SSO logon tickets not working in two different OS

HI All,
We have sucessfully implemented SSO logon tickets concept to access a j2ee application through portal on windows OS.
We could able to do the samething on two j2ee instances installed on two different machines on same domain. I mean, deploying our application in one j2ee instance and accessing the application thru portal of another j2ee instance thru SSO logon ticket by adding some configuration steps in Visual administrator given in help.sap.com. This also we did in same OS windows.
But now the problem is, when we try to implement the above scenario in two different OS, say application is deployed on HPUX machine, and accessing that application through Portal from Solaris machine, SSO logontickets is failing. Means we couldnt able to access the application. Both the OS are in same domain only.
What extra configuration steps need to be done in VA, to get work with two different OS?
Please share ur ideas.
Regards,
Satish.

Hi..
I guess probabaly the internet explorer doesnot accept the sso ticket.
What you can probably check is that the compatability of explorer for the solaris and HP UX os with Windows OS.
Also,please check whether the SSO ticket is getting populated and What error are you getting exactly when the SSO fails and that will give some idea to proceed further
<u>deploying our application in one j2ee instance and accessing the application thru portal of another j2ee instance[/u
What the above mean...how are you deploying ?? what tool ?? which J2EE instance out of the two ??
Thanks
Gopal

Similar Messages

SSO logon not possible; logon tickets not activated on the server

When I am on RWB
1) click "component monitoring" ->"display all"
2) click "CCMS"
I get a popup says:
"SSO logon not possible; logon tickets not activated on the server"
I find some threads about this on SDN but they are about
EP. My case is PI7.0SP08.
Please advise how to overcome this issue?
Thanks w/ points.
Message was edited by:
jennifer lee

hI,
do you have the follwoing in our SXMB_ADM if not add them.
SXMB_ADM->IntegrationEngine configuratin-> edit the speicifc configuratin then add the follwoing
Category:RUNTIME Parameters: logging Value:1
If its done. check this alos...whether your browser settings will accept the cookies or not. for SSO logon ticket method you need to have cookies accepted by our browser so check it. in internet page slect TOOLS ->internet options then ckeck for cookies settings.
How to Enable Single-Sign-On for XI 3.0 at:
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/69d95112-0d01-0010-8297-fa31feea26e0
/people/alexander.bundschuh/blog/2007/01/16/principal-propagation-in-sap-xi
http://help.sap.com/saphelp_nw2004s/helpdata/en/5c/b7d53ae8ab9248e10000000a114084/content.htm
regards
manoj kumar

How can I process an SSO Logon Ticket in ColdFusion 9?

