2/26/2016

StepbystepprocedureforSSObetweenEP...|SCN

GettingStarted Newsletters

Hi,Guest

LogOn

JoinUs

Store

SearchtheCommunity

Products

Services&Support

AboutSCN

Downloads

Industries

Training&Education

Partnership

DeveloperCenter

Activity

LinesofBusiness

UniversityAlliances

Events&Webinars

Innovation

Browse

Communications

Actions

SAPEnterprisePortal:AdministrationandDevelopment

StepbystepprocedureforSSObetweenEP7.4and
ECC6.0
PostedbyAnilKumarinSAPEnterprisePortal:AdministrationandDevelopmentonOct30,20147:36:30
AM
Share

Tweet

Like

HiAll,

ThisismyfirstbloginSCN,aspartofESS&MSSimplementationwehaveimplementedSSObetweenenterprise
portal7.4andECC6.0.AseveryoneknowswehaveSSOisusedtocommunicatewithbackendsystemwithout
username&password.

Belowistheprocedure:

Step1:RequestthebasisguystosetthefollowingprofileparametersinRZ10

ICM_Full_host_name=basisguysgivethisurl
Login/create_sso2_ticket=2
Login/accept_sso2_ticket=1
AftersettingtheprofileparametersanddontforgettoremindthebasisguystorestarttheECCserver(ifwedidnt
restarttheservertheprofileparameterswillnotreflect).

Step2:AfterRestartwehavecrossverifytheparameters.LogintotheSAPGUIwithECCcredentials.

AfterLogintotheECCthatjustsearchforRZ10tcodelikebelow

http://scn.sap.com/community/enterpriseportal/administrationanddevelopment/blog/2014/10/30/stepbystepprocedureforssobetweenep74andecc60

1/10

2/26/2016

StepbystepprocedureforSSObetweenEP...|SCN

IntheRZ10tcodeselecttheDefaultprofile(Theprofileparameterscanbesetindefaultorinstanceprofile)andselect
theExtendedmaintenanceandclickonDisplay.

Thenwehavetochecktheprofileparametershavebeenchangedcorrectlyornot.

NoweverythinginRZ10tcodeisperfect.

Step3:TodownloadthecertificateswehavetologintotheNWA(youshouldhaveNWArole)aswedonthave

http://scn.sap.com/community/enterpriseportal/administrationanddevelopment/blog/2014/10/30/stepbystepprocedureforssobetweenep74andecc60

2/10

2/26/2016

StepbystepprocedureforSSObetweenEP...|SCN

KeystoreAdministrationfortheportallatestversionswehavetouseNWA.
(Itsalwayspreferredtodeletetheexistingcertificateandcreatethenewcertificateorucandownloadthecertificate)
Forcreatingthecertificate:
Configuration>Security>CertificatesandKeys>TicketKeyStore>ViewEntries>CreateNew
Whilecreatingthecertificaterememberthenameshouldbesystemname(Forex:epdev.apple.in:5000,uhaveto
createthenameasepdev)
NowwehavetologintotheportalasNWAusinghttp://server:port/nwatodownloadthecertificate.
Configuration>Security>CertificatesandKeys

Thenyouhavetoselecttheticketkeystoreinthekeystorage.

ThenselecttheSAPLogonticketpaircertintheViewEntriesandclickonExportEntryselecttheBase64typeand
clickonDownload

Thenfinallythecertificatewilldownloadedlikebelow

http://scn.sap.com/community/enterpriseportal/administrationanddevelopment/blog/2014/10/30/stepbystepprocedureforssobetweenep74andecc60

3/10

2/26/2016

StepbystepprocedureforSSObetweenEP...|SCN

Step4:LogintotheSAPGUIonceagainandsearchforstrustsso2tcodeandclickenter

Andclickontheimportcertificatetoimport.Browsethecertificatefromthelocalpcandclickonok.

ThenclickonAddtoCertificateListandaddtoACL,Anpopupwilldisplaywhereyouneedtoenterthe
Clientas000andnameasexampleEPD.

http://scn.sap.com/community/enterpriseportal/administrationanddevelopment/blog/2014/10/30/stepbystepprocedureforssobetweenep74andecc60

4/10

2/26/2016

StepbystepprocedureforSSObetweenEP...|SCN

Wehaveimportedtheportalcertificateinthebackend,nowwehavetogetthebackendintotheportal.Forthat
Configuration>Security>TrustedSystems>AddTrustedSystems

IntheAddTrustedSystemsselecttheByQueryingSystem

IfthebakendsystemisalreadymaintainedinthetechsystemsofSLDitwillcomeinthelistotherwiseyouhaveto
enterthefollowingdetailsandclickonNext

http://scn.sap.com/community/enterpriseportal/administrationanddevelopment/blog/2014/10/30/stepbystepprocedureforssobetweenep74andecc60

5/10

2/26/2016

StepbystepprocedureforSSObetweenEP...|SCN

Onceyouaredone.ThecertificatewillautomaticallyaddedintotheCertificateandkeyslist.

