Skip to Content
author's profile photo Former Member
Former Member

Issuer of SSO ticket is not authorized

Hi All,

We have implemented SSO between SAP BO 4.2 and SAP BW by following the below links

Generate keystore and certificate for SAP BO BI4.0 - Business Intelligence (BusinessObjects) - SCN Wiki

https://wiki.scn.sap.com/wiki/display/BOBJ/Import+SAP+BO+BI4.0+certificate+into+SAP+BW

After implementing SSO, we are able to import all the roles and Aliases in SAP BO and tested login with SAP authentication in BI LAunch PAd and it's working fine.

We created an OLAP connection with Authentication as 'SSO' to the same SAP BW server, but when we tried to create a webi report using this OLAP connection we are facing the below error.

Detailed Error: (Note: the error is edited to remove server name)

com.businessobjects.sdk.core.server.CommunicationException$UnexpectedServerException: [[error.openSapBwBrowsingSessionFailed] 0] <<?xml version="1.0" encoding="UTF-8" standalone="yes"?><ConnectionString>

<Properties>

<Initial Catalog />

<Language>en_US</Language>

<Data Source>ServerName</Data Source>

<Cube Type>Unknown</Cube Type>

<SaveLanguage>true</SaveLanguage>

<Initial Cube />

<TargetProvider>SAPNETWEAVER7X</TargetProvider>

<NetworkLayer>SAPBW_BICS</NetworkLayer>

<Authentication Mode>2</Authentication Mode>

</Properties>

<ExtendedProperties>

<JCO_ASHOST>ServerName</JCO_ASHOST>

<SapLoginMode>0</SapLoginMode>

<JCO_R3NAME>DBW</JCO_R3NAME>

<JCO_CLIENT>100</JCO_CLIENT>

<JCO_SYSNR>00</JCO_SYSNR>

<JCO_LANG>EN</JCO_LANG>

</ExtendedProperties>

</ConnectionString>>,<com.sap.conn.jco.JCoException: (103) JCO_ERROR_LOGON_FAILURE: Initialization of destination custom_14054d46-6d58-446b-ab6a-6397505560bf_12 failed: Issuer of SSO ticket is not authorized on ServerName sysnr 00>

at com.businessobjects.sdk.core.exception.ExceptionBuilder.make(ExceptionBuilder.java:152)

at com.businessobjects.sdk.core.exception.ExceptionBuilder.make(ExceptionBuilder.java:109)

at com.sap.sl.sdk.requests.doit.DoItRequestHandler.afterProcessing(DoItRequestHandler.java:54)

at com.businessobjects.sdk.core.server.internal.AbstractServer.processIt(AbstractServer.java:178)

at com.businessobjects.sdk.core.server.internal.AbstractServer.process(AbstractServer.java:133)

at com.businessobjects.sdk.core.server.internal.InstanceServer.process(InstanceServer.java:96)

at com.sap.sl.sdk.olap.sapbw.service.SapBwBrowsingServiceImpl.processDoIt(SapBwBrowsingServiceImpl.java:249)

at com.sap.sl.sdk.olap.sapbw.service.SapBwBrowsingServiceImpl.processInvocation(SapBwBrowsingServiceImpl.java:207)

at com.sap.sl.sdk.olap.sapbw.service.SapBwBrowsingServiceImpl.processOpenSecureSession(SapBwBrowsingServiceImpl.java:190)

at com.sap.sl.sdk.olap.sapbw.service.SapBwBrowsingServiceImpl.openSession(SapBwBrowsingServiceImpl.java:72)

at com.sap.webi.ui.dialog.bex.OpenBexPanel.getSapBrowsingSession(OpenBexPanel.java:1185)

at com.sap.webi.ui.dialog.bex.OpenBexPanel.beginFetchNode(OpenBexPanel.java:886)

at com.sap.webi.ui.dialog.bex.OpenBexPanel.onNodeSelected(OpenBexPanel.java:629)

