Clik here to view.
Re: ADFS/SAML 2.0 for ABAP AS - Java needed?
Thanks Wolfgang for brief explanation. If we keep "No for Legacy Logon ticket then, issue #5 happens. The work around was to setup "Yes" for Legacy. After above setting, Issue#5 on reoccur, when we...
View ArticleRe: SAPGUI login without SSO
Thank you Chris, we do have configured HA which has a fallback SLS server, but we were just trying to see what happens when both the server goes down (very unlikely) , but just incase then the users...
View ArticleClik here to view.
Re: How can I define a logon mask language for users with several clients?
Hello Nick, no need for apologies, I appreciate your help The first image shows exactly what I mean. To be fair this also happens when using the "usual" logon screen, I simply don't know where to set a...
View ArticleClik here to view.
Re: How can I define a logon mask language for users with several clients?
Hey Nicolai, I gotcha. OK, well, I tried the same steps on my systems. By that, I mean I changed the language to DE on the SAPGUI logon screen both using SSO and NON SSO in the SAPGUI. My default in...
View ArticleRe: How can I define a logon mask language for users with several clients?
Hello Nick, our SAP users complain about the extra step they have to perform to change their logon language.They would like to have a preset for every system just for their user.They usually use SAP in...
View ArticleClik here to view.
Kerberos token verify error
Hi All, I have configured SSO based on Kerberos with SAP Single-Sign On 2.0, the solution used to work before with both web browsers and SAP Logon (Windows). However, recently when I recheck, the SSO...
View ArticleRe: How can I define a logon mask language for users with several clients?
Sorry man. I am out of ideas, not that I ever really had one. I'm still not sure this is an issue that belongs here in this forum. I suggest you get a message open. --NICK
View ArticleRe: Kerberos token verify error
Hey Duy, Consider tracing the process using report SEC_TRACE_ANALYZER oryou can get there inside SPNEGO tocode at "goto - spnego tracing" Also, if you follow note 1848999 you can create a ini file...
View ArticleSSO Not working 4.1
Hi,I have spent quite a while now looking for a resolution so I decided to post finally. I am trying SSO and am getting an error. This is the error I am getting when going to BI Launchpad HTTP Status...
View ArticleClik here to view.
Re: Kerberos token verify error
Hi Nick, The original problem related to clock skews, and it is fixed by changing at OS level. However, before making the change, I deleted and recreated the key tab in SPNEGO transaction. After that,...
View ArticleRe: Kerberos token verify error
Hey Duy, That's the thing about SSO, there are so many moving parts to this which makes it very difficult to troubleshoot. Like you said, if SNC-SSO is still working to the SAPGUI, then at least you...
View ArticleRe: Password Manager - can you create an "ignored list" prior to pushing out...
Turns out I just need to read the documentation closer. It's in there! Section 4.1 And it does work in terms of storing "Ignored" URLs. NICK
View ArticleTLS_FALLBACK_SCSV (server-side)
The CommonCryptoLib already supports TLS_FALLBACK_SCSV as a client. This prevents susceptibility to attacks on the SSL/TLS client which depend on protocol downgrades. However, as a server,...
View ArticleRFC 6961: OCSP Stapling
The CommonCryptoLib does not currently support OCSP Stapling. OCSP Stapling is a method for checking the revocation status of an X.509 digital certificate (commonly referred to as an SSL certificate)....
View ArticleClik here to view.
Re: Kerberos token verify error
Hi Nick, I did enable the sec trace like you said, the result is similar to the report SEC_TRACE_ANALYZER. I checked before and after the HTTP call, and there is a token for HTTP, as being specified in...
View ArticleRe: Kerberos token verify error
Hi Duy, You can check your service account password using the SAP note https://service.sap.com/sap/support/notes/2010613 and run the report SNCAX_TEST in transaction se38. You can check it too if you...
View ArticleRe: Kerberos token verify error
Hi Valerie, I checked those before, and they are ok. Regards,Duy
View ArticleClik here to view.
disable SPNEGO for pure Java AS 7.4 SP8 with redwood CPS
SSO experts, We have SPNEGO setup for one of our AS JAVA 7.4 SP8 systems (NOT a portal!). SSO works great! SSO works great for things like: NWAhttp://hostnameFQDN:port/nwa...
View ArticleCan Multiple service providers be configured in one NW AS JAVA SAML config
Hello Experts, We want to configure SSO using SAML between Active Directory and SAP SRM system. SRM system version is SRM 4.0 which does not support SAML so we are routing this authentication request...
View Article