SSO is not working for SAPGUI for HTML

Hi Experts,
We have configured SSO between EP and ECC.SSO is working fine for SAPGUI for windows.But it is not working for SAPGUI for HTML.
Workflow iViews are getting error.
"SWITCH to HTTPS does not occur."
The domain names are different for EP and ECC.
Please let me know ,is there any settings need to check.
Regards,
Bala.

Hi
The point here is that your Portal server is on a different domain, so you have to configure the logon ticket issuer (portal) to generate logon ticket for multiple domains.
http://help.sap.com/saphelp_nw04s/helpdata/en/a0/88a340fa432b54e10000000a1550b0/frameset.htm
Best regards
Johann

Similar Messages

  • SSO Configuration not working - Still asking for Userid and password

    Hi Guys,
    I have configured Portal to use with backend server. Configured WAS & ITS and created System Alias.
    For Testing SSO I did following steps on portal:
    System Administration > Support > SAP Appliction > SAP Transaction
    Selected system Alias and tcode se12. Selected SAPGUI for HTML. Pressed Go.
    Instead of SE12 screen, I get Logon Screen asking for USERID and password.
    I should be getting SE12 screen directly without entering USERID and PASSWORD.
    I tested with Transaction iView (SE12)  and getting the same logon screen. After entering userid/password  it displays SAP Easy Access menu instead of displaying SE12
    Please help.
    Thanks a lot.
    mini

    Hi Sandeep.
    Thanks for your reply. Here are the answers to your questions:
    1. Is the username same in the portal and the backend that you are trying to connect, ensure that there is the same username that exists in the system you want to connect to. YES
    2. The ticket is imported properly- check the ACL and Certificate list in Tcode STRUSTSSO2.
    Ticket is valid from 01 Jan 2009 to 14 Mar 2012.
    3. Check for the parameters in place login_accept_ticket = 1 and login_create_ticket = 2 and icm_hostname_full is set to FQDN. 
    In RZ10 it has 3 parameters:
    login/accept_sso2_ticket = 1
    login/create_sso2_ticket = 2
    icm/host_name_full = sapecc6.tri.com 
    4. What is the result when you test the system connection?
    WAS & ITS Connections are successful.
    Connection test for Connectors is giving following results:
    Results
    Retrieval of default alias successful
    Connection failed. Make sure user mapping is set correctly and all connection properties are correct.
    My Connectors Details:
    Application Host : sapecc6
    Gateway Host : sapecc6.tri.com
    Gateway Host : 3301
    SAP Client : 800
    SAP Client : EC7
    SAP System Number : 01
    Server Port: 3201
    System Type: SAP_R3
    I am using same userid for Portal and backend.
    5. Are the 2 systems that you want to configure SSO in the same domain?
    I am trying to connect R3 to Portal.
    Please give me directions to fix the problem.

  • SSO is not working for an Alias URL but is working for original portal URL

    Hello,
    We have a BSP running inside the portal and expects authentication.
    When I run this BSP using the portal regular address everything is working OK and SSO is working after logging into the portal.
    At next step, we have configured an alias for the portal URL at the DNS Server.
    When activating the BSP from the alias URL it asks for 2nd authentication. Meaning, SSO is not working after logging into the portal.
    I have activated an HTTP trace in order to see why and it seems like when running it from the alias name it recognizes it as a different domain and I assume this is why the authentication is coming up.
    I would like to suppress this for the alias URL but don't know how.
    I found this UME property on the server:ume.logon.security.relax_domain.level
    This UME property controls the amount of sub domains to remove from the server name to obtain the domain for which the logon ticket is valid.
    I have changed this property from its default value 1 to 3 (and restarted the server of course) which, in our case, leaves only ourCompany.com for the ticket in the original server URL. Yet, the authentication pop up is still not supressed when browsing through the alias URL.
    Any idea what can I do next?
    Thanks,
    Roy

    Hi Dezso,
    I found the 401 let me know if I look on it right:
    I have an entry node with two subnodes: request and response.
    The response has:
    <responseStatus>HTTP/1.1 401 Unauthorized</responseStatus>
    And the request before that doesn't have any MYSAPSSO2 in it, all it has which is related to cookies is this:
    <header name="Cookie">UserUniqueIdentifier=1174345919524; alreadyLogged=1179560552416</header>
    <cookies>
    <cookie name="alreadyLogged">1179560552416</cookie>
    <cookie name="UserUniqueIdentifier">1174345919524</cookie>
    </cookies>
    Can you advice what to do next?