at com.sap.webi.ui.dialog.bex.OpenBexPanel.valueChanged(OpenBexPanel.java:1096)

at javax.swing.DefaultListSelectionModel.fireValueChanged(Unknown Source)

at javax.swing.DefaultListSelectionModel.fireValueChanged(Unknown Source)

at javax.swing.DefaultListSelectionModel.setValueIsAdjusting(Unknown Source)

at com.jidesoft.grid.JideTable$25.setValueIsAdjusting(Unknown Source)

at javax.swing.plaf.basic.BasicTableUI$Handler.setValueIsAdjusting(Unknown Source)

at javax.swing.plaf.basic.BasicTableUI$Handler.mouseReleased(Unknown Source)

at com.jidesoft.swing.DelegateMouseInputListener.mouseReleased(Unknown Source)

at java.awt.AWTEventMulticaster.mouseReleased(Unknown Source)

at java.awt.Component.processMouseEvent(Unknown Source)

at javax.swing.JComponent.processMouseEvent(Unknown Source)

at java.awt.Component.processEvent(Unknown Source)

at java.awt.Container.processEvent(Unknown Source)

at java.awt.Component.dispatchEventImpl(Unknown Source)

at java.awt.Container.dispatchEventImpl(Unknown Source)

at java.awt.Component.dispatchEvent(Unknown Source)

at java.awt.LightweightDispatcher.retargetMouseEvent(Unknown Source)

at java.awt.LightweightDispatcher.processMouseEvent(Unknown Source)

at java.awt.LightweightDispatcher.dispatchEvent(Unknown Source)

at java.awt.Container.dispatchEventImpl(Unknown Source)

at java.awt.Window.dispatchEventImpl(Unknown Source)

at java.awt.Component.dispatchEvent(Unknown Source)

at java.awt.EventQueue.dispatchEventImpl(Unknown Source)

at java.awt.EventQueue.access$500(Unknown Source)

at java.awt.EventQueue$3.run(Unknown Source)

at java.awt.EventQueue$3.run(Unknown Source)

at java.security.AccessController.doPrivileged(Native Method)

at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(Unknown Source)

at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(Unknown Source)

at java.awt.EventQueue$4.run(Unknown Source)

at java.awt.EventQueue$4.run(Unknown Source)

at java.security.AccessController.doPrivileged(Native Method)

at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(Unknown Source)

at java.awt.EventQueue.dispatchEvent(Unknown Source)

at java.awt.EventDispatchThread.pumpOneEventForFilters(Unknown Source)

at java.awt.EventDispatchThread.pumpEventsForFilter(Unknown Source)

at java.awt.EventDispatchThread.pumpEventsForFilter(Unknown Source)

at java.awt.WaitDispatchSupport$2.run(Unknown Source)

at java.awt.WaitDispatchSupport$4.run(Unknown Source)

at java.awt.WaitDispatchSupport$4.run(Unknown Source)

at java.security.AccessController.doPrivileged(Native Method)

at java.awt.WaitDispatchSupport.enter(Unknown Source)

at java.awt.Dialog.show(Unknown Source)

at com.jidesoft.dialog.StandardDialog.show(Unknown Source)

at java.awt.Component.show(Unknown Source)

at java.awt.Component.setVisible(Unknown Source)

at java.awt.Window.setVisible(Unknown Source)

at java.awt.Dialog.setVisible(Unknown Source)

at com.sap.webi.toolkit.ui.dialog.GenericDialog.setVisible(GenericDialog.java:128)

at com.sap.webi.ui.dialog.bex.OpenBexDialog.setVisible(OpenBexDialog.java:109)

at com.sap.webi.ui.data.BexQueryDataSourceProvider.createDataSourceInfo(BexQueryDataSourceProvider.java:76)

at com.sap.webi.ui.context.managers.DataManager.createDataSourceInfo(DataManager.java:389)

at com.sap.webi.ui.tasks.workflows.CreateDataSourceInfoUITask.doneProcess(CreateDataSourceInfoUITask.java:131)

