ICF System Login - No automatic SSO. HTTP connection

[Former Member]

Hey experts,

I'm working with a trusted RFC connection between CRM WebUI and ERP/IS-U system. From the CRM I'd like to directly jump into an IS-U transaction.

When using the trusted RFC, the jump stops at the following logon screen with the following error:

ICF_SYSTEM_LOGIN006 "No Switch to HTTPS occured..." and

ICF_SYSTEM_LOGIN010 "Client, name,..."

Now I have to enter my password manually and everything works fine. If I trigger the jump again in the same session - so the password seems to be saved in the background.

What do I have to configure to have a TRUE single sign on without getting the ICF-login screen?

Best regards,

Daniel Kehne

[Former Member]

By the way: We are using this coding for the jump. Maybe we need to add something for SSO features?

lr_ent ?= me->typed_context->object->collection_wrapper->get_current( ).

  lr_desc_obj = cl_crm_ui_descriptor_obj_srv=>create_entity_based(

ir_entity           = lr_ent

iv_ui_object_type   =

'POINTOFDELIVERY'

iv_ui_object_action = if_crm_ui_descriptor_object=>gc_action_display

iv_component        = 'IUICOBJD'

).

  lr_nav_srv = cl_crm_ui_navigation_service=>get_instance( me ).

  IF lr_nav_srv->is_dynamic_nav_supported( ir_descriptor_object = lr_desc_obj ) = abap_true.

    CREATE OBJECT lr_collection TYPE cl_crm_bol_bo_col.

lr_collection->add( lr_desc_obj ).

    lr_window = me->view_manager->get_window_controller( ).

lr_window->call_outbound_plug( iv_outbound_plug   = 'TO_PROFDISP'

iv_data_collection = lr_collection ).

  ENDIF.

[former_member189549]

Hello Daniel,

The problem is related to SSO Setup.

The problem is that the BSP login application is using SSO2 cookie to
authenticate the browser requests. So the SSO2 configuration of the
system has to be correct even though you do not use single sign on.

Please refer to the following note as I believe it will prove useful
in resolving this issue.

* Note: 1405432 ICF system logon, deleting expired log
* Note: 1418011 SAP-SSOLIST: Set handling from domain- to host-specific
* Note: 1039335 Incomplete logoff from an ITS WebGUI application
* Note: 510007  Setting up SSL on Web Application Server ABAP

thanks

Willie

[former_member189549]

Hello Daniel,

The problem is caused by a kernel issue as addressed in note 1651937, please upgrade to the latest 720 kernel patch. See  note 19466: Downloading SAP kernel patches.

thanks

Willie

[Former Member]

Hi Willie,

thanks for your advice. We are already on 721 patch with level 119  - february 2014 - on our target system.

Other ideas?