SP4 SSO 2.0 HTTP Configuration

[Former Member]

Dear Experts,

Good day. I have looked at several demos regarding the configuration of SSO with HTTP connections, but most seems to point to configurations that require SSL. My primary reference for the task is the 5th part of the link below. So far, I have configured as instructed on the link, except for the SSL part, and it doesn't work.

http://scn.sap.com/docs/DOC-40179

Please advise. Thank you.

Regards,

Tom

[yakcinar]

Hello Thomas,

For Java SSO activation you need to configure 3 things as it was shown on demo video;

* activate SSL

* Import Root Certificate of SL Server (restart ICM)

* configure user mapping

What error do you get?

Regards,

Yuksel AKCINAR

[Former Member]

Hi Yuksel,

First off, thank you for taking time to help us out.

The problem we have is that SSO is not working for EP. We do not have SSL as this will only be used via the intranet. In the demo, the Root Certificate was imported on the SSL configuration. Is it not possible to place trust outside of the SSL?

Please advise. Thank you.

Regards,

Tom

[yakcinar]

Hello Thomas,

You can see the part of Implementation Guide below.

I am not sure whether it is must but it is the indication of SSL need.

"

SAP Single Sign-On 2.0 SP04

Document Version: 1.0 - 2014-10-28

Secure Login for SAP Single Sign-On Implementation Guide

1 What Is Secure Login?

Secure Login also provides single sign-on for Web browser access to the SAP Portal (and other HTTPS-enabled Web applications) with SSL.

"

Regards,

Yuksel AKCINAR

[Former Member]

Hi Thomas,

I'm not quite sure, I do understand your question. Are you trying to get X.509 based SSO working without SSL or the connection to the ABAP backend working without SSL.

For the first, this won't work, as X.509 certificates are bound to the SSL protocol. So you would need to use a different auth scheme in this case.

For the second, as far as I do understand you setup, this should be RFC based communication anyway and therefor would require the use of SNC not SSL.

Regards,

Patrick