SAP GUI Shortcut with Single Signed On SSO

[former_member301120]

Hello to all,

I'm using a sap gui shortcut for logon:

   sapshcut -system=<SID> -client=<CLIEND> -gui="/M/<MS-Host>/S/<MS-Port>/G/<Logon-Group>"

Now I want to user Single Signed On. Therefore two parameter have to be added:

-snc_name="p:CN=SID, O=SAP-AG, C=DE"
-snc_qop=9

How can I identify the right values for snc_name.

Regards Christian

[Former Member · Accepted solution]

Hi,

Do your Server already setup with needed configuration?, if so you will find answer at parameter "snc/identity/as", (rz11)

Cheers,

Sreenivas .Y

[former_member301120 · Accepted solution]

Hello,

yes our server is already configured.

The parameter is set to:

p/krb5:SAPGui/sap.xyz.de@XYZ.DE

I already tried the complete string, but logon window still pops up. But it's not necessary to enter a correct password, but you have to enter at least 3 chars.

Regards Christian

[Former Member · Accepted solution]

do the user settings are setup correctly at SU01, tab "SNC"?

also see that you have imported the certificate from server

Regards,

Sreenivas .Y

[former_member301120 · Accepted solution]

This is already done too.

The snc name is: p:<USERNAME>@XYZ.DE

The logon via logon pad with SSO works fine.

I called it this way.

sapshcut -system=<SID> -client=<CLIEND> -gui="/M/<MS-Host>/S/<MS-Port>/G/<Logon-Group>"   -snc_name="p:<USERNAME>@XYZ.DE" -snc_qop=9

But I always get a pop up for password.

Please advice

[Former Member · Accepted solution]

ok, now the next check can you let me know the value of "snc/force_login_screen"?

[former_member301120 · Accepted solution]

Hello,

snc/force_login_screen = 0

[Former Member · Accepted solution]

it good that now we activate trace with "-trc=3" and give out the log, also past the screen pop's.?

also, user is set in single client.

[former_member301120 · Accepted solution]

Hello,

next the tracefile:

********************************************************************************
Local time:     12.7.2012,13:44

Command:        ' /SHORTCUT=" -system=<SID> -client=100 -gui="/M/<MSHOST>/S/<MSPORT>/G/<SID>" -language=DE -trc=3 -sncqop=9 -snc_name="p:CN=<USERNAME>@XYZ.DE"  "'

Program:        'C:\Programme\SAP\FrontEnd\SAPgui\sapshlib.dll'

Work dir old:   'P:\SAP'
Work dir act.  'P:\SAP'

Default Saplogon.ini file: >C:\Dokumente und Einstellungen\<USERNAME>\Anwendungsdaten\SAP\Common\saplogon.ini< is in use, state=3

Initialize properties:
Property  0, [       System], Product=3
Property  1, [       System], Description=
Property  2, [       System], Name=
Property  3, [       System], Client=
Property  4, [       System], GuiParm=
Property  5, [         User], Name=
Property  6, [         User], Password=
Property  7, [         User], Language= 
Property  8, [         User], at=
Property  9, [     Function], Title=
Property 10, [     Function], Command=
Property 11, [     Function], Type=Transaction
Property 12, [          Snc], Name=
Property 13, [          Snc], Qop=-1
Property 14, [Configuration], Trace=0
Property 15, [Configuration], GuiSize=Normal window
Property 16, [Configuration], WorkDir=
Property 17, [Configuration], AutoEdit=-1
Property 18, [Configuration], Workplace=false
Property 19, [      URLHelp], ConnectErrorURL=
Property 20, [      URLHelp], UserErrorURL=
Property 21, [       Others], OKcode=
Property 22, [         User], PasswordEnc=
Property 23, [       Others], SSO2=
Property 24, [       Others], GuiParms=
Property 25, [     Location], LocationDispLoc=0
Property 26, [     Location], LocationDispOpt=0
Property 27, [     Location], LocationSaveDir=
Property 28, [      Options], Reuse=1
Init user name to default <USERNAME>
Init working dir to default 'P:\SAP'
Data initialized

InitShortcut returned OK

Trace mode:     trace monitors, warnings, errors

Loaded from command line: -system=<SID> -client=100 -gui="/M/<MSHOST>/S/<MSPORT>/G/<SID>" -language=DE -trc=3 -sncqop=9 -snc_name="p:CN=<USERNAME>@XYZ.DE"
[System],  Name=><SID><
[System],  Client=>100<
[System],  GuiParm=>/M/<MSHOST>/S/<MSPORT>/G/<SID><
[User],  Language=>DE<
[Configuration],  Trace=>3<
[Snc],  Name=>p:CN=<USERNAME>@XYZ.DE<
LoadFromCommandLine returned OK

Autoedit = >-1<
Use Guiparm

HasAllSystemData returned OK, bHasAllData = 1

LoadAll returned OK

CreateSapguiConnectionString via GUISTARTPARM '/M/<MSHOST>/S/<MSPORT>/G/<SID>'
connection string: '/M/<MSHOST>/S/<MSPORT>/G/<SID>'
connection string (SNC_PARTNERNAME added): '/M/<MSHOST>/S/<MSPORT>/G/<SID> SNC_PARTNERNAME="p:CN=<USERNAME>@XYZ.DE"'
connection string (TRACELEVEL added): '/M/<MSHOST>/S/<MSPORT>/G/<SID> SNC_PARTNERNAME="p:CN=<USERNAME>@XYZ.DE" /TRACE=3'
Sapgui(.exe) parameter string was made:
'/M/<MSHOST>/S/<MSPORT>/G/<SID> SNC_PARTNERNAME="p:CN=<USERNAME>@XYZ.DE" /TRACE=3'

CreateSapguiConnectionString returned OK

GetProperty: 24 returned OK, [Others], GuiParms=/M/<MSHOST>/S/<MSPORT>/G/<SID> SNC_PARTNERNAME="p:CN=<USERNAME>@XYZ.DE" /TRACE=3

GetProperty:  2 returned OK, [System], Name=<SID>

GetProperty:  3 returned OK, [System], Client=100

GetProperty: 21
  Get OK code from property
   nType=1
   Command=
Warning in GetOKCode: empty OK code

GetProperty: 21 returned OK, [Others], OKcode=

GetProperty: 28 returned OK, [Options], Reuse=1

Reuse option: '1'

TryStartingWithoutNewLogon returned OK, new logon

bHasAllData==SNC: 0
Texts loaded from the file in >DE<

LoadTextsFromLanguageFile returned OK
Error in Obtain_Password: No password available

GetProperty: 14 returned OK, [Configuration], Trace=3

ExitShortcut returned OK

[former_member301120 · Accepted solution]

Hello,

I added (just for fun) the parameter

-pw=dummy

Now, SSO works without popup, although a invalid password is provided.

May this workaround be the solution?

[Former Member · Accepted solution]

good, I feel this as bug , can I know what SAP-GUI version and patch set you have?

just worried of "Error in Obtain_Password: No password available"

also create OSS with SAP on parameter -pw when using SNC.

Thanks,

Sreenivas .Y

[former_member301120 · Accepted solution]

Hello,

I also think so.

Next the SAP GUI Information

MAIN MODULE INFORMATION:

   saplogon.exe

   SAP Logon für Windows

   720 Final Release

   7200.3.11.1074

   1316424

Thanks for helping me.

Regards Christian