Hi,
We want to integrate some CouldFusion templates on the SAP portal and I try to process the SSO Logon Ticket using the following code:
<cfif IsDefined("Cookie.MYSAPSSO2") AND Cookie.MYSAPSSO2 neq "">
<cfscript>
    ticket = Cookie.MYSAPSSO2;
    sso = createObject("java", "SSO2Ticket");
    version = sso.getVersion();
    Application.CertPath = "/opt/coldfusion9/lib/verify.pse";
</cfscript>
<h2>Ticket cookie:</h2>
<cfdump var="#ticket#">
<h2>Version:</h2>
<cfdump var="#version#">
<h2>Certification path:</h2>
<cfdump var="#Application.CertPath#">
<cfscript>
    result = sso.evalLogonTicket (ticket, Application.CertPath,"");
    sapUser   = result[1]; //First element is the SAP system user
    sysID = result[2]; //Second element is the id of the issuing system
    client = result[3]; //Third element is the client of the issuing system
    portalUser = result[5]; //Portal user
    validityInSeconds = result[7]; //Validity in seconds
</cfscript>
<h2>Ticket content:</h2>
<cfdump var="#result#">
<cfelse>
    SAP Logon Ticket not found - Extranet content can only be accessed through SAP Portal.
</cfif>
The certificate verify.pse and the current version of the libraries libsapcrypto.so, libsapssoext.so and libslcryptokernel.so are stored at the same location.
After logging in into a SAP portal I get following error when executing the script:
Ticket cookie:
AjExMDAgAAxwb3J0YWw6VG90aEyIABNiYXNpY2F1dGhlbnRpY2F0aW9uAQAFVE9USEwCAAMwMDADAANEUDIEAAwyMDE0MDYyNTEzNTMFAAQAAAAICgAFVE9USEz/AQUwggEBBgkqhkiG9w0BBwKggfMwgfACAQExCzAJBgUrDgMCGgUAMAsGCSqGSIb3DQEHATGB0DCBzQIBATAiMB0xDDAKBgNVBAMTA0RQMjENMAsGA1UECxMESjJFRQIBADAJBgUrDgMCGgUAoF0wGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTQwNjI1MTM1MzQ3WjAjBgkqhkiG9w0BCQQxFgQU2lImEL6oxLc/4ZdXYTDJudUNhOIwCQYHKoZIzjgEAwQvMC0CFQC4ftTFs8COV0ThRZH5lJxY9ITqfQIUMSugOMEkhmQHqBZD!ZHQ1Tb9e90=
Version:
SAPSSOEXT 4
Certification path:
/opt/coldfusion9/lib/verify.pse
The web site you are accessing has experienced an unexpected error.
Please contact the website administrator.
The following information is meant for the website developer for debugging purposes.
Error Occurred While Processing Request
MySapEvalLogonTicketEx failed: standard error= 9, ssf error= 0
The error occurred in /opt/coldfusion9/wwwroot/ExtranetMod/authTest.cfm: line 20
18 : 19 : <cfscript> 20 : result = sso.evalLogonTicket (ticket, Application.CertPath,""); 21 :     sapUser   = result[1]; //First element is the SAP system user 22 :     sysID = result[2]; //Second element is the id of the issuing system
Resources:
Check the ColdFusion documentation to verify that you are using the correct syntax.
Search the Knowledge Base to find a solution to your problem.
Browser
Mozilla/5.0 (Windows NT 5.1; rv:30.0) Gecko/20100101 Firefox/30.0
Remote Address
172.20.231.111
Referrer
Date/Time
25-Jun-14 04:23 PM
Stack Trace
at cfauthTest2ecfm1658987646.runPage(/opt/coldfusion9/wwwroot/ExtranetMod/authTest.cfm:20)
java.lang.Exception: MySapEvalLogonTicketEx failed: standard error= 9, ssf error= 0 at SSO2Ticket.evalLogonTicket(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) at java.lang.reflect.Method.invoke(Unknown Source) at coldfusion.runtime.java.JavaProxy.invoke(JavaProxy.java:97) at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:2360) at cfauthTest2ecfm1658987646.runPage(/opt/coldfusion9/wwwroot/ExtranetMod/authTest.cfm:20) at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:231) at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:416) at coldfusion.filter.CfincludeFilter.invoke(CfincludeFilter.java:65) at coldfusion.filter.ApplicationFilter.invoke(ApplicationFilter.java:360) at coldfusion.filter.RequestMonitorFilter.invoke(RequestMonitorFilter.java:48) at coldfusion.filter.MonitoringFilter.invoke(MonitoringFilter.java:40) at coldfusion.filter.PathFilter.invoke(PathFilter.java:94) at coldfusion.filter.ExceptionFilter.invoke(ExceptionFilter.java:70) at coldfusion.filter.ClientScopePersistenceFilter.invoke(ClientScopePersistenceFilter.java:28) at coldfusion.filter.BrowserFilter.invoke(BrowserFilter.java:38) at coldfusion.filter.NoCacheFilter.invoke(NoCacheFilter.java:46) at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38) at coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22) at coldfusion.filter.CachingFilter.invoke(CachingFilter.java:62) at coldfusion.CfmServlet.service(CfmServlet.java:200) at coldfusion.bootstrap.BootstrapServlet.service(BootstrapServlet.java:89) at jrun.servlet.FilterChain.doFilter(FilterChain.java:86) at coldfusion.monitor.event.MonitoringServletFilter.doFilter(MonitoringServletFilter.java:42) at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46) at jrun.servlet.FilterChain.doFilter(FilterChain.java:94) at jrun.servlet.FilterChain.service(FilterChain.java:101) at jrun.servlet.ServletInvoker.invoke(ServletInvoker.java:106) at jrun.servlet.JRunInvokerChain.invokeNext(JRunInvokerChain.java:42) at jrun.servlet.JRunRequestDispatcher.invoke(JRunRequestDispatcher.java:286) at jrun.servlet.ServletEngineService.dispatch(ServletEngineService.java:543) at jrun.servlet.http.WebService.invokeRunnable(WebService.java:172) at jrunx.scheduler.ThreadPool$DownstreamMetrics.invokeRunnable(ThreadPool.java:320) at jrunx.scheduler.ThreadPool$ThreadThrottle.invokeRunnable(ThreadPool.java:428) at jrunx.scheduler.ThreadPool$UpstreamMetrics.invokeRunnable(ThreadPool.java:266) at jrunx.scheduler.WorkerThread.run(WorkerThread.java:66)
I would be most thankful for any hints that could bring me further...
Many thanks
Lajos

