XMAM30 - digital signature - new applet running with MobileEngine.exe

Hello,
I am new to this forum and could not find a solution for my problem.
I would be very happy, if anybody can help me.
I have developed a new applet based on the standard SAP applet for the digital signature in xMAM30. This applet works fine in Microsoft Internet Explorer 6.0 but it doesn't work with the MobileEngine.exe!
I have already read the SAP note 897289 about this topic, but this note was not the solution for my problem. Because the SAP Standard applet (com.sap.mbs.mam.order.control.SignApplet) in the mamsignapplet.jar works fine in MS IE 6 and with MobileEngine.exe.
After several tests I found out, that the problem must be the JAR-file which contains the applet.
I have created a new JAR-File of the SAP applet class: com.sap.mbs.mam.order.control.SignApplet with the same MANIFEST.MF which I found in mamsignapplet.jar. But this new JAR-file doesn't work with MobileEngine.exe. Only the MS IE 6 could load the standard SAP applet for digital signature.
Now my question is:
What is the difference between the standard SAP jar-file "mamsignapplet.jar" and the jar-file I have created by using the normal Eclipse export as jar functionality?
What's wrong with the jar-file I have created?

Hello,
The jars have to be "digitally signed". You can have a look here:
http://java.sun.com/developer/Books/javaprogramming/JAR/sign/signing.html
If it is still not wroking, I can find out with the production guys how they do it.
Thank you,
Julien.

Similar Messages

Digital signature does not validate with the given key

We are switching our single-signon provider from openssl to Weblogic's SAML. I am trying to create a test application that will send mock SAML assertions to our test Weblogic SAML server before we begin integration with the client that will send real SAML assertions.
I have configured a Weblogic 10.3.5 instance to be a SAML Service Provider as well as created an application that creates test SAML assertions to post to the SAML server. I'm currently using a self-signed certificate to sign the SAML assertion. I've imported the self-signed cert into both the DemoIdentiy.jks and cacerts on the Weblogic SAML server.
The Weblogic SAML server is giving the following error when trying to validate the signature of the assertion:
<SAML2Assert: Start verify assertion signature>
<SAML2Assert: The assertion is signed.>
<SAML2Assert: Digital signature does not validate with the given key
org.opensaml.xml.validation.ValidationException: Digital signature does not validate with the given key
at org.opensaml.xml.signature.SignatureValidator.validate(SignatureValidator.java:68)
at com.bea.security.saml2.util.SAML2Utils.verifySamlObjectSignature(SAML2Utils.java:229)
at com.bea.security.saml2.providers.SAML2Assert.verifySignature(SAML2Assert.java:285)
>
I get this error when the SAML assertion includes both the cert and the public key, just the cert, just the public key or neither.
I'm pretty sure I've configured the SAML instance correctly since I followed the steps provided by another group who got this working with a different client. The only difference is they are using a real signed certificate (Verisign i believe) instead of a self signed cert.
I'm looking for any help to track down which step in the process I've missed or implemented incorrectly.
Thanks!
Edited by: 911967 on Feb 6, 2012 12:26 PM

So I found my own answer to the issue. The error was being caused by an the following xml in the assertion:
<ds:Reference URI="">
The value of URI attribute must have a '#' followed by the same value of the ID attribute in the parent 'Assertion' element (in our case a random string):
<saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" ID="a5k42vnhsywezqzyufq15c4bb9xuzeozrmbppj38xe" IssueInstant="2012-03-12T14:33:25.986Z" Version="2.0">
<saml:Issuer>ISSUER_NAME</saml:Issuer>
<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
*<ds:Reference URI="#a5k42vnhsywezqzyufq15c4bb9xuzeozrmbppj38xe">*
How this is related to the digital signature is beyond me, though I admit I'm very new to saml and digital signing. However I spent a great deal of time investigating my certs and how I was creating the signature, which it seems is unrelated to the actual issue. I also wasn't able to find any docs specifying that this attribute was required, though I might have just missed it.

How to get verified digital signature for applets?

Hi All,
I run a small website with an applet ( [http://www.tozsdeasz.hu/grafikonrajzolo/inditas.html|http://www.tozsdeasz.hu/grafikonrajzolo/inditas.html] ). Visitors can load files into the applet, so the applet needs to ask for permission from the user to access files on the visitor's computer. When doing so an unfriendly window pops up telling that the digital signature of the application cannot be verified (you can see it for yourself by the link). Some users keep complaining about it fearing of the security risk.
What is the proper way of getting a properly signed applet? (how to get a verified digital signature?)
Please help me!
Best wishes:
Szabolcs Kelemen

Thanks for the links.
As far as I saw in the documents I need a "digital certification authority" to sign the jar.
Do you know any of these authorities that is free? The entire application does not worth much, I can't afford expensive certifications.
Best regards:
Szabolcs Kelemen

How to get applets running with Java Plug-in on Win but also on Mac OS X???

