How To Fix ICF_SYSTEM_LOGIN001 - Switch to HTTP not possible: logon ticket active for HTTPS only

SAP Error Message - Details

• Message type: E = Error

• Message class: ICF_SYSTEM_LOGIN - Messages for System Logon

• Message number: 001

• Message text: Switch to HTTP not possible: logon ticket active for HTTPS only

What causes this issue?

Profile parameter <LS>login/ticket_only_by_https</> has the value 1. So
the logon ticket (SSO2) can be issued for HTTPS only.

System Response

No switch has been made to HTTP.

How to fix this error?

If you want to run the application under HTTP, change this profile
parameter to "0", or use a different authentication procedure.

Procedure for System Administrators

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message ICF_SYSTEM_LOGIN001 - Switch to HTTP not possible: logon ticket active for HTTPS only ?

  The SAP error message ICF_SYSTEM_LOGIN001 indicates that there is an issue with the logon ticket being active for HTTPS only, which prevents switching to HTTP. This typically occurs in scenarios where the system is configured to use secure connections (HTTPS) and a user attempts to log in using an insecure connection (HTTP).
  Cause:
  
  Logon Ticket Configuration: The system is configured to issue logon tickets that are valid only for HTTPS connections. If a user tries to access the system via HTTP, the system will reject the request because the logon ticket is not valid for that protocol.
  System Settings: The ICF (Internet Communication Framework) settings may be configured to enforce HTTPS for certain services or applications, leading to this error when trying to access them via HTTP.
  User Session: If a user has already logged in using HTTPS and then tries to switch to HTTP, the existing logon ticket will not be valid for the HTTP session.
  
  Solution:
  
  Use HTTPS: The simplest solution is to ensure that users access the system using HTTPS instead of HTTP. This aligns with the security policies and configurations of the system.
  Check ICF Settings: Review the ICF settings in transaction ICF (or SICF) to ensure that the services are correctly configured for HTTPS. You can check the service properties and ensure that the "SSL" option is enabled.
  Clear Browser Cache: Sometimes, clearing the browser cache or cookies can help resolve session-related issues. Ensure that the browser is not holding onto an old session that might be causing the conflict.
  Log Off and Log In Again: If a user has switched from HTTPS to HTTP, they should log off completely and then log back in using HTTPS to obtain a valid logon ticket for that protocol.
  System Configuration Review: If the issue persists, review the system configuration for any specific settings that might enforce HTTPS and ensure that they are correctly set up.
  
  Related Information:
  
  SAP Notes: Check for any relevant SAP Notes that might address this specific error or provide additional troubleshooting steps.
  Security Policies: Review your organization's security policies regarding the use of HTTP and HTTPS to ensure compliance and proper configuration.
  User Training: Educate users about the importance of using secure connections and the implications of switching between HTTP and HTTPS.
  
  By following these steps, you should be able to resolve the error and ensure that users can access the SAP system securely.