Skip to Content
0
Dec 30, 2006 at 10:27 AM

SSO Issue between EP7(Add-on J2EE) and ECC6.0(ABAP)

29 Views

Hi,

I have already follow sap online" target="_blank">http://help.sap.com/saphelp_nw2004s/helpdata/en/cb/ac3d41a5a9ef23e10000000a155106/frameset.htm">online document to config SSO (from EP to ECC6). The SSO is working when connect to other ABAP based system, but not working during connect to own ABAP instance.

Error message : "SSO logon not possible; browser logon ticket cannot be accepted".

Here is a draft action steps what I done:

1) WAS-J2EE (Add-on) : Change "login.ticket_client" from "000" to "999",

J2EE Configtool >> Global server configuration >> services >> com.sap.security.core.ume.service

2) WAS-ABAP (ECC): Add perameter to accept SSO ticket

RZ10 >> instance profile >>

"login/create_sso2_ticket = 2"

"login/accepte_sso2_ticket = 1"

3) Restart ABAP & J2EE Instance

4) Export certificate from portal(J2EE-Addon) (verify.der)

'System Administration' >> 'System configuration' >> 'Keystore Administration'. >> "SAPLogonTicketKeypar-cert"

5) Import certificate to ECC

STRUSTSSO2 >> Import certificate >> Add to ACL >> client = 999