I've converted to the use of Java Plug-in for my applets, but I need to have those same applets executable from browsers on Mac OS X platform. Surely this has been done, but I don't see how. The browsers I've tried on Mac OS X (Netscape, IE) don't seem to recognize the <OBJECT> tag used for the java plug-in. I've seen no news about the Java plug-in being ported to Macs. How can one get the same applet to run with the Java plug-in on Windows browsers, and also to run with at least one of the common browsers on Mac OS X? Any help would be SO much appreciated!

Those ten dukes look good to me. But the passing of fifteen months has me thinking you've probably moved on. In any case, here's my effort.
I've been through a trial trying to get my applet, developed with 1.4.1_03, to run on my Mac OS X v.10.2.6 in multiple browsers. I'm posting my results here. Comments and feedback are welcome.
JVM support for 1.4.1 is limited to the Safari browser. All other browsers running in Mac OS X that I've tried ( Camino, Opera, Internet Explorer, Mozilla ) are using the 1.3.1 plugin. According to a bug report by Mozilla on this topic ( see Bugzilla Bug # 197813 http://bugzilla.mozilla.org/show_bug.cgi?id=197813 )
with the release of Apple's version of Sun's Java 1.4.1 the applet programming model has changed, and only Safari has adapted with this change. Other browsers, according to the report, could not because of a lack of documentation. The use of the MRJCarbon plugin offered by Mozilla (here - http://www.mozilla.org/oji/MRJPluginCarbon.html) only allows Mozilla to use the J 1.3.1. And I have not found any information on the Microsoft site about how to get IE 5.2 to recognize the newer version of Java.
Regarding the use of the OBJECT tag in Safari, it is a matter of debate. A current post on this topic exists in the Applet Development forum:
http://forum.java.sun.com/thread.jsp?forum=421&thread=441002
In my experience, I have not been able to determine that Safari v1.0 recognizes the OBJECT tag. My experience is that the APPLET tag is required to run applets in Safari. The Bugzilla report echoes the problem with the BadMagicNumber error that can arise in Safari. Nonetheless, I enjoy Safari and I enjoy Mac OS X.

Digital signature on LMS - issue with R/3 password

Hi,
We have enabled the Digital Signature (FDA check) for Follow-up against WBT course delivery method. Once I click on 'Confirm Participation' link, I get a popup to provide username and password. I believe this popup checks for SAP (R/3) UserID and password. The problem is, Learning portal (HCM_LEARNING) is linked within SAP Enterprise portal and most of our users don't have backend access and no password. They only know thier portal username and password.
So definitely, when I put my portal login details into the Popup, it will error as the password is different to the ECC System.
Is there any work around solution for this issue? Has anyone been able to resolve the issue around password?
Would really appreciate if you could share the solution with us.
Best,
Jaya

Hi
You need to Trigger an Outbound Message for generating the IDoc.
Using the process code, the IDoc interface finds the application selection module which converts the SAP document into an IDoc.
The process code is only used with applications which perform outbound processing via Message Control (NAST).
goto Transaction NACE ,
Select the Application ME - Inventory mangament.
Clcik on Output types , Copy the Out Put type WA03 & create anew Out put type.
Selec the Output type & Click on Processing routines
Maintain the medium 6 - EDI , there is no standard print program for EDI So you need to create your own Program & form Routine
Check this form routine EDI_PROCESSING in program RSNASTED for having an idea.
After maintaining all the relevant EDI Paramters.
Maintain the message condition record using MN21 for the new out put type.
When you create a Goods issue the Message will be triggereed & Idoc will be trigerred , you can then transfer this into XI.
Thanks & Regards
Kishore

