Re: Single Signon between Portal and Solman NWA/SLD
Hi Amy, Thanks for your help. Issue is resolved. Root Cause: Ticket login modules are not properly updated in Solman VA. RegardsV. Suresh Kumar
View ArticleClik here to view.
Re: Enabling AES256 for SNC with SAPGUI (no SSO)
Thanks, Lutz. Yes, you summarized my question perfectly: in effect, how can I tell whether I'm getting my desired result (AES256)? The trace is indeed ambiguous and hints at both RC4 and AES256....
View ArticleClik here to view.
Re: Error when trying to configure trusted IdP on AS ABAP (TA SAML2)
Hi Filipe,indeed a bug... a kernel update did the trick, thanks a lot. It's a very old "playsystem" but i was able to update to a later kernel patch which fixed the parsing issues. Cheers,Carsten
View ArticleRe: Configuring SSO with Windows Kerberos on HEC
Hi Robert, some of the configuration settings only become available after a restart of the system. In particular, the Kerberos configuration is not visible if the profile parameter spnego/enable is 0...
View ArticleRe: SHA-1 -->SHA-2
2.04 is where this where this option appears. We upgraded to 2.06 and it works fine- can specify sha256 on server and see the new sha256 certs being accepted on client. Follow-up question: do we need...
View ArticleRe: SHA-1 -->SHA-2
Hi Chris, The encryption hash used in SHA-2 is significantly stronger and not subject to the same vulnerabilities as SHA-1. All certificates that will be used to secure browser-based communications...
View ArticleRe: SHA-1 -->SHA-2
Thanks Filipe. We're planning to migrate all the back-end certs to sha256 now.
View Articlespnego/snc and saml
Hii, Is there a relation between spnego/enable parameter and SAML? My iDP and SP configuration is done and working well. Soon as the spnego/enable parameter is enabled in the backend ABAP system, the...
View ArticleRe: spnego/snc and saml
Hi Jim, Are you using Kerberos with SAML 2.0? Directly there is no relation between SAML 2.0 authentication and Kerberos/SPNego, only if you are using both for single sign-on. Make sure that the...
View Article