Show TOC

Assigning Users an Existing Certificate for Single Sign-On with SSLLocate this document in the navigation structure


To log on to Web applications with Single Sign-On (SSO) using Secure Sockets Layer (SSL), users who already have a browser certificate can assign this certificate to their own user. The system administrators can use the following procedure to create a URL that allows the users to make this assignment.


  1. Start transaction SICF.
  2. Enter the service name CERTMAP and choose Execute.
  3. Under Virtual Hosts/Services, choose the Web Dynpro application CERTMAP.
  4. Choose Start of the navigation path Service/Host Next navigation step Activate End of the navigation path.
  5. Choose Start of the navigation path Service/Host Next navigation step Test End of the navigation path.

    A web page appears, on which the logged-on user can assign a certificate. The page displays the SSL certificate of the user. For a Web Dynpro application, the URL of this page looks like this: https://<host>:<port>/sap/bc/webdynpro/sap/certmap?sap-client=<client>&sap-language=<language>.

  6. Make the URL available to the users, for example, as a link on a portal page.