Skip to Content
Technical Articles
Author's profile photo Tim Chang

How to disable SSO and enter credentials manually to use CPI

There are many occasions where you need to access SAP Cloud Platform for Integration (CPI) but using different credentials than your SSO.  This is especially relevant for SAP consulting or support team members who may already have SAP SSO certificates which can interfere and even obstruct the access to a customer’s CPI tenant.

Here’s how to get around that:

1.  Always use Firefox browser in Private mode.  (You may try Chrome, but I find occasionally it’s not as dependable and remember some SSO)

 

2. In Firefox, select the Options menu.   In the Search box, type “certificate

4. Click on Ask you every time radio button

5.  Next, be sure to clear cache.  Type cache in the Search box.

6.  Click on Clear Data.

 

7. Restart the browser, just to be safe.

 

8.  When it’s up again, go to your CPI URL.  You will get a popup for User Identification Request.  It will display your SSO certificate.   It may even ask you multiple times.

You must ALWAYS select Cancel !  It may even ask you multiple times, but always click on Cancel.

 

9. It will eventually prompt your CPI login credentials:

I hope this helps !  Be sure to do a like on this article then !

Assigned Tags

      9 Comments
      You must be Logged on to comment or reply to a post.
      Author's profile photo Steve Qiao
      Steve Qiao

      Very helpful. I tried with Firefox and it works well. Thanks.

      Author's profile photo Vyacheslav Nykytyuk
      Vyacheslav Nykytyuk

      Great solution, used to work for me. However, no longer available (Ask you every time radio button not available). Any other workarounds for this?

      Author's profile photo Tim Chang
      Tim Chang
      Blog Post Author

      Yes, software always change, don't they ?

      It will still work without that setup flag.  When you go to the CPI url in Firefox private mode, it will prompt you multiple times with the SSO  cookie (which you don't want to use), but you must always select CANCEL. 

      I was asked about 4 times, and eventually it got to a CPI login prompt to use your other credentials.

      Pls give it a try then.

      Author's profile photo Vyacheslav Nykytyuk
      Vyacheslav Nykytyuk

      Thanks for the feedback, Tim!

      It works fine for me as I made this change long ago (thanks for the solution!). But my colleague needs to set this up now and has no possibility to enable Ask every time. So should she just keep trying in private mode until the option to Cancel appears? Please advise.

      Author's profile photo Tim Chang
      Tim Chang
      Blog Post Author

      That seems to be only way now.  She can try to click "Remember this decision" AND click on CANCEL, and see if it minimizes the ask.   If it doesn't ask and goes straight to using her SSO, she should clear her cache, restart browser, and hopefully it will prompt her again.

      BTW, I'm not from CPI nor Firefox product team.  I'm just sharing this tip I've learned.

      Author's profile photo Vyacheslav Nykytyuk
      Vyacheslav Nykytyuk

      Thanks a lot for your time and help, Tim!

      Author's profile photo Parth Shah
      Parth Shah

      2489370 - How to disable client certificate SSO in Mozilla Firefox - SAP ONE Support Launchpad

      Author's profile photo Suzy Bijnens
      Suzy Bijnens

      Hi Tim,

      Your post really helped a lot in finding out why I could not login as a different user in SAP process orchestration.

      If you install Chrome extension IETAB and open the url in ietab mode (pushing the ietab icon), you will be able to use Chrome without any certificate setting change.

      Regards,

      Suzy

      Author's profile photo Tim Chang
      Tim Chang
      Blog Post Author

      Thanks for that tip.  I will make a note to try.