Hi Developers,
I would like your assistance in understanding the purpose of the myssocntl service under SICF in the SAP system.
From my understanding, if this service is activated, it allows users to log into integrated applications without re-entering their credentials, as it stores the user's session cookie. However, if the service is not activated, the user session is still managed through the login/create_sso2_ticket parameter in SAP, which is configured via transaction /RZ11. Since this also handles the user session, I am unclear about the specific role of the myssocntl service. Why is it necessary for the execution of SSO if the /RZ11 parameter already manages user sessions?
In my use case, once a user, such as nharjai, logs into the SAP system, the corresponding SSO ticket is generated. This ticket is then passed to the SAPSSOEXT authentication handler in OTDS to validate it and perform the necessary actions.
Additionally, I am curious about how SSO tickets are generated for background users, such as RFC or WF_batch. Do these users also need the myssocntl service to be activated in order to create their sessions and tickets for background processes?
I would appreciate your insights into these questions to help clarify the role of myssocntl and how it interacts with session management in SAP.
Thanks,
Nitesh