SSO (Single Sign On)

Create an RFC connection (JCO RFC) in Portal.

Go to Visual Admin tool. Click go.bat 

 Click Connect.

Specify password and click Connect.

Navigate to Server à Services à JCo RFC Provider

Provide the details of the Front End System (Portal) in RFC Destination & Backend System details in Repository and click Set.

Using this Program Id (EP_BACKEND) create a TCP/IP - RFC Connection in the backend system using SM59.

Specify the details of the RFC Connection ( Select connection type as T) and click Save.

Scroll down to specify the Gateway options.

Click Connection Test to check the connectivity between Backend (R3 System) and the Front-end system (EP).

Use T-code SMGW to check the connectivity of EP system.

Go to T-Code RZ10. Select the Instance Profile, select Extended Maintenance à Click Change and specify the following parameters

login/create_sso2_ticket =  0

login/accept_sso2_ticket = 1

Restart the instance for the above parameters to be effective.

NOTE: If the backend system is using Logon Ticket mechanism, set as above.

              If the backend system is using UIDPWD mechanism, set the values as shown below:

login/create_sso2_ticket =  2

login/accept_sso2_ticket  = 1

Go to T-Code STRUSTSSO2 in the Client 000.

Click on Create Certificate Request

 
Accept.

 Double click on Entry present in Own Certificate – Owner .

Click Add to Certificate List

Certificate has been added.

Select the Owner and go to Certificate Menu à Export to export the certificate.

To import this certificate into the Front-end System (EP), we need a System with Alias name, so go to Portal and create System with Alias as shown below.

Login to IRJ (http://<hostname>:50000/irj)

Navigate to System Administration à System Configuration.

Right click on Portal Content àNew à Folder

Provide the details and click Finish.

Close the wizard à Click OK.

  

Right click on the newly created folder and select New à System (from template)

Specify the details and click Save button.

Specify the details and click Save.

Select the Alias name and click Save.

Navigate to System Administration à System Configuration à  Keystore Administration . Click Import Trusted    Certificate.

Click Browse and select the Certificate file that you have exported from the Backend system and specify the Alias name and click Upload.

Click Open

Click Download verify.der file   

 

Click Save.

Click Save to download the certification onto the Desktop.

Goto Backend System  and execute the T-Code STRUSTSSO2 for importing the Portal (Front-end System) certificate. 

Go to menu, select Certificate à Import.

Select the verify.der.zip file and click Open.

 

Select verify.der file and click Open.

Accept.

Click Add to ACL.

Specify the details of the front end system (Portal) and click Accept.

Click Add to Certificate List