the default authscheme "uidpwdlogon" for all your iviews. It features a password-based or SAP logon ticket-based logon and is assigned a value of 20. All iviews that have this authscheme set in its "authscheme" property are accessible for you without any further authentication once you have passed this scheme (or any other authscheme with a priority <= 20).
    Now, you set one individual iview to use authscheme "certlogon", which requires an X.509 certificate and is valued "21". When accessing this iview, the portal will force a re-authentication (as 21>20).
    By configuring custom authschemes and JAAS logon stacks you can easily implement your scenario. Simply ensure that all your ESS iviews will be using an authscheme with a value greater that your default value.
    Regards,
    Dominik

Maybe you are looking for