Thank you for your assistance in this matter.
This has been frustrating the crap out of me for the last week (not that the photo is important, it is just that I like to conquer and solve this types of issues)
I was shooting with an aperture of 7.1.
I changed the exposure on the photos as you had done previously but this only blew out the watch and I couldn't recover it afterwards and the alignment was no better any way. So then I started experimenting as you suggested, and I don't know if what I am about to write is acceptable in an Adobe forum, but here goes.
I tried Helicon Focus and it was terrible, but I must admit I didn't know how to really use it, it doesn't seem to have any alignment function and is very difficult to try to use and understand.
then I tried Hugin and I am not even sure if this is image stacking software or just an alignment software, anyway that didn't work either and kept saying the output was a very bad match.
THEN I downloaded and tried zerestacker (free 30 day trial) (after reading about it in a google search) and WOW, it worked amazing, see below photo, it was so easy to use and the interface is easy as well and it does the alignment and stacking in the same process and you can see the image output show up on the left of the screen. Sorry PS but I will be using ZS for photostacking from now on. Adobe need to buy this company and incorporate it in to PS CC6.
This is just so much better than anything I got out of PS, there is no ghosting or blurring and the alignment is perfect and it is so simple to use.

HT1948 USB drive with install image is showing in Startup Manager on a Mac Pro, but wont boot. Showing circle with cross strip, and shut down automatically. USB device are made and work on two different MacBook Pro, but used on Mac Pro. Any help?

USB drive with install image is showing in Startup Manager on a Mac Pro, but wont boot. Showing circle with cross strip, and shut down automatically. USB device are made and work on two different MacBook Pro, but used on Mac Pro. Any help?

OS X installers have always been fairly specific, hardware-wise. I haven't read anything reflecting that situation with the Recovery HD, so it may be that the Recovery HD created for the MacBook Pro does not have the necessary drivers for the Mac Pro. Obviously, nothing definitive here, but a possibility.

HT201343 I bought my macbook pro on August 2011 at an apple store, with the Intel i7. However mirrorring in not working with two of my Apple TVs. These Apple TVs are 2nd and third generation loaded with the latest software. Can someone help?

I bought my macbook pro on August 2011 at an apple store, with the Intel i7. However mirrorring in not working with two of my Apple TVs. These Apple TVs are 2nd and 3rd generation loaded with the latest software. I can succesfully transmit from my itunes on my Macbook pro to both Apple TVs, but I can not see the airplay icon on the taskbar. Can someone help?

About AirPlay and Airplay Mirroring
AirPlay Mirroring requires a second-generation Apple TV or later, and is supported on the following Mac models: iMac (Mid 2011 or newer), Mac mini (Mid 2011 or newer), MacBook Air (Mid 2011 or newer), and MacBook Pro (Early 2011 or newer). For non-qualifying Macs you can try using Air Parrot.
Several Apple Articles Regarding AirPlay
Apple TV (2nd and 3rd gen)- How to use AirPlay Mirroring
How to set up and configure AirPort Express for AirPlay and iTunes
About AirPlay Mirroring in OS X Mountain Lion
iTunes 10- About playing music with AirPlay
Troubleshooting AirPlay and AirPlay Mirroring
Using AirPlay

Folder is empty on second computer. I have installed adobe CC on two different computers for same account so I can work at two different places. I uploaded files to it yesterday and I can't find it on the CC folder on second computer. What can I do?

I have installed adobe CC on two different computers for same account so I can work at two different places. I uploaded files to it yesterday and I can't find it on the CC folder on second computer. What can I do?

Hi DeafScientist,
Please try the below mentioned links.
Creative Cloud Help | Browse, sync, and manage assets
Error: "Unable to sync files"
Creative Cloud File Sync | Known issues
Kindly revert if you are unable to sync files.
Thanks,
Atul Saini

IPod nano version 6: random turn off, volume controls don't work, does not turn off, skip does not work. Two years old! Next version of nano has no clip and same amount of storage. I do not want to give up my version 6!

iPod nano version 6: random turn off, volume controls don't work, does not turn off, skip does not work. Two years old! Next version of nano has no clip and same amount of storage. I do not want to give up my version 6!

Make a Genius Bar appointment at your nearest Apple Store and pay $75 USD for an out-of-warranty replacement.

SSO to R3 not working after system copy

Hi Experts,
Recently our QA R3 client XXX was deleted and the whole system was rebuild using system copy of client ZZZ of R3 production. Now we had to reconfigure the SSO between portal and QA R3 with the new client.
But it is not working. It was found that the QA R3's own self signed certificate shows CN=ERP (same as R3 Prod) and not ERU as it should have been. We changed the CN value to ERP,in Visual Admin (Services ->key storage , Ticket ). Still the result is same.
How to re-generate the self signed certificate in R3 with CN=ERU ?
or a workaround for this problem.
Regards
Jimmy

