sso

SAP Note

 

  817529 - Checking the SSO configuration Version   5     Validity: 14.03.2006 - active  

  Language   English

Header Data Released On 14.03.2006 11:11:38 Release Status Released for Customer Component BW-BEX-ET-WEB BEx Web ABAP Runtime Priority Recommendations / Additional Info Category Help for error analysis

Symptom You want to use Single Sign-On tickets in the BW Web reporting environment. This note contains indicators and options such as how the system must be configured to be able to use SSO or to check the configuration. For example, SSO must be configured correctly if (as recommended in Note 498936) you want to use the SAP logon 'SYSTEM/login.htm'.

Other Terms SSO, SSO2, cookie, BSP, sso2test.htm, SYSTEM, login.htm.

Reason and Prerequisites The Internet browser must accept cookies. You can set this in Internet Explorer 6 by selecting the 'Tools' --> 'Internet Options...' --> 'Privacy' menu option.

Solution System parameter/settings l

login/accept_sso2_ticket    = 1.

l

login/create_sso2_ticket    = 2 (recommended) or 1.

l

icm/host name full.

           To enable the Internet browser accept the SSO2 cookie, you must enter a fully qualified host name in accordance with Notes 434918 and 654982. l

SAPSECULIB / SAPCRYPTOLIB

           You must use the SAP Security Library or the SAP Cryptographic Library. l

Transaction STRUST

           In this transaction, you define which systems are meant to accept logon tickets. This is necessary, for example, if you want to access data from one system of a BW application to another application of another system, without having to log on again. l

Documentation ¡

¡

http://help.sap.com/saphelp_webas620/helpdata/en/17/ f8973814eb481fe10000009b38f8cf/frameset.htm http://service.sap.com/security

Configuration check SAP delivers the sso2test.htm BSP application. You can use this application to check whether an SSO2 cookie can be created. Start Transaction SE80 --> 'SYSTEM' BSP application   --> Pages with flow logic     --> Right-click sso2test.htm       --> Test         --> Follow the instructions on the screen You can also execute the following JavaScript command from the address bar of your Internet browser to check whether an SSO2 cookie currently exists: javascript:alert(document.cookie); As a result, all current cookies are issued in an alert box.

If an SSO2 cookie exists, an entry would have to exist that begins with 'MYSAPSSO2=....'. If you cannot display an SSO2 cookie despite this information, check the logon as described in Note 495911 and if necessary, open a message under the component BC-SEC-SSF.

Validity Software Component From Rel. To Rel. And Subsequent SAP_BW 30B 30B   310 310  

References This document refers to: SAP Notes 1378659   NWBC known issues & what to check when opening a ticket 1257108   Collective Note: Analyzing issues with Single Sign On (SSO) 1175193   Login ticket and ICM information is missing in SSO profile 654982   URL requirements due to Internet standards 517860   Logging on to BSP applications 498936   Logon/password change in Web with BW 3.0B or higher 495911   Trace analysis for logon problems 434918   Configuration for fully qualified host names for BSP

This document is referenced by: SAP Notes (8) 495911   Trace analysis for logon problems 498936   Logon/password change in Web with BW 3.0B or higher 434918   Configuration for fully qualified host names for BSP 654982   URL requirements due to Internet standards 1257108   Collective Note: Analyzing issues with Single Sign On (SSO) 517860   Logging on to BSP applications 1175193   Login ticket and ICM information is missing in SSO profile 1378659   NWBC known issues & what to check when opening a ticket