SSO for ESS Service(ITS)

[former_member689397]

Hi,

I have implemented an ESS service in ITS and EP also. Now i want implement SSO for ITS services and Portal. How to start?.

Pls..any one adivce..

Thanks

Suriya.

[Former Member]

Hi,

have you check transaction STRUSTSSO2 in SAP R/3?

You should have the list of certificates in the upper part

of the screen and the single sign-on access list of systems

in the lower part.

I set the SSO for R/3, WAS620 e BW 3.5 in this way.

Further, check if the domain of the portal and the backend system is the same.

If it still doesn't work, probably there is something to check in the portla configuration.

[former_member689397]

Hi,

Here everthing is fine. Enterprise Portal, backend system(R/3) and ITS are same domain. But, once logged into portal once again prompting user id and password for login to R/3 thru ITS.

But I try to access any R/3 SAPGUI for WINDOWS transaction(for example..SE38, SE80 and etc..) it is displaying that corresponding SAP screen in portal. Hence I can conclude that SSO is working between Portal and R/3. But when I try to access any SAPGUI for HTML(ITS) then it is asking me to enter user name and password. That means sso is not working between ITS and Poratal.

can you pleae guide me. what else do i need to do ?

Regds,

Suriya.

[Former Member]

hi

Even we are facing the same error ,also we have checked executing transactions from the portal on to the backend system it happens which indivates SSO configuration is fine between R3 & portal but for ESS related services we are using standalone ITS since our backend R3 system is 4.7 release however our portal is 700 SR3 release

The SSO is working fine between portal & BW system also the SSO between the portal & LDAP(active directory has been used as a data source) is working fine only the one between portal & R3 is going in problem

Can anybody tell me the exact post configuration steps to be carried out on ITS (ITS is installed on the portal system itself) also tell me if any ITS related parameters that I might need to set also I am attaching herewith the contents of my global.srvc file located at dir:..\R3T\services\

Kindly let me know ASAP

********************************************************************************************************~appserver mmr3tst.corp.mahindra.com

~client 300

~clientcert 1

~cookies 1

~exiturl

~hostsecure <FQDN>

~hostunsecure <FQDN>

~language

~login

~logingroup

~messageserver

~multiinstanceservices 1

~password des26()

~portsecure 443

~portunsecure 80

~routestring

~runtimemode pm

~systemname R3T

~systemnumber 00

~theme 99

~timeout 60

~urlarchive /scripts/sapawl.dll

~urlimage /sap/its/graphics

~urlmime /sap/its/mimes

~usertimeout 24

~xgateway sapdiag

~xgateways sapdiag,sapxgwfc,sapxginet,sapextauth

~mysapcomusesso2cookie 1

~mysapcomgetsso2cookie 1

~mysapcomusesso2cookie 1

#~mysapcomssonoits 1

~showsysonlogin 1

~mysapcomnosso1cookie 0

**********************************************************************************************

kindly help

Regards

Sagar S

[Former Member]

We are having the same issue. Did any of you figure out whats causing it?

Other than setting the mysapcomusesso2cookie parameter to 1 in ITS, I dont know what else to do.

Please let me know if you got it working

Thanks

Ravi

[athavanraja]

Hi Suriya,

Have you seen these weblogs.

/people/dennis.kleymeonov/blog/2005/09/15/connecting-sap-systems-to-enterprise-portal-with-sso

/people/thomas.jung3/blog/2004/08/03/bsp-150-a-developer146s-journal-part-viii--user-authentication-single-sign-on

Regards

Raja

[former_member689397]

Hi,

I gone through the weblogs and done below steps,

1) I have downloaded verify.der and verify.pse from Key store administration.

2) changed the properties of R/3 system object (user management)to SAPLOGONTICKET.

3) In R/3 i have created new entry in this table TWPSSO2ACL. There i have given system id, client, Subject name, Issuer name, and Serial number. And finally saved.

4) Imported certifacte verify.der in to R/3

5) Set the profile parameter login/accept_sso2_ticket to the value 1 in every instance profile.

And for setting ITS parameters I need to make some changes in Global.srvc file.

can any one tell me how to set following parameter

(Is it ABAP WDB(SE80) or admin tool recomended please?)

~mysapcomusesso2cookie = 1

And also please guide me if Im wrong at any of the steps which I mentioned above.

I have same user id in R/3 as well as EP.

Thanks,

Suriya.