How to Test SSO Setup in Netweaver 7.3 PORTAL

[indrajith_v]

Hello Experts,

I have setup SSO between Portal and ABAP system.

EP2 is my SID.i have Added ABAP system as Trusted in --> http://<hostname>:port/SSO2

From what I was trying to test the configuration is from test and configuration tools.(system administration--> Support.)

(note : after adding abap System in Portal.) when I select the tool transaction from the drop down and have given the inputs 1.alias 2.Tcode 3.SAP GUI for HTML.

Then I get Below Error.when executed ...

please help me to correct this error.

and also let me know if there is another way to Test SSO configuration in Netweaver 7.3

Thanks

Indrajith.

[amylv · Accepted solution]

Hi Indraiith,

Make sure ABAP system has profile parameter login/accept_sso2_ticket=1.

Export EP2 certificate SAPLogonTicketKeypair-cert and import into ABAP system, then add this certificate into ACL list using t-code STRUST.

If above are down but issue remains, then send below thing.

1. Tell below property value in EP2 system object.

    ITS host name, ITS path, ITS protocol, ICM host name, ICM protocol, Authentication Ticket Type, Logon Method.

2. Tell FQDN of EP2 that you used to do test.

3. Logon ABAP client 100 and execute t-code SSO2, then execute it and send result as screenshot.

Cheers,

Amy

[indrajith_v · Accepted solution]

Hello Amy,

Issue has solved and ..... SSO is working.

many Thanks to you for asking those details...

for that reason i have checked the values of all the properties again ...

the problem was with ITS Hostname. Where Previously i have given the value as <HOSTNAME>:<PORT>/Prefix

Later it got solved when i gave FQDN in place of HOSTNAME.

Thanks again 🙂

[indrajith_v]

hello All,

how ever i could see the error 404 is gone after maintaining the ITS parameters in the system Object(in portal).

But Still not able to resolve the SSO issue.

it is prompting me for User and password of ABAP system.

please help.

[amylv]

Hi Indrajith,

For the 404 error, simulate this issue and get httpwatch trace following note 1558903. Then attach trace as .hwl file to this thread.

You can use below way to test SSO from EP to ABAP.

1. Log on EP with user and password, make sure same user ID exist in ABAP system.

    Make sure you log on EP with FQDN of EP server.

2. Replace URL with URL of ABAP ITS URL, then access it. Of cause you need to make sure this service node is active in ABAP via t-code SICF.

   For example:

   http://<FQDN of ABAP server>:<ABAP ICM port>/sap/bc/gui/sap/its/webgui?sap-client=<client number>

   **Replace <client> with the ABAP client number you want to SSO to.

3. If you see log on page of ABAP system this means SSO fail, otherwise SSO is working fine.

Hope this could help you!

Amy

[indrajith_v]

Hello Amy,

thanks for your reply.

I have read the note which you have suggested. However I could not proceed with the Tool download (which the note has suggested) as it against our organization policy.

Second thing is I have tried the steps you have mentioned above for testing.

When there is a URL change in browser,. I have got the Log on page of ABAP stack (meaning the SSO configuration  is not successful )

Please help to configure correctly.

I have done the configuration in http://<hostname>:port/SSO2.

and added the ABAP stack as the trusted System.

below is the screenshot for the same.

Please help.

Thanks in advance.

Indrajith.