Applet runs with jre 1.5 but not jre 1.6

I'm working on an applet which works just fine when 1.5.0_15 is the latest JRE installed on the PC, but does not work when 1.6.0_6 is installed. In the latter case, the applet does not load due to getting a NoClassDefFoundError. Here's the Java Console error trace:
java.lang.NoClassDefFoundError: com/hp/nonstop/hsc/core/configuration/ConfigurationMetaData
        at com.hp.nonstop.hsc.tools.configurator.ConfiguratorApplet.init(ConfiguratorApplet.java:53)
        at sun.applet.AppletPanel.run(Unknown Source)
        at java.lang.Thread.run(Unknown Source)
Caused by: java.lang.ClassNotFoundException: com.hp.nonstop.hsc.core.configurati
on.ConfigurationMetaData
        at sun.applet.AppletClassLoader.findClass(Unknown Source)
        at java.lang.ClassLoader.loadClass(Unknown Source)
        at sun.applet.AppletClassLoader.loadClass(Unknown Source)
        at java.lang.ClassLoader.loadClass(Unknown Source)
        at java.lang.ClassLoader.loadClassInternal(Unknown Source)
        ... 3 moreThe relevant (I think) portions of the <object> generated by the JSP is:
<object
    classid="clsid:8AD9C840-044E-11D1-B3E9-00805F499D93"
    name="ConfiguratorApplet" width="600" height="400"
    codebase="http://java.sun.com/products/plugin/1.3/jinstall-131-win32.cab">
<param name="java_code" value="com.hp.nonstop.hsc.tools.configurator.ConfiguratorApplet.class">
<param name="java_codebase" value="/HSC/configurator">
<param name="java_archive" value="configurator.jar,../lib/configapi.jar,<<other jar files listed here>>">
<<other param tags included here>>
</object>The class it can't seem to find (under 1.6) is actually located in the configapi.jar file, which itself is located in the ../lib folder (relative to the /HSC/configurator folder where configurator.jar is located).
Obviously, when the browser is using JRE 1.5.15 the VM engine can find all the needed classes as the applet runs OK. But when 1.6.6 is installed, things can't be found. I suspect something different in the search paths (though I thought the "java_archive" value was supposed to specify that), in the permissions needed to read the files, or something, but I just can't track down what the difference is (and thus why things are failing with 1.6 installed).
Any help/ideas would be greatly appreciated!

Stephen.Thomas wrote:
have [you] tried moving the configapi.jar into the same folder as the configurator.jarYes, I have. I've also tried re-rooting the page to the lib directory where everything exists; i.e. changing java_codebase to /HSC/lib and changing java_archive so all jars referenced no longer have ../lib/ in them. Same behavior.
It's almost as if the search path is behaving differently between 1.5 and 1.6, possibly not even being controlled by the values of java_codebase and java_archive at all.

Digital Signature only Release Status with 3(Approver) Signer

Hello SDN Folks
I have done all the basic settings for Digital Signature which is sawn in following link
http://wiki.sdn.sap.com/wiki/display/PLM/Digitalsignaturein+DMS
it is work fine with 1 RE (Release) status and 1 Signer
We have in process to implement Digital Signature with only two Status
our scenario is
Document Creator Create Document With Status CR
Document Approver Approve Document With Status RE
now we have scenario that For 1 Document we have 3 Approver and 3 approver must digitally sign on DIR
our status is
only CR(create)---->RE(release)
so how i can attached 3 digital signer with only 1 RE(Release) Status
is it possible to go with 3 digital signer with only 1 RE (Release) Status ????
Regards
Tushar Dave

Hi Tushar,
Your requirement of utilizing 3 different approvers for a single 'Release' status in a document type/s can be addressed via the approach proposed below:
1.Define 3 individual authorization groups
2.Define 3 individual signatures
3.Define a common signature strategy
4.Assign the above 3 individual signatures to the common signature strategy
5.Define the signature sequence(the order in which the 3 approvers must approve)
6.Define users and restrictions(signature assigned to relevant approvers/users)
7.For the document type in question for the 'Release' status,assign the above signature strategy and test.
For more detailed information on using digital signature effectively,refer the below link
http://help.sap.com/saphelp_470/helpdata/en/9f/857f3a1c7b11d294d200a0c92f024a/frameset.htm
Regards,
Pradeepkumar Haragoldavar

How to create a digital signature formy Applet?

who can tell me how to create a digital signature for my applet? i want details of the process, because i know nothing about it. Thank you very much!!!

http://java.sun.com/docs/books/tutorial/security1.2/apisign/gensig.html

Failing to create new SQL farm with FSconfig.exe for ADFS federation Services on an Azure SQL

