3305584 - Decoupling System PSE from Logon Ticket

A need arises to decouple the System PSE's usage from Logon Tickets, for one of the reasons listed:

•    You are unable to link the System PSE to SSF Logon ticket in STRUSTSSO2;
•    You want to use a different hash algorithm than SHA1 for SAP proprietary tickets (Logon Tickets, Assertion Tickets, Reentrance Tickets);
•    You do not want to continue to make use of the System PSE for SAP proprietary tickets but want to use a dedicated own key pair instead;
•    You want to change the key algorithm and key size used for Logon Tickets.

NetWeaver AS ABAP.
To make use of this feature you must have installed CommonCryptoLib as SSF provider and your system must run with a kernel release superior to version 721.

Hash, decouple, STRUST, STRUSTSSO2, PSE, SSF, SHA, algorithm, logon ticket , KBA , BC-SEC-SSF , Secure Store and Forward , How To