  • YouTube will not work on safari for me on the ipad. Is there anyway to fix this? I can go anywhere else on the internet fine and it works on google chrome, but on safari it shows a blank screen with the bar on top after it loads.

    YouTube will not work on safari for me on the ipad. Is there anyway to fix this? I can go anywhere else on the internet fine and it works on google chrome, but on safari it shows a blank screen with the bar on top after it loads, if it's even loading at all.
    I do not know if it's relevant or not, but I got a message on my ipad while on safari saying that my iPhone has a virus. I looked it up and it seems it might have just been an ad from the website I was on, but it happened around the same time YouTube stopped working.

    You will find that using the YouTube app will provide a better viewing experience for YouTube videos.

  • Not working my setting for my icloud

    not working my setting for my icloud

    In what way is it not working?   Please give us more info.

  • I have downloaded the latest Adobe Flash on my laptop and it is not working on safari for youtube.I have uninstalled and installed it multiply times and it still wont show me youtube videos

    I have downloaded the latest Adobe Flash on my laptop and it is not working on safari for youtube.I have uninstalled and installed it multiply times and it still wont show me youtube videos

        Enable Plug-ins
        Safari > Preferences > Security
        Internet Plug-ins >  "Allow  plug-ins"
        Enable it.
        Press " Manage Website Settings" button for more options.

  • Java it not working on pogo for me

    i dont know whats going on, me and my husband both need java to get our internet games to work. well it works on his, but it will not work on pogo for me. first it was saying that the java was messed up or not right i mean up to date but i have takin it out and put it back in over and over and it still wouldnt work. and now it is saying that the pogo is messed up so i took that out and put it back in. needless to say it still wont work so if someone could give me some thing else to do or try i would appreciate it or knows why its doing thisand has some kind of info for me. thats all ty lisa.

    What's a "pogo"?

  • Date picker is not working in IE9 for sharepoint 2010 appliation pages

    Hi,
    Date picker not working  in IE9 for sharepoint 2010 appliation pages. We have enabled custom master page.
    Thanks in advance.
    Shameej

    Hi,
    For this issue, you can add the following line of code into the pickerdialog.master which lays in C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\TEMPLATE\LAYOUTS
    <meta http-equiv=”x-ua-compatible” content=”IE=8”>
    Or we can use the JavaScript code provided in this blog which would also do the trick:
    http://williamwmy.wordpress.com/2013/06/03/problem-with-sharepoint-peoplepicker/
    A thread with the same issue for your reference:
    http://sharepoint.stackexchange.com/questions/27251/hotfix-for-problem-with-sharepoint-peopleeditor-in-ie-9
    Best regards
    Patrick Liang
    TechNet Community Support

  • Siri does not work when used for calling a contact function

    Siri does not work when used for calling a contact function

    Very strange, try to turn off/on your iPhone. Or make a reset (home+power button)...
    If it continues try to restore it.

  • Mosip app not work in wifi for i phone6 but it work mobile data

    mosip app not work in wifi for i phone6 but it work mobile data

    I don't know, you'll have to talk to MoSIP about it...
    See MagicJack and Google Hangouts for more up-to-date apps regarding iPhone VoIP.