HI Jayendra
Recreate the saplogonticketkeypair following the procedure outlined here
http://help.sap.com/saphelp_nw70/helpdata/en/75/c80b424c6cc717e10000000a155106/content.htm
Then you can export the SAPLogonticketkeypair-cert (public key certificate) of the Java AS and import it into the target ABAP system
Important: the following two steps must be done in the ABAP client that will receive the logon tickets i.e the ABAP client that the component/application on the Java AS is configured to connect to e.g the client specified in the portal iview properties or the client specified in a Web Dynpro JCo Destination
(1) Import the public-key certificate of the Java AS into the ABAP systems certificate list using transaction STRUSTSSO2
(2) Add the certificate to access control list
When adding the certificate to the ACL the SID should be set to the SID of the ticket issuing Java AS and the client should be set to the client that the Java AS is writing to the logon tickets i.e the value of login.ticket_client in the Java AS
Remember, in an Add-In installation, where the system IDs are the same, you must change the default client for the J2EE Engine (000) to a client that does not exist on the SAP Web AS ABAP system e.g change login.ticket_client to 999
See: http://help.sap.com/saphelp_nw70/helpdata/en/cb/ac3d41a5a9ef23e10000000a155106/content.htm
The reason for this change is that the system ID and client combination must be unique when tickets are to be accepted by an SAP Web AS ABAP system
By the way it is better to start a new thread with your question rather than bumping a thread that was already set to 'answered'

SSO with WIA not working yet...

Hi,
We are trying to deploy SSO in our PT 5.0.2 portal (running on Windows 2000), but have not been able to get it to work
successfully yet. Microsoft Active Directory 2000 is our user/group source.
The server architecture is as follows:
Server A = Serves as Admin Portal, Portal Server, and Image Server (resides in the DMZ)Server B = Serves as Automation Server (resides inside the firewall)Server C = Serves as Database Server (running SQL Server 2000; resides inside the firewall)Server D = Serves as the Application Server (portlets reside on this server; resides in the DMZ)
All servers reside in the SAME domain.
This is what we have done so far:
1. Installed prerequisite software (i.e. IIS 5.0 and .NET Framework 1.1.4322) on Server C. Successfully installed and
configured the Active Directory Authentication Web Service (i.e. PT Optional Enterprise Web Component) on Server C.
2. Imported the above Web component, ADAWS, into Server A, using the PT Migration Wizard. This automatically created a
"Remote Server" and 2 "Web Services" (namely Authentication Web Service and Profile Web Service) objects on Server A.
3. Created a "Authentication Source - Remote" on Server A. The value in the "Authentication Source Category: " field is
EXACTLY the same as the Active Directory Source Domain. Selected "Authentication and Synchronization" as the Synchronization
setting, and "Full Synchronization."
4. Created a Job and added the above Remote Auth Source as the operation. The JOb ran successfully and imported all users and
groups from Active Directory.
5. Users can successfully login to the portal using the above Remote Auth Source (User ID example: Domain\joe_user).
6. Enabled "Integrated Windows Authentication" ONLY on the "\portal\sso" folder in Internet Services Manager on Server A.
Ensured that the security is set to "Anonymous" on "\portal" and "\portal\bin" folders.
7. Enabled SSO in the Portal, by entering the SSO Secret key in the SSO tab in the PT Admin Applet on Server A.
8. Created a "Authentication Source - SSO" on Server A. Entered the same SSO Secret key entered above and successfully
validated it.
9. Configured SSO integration with Windows Integrated Authentication (WIA) by editing the PTconfig.xml file. The edits are as
follows:
<SSOVendor value="5"/><DefaultAuthSourcePrefix value=""/><CookieDomain value=".companyname.com" />
NOTE: I did not have to edit the "sso.xml" file since the Auth Source category is EXACTLY the same as the Active Directory
Source Domain.
10. Edited the "Authentication Source - Remote" that we created in step 3 above, and changed the setting to
"Synchronization." And then selected the "Authentication Source - SSO" (created in step 8 above) from the "Authentication
Partners: " drop down list.
11. Users can still successfully login to the portal using the Remote Authentication Source after the above change.
12. Server D hosts a remote portlet. It is an IFRAME portlet (written in ASP) that has "href" links to several apps that
reside on Server D. The security on the folder, that contains this portlet, in Internet Services Manager, is set to
"Integrated Windows Authentication." Created a "Remote Server" object for Server D on Server A. Then created a "Web Service -
Remote Portlet" object for the portlet. In the Web Service, I selected the Remote server that I created, and entered only the
remaining path to the portlet (i.e. Portlet URL setting), since PT provided the "http://serverD/" portion. Finally created a
"Portlet" object.
13. users login to the portal using their domain ID (i.e. Domain\joe_user). They are then able to add the portlet to their
page. But when they attempt to click on the links in the portlet they are challenged to enter their user name and password
again.
What step or setting are we missing here? Any help will be sincerely appreciated.
Best regards,Kiran

