Troubleshooting Single Sign-On

Provides troubleshooting information for problems that can occur when implementing single sign-on (SSO) for SAP enterprise information systems (EIS).

When testing, the error No suitable SAP user found for X.509-client certificate is logged on the client and Unwired Server when testing SSO with an X.509 certificate on a mobile application client – during certificate generation, make sure that the user name under which the dbsvr11.exe process (Unwired Server) runs, is the same as the user name who generates the credential (cred_v2) file. For example, in the Processes tab of Windows Task Manager, the User name under which dbsrv11.exe runs is SYSTEM. In this case a SYSTEM user must also generate the certificate.
See this SAP Community Network linkhttp://forums.sdn.sap.com/thread.jspa?threadID=1756876.
When testing, the error RFC_ERROR_LOGON_FAILURE: No suitable SAP user found for X.509-client certificate is logged on the client and Unwired Server when testing SSO with an X.509 certificate on a mobile application client. –
1. If using X.509 certificate authentication, remove the JCo properties jco.client.passwd (Logon User) and jco.client.user (Password) defined for the SAP connection profile in Sybase Control Center.
2. Regenerate and redeploy the Workflow application and associated MBOs.
  Note: You need to remove the SAP connection properties from Unwired WorkSpace.
Application login failures, authentication failures, and operation replay failure error messages – any of these failures may be caused by the user's password changing in the SAP server. In some cases you may need to create new connection profiles.
For security reasons, the exact nature of the login failure is not returned to the client. Look at the Unwired Server log for details.
Using the createcert utility to create X.509 certificates to use in SSO testing – Unwired Platform includes a SQL Anywhere installation that includes the createcert utility for generating X.509 certificates.
See System Administration > System Reference > Command Line Utilities > Certificate and Key Management Utilities > Certificate Creation (createcert) Utility or the SQL Anywhere documentation for details.
Unexpected application behavior when you change credentials in an application – when you change a password in the client application, it changes only the password which is sent to the SAP server. To change the password that the SAP server accepts, change it at the EIS.
You can import any valid certificate into the device's certificate store, but if the SAP server rejects it, an error is returned to the client.