  • NTLM SSO is not working using IIS

    Hi,
    We have unable to login to the infoview using SSO getting u201C page canu2019t found u201C error.
    1. We can  login to the infoview using AD authentication when tomcat as the application server but we are  unable to login to the infoview using SSO when IIS as the application server.
    2. If we select  the option called u201Cintegrated windows Authenticationu201D under internet options then the  SSO is not working and if we  uncheck the u201Cintegrated windows Authenticationu201D in the internet options then we are  able to login to the infoview using SSO.We are  able to login to the infoview using SSO on another environments and the working and problematic environments we  Configured IIS6, XI2 SP4.
    4.We tried to login to the infoview using http://servername instead of entire URL however we are getting error.
    5.We restarted IIS but no use.
    6.Our admin follow the below options-
    Open a registry editor, such as Regedit.exe or Regedt32.exe.
    Navigate to:
    HKLM\System\CurrentControlSet\Services\HTTP\Parameters
    Right-click Parameters, select New | DWORD value, and then name the value MaxFieldLength.
    Right-click Parameters, select New | DWORD value, and then name the value MaxRequestBytes.
    In the right pane, double-click MaxFieldLength, and then set its value to 32768 (decimal).
    In the right pane, double-click MaxRequestBytes, and then set its value to 32768 (decimal).
    Close the registry editor and restart the IIS Admin service for the change to take effect.
    But we are getting same problem.
    7.We  tried  to login to the infoview using http://localhost but issue still persists.
    8.We installed jakarta redirector.Is this root cause of this issue?
    9.We selected  intigrated windows authentication under default websites and i am sure i gave all the options under internet information  manager.
    Any one please help on this.
    My environment is-
    BOXIR2 SP4,
    NTLM SSO,
    Windows 2003,
    IIS6.

    "We tried to login to the infoview using http://servername instead of entire URL however we are getting error"
    What's the error using the hostname for SSO with integrated windows authentication enabled on only the infoview virtual directory?
    Regards,
    Tim

  • SSO does not work

    Hi...
    I'm trying to use SSO between portal (jCo, webdynpro...) and ABAP System...
    I follow "Single Sign-On in a Complex System Landscape" tutorial, but when I try to test any jCo connection, this error appears to me:
    com.sap.tc.webdynpro.services.exceptions.WDRuntimeException: Failed to enrich connection properties
    And following logs, I can see this error:
    Cannot provide X.509 certificate of user "Silva, Jose" (unique ID: "USER.PRIVATE_DATASOURCE.un:123456") because of an unexpected UME internal problem. (Backend system: "UMESystemLandscapeDummy")
    [EXCEPTION]
    com.sap.security.api.umap.NoLogonDataAvailableException: This user does not have a certificate.
    at com.sap.security.core.umap.imp.UserMappingDataImp.enrich(UserMappingDataImp.java:412)
    at com.sap.tc.webdynpro.serverimpl.core.sl.AbstractJCOClientConnection.createPool(AbstractJCOClientConnection.java:346)
    at com.sap.tc.webdynpro.serverimpl.core.sl.AbstractJCOClientConnection.checkPoolEntry(AbstractJCOClientConnection.java:296)
    at com.sap.tc.webdynpro.serverimpl.core.sl.AbstractJCOClientConnection.getClient(AbstractJCOClientConnection.java:396)
    at com.sap.tc.webdynpro.tools.explorer.JCOConnectionsDetails.onActionTestConnection(JCOConnectionsDetails.java:229)
    at com.sap.tc.webdynpro.tools.explorer.wdp.InternalJCOConnectionsDetails.wdInvokeEventHandler(InternalJCOConnectionsDetails.java:303)
    at com.sap.tc.webdynpro.progmodel.generation.DelegatingView.invokeEventHandler(DelegatingView.java:87)
    at com.sap.tc.webdynpro.progmodel.controller.Action.fire(Action.java:67)
    at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.doHandleActionEvent(WindowPhaseModel.java:420)
    at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.processRequest(WindowPhaseModel.java:132)
    at com.sap.tc.webdynpro.clientserver.window.WebDynproWindow.processRequest(WebDynproWindow.java:335)
    at com.sap.tc.webdynpro.clientserver.cal.AbstractClient.executeTasks(AbstractClient.java:143)
    at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doProcessing(ApplicationSession.java:313)
    at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessingStandalone(ClientSession.java:713)
    at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessing(ClientSession.java:666)
    at com.sap.tc.webdynpro.clientserver.session.ClientSession.doProcessing(ClientSession.java:250)
    at com.sap.tc.webdynpro.clientserver.session.RequestManager.doProcessing(RequestManager.java:149)
    at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doContent(DispatcherServlet.java:62)
    at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doPost(DispatcherServlet.java:53)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
    at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
    at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
    at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:387)
    at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:365)
    at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:944)
    at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:266)
    at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
    at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
    at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
    at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
    at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
    at java.security.AccessController.doPrivileged(Native Method)
    at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:100)
    at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:170)
    I don't know what to do...
    My portal certificate has a problem, or is my abap certificate?
    Thanx...
    (sorry for my poor english)