Hi Rajendrakumar,
You probably haven't updated the ACL properly via STRUSTSS02.
The portal server digitally signs logon tickets as it issues them to the portal users. SAP Systems need to accept the tickets and verify the portal servers digital signature. The following information is important for the SAP System to be able to accept and verify logon tickets:
· The SAP System should only accept logon tickets issued from their designated portal server. Therefore, the identity of the portal server needs to be entered in the SAP Systems Single Sign-On (SSO) access control list (ACL).
· The SAP System needs to be able to verify the portal servers digital signature. The portal server has a self-signed certificate, therefore the SAP System needs access to the portal servers public-key information, which needs to be entered in the SAP Systems certificate list.
Check the following procedure
http://help.sap.com/saphelp_nw70/helpdata/en/78/f1a8490e7011d6999500508b6b8a93/frameset.htm
Regards,
Siddhesh

Error Runging the Transaction iview using SSO logon ticket

Hi I am getting the follwoing error in log file. when i am running the Transaction iview using SAP Loggon ticket.
#1.5 #005056A33F2000840000000500000600000456BC1060683F#1221265635404#com.sap.security.core.umap.imp.UserMappingDataImp#sap.com/irj#com.sap.security.core.umap.imp.UserMappingDataImp.getAuthenticationTicket()#Guest#0##n/a##28a92320812111ddb972005056a33f20#Thread[UWL Pooled Thread:2,5,SAPEngine_Application_Thread[impl:3]_Group]##0#0#Error#1#/System/Security/Usermanagement#Java###The attribute "" of the backend system with alias "" has the invalid value "".
Cannot generate an SAP authentication assertion ticket for user and the specified backend system.
Please adjust the value of the system attribute. Supported values are "" and "".#6#AuthenticationTicketType#"KPMGVM005_ALIAS"##"Stokkeland, Pauline" (unique ID: "USER.PRIVATE_DATASOURCE.un:P00024384")#SAP Logon Ticket#SAP Assertion Ticket#
I have imported the .der file of the portal in to the SAP ECC sytem.using STRUSTSSO2
Created the profile parameters using rz10 trnsaction.
login/create_sso2_ticket
login/accept_sso2_ticket
restarted the ECC system.
Created the system object using the follwoing parameters
WAS
Connector
Usermanagement
Under usermanagement
Authentication Ticket Type - SAP Logon TicketSAP
Logon Method -SAPLOGONTICKET
User Mapping Fields :<not selected>
User Mapping Type    :<not selected>
when i test the sytem object under connection test:showing the following error.
Test Details:
The test consists of the following steps:
1. Retrieve the default alias of the system
2. Check the connection to the backend application using the connector defined in this system object
Results
Retrieval of default alias successful
Connection failed. Make sure that Single Sign-On is configured correctly
But WAS, ITS, Connector are successfull. but above message is showing.
what could be the problem.
When i run one transaction iview with this system it is showing following error.
com.sap.portal.appintegrator.sap.Transaction::Transaction/WebGuiSSOITS640Layer
Parameter Dump
$DebugAction
$TimeStamp 1221268987126
ALLOW_BROWSER Yes
Alias
ApplicationParameter
ApplicationVariants GuiType
AuthScheme default
Authentication ******
AutoStart false
CachingLevel
ClassName com.sapportals.portal.appintegrator.layer.SingleSignOnLayer
ClientWindowID
CodeLink com.sap.portal.appintegrator.sap.Transaction
CommandField YTIME
CurrentWindowId WID1221260007272
CustomerExit.ParameterProvider
DR.TargetIDPropertyName TCode
DebugMode false
DynamicParameter
DynproFields
ExecutionLocation KPMGVM005_ALIAS
ExportParameters Authentication, LogonUser, RequestMethod
FederationAlias
ForcedRequestLanguage
ForwardParameters
ForwardParameters.Always sap-config-mode
ForwardParameters.Excluded
ForwardParameters.Forbidden ClientWindowID, Command, DebugSet, DynamicParameter, Embedded, InitialNodeFirstLevel, SerAttrKeyString, SerKeyString, SerPropString, SessionKeysAvailable, iview_id, iview_mode, windowId, sap-pp-producerid, sap-pp-consumerBaseURL, sap-pp-returnToConsumer, login_submit, j_user, j_password, j_authscheme, uidPasswordLogon, MappedUser, MappedPassword
GUSID
GuiType WebGui
GuiType.default WebGui
ITSVersion 640
JREPluginDownloadLocation
JREPluginMimeType application/x-java-applet;version=1.4.1_02
JavaGuiCodeBase
JavaGuiTraceFile
JavaGuiTraceKey
LAF
LoadingCacheKey <Portal.Version><LAF.Theme>
LogonMethod SAPLOGONTICKET
MandatoryParameters System
NavMode 1
NavigationTarget navurl://21635c17e11df05c58e1c07deaf5bed1
NextLayer Transaction/WebGuiESIDLayer
OkCode
OkCodeField
OptionalParameters
ParameterTemplate <ApplicationParameter[PROCESS_RECURSIVE]>;<ForwardParameters[QUERYSTRING]>;<DynamicParameter[PROCESS_RECURSIVE]>;
Portal
ProducerLocation Remote
REFRESH_CONTENT -1
ReuseWinguiConnection false
RoundtripURL
SSO2Template
SessionManagementVersion
SupportedUserAgents (MSIE, >=5.5, *) (Netscape, *, ) (Mozilla,,*)
SupportsUnicodeCodePages false
System KPMGVM005_ALIAS
System.type lookup:com.sapportals.portal.appintegrator.lookup.SystemLookup
