Hi,
We're currently in the process of enabling SSO using SPNego on our 7.02 SP07 Portal.
We are using the new SPNego wizard that commes with the SP06.
Let's say our portal has of the following address: DEVPORTAL.SYSTEMS.GROUP.CORP
The Portal has an UME pointing to an ABAP backend system.
As our users come from another Ms Active Directory (there is 1 AD for users, 1 other for systems), the service user we created is: j2ee_portal @USERS.GROUP.CORP
After activation of the Kerberos Realms USERS.GROUP.CORP and the set up of the LoginModuleStack in Visual Administrator, I can see the Negotiate Header using Firebug but the SSO won't work (401 Error - Not authorized), the logon plays is displayed instead.
The log shows the following:
doLogon failed [EXCEPTION] com.sap.security.core.logon.imp.UMELoginException at com.sap.security.core.logon.imp.SAPJ2EEAuthenticator.logon(SAPJ2EEAuthenticator.java:912) at com.sapportals.portal.prt.service.authenticationservice.AuthenticationService.login(AuthenticationService.java:367) at com.sapportals.portal.prt.connection.UMHandler.handleUM(UMHandler.java:126) at com.sapportals.portal.prt.connection.ServletConnection.handleRequest(ServletConnection.java:186) at com.sapportals.portal.prt.dispatcher.Dispatcher$doService.run(Dispatcher.java:545) ...
Could you, please, advise?
Many thanks in advance.
Best regards,
Guillaume