at com.sap.webi.toolkit.ui.tasks.WebITask$PrivateWorker.done(WebITask.java:378)

at javax.swing.SwingWorker$5.run(Unknown Source)

at javax.swing.SwingWorker$DoSubmitAccumulativeRunnable.run(Unknown Source)

at sun.swing.AccumulativeRunnable.run(Unknown Source)

at javax.swing.SwingWorker$DoSubmitAccumulativeRunnable.actionPerformed(Unknown Source)

at javax.swing.Timer.fireActionPerformed(Unknown Source)

at javax.swing.Timer$DoPostEvent.run(Unknown Source)

at java.awt.event.InvocationEvent.dispatch(Unknown Source)

at java.awt.EventQueue.dispatchEventImpl(Unknown Source)

at java.awt.EventQueue.access$500(Unknown Source)

at java.awt.EventQueue$3.run(Unknown Source)

at java.awt.EventQueue$3.run(Unknown Source)

at java.security.AccessController.doPrivileged(Native Method)

at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(Unknown Source)

at java.awt.EventQueue.dispatchEvent(Unknown Source)

at java.awt.EventDispatchThread.pumpOneEventForFilters(Unknown Source)

at java.awt.EventDispatchThread.pumpEventsForFilter(Unknown Source)

at java.awt.EventDispatchThread.pumpEventsForHierarchy(Unknown Source)

at java.awt.EventDispatchThread.pumpEvents(Unknown Source)

at java.awt.EventDispatchThread.pumpEvents(Unknown Source)

at java.awt.EventDispatchThread.run(Unknown Source)

Caused by: com.businessobjects.sdk.core.server.ServerException: [[error.openSapBwBrowsingSessionFailed] 0] <<?xml version="1.0" encoding="UTF-8" standalone="yes"?><ConnectionString>

<Properties>

<Initial Catalog />

<Language>en_US</Language>

<Data Source>ServerName</Data Source>

<Cube Type>Unknown</Cube Type>

<SaveLanguage>true</SaveLanguage>

<Initial Cube />

<TargetProvider>SAPNETWEAVER7X</TargetProvider>

<NetworkLayer>SAPBW_BICS</NetworkLayer>

<Authentication Mode>2</Authentication Mode>

</Properties>

<ExtendedProperties>

<JCO_ASHOST>ServerName</JCO_ASHOST>

<SapLoginMode>0</SapLoginMode>

<JCO_R3NAME>DBW</JCO_R3NAME>

<JCO_CLIENT>100</JCO_CLIENT>

<JCO_SYSNR>00</JCO_SYSNR>

<JCO_LANG>EN</JCO_LANG>

</ExtendedProperties>

</ConnectionString>>,<com.sap.conn.jco.JCoException: (103) JCO_ERROR_LOGON_FAILURE: Initialization of destination custom_14054d46-6d58-446b-ab6a-6397505560bf_12 failed: Issuer of SSO ticket is not authorized on ServerName sysnr 00>

at com.sap.sl.sdk.requests.doit.DoItRequestHandler.afterProcessing(DoItRequestHandler.java:50)

... 84 more

The SAP user id has proper role set in BW and has admin rights in BO

Has anyone encountered this issue?

Please help me with the solution.

I have gone through lots of threads with the same issue and applied almost all the solution but nothing works. STS service and DSL Bridge service are running on the same APS. System ID in SAP Authentication Tab (options tab) is in UPPERCASE.

Thanks in advance,

Regards,

EN

SSO.PNG (33.3 kB)
Add a comment
10|10000 characters needed characters exceeded

Related questions

1 Answer

  • Posted on Aug 21, 2016 at 10:27 AM

    try with the same System ID in ACL of STRUSTSSO2 and CMC -> Authentication -> SAP -> Options.

    2238093 - "JCO_ERROR_LOGON_FAILURE: Issuer of SSO ticket is not authorized" while testing or creating an OLAP connection in IDT using SSO.

    Add a comment
    10|10000 characters needed characters exceeded

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.