How To Fix ICF_SYSTEM_LOGIN087 - SSO logon not possible; configure "Fields Authentication"

SAP Error Message - Details

• Message type: E = Error

• Message class: ICF_SYSTEM_LOGIN - Messages for System Logon

• Message number: 087

• Message text: SSO logon not possible; configure "Fields Authentication"

What causes this issue?

<ZK>Fields Authentication</> must be configured as a logon procedure in
the ICF.

System Response

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

How to fix this error?

Start transaction SICF.
Double-click on the relevant ICF node of your application.
Go to the tab page <zk>Logon Data</>.
Choose the pushbutton <zk>Default</> at the bottom of the screen to
activate all logon procedures.
Delete the logon procedures you do not want. The logon procedures <zk>
Fields Authentication</> and <zk>SSO Authentication</> must not be
deleted.

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message ICF_SYSTEM_LOGIN087 - SSO logon not possible; configure "Fields Authentication" ?

  The SAP error message ICF_SYSTEM_LOGIN087 indicates that Single Sign-On (SSO) logon is not possible due to a configuration issue with the "Fields Authentication" settings in the Internet Communication Framework (ICF). This error typically arises when the system is unable to authenticate users through SSO due to missing or incorrect configuration.
  Cause:
  
  Missing Configuration: The necessary fields for authentication (like user ID, password, etc.) are not properly configured in the ICF settings.
  SSO Configuration Issues: The SSO setup may not be correctly implemented, which can include issues with the trust relationship between the systems, missing certificates, or incorrect parameters.
  Authorization Issues: The user may not have the necessary authorizations to perform SSO logon.
  Profile Parameters: Certain profile parameters related to SSO may not be set correctly.
  
  Solution:
  To resolve the ICF_SYSTEM_LOGIN087 error, follow these steps:
  
  
  Check ICF Configuration:
  
  Go to transaction ICF (Maintain Services).
  Locate the service that is causing the issue (e.g., /sap/bc/webdynpro).
  Ensure that the "Fields Authentication" is configured correctly. You may need to enable or adjust the settings for the authentication fields.
  
  
  
  Review SSO Configuration:
  
  Verify that the SSO configuration is correctly set up in the SAP system. This includes checking the SSO settings in transaction STRUST (for SSL certificates) and ensuring that the necessary trust relationships are established.
  Ensure that the SSO tickets are being generated and validated correctly.
  
  
  
  Check User Authorizations:
  
  Ensure that the user has the necessary authorizations to log in using SSO. This may involve checking roles and profiles assigned to the user.
  
  
  
  Profile Parameters:
  
  Check the relevant profile parameters related to SSO. For example, parameters like login/accept_sso2_ticket should be set to 1 to accept SSO tickets.
  You can check and modify these parameters using transaction RZ10.
  
  
  
  Review Logs:
  
  Check the system logs (transaction SM21) and the developer traces (transaction ST22) for any additional error messages that might provide more context on the issue.
  
  
  
  Testing:
  
  After making the necessary changes, test the SSO logon again to ensure that the issue is resolved.
  
  
  
  Related Information:
  
  SAP Notes: Check for any relevant SAP Notes that might address specific issues related to SSO and ICF configuration.
  Documentation: Refer to the official SAP documentation on configuring SSO and ICF services for detailed guidance.
  Community Forums: Consider checking SAP Community forums or other technical forums for similar issues and solutions shared by other users.
  
  By following these steps, you should be able to diagnose and resolve the ICF_SYSTEM_LOGIN087 error effectively.