Configuring the SAP System as the Trusting System
You configure the SAP system to be the trusting system using transaction SMT1. This transaction requires an RFC destination to the system to be trusted, the SAP Gateway host.
Proceed as follows to create an RFC destination for the trusting system:
In transaction SM59, choose Create.
In RFC Destination, enter a name for your destination, for example, <my host name>.
In Connection Type, enter 3 (Connection to ABAP System).
Enter a short text in Description, for example, Connect to <my host name>.
Save your settings.
On the Technical Settings tab, select No for Load Balancing and enter the SAP Gateway host name in Target Host and the corresponding system number for the SAP Gateway host in System Number.
Select IP Address in Save to Database as.
On the Logon & Security tab, make sure that you do not specify logon data and the option Trust Relationship is set to not for this destination.
Proceed as follows to define the trusting system:
In transaction SMT1, choose Create in the Display and Maintain Trusted Systems window.
In the Create trusted system via dialog, enter the RFC destination name and choose Enter. . , for example, <my host name>. Note that you have defined this destination name in a previous step.
An RFC logon to the SAP Gateway host occurs, and the necessary information is exchanged between the systems.
Log on to the SAP Gateway host using your logon credentials.
The trusted entry for the SAP Gateway host is displayed.
Choose Save.
Proceed as follows to configure the trusting system to accept assertion tickets from the SAP Gateway host.
Make sure that you have a certificate from the SAP Gateway host.
Log on to your SAP system and choose transaction SSO2.
The Logon Ticket Administration for Single Sign-On (SSO) screen is displayed.
Enter the host name and the system number for your SAP system, and follow the instructions in the wizard.