Secure Login Server and Client SSO against AS JAVA

Hi experts,
I have configured SSO with Secure Login Server and Secure Login Client against ABAP system without problems following

https://blogs.sap.com/2017/07/12/sap-single-sign-on-protect-your-sap-landscape-with-x.509-certificates/

I could use AD as user source

Currently, I'm trying to make the same for AS JAVA systems like PO, Portal, but information is confused.

1) Trusted relationship between JAVA Netweaver from Secure Login Server and Satellite System (GRC JAVA) is done

2) I have read in the SS0 3.0 guide that SAP AS Java Authentication (UME) profile in Secure Login Server should be used and it is imported on Secure Login Client too.

3) User exist in both systems and I can log in into the profille with certificate creation in browser side.

But I cannot make SSO in GRC JAVA side.

I think something more is required but documentation is confuse.

Very pleased if someone can help me or advise,

Thanks