SAP Knowledge Base Article - Preview

3305584 - Decoupling System PSE from Logon Ticket


A need arises to decouple the System PSE's usage from Logon Tickets, for one of the reasons listed:

•    You are unable to link the System PSE to SSF Logon ticket in STRUSTSSO2;
•    You want to use a different hash algorithm than SHA1 for SAP proprietary tickets (Logon Tickets, Assertion Tickets, Reentrance Tickets);
•    You do not want to continue to make use of the System PSE for SAP proprietary tickets but want to use a dedicated own key pair instead;
•    You want to change the key algorithm and key size used for Logon Tickets.



NetWeaver AS ABAP.
To make use of this feature you must have installed CommonCryptoLib as SSF provider and your system must run with a kernel release superior to version 721.


SAP NetWeaver Application Server for ABAP all versions


Hash, decouple, STRUST, STRUSTSSO2, PSE, SSF, SHA, algorithm, logon ticket , KBA , BC-SEC-SSF , Secure Store and Forward , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.