SSO Parameters for ITS

[Former Member]

Hi All,

I have achieved SSO but i am not able to see the webgui. I guess it's because i have not set the ITS parameters. Can anybody tell me how can i set the ITS parameters, so that i can modify them and test SSO with webgui ?

Changing ITS Service parameters

This is what i need to set in global.serv, if i am not wrong:

~login=blank

~password=blank

~MYSAPCOMUSESSO2COOKIE=1

1) Where can I find global.srvc file?

2) Is this to be set on the R3 side or on portal side?

I used SE80 and could see Internet Service and Global but could not see those paramters there. How do we get these parameters ? Do i need to add them manually?

Can you suggest me the proper steps to change these values if i am using SAP EP6.0 SP09 and R3(WAS6.40 with Integrated ITS)?

Thanks and Regards,

Sunil

[athavanraja · Accepted solution]

SSO for integrated ITS check oss note no.517860

<u><b>Portal side:</b></u>

system alias , you have to set the ITS settings.

ITS Host Name: <host>.<domain>:<port>

ITS Path:sap/bc/gui/sap/its

ITS Protocol: http

First check whether the integrated ITS webgui is working independently by calling

http://<host>.<domain>:<port>/sap/bc/gui/sap/its/webgui

if its dosent you may have to publish the service. check out the following weblog for details on the same.

Regards

Raja

[Former Member · Accepted solution]

Hi,

Thanks a lot but I am sorry to say that it doesnt answer my question.

I have set up SSO on the Portal and R3 side. I am able to see WinGui through SSO but not the WebGUI.

The WebGUI works independantly but it does give me a warning message on the logon screen. The message says " SSO Ticket Generation is deactivated. You can only logon through Basic Authentication." When i give my username and password for basic authentication, it works fine.

Well, now that the WinGui is visible through SSO, the problem has to be with ITS. I just want to know how do i activate the SSO on ITS. There are these 3 parameters that have to be set but i don't know how and where to set it. That is exactly what i am looking for.

Changing ITS Service parameters

I want to set these parameters for ITS. Where and how do i set it ?

~login=blank

~password=blank

~MYSAPCOMUSESSO2COOKIE=1

It is WAS6.40 with integrated ITS.

Thank,

Sunil

[athavanraja · Accepted solution]

go to transaction SE38 and run program RSPARAM1 and see whether the following parameters are maintained.

login/accept_sso2_ticket 1

login/create_sso2_ticket 1

login/accept_sso2_ticket 1

login/create_sso2_ticket 1

If not you may have to maintain the same.

Regards

Raja

[athavanraja · Accepted solution]

for installation and activatin of intergrated ITS check out the following link.

http://help.sap.com/saphelp_nw04/helpdata/en/54/4d9993c6592941a407313a6763575c/frameset.htm

Regards

Raja

[Former Member · Accepted solution]

Hi,

I had set this parameter login/accept_sso2_ticket to 1 through SE38. I don't understand why would i need login/create_sso2_ticket=1 when my portal is the ticket issuer and the other systems are just going to accept the ticket from my portal.

As mentioned in this document, there is no global.srvc file in Integrated ITS. It is all maintained through ICM. But it is nowhere mentioned how do i activate the SSO on Integrated ITS.

When i am trying to access the webgui through browser, i get a message : SSO ticket generation is deactivated. Please use the basic authentication. Do i need to set login/create_sso2_ticket 1 too ?

I will change and restart the WAS. Let's see if that helps !!

Thanks and Regards,

Sunil Nair

[franc_requena · Accepted solution]

Hi,

We also had problems to configure SSO for Integrated ITS.

We solved it by doing the following:

On the Integrated ITS we modified the logon seguence to the following services:

bbpstart (we use SRM)

webgui (for R/3)

In order to do that, you need to go to transaction SICF, double-click in the service, click on the Change Button.

In the "Logon Procedure" Tab, chose "Alternative Logon Order".

A new tab "Logon Order" will appear. Set "SSO Authentication" as the first choice of the logon procedure list.

Publish the service using transaction "SE80" (Not sure if this is necesary, but it won´t hurt to do it)

Finally, it is very important that the URL to login to the portal is a full qualified name (hostname.domain:port). If you only use hostnaeme:port, the SSO will not work.

Hope this helps.

[Former Member]

Hi Sunil,

did you solved this issue ??

I'm facing this right now !!! Could you help me ??

Thanks,

Best Regards

Pedro Rodrigues.

[Former Member]

Hi,

The document which i have sent is gonna help you solve this issue. And yeah, it's just a warning message .. you can ignore it.

Just complete these steps:

1. Export certificate from portal (verify.der).

2. Check profile parameters

3. Import portal certificate to target system

4. Restart the SAP System for the changes to take effect.

You may close this message once the problem is solved.

Regards,

Sunil

[Former Member]

Hi Sunil, could you re-forward these file ?

We are with the same problem.

BestRegards. Ruben