Re: issuing MYSAPSSO2 from ABAP stack
Please explain the flow involved. I assume a user logs onto ABAP system first using web browser. During this logon the ABAP system is issuing an assertion ticket which you can see in fiddler. Is this...
View ArticleRe: issuing MYSAPSSO2 from ABAP stack
An assertion ticket is a logon ticket that can only be accepted by the system it was issued on. I don't think it is possible to have a system issue both types of tickets at the same time. I'm not sure...
View ArticleRe: issuing MYSAPSSO2 from ABAP stack
Hi Tim, is there any document which talking about logon tickets and assertion tickets. I am quite new to this area and seems to confuse about them quite a lot time. Thanks and best regards,Jenny
View ArticleRe: issuing MYSAPSSO2 from ABAP stack
I'm not aware of a single document, but you can use google or look on help.sap.com I work on SAP SSO every day of the week, for last 15-20 years. This is how I know about this subject :-)
View ArticleRe: issuing MYSAPSSO2 from ABAP stack
Hi, there is a rather good scn thread covering the differences between assertion tickets and logon tickets, you might want to check:SAP Assertion Tickets and SAP logon tickets They have different use...
View ArticleRe: SSO via x.509/SAML for free possible?
Hey Joe, Yes, for sure you can do X.509 SSO in SAP without paying for anything. It's not that hard to setup in ABAP or JAVA. The trick is that the End-Users need a user cert in their browsers that...
View ArticleRe: SSO via x.509/SAML for free possible?
Hi Sridhar Please check this SDN bloghttp://wiki.scn.sap.com/wiki/display/Security/Single+Sign-On+with+SAML+2.0+and+ABAP+Systems+Supporting+SAP+Logon+Tickets With NWBC 5.0, you can use Desktop think...
View ArticleRe: issuing MYSAPSSO2 from ABAP stack
Hi Oris, have you tried to call the ODATA url directly in the same browser window you have the fiori app running? Will you get a response or a logon screen? Regards,Patrick
View ArticleRe: issuing MYSAPSSO2 from ABAP stack
Is the DNS domain of the host where you odata service is running on same DNS domain as the host where Fiori launchpad is running ? This is required because the cookie is a domain session cookie and...
View ArticleRe: issuing MYSAPSSO2 from ABAP stack
Fiori launchpad has been deployed to the same server as Gateway.BPM is deployed on another server which have different domain assume.does web dispatch will resolve this cross domain issue as we have...
View ArticleRe: issuing MYSAPSSO2 from ABAP stack
Hi Oris, then you have a problem with the logon ticket not being accepted by the system. Please check the ODATA service configuration (tx SICF) and the logon ticket configuration (tx STRUSTSSO2). Kind...
View ArticleRe: SSO via x.509/SAML for free possible?
Hi Santosh, I configured AS JAVA as SP (Single sign-on solution)using third party IDP. appreciate your suggestion.regards, Sridhar
View ArticleRe: Multiple SSO config
Thx Valerie the issue was with the profile name it seems on the enrolment URL , we changed the value of profile to 5c614871-6246-43b5-a629-fdffc58e5d3e on abc-as-01 and it works now . enrollURL0 :...
View ArticleRe: issuing MYSAPSSO2 from ABAP stack
attached please find the strutsso2 screenshot and sicf screenshot I also run tr. sso2 to check if the configuration is correct for issuing logon ticket, it appears Green.
View ArticleSSO data issue - User 1 is able to see data of User 2
Hi,We have configured SSO between SAP portal and R/3 such that , the users windows login credentials are used to login to SAP portal. It works fine for all users except for one. This user (user 1)is...
View ArticleRe: SSO data issue - User 1 is able to see data of User 2
Hi Navya, Hope you are doing good.This is a known issue that has been dealt with in SAP NOTE 1717945 and sap note 1720677. As a precautionary measure, please make sure that the concerened SCA...
View ArticleRe: SSO data issue - User 1 is able to see data of User 2
Hi,I have already referred this note but we still face issue. Its SSO enabled system and we are on NW 7.02 portal. Any inputs for this SSO issue. Regards,Navya
View ArticleRe: SSO data issue - User 1 is able to see data of User 2
Hi Navya, did you check whether there is a user mapping issue?You can verify the user mapping being correct by inspecting the logon ticket. It contains the users login. Kind regards,Patrick
View ArticleRe: issuing MYSAPSSO2 from ABAP stack
As long as you have no user mapping configured, this is ok.What about the signer of the logon ticket? Kind regards,Patrick
View Article