Single sign on with SAP Netweaver 7.4

Hi All,

This document help you to - how to setup the Single Sign On from Enterprise Portal (Netweaver 7.4) to ECC 6.0 EHP7 systems. We can access multiple system through one portal.

Prerequisites:

1. Same User should be exist in both system (Enterprise Portal and ABAP system).
2. User should have Administrator rights.
3. Add/maintain the below parameter in instance profile parameter (ABAP Instance)

        login/create_sso2_ticket = 2

        login/accept_sso2_ticket = 1

Procedure:

1. Export the Portal certificate.
2. Import certificate into ABAP instance.
3. Define ABAP system in Enterprise Portal.
4. Create a system Alias.
5. Test the connections.

Steps:

1.       Export the Portal certificate

a). Login to Portal system.

Go to àhttp://<FQDN>:5<nr>00/nwa

    b). Go to Configuration -> Security -> Certificates and Keys

   Click on -> TicketKeystore and select SAPLogonTicketKeypair-cert ->Export Entry

    Select -> Binary X.509 export format and click on Download link.

   We have downloaded the Portal certificate and save into drive.

2.   Import certificate into ABAP instance.

   Logon in ABAP instance and Run the Tx. STRUSTSSO2

     Go to Certificate -> Import

      Select the SAPLogonTicketKeypair-cert.crt (which we have downloaded in step 1) and continue.

    Click on -> Allow

   Certificate is imported into the ABAP instance.

   Next, we need to Add the Certificate into Certificate List.

   Click on -> Add to Certificate List

   Certificate added to List.

   Now Click on ->Add to ACL

   Here, We need to provide the Portal system details

   Click on -> Continue..

   We have successfully imported the certificate in ABAP instance.

3.   Define ABAP system in Enterprise Portal.

     Login into Enterprise Portal system: Http://<FQDN>:5<nr>/irj/portal

     Go to -> System Administration -> System Landscape.

  Create a new system by Right click on Node à New -> System

   Follow the wizard and fill all necessary detail for ABAP instance.

   Click on ->Next

  Click on -> Next

4.   Create a system Alias.

   Provide the Alias Name:

   Click on -> Add

    Click on -> Next

  Click on Next. (Make sure you are using the same user in ABAP side as well as Enterprise Portal side.

  Now, open the new created system and select the Connection test Tab

  Provide the user credentials and click on -> Test

   if user name and password is verified, it will show connection test message.

5.  Test the Connection.

  Login into Enterprise Portal system: Http://<FQDN>:5<nr>/irj/portal

  Go to System Administrator -> Support

   Go to Test and configuration Tools

     Select Transaction from drop down list and Click on -> RUN

    Select the system and provide the Transaction Code (Which you want to run) and click on -> go

   Now, We are able to access the ABAP instance.

Hope this document help you to configure Single Sign On with ABAP and SAP Netweaver 7.4.

Thanks,

Raj