Question Re: ESS/MSS sso configure between java and abap instance in Technology Q&A

ESS/MSS sso configure between java and abap instance

Former Member — Tue, 29 Apr 2014 06:34:55 GMT

Dear Gurus,

I want to configure sso between java and abap instance for ESS/MSS. I couldnt find any guide for it, could you please help me gurus ?

Other question is, is there any specific role for ESS/MSS users in JAVA instance. I want to create users and assign this role to them.

Best Regards

Re: ESS/MSS sso configure between java and abap instance

anil_kumar259 — Tue, 29 Apr 2014 06:57:05 GMT

Hi Kemal,

For SSO implemenatation just follow

There is standard Role for ESS in Java (ie portal), after creating the users you can assign the ESS role to the users or else you can create the custome role and assign the the custom role to users.

Regards,

Anil

Re: ESS/MSS sso configure between java and abap instance

Former Member — Tue, 29 Apr 2014 07:35:41 GMT

Dear Anıl,

Firstly thank you for helping.

When i implement the certificate(TicketKeystore.view) at this guide, i take error : SSF kernel error: invalid parameter .

Do u have any idea ?

Regards

Re: ESS/MSS sso configure between java and abap instance

anil_kumar259 — Tue, 29 Apr 2014 07:56:46 GMT

What do you mean by implement certificate i didnt get you.....??

To Export the certificate go to-->NWA-->Configuration-->Security-->Certificates and keys-->Ticket Keystore-->Saplogonticketcertificate-->export(its better to delete already existing certificates and create the new)

Then import the same certificate in strustss02 in Abap(r/3) side.

Regards,

Anil

Re: ESS/MSS sso configure between java and abap instance

Former Member — Tue, 29 Apr 2014 08:06:43 GMT

Related my screen shot, it gives error again. By the way i didnt create System Object in Portal (first step) may it cause the problem ?

Error screen

Re: ESS/MSS sso configure between java and abap instance

anil_kumar259 — Tue, 29 Apr 2014 08:23:45 GMT

hi Kemal,

You are Exporting a wrong file.

Please find the screen shot and do the same.

Re: ESS/MSS sso configure between java and abap instance

Former Member — Tue, 29 Apr 2014 09:11:07 GMT

Dear Anıl,

I am at creation as screen shot maintained below, System name should be target ABAP system ?

Abap : VIE

Java: VJD

Should be VIE right there ?

Re: ESS/MSS sso configure between java and abap instance

anil_kumar259 — Tue, 29 Apr 2014 11:01:49 GMT

Hi kemal,

In the above screen shot, In the place of System Name you can give your system name & System id.

After clicking on finish, open the object for editing and enter the Connector,WAS and ITS properties(Take the help of basis team to get these values)

Please find the below link it will be helpful for creating the system object.

How to Create System Object in the Portal for Connecting to SAP backend System - Portal - SCN Wiki

Regards,

Anil

Re: ESS/MSS sso configure between java and abap instance

Former Member — Tue, 29 Apr 2014 12:08:28 GMT

Dear Anıl,

I complete all steps, but screen shot maintained below ; i successfull for "Quick System Connection Test" but , "ITS Connection" and "Connection Test for Connectors" failed.

ITS setting are ;

ITS Host Name : host.company.com:PORT

ITS Path maintained in screenshot

Re: ESS/MSS sso configure between java and abap instance

hemanth2 — Tue, 29 Apr 2014 13:56:19 GMT

Hi Kemal,

Hope you are doing good.

There should be a / in the ITS path before SAP.
Basically the entry that you have mentioned here should be accessible via browser as well. For eg in your case:

http://<its hist name>/sap/bc/gui/sap/its/webgui should be accessible over browser.
I also think you have put in a extra space in "w ebgui". It should be "webgui".

If the connector settings are working, then we can be sure that system connection is fine. You do not need to configure ITS settings.

Also for SSO, refer the SAP note:1083421 and configure the SS0 settings again.

Please run the SSO2 wizard and then make the automatic connection to

the abap server. This will solve any inconsistencies on the server

due to manual interventions.

Most likely reason for the error is that certificates were loaded

manually rather than using SSO wizard.

More help:

<http://wiki.sdn.sap.com/wiki/display/EP/Troubleshooting+SSO+between+AS-ABAP+and+AS-JAVA>

The SSO enabling parameters should be set on the R/3 server.

