SOAP - PI 7.11 - Proxy with Principal Propagation Not Working

[sarang_kahu1]

Hello,

I get error for scenario SOAP ( using SOAP UI ) - PI 7.11 - Proxy using Principal Propagation activated on Sender & Receiver Agreement.

Here are the things I have done.

1. Uploaded WSDL in SOAP UI Project.  I have uploaded .p12 key into Keystore and uploaded the .CER certificate in SAP PI keystore

2. PI configuration in SXMB_ADM, as per standard documentation is done.

3. The checkbox for 'Principal Propagation' is activated in sender and receiver agreement.

4. The userid (dialog user) is having all authorization as per standard documentation.

5. While calling webservice using SOAP UI, I put userid and password and Configuration I created

6. Basis completed the steps like SSO, certificate exchange between ECC and PI, certificate exchange between Java and ABAP, set required profile parameters. This is as per standard documention

Despite doing all this, I get error in SOAP UI response:  MessagingException: XIServer : UNAUTHORISED.

I checkd the SXMB_MONI, then found that the e

Please see attached image.

Am I missing any steps here, as I am unable to figure out why error is coming.

Surprisingly, when I uncheck the flag of "principal propagation' on receiver agreement, then every works fine in SOAP UI. But its not principal propagation in that case.

Thanks

[Former Member]

Hello Sarang,

I've just configured the connection PI-ECC, it seems to work fine. I suspect you have a problem with either the trusted relationships or with the users. Have you figured out where the error actually occurs? Is it in PI Messaging System or was the message passed to the adapter already? Have you checked the ICM trace of your backend? Have you tried tracing it with XPI Inspector? This helped me to get insight into the logon tickets generated and where the error happened.

Regards,

Jörg

[sarang_kahu1]

Hello All,

Any one done this scenario and faced this problem?

Regards

Sarang

[former_member183909]

try this it may help.

I have set up Principle Propagation in SAP ECC.

This is done via SAP ECC transaction SXMD_ADM > Principle
Propagation

                
This will automatically created userid: PIPPUSER and a SM59 destination
SAPXIPP<ecc client>

[sarang_kahu1]

Thanks Jonny for response.

The SM59 destinations in SAP ECC are already completed by SAP.

What is scenario when it worked in your case.

Are you using SOAP UI to send it? If yes, are you signing it with private key before calling webservice in SAP PI?

Regards

Sarang

[former_member183909]

sorry old bean - no I'm not.  (I just did this for reprocessing messages via smxb_monitor).