ThencreatethesystemobjectandtesttheSSO.

DoneSSOisimplementedsuccessfully.Inordertocrossverifythessoisimplementedcorrectlyornot
LogintotheportalSystemAdminSupportApplintegrationTestandconfigurationToolIntheDropdown(right
handside)TransactionRun
ThenselecttheSystemObjectandentertheTcodeandclickonGo,Itshouldnotaskfortheusernameandpassword
onceagainandiviewshouldopen.

http://scn.sap.com/community/enterpriseportal/administrationanddevelopment/blog/2014/10/30/stepbystepprocedureforssobetweenep74andecc60

6/10

2/26/2016

StepbystepprocedureforSSObetweenEP...|SCN

checkthebelowthelinkforreference.
SSOconfigurationbetweenSAPPortal7.3andECC6.0Ehp6

Regards,
Anil

9828Views

AverageUserRating
(8ratings)

Share

Tweet

Like

5Comments
TaggarShobbitSep17,20159:59AM

HIAnil,

ThanksforthedocumentationbutIhavefewquestions.

1.WhenyouaddECCastrustedsysteminPortalinbelowscreenwhatClientnumberyouuse?Isit
000orsomethingels.
2.Whatcredentialsyouusehere,IsitsomespecificadmincredentialsorIcanusemypersonal
credentials.

http://scn.sap.com/community/enterpriseportal/administrationanddevelopment/blog/2014/10/30/stepbystepprocedureforssobetweenep74andecc60

7/10

2/26/2016

StepbystepprocedureforSSObetweenEP...|SCN

3.NowInstep1&2Iusedclient000andmypersonalcredentialsandfoundthatcertificateis
visisbleforECCunderkeystoresothoughtthisstepisfinebutwhenItriedtotestmysystemobject
connectioninsystemadmin>systemlandscapethenIamgettingthebelowerror
Like(0)

TaggarShobbitSep17,201510:03AM

Like(0)

ShobhitTaggarSep18,20156:29AM

HiAnil,

NeedsomehelpinSSO.

1.Instep3,isitmandatorytocreateanewcertificate.Canweusetheexistingone?
2.INaddingbackendastrustedsysteminportalinbelowscreenkindlysuggest.
a.Doweuseclient000oractualclientnumberinbelowscreen.
b.Whatuseridpasswordneedtobeusedhere.IsitsomethingadminIDormypersonalidwith
adminaccessisok.

http://scn.sap.com/community/enterpriseportal/administrationanddevelopment/blog/2014/10/30/stepbystepprocedureforssobetweenep74andecc60

8/10

2/26/2016

StepbystepprocedureforSSObetweenEP...|SCN

4.Ihavecreatedthesystembutduringtestingiamgettingthebelowscreen.kindlysuggest

Like(0)

rakeshsinghSep24,20151:01PM(inresponsetoShobhitTaggar)

HiShobhit,

PleaseusetheClientnumberofthebackendsystemwhicheveritisinsteadof000.Andwe
createatechnicaluserforthisconfigurationinyourSAPsystem(checkwithbasis),usethat.
AlsocheckiftheyourSystemhasbeendefinedinSLDornot.CheckSLDisupordown&if
itsfinechecktheJCOconnection(usingpingandtest).

UsuallywhenyouimportthePortalCertificatetotherespectivebackendsystem,andhave
createdtheSO,&ifhavefollowedthesettingsproperly,thisshouldbeworking.Gostep
wiseandyouwouldfindtheerror.

Thanks,
Rakesh
Like(0)

TaggarShobbitSep25,20159:55AM(inresponsetorakeshsingh)

http://scn.sap.com/community/enterpriseportal/administrationanddevelopment/blog/2014/10/30/stepbystepprocedureforssobetweenep74andecc60

9/10

2/26/2016

StepbystepprocedureforSSObetweenEP...|SCN
HiRakesh,

Thanks,theissuegetresolved.Iaddedmyactualbackendclientintrustedsystem.
Testedtheconnectionoknow.AlsotheIDIwasusingwasntpowerfulenoughso
usedthespecialIDforthisconfigurationwhichsolvestheissue.Thanks!

Thanks!

BR
ShobhitTaggar
Like(0)

SiteIndex
Privacy

ContactUs
TermsofUse

SAPHelpPortal
LegalDisclosure

Copyright

FollowSCN

http://scn.sap.com/community/enterpriseportal/administrationanddevelopment/blog/2014/10/30/stepbystepprocedureforssobetweenep74andecc60

10/10