About SAP Cloud Root CA during Secure Login Service SSO authentication

[Yuta]

About SAP Cloud Root CA during SLS SSO authentication

I am building SLS and configuring SSO for SAP GUI with Secure Login Client.

When you authenticate for the first time with Secure Login Client, you will be asked to install the SAP Cloud Root CA certificate.

Once installed, you will not be asked to install it again, but this has been obstacle because the SLS certificate obtained from SAP PKI Certificate Service Client CA will be displayed every time you authenticate with account.sap.com such as SAP for Me.

We are investigating whether this is possible.

Among them, we found that canceling the installation of the SAP Cloud Root CA certificate does not affect SSO with Secure Login Service.

If the SAP Cloud Root CA certificate is not required, I would like to prevent the Root CA certificate installation display from appearing.Do you have any good ideas?

[Ivan-Mirisola]

Hi yhoso,

I would suggest opening a ticket at SAP for such questions as this could potentially be a product issue which requires further investigation.

Best regards,
Ivan

[Yuta]

Hi Ivan-san

Thank you for your message.
Yes, I have filed a case with SAP Support and am in the process of inquiring.
If there is a response, I will report it here as well.

Best regards.

[Yuta]

Thank you for your reply.

It seems that the implementation has been changed to cause an error by applying Secure Login Client 3.0 SP2 PL19, where SSO works normally even if the SAP Cloud Root CA certificate is canceled.