Hi All,
I have configured SSO based on Kerberos with SAP Single-Sign On 2.0, the solution used to work before with both web browsers and SAP Logon (Windows). However, recently when I recheck, the SSO does not work anymore for browser authentication. I can log into SAP GUI (for Desktop) with SSO, but when I checked SPNego configuration, the Token Check has error with the following message.
I tried to check the system lock of our KDC, SAP Application Server, as well as my workstation and synchronize the system clocks. However, this does not solve the problem. As you can see from the above screenshot, Kerberos token expires after 5 minutes, so I tried to extend the Maximum tolerance for computer clock synchronization in to 10 minutes, but the situation is still the same, the token still expires after 5 minutes. Could you please provides some hints to troubleshoot the error.
I'm not sure if it's the root cause for SSO on web browser but SSO for SAP GUI does work. I checked the note 1732610, but I guess I need to solve the token verification error first.
I would be very grateful for any contribution.
Best regards,
Duy