I'm building ADFS in Azure. My plan is to use the Azure SQL. The problem is that FSconfig seams not to work with Azure SQL. Here's what i did untill now:
- I followed the documentation and created a new login and user (adfslogin, adfsuser) in a new
"adfsv21" database. Then i added the user to db_owner role.
- From c:\windows\adfs i run FSconfig: FSConfig.exe CreateSQLFarm /ServiceAccount mysa /ServiceAccountPassword ******** /SQLConnectionString "database=Adfsv21;server=[azureServer];User Id=mysa;Password=********" /AutoCertRolloverEnabled. I
tried it with both accounts, mysa and adfsuser with the same poor results.
The result is: "The following error occurred: The specified service account mysa is not valid. Specify
a different service account, and try again."
- I configured odbc and tested the connection. mysa can connect but adfsuser caanot. Why?
To be short, its not working. See this post with similar problems: google to "SQL server farm configuration error"...
So, is Azure SQL & ADFS not complatible? Really not?

My apologies for take a super long time to reply. Are you still having issues here? How can we help?
Thanks Guy

Use XML Digital Signature(Apache XML security) with Applet

I have problem when I use xml-security-1_2_1 library from Apache with applet and access denied errors occur.
6 May 2005 10:06:45 org.apache.xml.security.Init init
SEVERE: Bad:
java.security.AccessControlException: access denied (java.util.PropertyPermission org.apache.xml.security.resource.config read)
bla bla....
How should I do ? Please! T_T and thank you ..

An applet cannot read the local file system, connect to any other computer than the one
it came from or read properties it's not supposed to read. And I think it cannot write to any
property.
If you sign the applet or set up a policy for it the applet can do the same as an application
allthough the jre will still check the stack trace if the entire stack has the same privileges
as you signed applet.
http://forum.java.sun.com/thread.jsp?forum=63&thread=524815
second post and last post for the java class file

How to make sure an applet runs with Java 5?

Hi all,
First let me say thanks for all the help in the past. You've help me go from noob to intermediate noob. I've just about finished my first applet game which can be checked out here .
Now I've been reading about problems with mac and 1.6. (note it works on Linux). I want to make sure that it runs fine and of course I don't own a mac. So I downloaded the 5 JDK. Selected it as the java platform in Netbeans, compiled and it ran fine.
Questions:
Do I have to always use 1.5 to compile and perhaps set it as default?
Since it works in 1.5, do I compile it with 1.6 and just upload?
I'm worried I'm not testing it correctly. I mean if I have both 1.5 and 1.6 installed on my machine, how to I make sure the applet is only using 1.5 to run?
Thanks
Darrin

corlettk wrote:
I haven't got a clue RE your problem other than for max-portability you should compile with [-target 1.5|http://java.sun.com/j2se/1.5.0/docs/tooldocs/solaris/javac.html].
I must say I'm impressed, except I suspect my PC must be substantially faster than any of your test platforms... can you throttle it to CPU performance somehow? Or maybe it's just that my reflexes aren't what they once where.Thanks.
There seem to be two issues. The first is what people are using. This web stats shows pretty poor penetration of 1.6.
[http://www.statowl.com/java.php|http://www.statowl.com/java.php] Penetration: 54% with JRE1.6 + 19% with JRE 1.5. Total 73%.
The second is I've read that mac and 1.6 do not get along except on a 64bit platform.
So for applets there is not much choice but to compile on 1.5 for the broadest user base. I guess the good news is 1.4 and earlier are almost non-existent.
Edited by: Darrin.A on Apr 27, 2009 8:11 AM

Digital Signatures in Adobe PDF with Adobe SDK

Hi,
Please, apologyze my poor english.
I have an application that inserts a signature programmatically in a PDF document with Acrobat 8, via VB .NET, using the example provided in the Acrobat 8 SDK ("AddSignature").
The difference between the SDK example and this code resides only in the way of calling the script in .net
I call directly the AddSignature function with this code (partial), instead of calling the execution of the "ADBESDK:AddSignature" menu (this improves faster execution with no AVDOC object involved):
        AcroExchPDDoc = New Acrobat.AcroPDDoc
        Dim JsObj As New Object
        AcroExchPDDoc.Open("c:\test.pdf")
        JsObj = AcroExchPDDoc.GetJSObject
        JsObj.SetUserDigitalIDPath("/C/trabajo/DrTest.pfx")
        JsObj.SetUserPassword("testpassword")
        JsObj.AddSignature(JsObj)
        JsOb = Nothing
        AcroExchPDDoc.Save(1, "c:\result_test.pdf")
        AcroExchPDDoc.Close()
I notice that the more signatures the PDF already contains at the time of inserting a new signature, the more is the time it cost to the program to execute the "AddSignature" line. I've configurated Adobe Acrobat to not validate signatures on open, so I guess validation of existing signatures is not the cause of this delay.
Can someone tell me something about this ??

