2512337 - SSO failed due to "System ID and client from ticket are not the same than mine"

• You have already configured SSO between portal and ABAP backend system.
• Certificate for portal has been imported to backend system.
• When perform SSO testing, SSO failed, there should be following error found in work process (dev_w*) trace from the ABAP backend system:
  

  N Issuer found in the certificate doesn't match the one found in TWPSSO2ACL.
  
  N  *** ERROR => System ID and client from ticket are not the same than mine. [ssoxxkrn.c   1065]

  N  {root-id=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX}_{conn-id=00000000000000000000000000000000}_0

  N  *** ERROR => Neither was ticket issued by myself nor can I find issuer in TWPSSO2ACL (see note 1055856). [ssoxxkrn.c   1071]

  N  {root-id=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX}_{conn-id=00000000000000000000000000000000}_0

• To find more information, activating the security logon trace for level 2 work process trace(component:security) as per note 495911 described. Then reproduce the issue, there will be following more detailed information in trace dev_w* from the ABAP backend system:
  

  N  *** ERROR => System ID and client from ticket are not the same than mine. [ssoxxkrn.c   1065]###b

  N {root-id=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX}_{conn-id=00000000000000000000 000000000000}_0###

  N  Data from ticket: sysid=AAA, client=XXX###

  N  My system data: sysid=BBB, client=YYY###

Read more...

• Release Independent
• SAP NetWeaver Application Server Java

SAP NetWeaver 2004 ; SAP NetWeaver 7.0 ; SAP NetWeaver 7.1 ; SAP NetWeaver 7.2 ; SAP NetWeaver 7.3 ; SAP NetWeaver 7.4 ; SAP NetWeaver 7.5 ; SAP enhancement package 1 for SAP NetWeaver 7.0 ; SAP enhancement package 1 for SAP NetWeaver 7.3 ; SAP enhancement package 2 for SAP NetWeaver 7.0 ; SAP enhancement package 3 for SAP NetWeaver 7.0

SSO. System ID and client from ticket are not the same than mine, security trace, ACL, STRUSTSSO2 , KBA , BC-JAS-SEC-LGN , Logon, SSO , BC-SEC-LGN , Authentication , Problem