    Hi,
    If you are working with JCO's please make sure that SSO will not work for metadata jco creation.
    use the UID PWD method as part of metadata jco creation.
    it will work fine
    this messege as per my knowledge, may be helpfull for you

  • ITS 620 - how to create a service file for SAPGUI for HTML option

    Hi,
    We have the following configuration :
    ITS 620 installed
    IIS webserver
    NTLM Authentication on webserver
    SAP 46C
    We have some reports that use the IACs option of creating ITS reports and we are able to create the service files using webstudio where we can save a service id and password so that when the ITS page is called, it logs on the user directly into the system.
    Now, we are trying to create a new ITS page for a custom Z transaction and would like to use the SAPGUI for HTML option so that we do not have to use Webstudio to create and modify the HTML pages.
    When I call the ITS page for the new transaction, it brings up the logon screen for the user, which we want to avoid. If I create a new service file for this Z transaction without any HTML pages then I get an error.
    Is there a way to copy the WEBGUI.SRVC file to a custome SRVC file, I tried to create to copy it to a test file called ZTEST.SRVC for my test transaction called ZTEST and now I get an error.
    thanks in advance
    N.S.

    Hello N.S.
    You can create a service file, like ZSERVICE.SRVC.  The parameters should be:
    ~webgui 1
    ~transaction ztransaction
    ~client  001
    ~login   username
    ~password  password
    ~language  EN
    The "~webgui 1" allows the ITS to use the Webgui to dynamically generate the page (no IAC needed.)
    The "~transaction" is the transaction code of your service.
    The "~client" is the client number.
    The "~login" is the username.
    The "~password" is the user's password.
    the "~language" is the language for the users.
    Note that the last four are required for automatic logon.  If end users use a variety of languages though the ~language can be prepended to the URL to support different languages.  (Leave it blank in the srvc file then.)
    Edgar

  • Recordset Copy/Paste Not Working in CS4 for ASP/Javascript and ASP/VBSript.

      Is anyone else having this problem?  I get errors.  Error says "While executing pasteServerBehavior in Recordset.htm, a javascript error occurred.  I have CS4 installed on 2 PCs.  Same problem on both.
    Mike

    Hi there.
    Javascript or any other script is not actually executed inside the JEditorPane. If you want your JEditorPane to run this you must include or write yourself, a browser type of feature to execute that code.
    If all you want is to be able to click on the link and take you to another page, put the href's in the normal body of the html and your hyperlinklistener should behave itself fine. The example in the API work's fine for my purposes.
    Cheers,
    Rachel

  • Check Button Not Working on Portal for BI report

    We have Vendor account group variable when I enter any random value and click on check its not working its not giving message as ' Invalid Input' on Portal ( Variable is single input optional variable) same Check Button Working in RSRT .
    And For all other Infoobjects ( Plant , Profit center) check Buitton is working on Port as well in RSRT.
    Please suggest.

    done

Maybe you are looking for