TCode YTIME
Technique Standard
TopLayer Transaction/DragAndRelateLayer
Transactions_Require_SSF RRMX,RRMXP
URL
UnsupportedUserAgents
UseFrog true
UseSPO1 false
UserMappingTemplate sap-user=<MappedUser>&sap-password=<MappedPassword>
ValidityPeriod -1
Wizard.ApplicationVariantPane.Description
Wizard.ApplicationVariantPane.Title
Wizard.MandatoryParameters System, TCode, GuiType
Wizard.OptionalParameters ApplicationParameter, UseFrog, Technique
Wizard.ParameterPane.Description
Wizard.ParameterPane.Title
X509Template
com.sap.application_integration.ConfigurationServiceID Transaction_Configuration
com.sap.portal.ComponentType com.sapportals.portal.iview
com.sap.portal.activityreport.MonitorHits true
com.sap.portal.admin.propertyeditor.categoryName
com.sap.portal.iview.AccessibilitySupport
com.sap.portal.iview.Availability VISIBLE
com.sap.portal.iview.DisableChildrenDYN
com.sap.portal.iview.DisableChildrenRL
com.sap.portal.iview.DisableChildrenTC
com.sap.portal.iview.DragAndRelate false
com.sap.portal.iview.ExpansionMode Open
com.sap.portal.iview.HasContentPadding true
com.sap.portal.iview.Height 80
com.sap.portal.iview.HeightScale PIXELS
com.sap.portal.iview.HeightType FIXED
com.sap.portal.iview.HelpURL
com.sap.portal.iview.IsTemplate false
com.sap.portal.iview.MainObject
com.sap.portal.iview.MaxAutoHeight 1000
com.sap.portal.iview.MinAutoHeight 0
com.sap.portal.iview.SMiViewURL com.sap.portal.epsolman.EPSolman
com.sap.portal.iview.ShowDetails true
com.sap.portal.iview.ShowExpand true
com.sap.portal.iview.ShowHelp false
com.sap.portal.iview.ShowMinimize true
com.sap.portal.iview.ShowPersonalize true
com.sap.portal.iview.ShowRefresh false
com.sap.portal.iview.ShowRemove true
com.sap.portal.iview.ShowSMiView false
com.sap.portal.iview.ShowTitle true
com.sap.portal.iview.ShowTray true
com.sap.portal.iview.TitleURL
com.sap.portal.iview.TrayType PLAIN
com.sap.portal.iview.Width 400
com.sap.portal.iview.WidthScale PIXELS
com.sap.portal.iview.WidthType FIXED
com.sap.portal.iview.family
com.sap.portal.navigation.DragRelate 0
com.sap.portal.navigation.ExtWindowHeight 710
com.sap.portal.navigation.ExtWindowWidth 1014
com.sap.portal.navigation.Invisible false
com.sap.portal.navigation.JScript
com.sap.portal.navigation.MergeId
com.sap.portal.navigation.MergePriority 100.0
com.sap.portal.navigation.Mergible true
com.sap.portal.navigation.NavigationHierarchyMetadata Cacheable
com.sap.portal.navigation.Priority 100.0
com.sap.portal.navigation.QuickLink
com.sap.portal.navigation.ShowAddToFavorites true
com.sap.portal.navigation.ShowType 1
com.sap.portal.navigation.WindowName
com.sap.portal.navigation.view
com.sap.portal.pcd.gl.Collection IP_PTL_INITIAL_CONTENT
com.sap.portal.pcd.gl.CreatedAt Sat Sep 22 11:32:17 EDT 2007
com.sap.portal.pcd.gl.CreatedBy Administrator
com.sap.portal.pcd.gl.DeltaLinkState -1
com.sap.portal.pcd.gl.Domain EP
com.sap.portal.pcd.gl.LastChangedAt Fri Sep 12 19:24:19 EDT 2008
com.sap.portal.pcd.gl.LastChangedBy ksingh
com.sap.portal.pcd.gl.ObjectClass com.sapportals.portal.iview
com.sap.portal.pcd.gl.OriginalCountry
com.sap.portal.pcd.gl.OriginalLanguage en
com.sap.portal.pcd.gl.Responsible Administrator
com.sap.portal.pcd.gl.TransportDependencies pcd:com.sap.portal.system/archives/com.sap.portal.appintegrator.sap.par
com.sap.portal.pcd.role.EntryPoint false
com.sap.portal.pcm.Description VRB_com.sap.portal.pcm.Description
com.sap.portal.pcm.Title myTime
com.sap.portal.pcm.admin.Capabilities com.sap.portal.capability.delete,com.sap.portal.capability.link,com.sap.portal.capability.copy,com.sap.portal.capability.edit,com.sap.portal.capability.cut,com.sap.portal.capability.transportable,com.sap.portal.capability.launch,com.sap.portal.capability.editpermissions
com.sap.portal.pcm.admin.UseDefaultCapabilities true
com.sap.portal.private.iview.PropertiesUrl pcd:com.sap.portal.system/applications/com.sap.portal.appintegrator.sap/components/Transaction
com.sap.portal.reserved.iview.ButtonsURL
com.sap.portal.reserved.iview.EditorURL pcd:portal_content/com.sap.pct/admin.templates/iviews/editors/com.sap.portal.pcmEditor
com.sap.portal.reserved.iview.IconName
com.sap.portal.reserved.iview.IsolationMode URL
com.sap.portal.reserved.iview.NavPanelStatus Automatic
com.sap.portal.reserved.iview.ParamList *
com.sap.portal.reserved.iview.WizardURL com.sap.portal.appintegrator.iViewWizard
com.sap.portal.workDistributionTopic
com.sapportals.portal.navigation.FolderEntry false
com.sapportals.portal.navigation.Pictogram
com.sapportals.portal.navigation.WinFeatures resizable=yes,toolbar=no,menubar=no
propertyIdMapping
com.sap.portal.appintegrator.sap.Transaction::Transaction/WebGuiSSOITS640Layer
MandatoryParameters
System   SAP_LocalSystem KPMGSBBW_alis KPMGVM005_ALIAS SAP_BW SAP_CRM SAP_ECC SAP_RPM SAP_WEBDYNPRO_CRM_ALIAS TestECC_Alias Test_CRM_Alias WebEx XBICLNT100 XCRCLNT100 XECCLNT100
Is it required to add ECC certificate to Portal sytem?
we have created the same user id in both the sytems.
Please let me know what could be the error.
Regards

