Show TOC Entering content frame

Background documentation Administration When Using Logon Tickets Locate the document in its SAP Library structure

For authentication with SAP NetWeaver that allows for Single Sign-On to other systems as well, you can use logon tickets. One system in the landscape should be set up to issue logon tickets to users. Users log on initially to this system to obtain an logon ticket and then can use the logon ticket to access the other SAP systems in the landscape.

Tasks on Demand

Most of the administrative tasks for using logon tickets are also configuration, however, there are some tasks that occasionally need to be done. See the table below.

Administrative Tasks when Using Logon Tickets

Reason

Task

More Information

Renewing the system’s public-key certificate

ABAP: Use the trust manager (transaction STRUST) to regenerate the PSE used for logon tickets.

J2EE Engine: Use the Key Storage service to create a new key pair for the J2EE Engine.

Both ABAP and J2EE Engine: Import the new public-key certificate into ticket-accepting systems. On the ABAP server, use the transaction STRUSTSSO2. On the J2EE Engine, use the Key Storage service.

If you changed the server’s Distinguished Name, then also maintain the ACLs in the ticket-accepting systems.

 

ABAP: Structure linkCreating or Replacing a PSE

Note

Per default, the PSE used for logon tickets is the system PSE, but there may be cases where you use a different PSE. For more information, see: Structure linkConfiguring the System for Issuing Logon Tickets.

J2EE Engine: Structure linkReplacing the Key Pair to Use for Logon Tickets

Both ABAP and J2EE Engine for importing the public-key certificate into the ticket-issuing systems and maintaining the ACL:

●     Structure linkConfiguring SAP Web AS ABAP to Accept Logon Tickets from Another SAP Web AS ABAP

●     Structure linkConfiguring SAP Web AS ABAP to Accept Logon Tickets from the J2EE Engine

●     Structure linkConfiguring the J2EE Engine to Accept Logon Tickets

Adding a new system to the landscape

Configure the new system to accept logon tickets by importing the ticket-issuing server’s public-key certificate and maintaining the ACL.

ABAP: Structure linkConfiguring SAP Web AS ABAP to Accept Logon Tickets from Another SAP Web AS ABAP

ABAP: Structure linkConfiguring SAP Web AS ABAP to Accept Logon Tickets from the J2EE Engine

J2EE Engine: Structure linkConfiguring the J2EE Engine to Accept Logon Tickets

See also:

●     ABAP: Structure linkUsing Logon Tickets

●     J2EE Engine: Structure linkUsing Logon Tickets for Single Sign-On

 

 

 

Leaving content frame