Skip to Content
0
Former Member
Apr 25, 2007 at 08:17 AM

SSO between EP and ECC: cannot check issuer of sso ticket

252 Views

Hi @all,

I set up following scenario:

On Server1 I installed a EP6 and on Server2 I installed ECC 2005.

I tried to configure SSO between EP and ECC.

What I have done:

1. Installation of the SAP Cryptographic Library on the ECC

2. setting the parameters in RZ10 login/accept_sso2_ticket

3. Export of the verify.der zip file of the EP

4. uploaded the certificate in the ECC (STRUSTSSO2)

5. added also to the ACL list

6. created a user on the backend and on the portal

7. configured an IView on the portal which calls a transaction on the backend

8. called transaction SSO2 and specified "NONE" as RFC destination

When I logged on the portal with that user I have created and click on the IView, the webgui appears.

But at the bottom of the gui the following error message is displayed:

<b> cannot check issuer of sso ticket</b>

Now I guess, I have a problem with the imported certificate.

Does anyone may know, what the problem could be?

What for steps I have to do with certificate in the Visual Admin?

Do I need to create a new certificate in the TicketKeystore view?

I have read many posts and blogs, also the regarding topics on help.sap.com but I'm still confused about the correct steps for the implementation.

Thanks in advance,

Christian