Vijay,
Please follow these steps and lemme know what you observe.
Go to system administration->support->sap application-> under test and configuration tools choose sap transaction
under the mandatory fields choose the system that you have created, choose a tcode (se16) and choose sap gui for windows and click go.
If you are able to logon to your ecc system, your sso works!
P.S Make sure the user name with which you are testing this, exists in the backend as well.
Good luck
Cheers,
Sandeep Tudumu

Creating destinations in CAF using SSO Logon Ticket/Assertion Ticket

Hi Experts,
Am using ECC 6.0 & CE 7.1 EP06
I have a Composite Application(CAF, using Java) which consumes BAPIs and Enterprise Service.
For connecting the CAF(Java) layer to communicate with ECC I need to perform mapping between the destinations of the BAPI(RFC destination) and the Web Service destination.
We have created the Logon Ticket and is working fine, this we can say so because there is a SAP Transaction iView and is running fine. The only problem occurs for RFC and destinations of type 'wsdl'(created for Enterprise Service)
For authentication, in the case of
RFC destination if I use Logon ticket I get the error " Error while creating assertion ticket on demand. No logged in user found."
but when I used the assertion ticket it works fine.
But for the Web Service Destination, when I try using the Logon Ticket I get the error
" Error while creating assertion ticket on demand. No logged in user found. "
and when using the Assertion Ticket I get this error
" Properties not set:
NS: http://www.sap.com/webas/630/soap/features/transportguarantee/ Name: IncludeTimestamp "
Please help me in this issue. Any information is appreciated.
Thanks
--- Brian

Do not cross post in the different forums.

