Hello SAP Gurus,
We are facing a strange issue reported by CRM functional team. The SSO works between CRM and ECC i.e. it doesn't prompt for password (which usually when SSO breaks in non-production systems after system refresh).
Problem is that when a user (e.g. manager) logs into CRM Web UI selects a business role, and then launches transaction launcher (which takes him to ECC), he is able to login to ECC and do the required tasks. However, when this manager logs off and a call center agent logs in CRM Web UI (corresponding) business role and launches transaction launcher, he is able to login to ECC but with the login of previous user i.e. the agent has logged into ECC with the roles/authorizations of the manager (who had already logged out earlier).
This means that the manager got logged out from CRM but not from ECC! Hence, when any one logs into CRM after the manager, they are able to login to ECC with the manager's roles/authorizations and not their own! This is a big problem because the agent and manager have diferent roles/authorizations in ECC and CRM and will cause issue if agent can do same tasks as the manager can do.
I checked from the Basis side that overall SSO is fine between CRM and ECC. Could anyone guide as to how to troubleshoot this further?
Thanks & Regards,
Kunal.