Well, surely a larer filesize could be the cause of incresing time but, in this particular case we are talking of PDFs about 150kb each.
With 3 or 4 signatures already, they have about 180kb so i guess the increase in filesize can´t be the origin (especially with a PC above the average). Anyway, i´m not sure...
Does someone have any other idea about this?

Opening new applet windows with button

I'm having a bit of trouble. I have this button when you click it, would open up another window with text in it. That works perfectly. But when I try to add another button for another window, it doesn't go perfectly.
I took out the useless code to show you the main stuff I'm working with.
import java.awt.*;
import java.applet.*;
public class HorseRacing extends Applet
    CustomFrame gameWindow;
    CustomFrame creditWindow;
    Button openGame, openCredit;
    Image redHorse, yellowHorse, blueHorse, orangeHorse;
    public void init()
          //Initializes the images
        redHorse = getImage(getCodeBase(), "../classes/horsered.GIF");
        yellowHorse = getImage(getCodeBase(), "../classes/horseyellow.GIF");
        blueHorse = getImage(getCodeBase(), "../classes/horseblue.GIF");
        orangeHorse = getImage(getCodeBase(), "../classes/horseorange.GIF");
          //Instructions window
        gameWindow= new CustomFrame("21 Century Horse Racing - Instructions", redHorse);
          openGame=new Button("View Instructions");
          add(openGame);
          //Credit window
          creditWindow=new CustomFrame2("21 Century Horse Racing - Credits");
          openCredit=new Button("View Credits");
          add(openCredit);
    // Method Name: action()
    // Parameters Passed: Event variable evt, Object varible obj
    // Data Returned: Variable true
    // Method Purpose: This block responds when the user takes an action
    //                  (such as hitting the return key). It causes the paint
    //                  block to be done again
    public boolean action(Event evt, Object arg)
        Graphics screen=getGraphics();
           boolean visible=gameWindow.isShowing();
        boolean visible2=creditWindow.isShowing();
           if(evt.target instanceof Button)
             if(visible)
                     gameWindow.hide();
                     openGame.setLabel("View Instructions");
                else
                     gameWindow.show();
                     openGame.setLabel("Close Instructions");
                if(visible2)
                     creditWindow.hide();
                     openCredit.setLabel("View Credits");
                else
                     creditWindow.show();
                     openCredit.setLabel("Close Credits");
        return true;
// Name: Sachit Harish
// Name of Program: CustomFrame
// Date Started: May 15, 2003
// Date Finished: 2003
// Program Description: This is a racing game where the program will
//                               generate random odds for the 4 horses. The user
//                               can then choose their horse and place a bet.
//                               The user will then see the horses race, and the
//                               money will be handed out depending on the odds.
class CustomFrame extends Frame
     CustomFrame(String title,Image redHorse)
          super(title);
          Graphics screen=getGraphics();
          //getClass().getResource("../classes/horsered.GIF").getImage();
          //redHorse=getImage("../classes/horsered.GIF");
          //screen.drawImage(redHorse, 0,0,10,10,this);
     public void init()
          setBackground(Color.gray);
     public void paint(Graphics screen)
          resize(430,280);
          screen.setColor(Color.lightGray);
          screen.fillRect(0,0,500,500);
          screen.setColor(Color.black);
          screen.drawRect(15,40,402,185);
          screen.drawRect(14,39,404,187);
          screen.setColor(Color.gray);
          screen.fillRect(16,41,401,24);
          screen.setColor(Color.black);
          screen.drawString("- - Instructions - -", 160,58);
          screen.drawLine(15,65,417,65);
          screen.drawString("    Once you start clicking on the checkboxes to choose your horse, the", 20,80);
          screen.drawString("odds will be created beside the horses. You can then select the horse",20,95);
          screen.drawString("you want with the checkboxes and in the input box place your bet amount",20,110);
          screen.drawString("Press enter to confirm your bet and click 'Race'.",20,125);
          screen.drawString("    The horses will then race, and once they finish, the winner will be",20,145);
          screen.drawString("displayed. If you didn't choose that horse, you will lose the money you",20,160);
          screen.drawString("bet. If you won, you will be payed out depending on the odds of that",20,175);
          screen.drawString("horse. Your bank will change according to how much money you lost or",20,190);
          screen.drawString("made. Once that is over, new odds will be created and you can play",20,205);
          screen.drawString("again.",20,220);
             //Image title = getImage(getCodeBase(), "../classes/titlepicture.jpg");
        //screen.drawImage(title, 0,0,430,220,this);
// Name: Sachit Harish
// Name of Program: CustomFrame
// Date Started: May 15, 2003
// Date Finished: 2003
// Program Description: This is a racing game where the program will
//                               generate random odds for the 4 horses. The user
//                               can then choose their horse and place a bet.
//                               The user will then see the horses race, and the
//                               money will be handed out depending on the odds.
class CustomFrame2 extends Frame
     CustomFrame2(String title)
          super(title);
          Graphics screen=getGraphics();
          //getClass().getResource("../classes/horsered.GIF").getImage();
          //redHorse=getImage("../classes/horsered.GIF");
          //screen.drawImage(redHorse, 0,0,10,10,this);
     public void init()
          setBackground(Color.gray);
     public void paint(Graphics screen)
          resize(430,280);
          screen.setColor(Color.lightGray);
          screen.fillRect(0,0,500,500);
          screen.setColor(Color.black);
          screen.drawRect(15,40,402,185);
          screen.drawRect(14,39,404,187);
          screen.setColor(Color.gray);
          screen.fillRect(16,41,401,24);
          screen.setColor(Color.black);
          screen.drawString("- - Credits - -", 160,58);
          screen.drawLine(15,65,417,65);
          screen.drawString("    CREDITS", 20,80);
             //Image title = getImage(getCodeBase(), "../classes/titlepicture.jpg");
        //screen.drawImage(title, 0,0,430,220,this);
}If I take away everything associated with the creditWindow, it will work. But when I add that in, I get problems.
Also, I let in those redHorse, yellowHorse, blueHorse, and orangeHorse images because thats another problem I'm having - to get an image to work in one of those new windows.
-s64