SSO Logon Ticket-> login/accept_sso2_ticket and login/create_sso2_ticket

More info:

<http://help.sap.com/saphelp_nw04/Helpdata/EN/22/41c43ac23cef2fe10000000a114084/frameset.htm>

Thank you and have a nice day :).

_____________

Kind Regards,

Hemanth

SAP AGS

Re: ESS/MSS sso configure between java and abap instance

Former Member — Tue, 29 Apr 2014 14:55:49 GMT

Dear Hemanth,

ITS connection is not problem any more i resolved this.

I configured SSO link maintained Single Sign-on with SAP Netweaver 7.3 | SCN

But, as screen shot maintained below "Connection test for Connectors" ending error. This problem related to SSO or Connector Settings ?

On the other hand ; Running Transaction On java (Test and Configuration Tool) maintained in the screen shot, sometimes working and sometimes not working. Here is working and not working screen shots. What could be the problem ?

1- Not working and ,

2- Working here ,

Re: ESS/MSS sso configure between java and abap instance

hemanth2 — Tue, 29 Apr 2014 15:01:25 GMT

Hi Kemal,

The best option would be that you run the SSO wizard first (SAP note:1083421). Once this is done, to test the SSO, navigate to the-> http://<server>:<port>-> Web DynproTools-> Content Administrator and create a new JCo destination (using SSO). Does this test fine?

Do make sure that the user is present in the backend server as well -> and has the same login ID.

Let me know the result of this.
I am also not sure about your system connection settings, but please see the below doc and check the connection:

<http://scn.sap.com/docs/DOC-7165>

Regards,
Hemanth

Re: ESS/MSS sso configure between java and abap instance

anil_kumar259 — Thu, 01 May 2014 10:11:26 GMT

Hi kemal,

Did you fixed the issue???

Regards,

Anil

Re: ESS/MSS sso configure between java and abap instance

Former Member — Thu, 01 May 2014 10:22:58 GMT

Hi mate,

I have new problem here now, after opening startPage it is ok but when go to Sap Netweaver Administrator it gives error maintained screem shot, also unlock SAP* procedure is not working for /irj/portal/ not able to access with sap* .

Re: ESS/MSS sso configure between java and abap instance

anil_kumar259 — Thu, 01 May 2014 10:27:43 GMT

Hi kemal,

The screen shot shows that you dont have the NWA authorizations.......

Do you have useradminstration rights in portal???

if yes please assign the NWA_SUPERAdmin role to the particular user and check , it will work...

Regards,

Anil

Re: ESS/MSS sso configure between java and abap instance

Former Member — Thu, 01 May 2014 10:33:58 GMT

dear anil,

i am not able to assign the role, because i can not enter the portal(irj/portal). also sap* procedure is not working. i was able to access with admin to portal and startpage, but now i cant do that. I think SSO configuration is damaged to security java login files or something.

Regards

Re: ESS/MSS sso configure between java and abap instance

hemanth2 — Thu, 01 May 2014 11:12:08 GMT

Hi Kemal,

Did you check out:

1) The defaut trace entry when the sap* logon failed?
2) Download the UME configuration as per the below link and se of the UME properties for SAP* are indeed correct.

http://help.sap.com/saphelp_nw73ehp1/helpdata/EN/49/21616989A13896E10000000A421937/content.htm?

Let me know if you have any questions with teh above.

Regards,
hemanth

http://help.sap.com/saphelp_nw73ehp1/helpdata/EN/49/21616989A13896E10000000A421937/content.htm?

Re: ESS/MSS sso configure between java and abap instance

Former Member — Mon, 05 May 2014 07:46:01 GMT

Dear Kumar,

In my case, should i go with "Downloading the UME Configuration When the AS Java is Down" case ? i want to try this one for last hope

Regards

Re: ESS/MSS sso configure between java and abap instance

hemanth2 — Mon, 05 May 2014 11:39:02 GMT

Hi Kemal,

Yes, you need to try that option. Then attach the result of this and then reproduce the issue and check the last default trace so that we can see the error.
We can solve this; but you need to act fast

Regards,
hemanth

Re: ESS/MSS sso configure between java and abap instance

Former Member — Mon, 05 May 2014 12:33:49 GMT

Dear kumar,

SID : VJD

Client : J01 (D:\usr\sap\VJD\J01)

Should i go to this location first ? (D:\usr\sap\VJD\J01)

java - jar /usr/sap/ VJD / J01 /j2ee/cluster/bin/services/com.sap.security.core.ume.service/lib/private/sap.com~tc~sec~ume~service~impl.jar /usr/sap/ VJD / J01

not working as screen shot below ;