SSO with BSP Not Working

Hi
I am running Nw2004s Portal with ECC5 as BackEnd.
I have Configured the ECC5 for SSO using RZ10 and strustsso2.
The Portal UserIDs are same as those in ECC5 .
The SSO is working fine with ESS in the Portal.
But when i run a BSP iView then it asks for UID,PWD in a PopUp.
I am accessing the Portal with FQDN and in the properties of the System
referred by BSP also maintained FQDN of the backend WebAS.
How to get rid of this Login PopUp for BSP ?
Any Help will be highly appreciated !
Regards,
Rajendra

Hi Rajendrakumar,
You probably haven't updated the ACL properly via STRUSTSS02.
The portal server digitally signs logon tickets as it issues them to the portal users. SAP Systems need to accept the tickets and verify the portal servers digital signature. The following information is important for the SAP System to be able to accept and verify logon tickets:
· The SAP System should only accept logon tickets issued from their designated portal server. Therefore, the identity of the portal server needs to be entered in the SAP Systems Single Sign-On (SSO) access control list (ACL).
· The SAP System needs to be able to verify the portal servers digital signature. The portal server has a self-signed certificate, therefore the SAP System needs access to the portal servers public-key information, which needs to be entered in the SAP Systems certificate list.
Check the following procedure
http://help.sap.com/saphelp_nw70/helpdata/en/78/f1a8490e7011d6999500508b6b8a93/frameset.htm
Regards,
Siddhesh

In R12 can i login and work on two different languages

Hi,
I have a requirement that one my end user wants to login to applications using base language and also in installed language at the same time. but the problem is after logging in for the installed language the first login is which was in english is also changing back to installed language.
I have one thought of using two different browsers, but can i do it using a single browser.
Thanks,
Taher

Hi hussein,
The problem is not in opening multiple form sessions. But the main problem is as soon i login from another internet explorer session with another language. The first login page also changes back to last login language.
Steps.
1. Login to Applications in english: [Forms are not used yet]
2. Open another windows explorer session. Change language to ARABIC and login. Successful [Forms are not used yet]
3. Refresh the login done of step1. Now step1 login page also changes back to ARABIC.
One thing just now i tried is to open one session using IE, and another one using FireFox. This seems to be working fine.
Thanks,
Taher

How to work with two different backend with same MI Server and war file

Hi All,
We have a requirement that we need to work with one Middleware for two backends. For that we had to copy MAM30 sync bo's to zsync BO'S with the name ZMAM30. Now both sync BO'S will point to different backends.
I have a standard war file which was working well with standards sync bo's. Now to work on zsync bo's what all the changes do I have to do in the standard war file(code).
As per my knowledge we have a file called "syncbonamelist.properties" which maps the sync bo keys. Also there is another file called "mapping.xml" file which maps the package name with BO name.
Can any body please tell me, are there any other files needed to be change like "meRepMeta.xml", other than any existing code like java objects are also needed to be changed.
Your help in this regard is highly appreciable.
Regards
Murthy

Hi Murthy,
I try to get my head around the question:WHY?
The reason for my question is, that this influences the answer!
Because of several reasons it is NOT possible to handle MAM and zMAM Bos at the SAME TIME on the SAME MACHINE in the way you describe it - and it makes no sence to do so at all! But anyway......
Lets say you have two backends, cause you have two different areas of the company. But both want to use the same MI server - but the client should be independend.
So you need two apps. One uses the MAM BOs and the second one uses the zMAMBos.
If this is the case, dev should be straight forward I think and you solution should work already......... so I ask myself, what is the problem you have? Do you get an error?
- First create a new MEREPMETA-XML with just the zMAMBOs instead of the MAM BOs.
- Change the two files you mentioned above.
This should be all then.
If you have a look into the implementation for MAM001Impl for example, there you find a line like:
private static final String SYNC_BO_NAME
= ResourceBundle.getBundle("com.sap.mbs.mam.bo.impl.syncbonamelist").getString("MAM30_040");
This takes the name from the properties file and maps it to the real BO. So changing the name in the property file to
MAM30_040 = zMAM30_040
will result in MAM uses the zMAM BOs.
Be aware: after you place the WAR file in the WEBAPPS folder and do a restart to deploy the file, you need to do a data reset to make sure the new MEREPMETA.XML is read.
AND: two apps! one for MAM and one for zMAM BOs. One APP is not possible! Cause if you have something like that in the properties file:
MAM30_040 = MAM30_040
MAM30_040 = zMAM30_040
if will only take the first reading.
But I think this is clear to you anyway
Regards,
Oliver

Datasocket does not work with two network cards

If I have two ethernet card in a PC. The Datasocket server does not work if the second card is enabled. It keeps displaying resolving IP Address. I am wondering if there is a solution for this problem.
Thanks

Thanks for you reply. One card has a static address(10.20.35.1), which is used for Data socket, and the other card uses a dynamic IP address. The card with dynamic address is only used for connecting the PC to the company’s network.
The second card, when turned on causes the Datasocket server problem. In the Datasocket Server manager I have only two IP addresses under Permissions Groups. (10.20.35.1 and 10.20.35.11. 10.20.35.11 is the IP address of the remote PC with labview application. The Datasocket is used to transfer data between the two PC’s)
I am wondering if my set up for hosts in Datasocket Server manager is not correct.

SSO logon tickets not working in two different OS

Similar Messages

Maybe you are looking for