What happens if you change to a modern action listener?

CFPOP and digital signatures

Emails - Exchange 2003 mail server - that use "Digital
signatures" do not show any Body text. Either in the "BODY" or in
the "TEXTBODY" fields. Are there any work arounds or fixes for
this?
Thanks,

Hi,
I'm trying to use SAP Simple Digital Signature (username + password) with SSO.
I implemented the following SAP notes: 1862737 (main note that makes in possible to combine Digital Signature with SSO, which means using Windows/Active directory password instead of SAP password), 1974495, 1975701, but unfortunately it is not working.
I tried using SAP standard example of Digital Signature: program DSIG_BOOKING_EX (run from se38).
When running this program in SAP GUI 7.2 (and even in the latest SAP GUI 7.3), a popup appears and asks for a password (Windows / Active Directory Password). When I type the password and press OK, I get the following DUMP:
Category: ABAP Programming Error
Runtime Errors: MESSAGE_TYPE_X
Abap program: CL_GUI_CFW==========CP
Application Component: BC-FES-GUI
Do you know how to solve it?

NWSSO and Digital Signatures

This is a follow-up to Re-authenticate or provide additional credentials to access sensitive data.
We are currently looking at implementing NWSSO. As far as I know, NWSSO can't be used as an external security product for Digital Signatures so that users could input their Windows credentials to sign documents. Is that correct? Assuming yes, is something planned? What is the standard solution from SAP in this regard? We are on ERP 6.0 EHP6 SPS04 running in a homogeneous Windows environment. In short the problem is that users shouldn't have to remember their username and password in the SAP backend system once SSO is enabled. If we choose to roll out the semi solution where users have to remember their username and password in the SAP backend system, there is nothing out of the box for them to change their password in the SAP backend system since SSO is enabled. The main client to access the SAP backend system will be NWBC for Desktop 4.0.

Hi,
I'm trying to use SAP Simple Digital Signature (username + password) with SSO.
I implemented the following SAP notes: 1862737 (main note that makes in possible to combine Digital Signature with SSO, which means using Windows/Active directory password instead of SAP password), 1974495, 1975701, but unfortunately it is not working.
I tried using SAP standard example of Digital Signature: program DSIG_BOOKING_EX (run from se38).
When running this program in SAP GUI 7.2 (and even in the latest SAP GUI 7.3), a popup appears and asks for a password (Windows / Active Directory Password). When I type the password and press OK, I get the following DUMP:
Category: ABAP Programming Error
Runtime Errors: MESSAGE_TYPE_X
Abap program: CL_GUI_CFW==========CP
Application Component: BC-FES-GUI
Do you know how to solve it?

XMAM30 - digital signature - new applet running with MobileEngine.exe

Similar Messages

Maybe you are looking for