Skip to Content
avatar image
Former Member

single sign on from windows to R/3 ECC5

hi all,

kindly suggest me whether kerboras will support ECC5 for implementing single sign on from windows to R/3.

regards

anil pandit

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

3 Answers

  • avatar image
    Former Member
    Jul 15, 2008 at 12:34 PM

    Hi,

    Yes...

    Verify the following profile parameters are set correctly in the backend using rz11

    login/accept_sso2_ticket = 1

    login/create_sso2_ticket = 0

    Make sure that in the portal the connector to back end is defined with following setting and permission is set correct.

    Authentication Ticket Type - SAP Logon Ticket

    Logon Method - SAPLOGONTICKET

    User Mapping Type - useradmin,user

    Fix certificate

    Login in to Visual Administrator

    1. Select the Key Storage Service.

    2. Select the TicketKeystore view.

    3. Delete the SAPLogonTicketKeypair and SAPLogonTicketKeypair-cert entries.

    4. Under Entry, choose Create . The Key and Certificate Generation dialog appears.

    5. Enter the Subject Properties in the corresponding fields.

    The entries in these fields build a Distinguished Name in the form:

    CN= , OU= , O=, L=, ST= , C=

    Use capital letters for the Country Name.

    6. Enter SAPLogonTicketKeypair as the Entry Name.

    Do not enter a different name. This J2EE Engine uses the entry with this name to sign logon tickets.

    7. Select the Store certificate option and choose DSA as the algorithm to use.

    8. Choose Generate .

    Now downloaded the J2EE Ticket via Visual Admin Tool

    Login to Visual Admin Tool

    open tree "Server # > Services > Key Storage"

    Within the "Key Storage" choose view "Ticket Keystore" and entry "SAPLogonTicketKeypair-cert"

    click on "Export" and save the ticket to a propper location

    Finaly uploaded the new ticket to STRUST

    Reagrds,

    Srini Nookala

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Jul 15, 2008 at 01:14 PM

    as of my knowledge kerboras supported 4.7 ECC5 and ECC6 for single sign on from windows to R/3.

    please see instgudes for config steps

    Steps include

    1. Prepare the central instance

    2. Configure the SAP front ends

    3. Configure the SAP logon

    4. Map SAP users to Windows 2000/2003 users

    Samrat

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Jul 16, 2008 at 03:53 PM

    >

    > hi all,

    >

    > kindly suggest me whether kerboras will support ECC5 for implementing single sign on from windows to R/3.

    >

    > regards

    > anil pandit

    With what front-end interface? SAPGUI?

    Add comment
    10|10000 characters needed characters exceeded