Automate

 View Only
  • 1.  WS AWS Evolve SSO - SAP Portal Issues

    Posted 06-01-2022 11:16
    We have recently upgraded to WS Evolve (Dev/QA) in our AWS private cloud but are having issues with SSO working for our UAT when using the SAP Portal option which is how our current WS Foundation is being used and working successfully. We have opened a case with Support (month+) but reaching out to anyone that has done this already with Evolve on AWS that might be able to assist with what issues and resolutions they had to get it working for the SSO. The setup is that our WS Evolve is sitting on AWS Domain but our SAP environment is still on prem so the authentication for the Kerberos logging isn't successfully happening when we do the 'Test Connection' in WS Evolve setup error is can't connect to EP portal.

    |ERROR|90|Winshuttle.Common.SapConnectorApi.SapConnector.OpenConnection|Error in open SAP connection|

    Any help be greatly appreciated? Also another suggestion from WS Support is called 'SAP Trust' which might be another option as well if anyone has implemented this like type SSO to know how well it worked prior to us trying this new approach?

    thanks

    ------------------------------
    Paul Volkert | IT SAP/Winshuttle support

    ------------------------------


  • 2.  RE: WS AWS Evolve SSO - SAP Portal Issues

    Posted 06-02-2022 08:12
    Hi Paul,
    We are having a similar problem and after months of trying and working with Winshuttle Support we have not been able to resolve.  We installed Studio Manager and a requirement of the installation process was the installation of the SAP GUI on the Winshuttle servers.  I had Deskside support install GUI 7.6 on all the new servers.

    For each SAP server, the following information, i.e. System ID, server host, instance, network settings, was configured in Studio Manger, the same as we used for Foundation User Governance.  For Logon type Activate SNC, the connection test is failing, however when running scripts in Studio the user can connect to SAP using SSO with no error.   The test connection in Studio Manager does work if we use SAP credentials, but still no success with SSO. 

    In addition, when I try to log on to the SAP DEV client from the Winshuttle server via the GUI using SSO I get the following error:   Error 193 = "C\Program Files (x86)\CyberSafe\bin\sncgss32.dll is no valid 32-bit DLL for Intel x86/IA32
    But connecting using SAP credentials is successful.

    We were provided the following instructions for SSO setup SAP_SSO_Documentation_Setup_Evolve.docx, however we don't use the SAP Secure Login Library (SLL) for SSO (we have no license), we use a product called Cybersafe.

    I came across this article:  http://winshuttle-help.s3.amazonaws.com/foundation/en/foundation_11/foundation-11-configure-sapis-sso-cybersafe.htm

    Since are using CyberSafe for SSO I figured I would try this.  This was not successful either.  I am starting to wonder if this will only work the SAP SLL.

    Sorry I was no help but I just wanted to share our experience.  Maybe someone else on the Community has suggestions for both of us!  Again we have no issues with running scripts for our day to day activities, but we are unable to use server-side scheduling due to the SSO issue.  



    ------------------------------
    Monica Anicito | Master Data Project Lead
    Ortho-Clinical Diagnostics, Inc., Raritan, NJ
    ------------------------------



  • 3.  RE: WS AWS Evolve SSO - SAP Portal Issues

    Posted 06-02-2022 09:58
    Hi Monica

    Sounds like you are in the same loop path as we are in for 1 month+ now. We just started with testing the SAP Trust method of SSO (SLL) and will def let you know if that process works as we are in our final UAT process but need the SSO to be working as it does in PRD for this Evolve upgrade to be able to move forward. So this is a major blocker for us right now in the project..:-(

    thanks


    ------------------------------
    Paul Volkert | IT SAP support
    Florida Power & Light Company Inc
    ------------------------------



  • 4.  RE: WS AWS Evolve SSO - SAP Portal Issues

    Posted 06-02-2022 11:47
    Wishing you luck Paul.  Keep us in the loop and let us know your progress.

    Best Regards,

    ------------------------------
    Monica Anicito | Master Data Project Lead
    Ortho-Clinical Diagnostics, Inc., Raritan, NJ
    ------------------------------



  • 5.  RE: WS AWS Evolve SSO - SAP Portal Issues

    Posted 07-06-2022 11:00
    ---- QUESTION/HELP ----

    Has anyone had any luck with AWS Evolve to On-Prem SAP portal for SSO success we are currently still working on SAP Portal connection and now also attempting the SAP Trust which is not going well either?? We are currently working with support but not making much headway and beginning to think this doesn't work cross domain with any SSO?

    Thanks

    ------------------------------
    Paul Volkert | IT SAP support
    Florida Power & Light Company Inc
    ------------------------------



  • 6.  RE: WS AWS Evolve SSO - SAP Portal Issues

    Employee
    Posted 07-25-2022 15:04
    @Rishav Kumar , @Pallavi Aggarwal - Can you respond & connect with Support if you think the SSO troubleshooting utility would be of help here?​​

    ------------------------------
    Jayasri Varyani | SE
    Winshuttle North America |
    ------------------------------



  • 7.  RE: WS AWS Evolve SSO - SAP Portal Issues

    Posted 07-26-2022 22:05

    Engineering team have already created and tried the test utility that checks EP portal authentication using Kerberos and NTLM authorization header. It was later decided that SAP SAML is the best option going forward.

    Engineering have created a document to setup SAP SAML and are currently trying to get this working. I understand this issue is pending since long and seems like we are really close.




    ------------------------------
    Rishav Kumar | Product Manager
    Winshuttle North America | +61410964724
    ------------------------------