No SSO funktion, but all parameters are set correct

[Former Member]

Hello solvers,

i have a big broblem.

We need for our e-recruiment to log on to bsp with single-sign-on.

I have customized all parameters for SSO, but it don't work.

The parameters in profile are set:

login/accept_sso2_ticket = 1
login/create_sso2_ticket = 2
icm/host_name_full = c11.sap-company.loc
sec/libsapsecu = /usr/sap/C11/SYS/exe/run/libsapcrypto.o
ssf/ssf_symencr_alg = TRIPLE-DES                             
ssf/ssfapi_lib = /usr/sap/C11/SYS/exe/run/libsapcrypto.o
ssf/name = SAPSECULIB                             

In the transaction STRUST all is set.

But the bsp need a three times log on!

The test bsp ( test_sso2.htm )sad:

NO SSO2 Cookie Found!

The testreport SAPHTML_SSO_DEMO sad:

Error in configuration of SAP logon tickets
Message no. 00146

Diagnosis
The system was not configured for SAP logon tickets:

At least one of the two parameters login/create_sso2_ticket and login/accept_sso2_ticket currently has the value 0.

System Response
It is not possible to use SAP logon tickets.

Therefore, there is also no single sign-on support when using SAPGUI HTML Control and calling local ICF services (see SAP note 612670).

Procedure
Contact the system administrator.

Procedure for System Administration
Check the values of the two profile parameters and set them to suitable values, for example:

login/create_sso2_ticket = 2
login/accept_sso2_ticket  = 1
After setting the profile parameters (using transaction RZ10) you must restart the application server for the new values to become active.

I rechecked the params in RZ11 and they are set correctly!

SAP Note 612670 do not help.

SAP Note 517860 do not help.

SAP Note 517484 do not help.

Can you help?!

regards

Ch.Fischer

[Former Member]

Thank you for posting the solution. It solved my problem.

[Former Member]

We must delete the standard entry in list if transaction STRUST -> environment -> maintain SSF parameters