Re: spnego/snc and saml
Hi Jim, Are you using Kerberos with SAML 2.0? Directly there is no relation between SAML 2.0 authentication and Kerberos/SPNego, only if you are using both for single sign-on. Make sure that the...
View Articlespnego/snc and saml
Hii, Is there a relation between spnego/enable parameter and SAML? My iDP and SP configuration is done and working well. Soon as the spnego/enable parameter is enabled in the backend ABAP system, the...
View ArticleRe: SHA-1 -->SHA-2
Thanks Filipe. We're planning to migrate all the back-end certs to sha256 now.
View ArticleRe: SHA-1 -->SHA-2
Hi Chris, The encryption hash used in SHA-2 is significantly stronger and not subject to the same vulnerabilities as SHA-1. All certificates that will be used to secure browser-based communications...
View ArticleRe: SHA-1 -->SHA-2
2.04 is where this where this option appears. We upgraded to 2.06 and it works fine- can specify sha256 on server and see the new sha256 certs being accepted on client. Follow-up question: do we need...
View ArticleRe: Configuring SSO with Windows Kerberos on HEC
Hi Robert, some of the configuration settings only become available after a restart of the system. In particular, the Kerberos configuration is not visible if the profile parameter spnego/enable is 0...
View ArticleRe: Error when trying to configure trusted IdP on AS ABAP (TA SAML2)
Hi Filipe,indeed a bug... a kernel update did the trick, thanks a lot. It's a very old "playsystem" but i was able to update to a later kernel patch which fixed the parsing issues. Cheers,Carsten
View ArticleRe: Enabling AES256 for SNC with SAPGUI (no SSO)
Thanks, Lutz. Yes, you summarized my question perfectly: in effect, how can I tell whether I'm getting my desired result (AES256)? The trace is indeed ambiguous and hints at both RC4 and AES256....
View ArticleRe: Single Signon between Portal and Solman NWA/SLD
Hi Amy, Thanks for your help. Issue is resolved. Root Cause: Ticket login modules are not properly updated in Solman VA. RegardsV. Suresh Kumar
View ArticleRe: Stuck on implementing Kerberos based SNC/SSO with SLL 2.0 SP2 on AIX 6.1
Hi All, I couldn't figured out how to delete the keytab entries. Anyone may shed me some lights? thanks Sarahbtw, I'm using the latest Secure Login Library SP04. The central command is "snc", there is...
View ArticleRe: SAP AD Integration with Net weaver 7.5
Dear Donka, Thanks a lot for your quick response. I could manage to fix the trusted certificate issue. and JAVA UME also configured in IDP. Now, it started taking the AD credentials itself. Now, while...
View ArticleRe: SSO solutions for SAP Fiori for multiple scenarios
Hello Davinderpal, The SAP Fiori SSO scenario, described by you, could be easily implemented using the SAP Single Sign-On product (license required).You can simply implement our risk-based...
View ArticleRe: NWBC SSO Tranaction SNCWIZARD
Hi Emiliano, Could you please check if your system have CommonCryptoLib installed? Which is your system version? As Lutz said above, you can check the library version in the following path:STRUST...
View ArticleRe: SSO solutions for SAP Fiori for multiple scenarios
Hi Davinder, SAML 2.0 supports Multi-domain Web Single Sign-On, therefore even though you will have users accessing resources through different domains, this can be achieved with SAML 2.0. In the...
View ArticleRe: Service Provider has received SAML2Response from Identity Provider whose...
Hi Bryan, I am more familiar with SAML 2.0 for ABAP systems, however I can try to help you out with this Java issue. Based in the error message it seems that there is a configuration problem in the IdP...
View ArticleRe: Desktop Connection for SAP CRM and NW SSO x.509 Certificate
Hello Donka, Thank you for the answer. Since I am loging in other systems using SLS, certificate is already enrolled before I open Desktop tool. I opened an OSS message. Waiting for an answer. Thanks...
View ArticleRe: SAP AD Integration with Net weaver 7.5
Hello Abu, Here are the details about certificates when you configure a trusted Service Provider for the SAML Identity Provider:Adding Service Providers - Identity Provider for SAP NetWeaver Single...
View ArticleRe: Desktop Connection for SAP CRM and NW SSO x.509 Certificate
Hello Lutz, Thank you for your help. I did export the root certificate as .p7b and installed it as seen below.They are on both personal and Trusted Root Cert Authorisations (Local Computer). Still I...
View ArticleRe: SAP AD Integration with Net weaver 7.5
Dear Donka, Thanks a lot for your all inputs. We are in the middle of SAML configuration. While uploading the metadata file from SAP Fiori server to IDP, it says the certificate is not trusted. Do we...
View Article