About user mapping in ep

hi guys
'm new to ep pls tel me how to do user mapping in sap ep
thanks
regards
kamal

Please check the link.
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/0062f9dd-5dd5-2910-d5b4-ee110b04d8b3
and
http://help.sap.com/saphelp_erp2004/helpdata/en/af/f71940d4558f5ce10000000a155106/content.htm
Thanks Rishi Abrol

Similar Messages

About user mapping

hello every one
i have a question that is....
we configuration users mapping between SAP portal and R/3 System.
in this case, we know the user's IDs are "one to one" relationship.
but some times, we have to integrate the more external system such as BI system or others.
so how to map the users as "one to more" relationship in the portal?
waiting for your reply.
thinks !

Ok, I will try:
1. in System Administration > System Configuration > System Landscape create your own folder and a system there in - one for your R/3 backend, one for BI:
http://help.sap.com/saphelp_nw70/helpdata/EN/ec/0fe43d19734b5ae10000000a11405a/frameset.htm
Don't forget to test the connections.
2. Enable User Mapping and maintain the mapping data for both systems:
http://help.sap.com/saphelp_nw70/helpdata/EN/0d/fd76a0c4e0834ba1a17698d0b5553d/frameset.htm
There are 2 ways to map users: by Administrator tool or the users shall enter their own data:
http://help.sap.com/saphelp_nw70/helpdata/EN/b6/8b9aea8d7c11d5bdd8006094191908/frameset.htm
http://help.sap.com/saphelp_nw70/helpdata/EN/b6/8b9af08d7c11d5bdd8006094191908/frameset.htm
3. Within Content Administration open the properties of the iView you would like to assign to a system. There you will find a property named 'System'. Choose the one with the correct user mapping for your context.
Hope this clarifies to you.
Cheers,
Anja

Question about Logon ticket with user mapping at BI-JAVA environment

We're implementing BI 7.0 including BI Java and SAP EP for end user
access.
I have two question about SSO method when we're using BI Java.
I know we can simply configure SSO logon ticket with BI-Java(EP
included) and BI-ABAP through BI template installer and we already
succeeded in that case.
But the problem is we want to change it to user mapping SSO method for
some our internal reason.
After we configure user mapping SSO, we've got SSO failed error when we
call BI-Java stuff like BEx Web Application iView.
After many testing implemented, we found SSO Logon ticket with user
mapping (using SAP reference system). It seems working now.
But our question is "Is it no problem when we use SSO logon ticket with
user mapping?" Is there any restriction or issue?
One more question is we can ONLY use user base mapping when reference
system used. How can we assign BI-ABAP users to EP Group?

Using an SAP Reference system is allright. But if the reason u r going for this is because of different usernames in EP and BI, why dont you go for user mapping.
Anyways, on restriction of reference syetms is that you can have ONLY ONE reference system defined in portal. In you case you can only have the BI system defined.
Hope this helps!!

Problem about SSO using logon ticket with user mapping

Hi everyone ,
I had done SSO with Portal , BW and R/3 system.
I use logon ticket with user mapping .
When user name is same in Portal as in R/3 system, or user name is same in Portal as in BW , user can access R/3 transactions and BW report without logon.
There are some Portal users name which are different with R/3 user and BW user. And I done the user mapping for these user.
But some user mapping works fine,but most of them can't work,means that most of them need to enter mapped user ID and password.
What's the reason?
When SSO using logon ticket with user mapping, the Portal user which is different with R/3 user and BW user, can they access R/3 transaction iview and BW report iview without logon?

Hi Chen,
What you have done is correct. But the problem lies here.
Since you are using the same system object for accessing the iview, where the ticket method is set to SAPLOGONTICKET in the user Management property of the system object.
To avoid this create another system object like the previous one but set the logon method to UIDPW and select admin, user from the drop down box. Also create a system alias for this system.
Now create another iview like the previous one but link this iview to the new system. Now do the user mapping for the users which are different in portal compared with R/3. Now you should be able to login without any problems.
Another important point is login to portal with Fully qualified domain name. In the ITS property of the system object also give the FQDN.
Hope this helps
Regards
Arun

Issue with user mapping and SAP reference system

Hello Gurus,
I have this strange system behaviour when preparing my system for single sign-on using user mapping.
Case 1.
In the user management property category, I have the following defined.
Authentication Ticket Type - SAP Logon Ticket
Logon Method - UIDPW
User Mapping Fields -
User Mapping Type - admin, user
In the alias editor, I defined the default alias as SAP_PRD
Result= when I go to identity management to assign the reference system (the default alias - SAP_PRD)...I do not see the system alias there.
Case 2:
In the user management property category, I have the following defined
Authentication Ticket Type - SAP Logon Ticket
Logon Method - SAPLOGONTICKET
User Mapping Fields -
User Mapping Type - admin, user
In the alias editor, I defined the default alias as SAP_DEV
Result, when I go to the identity management to assign the refernce system (the default alias - SAP_DEV), I see it there.
What might be my issue? Does it mean I can't assign SAP reference if I am using UIDPW as logon method?
Please help me.

Hi Mahesh,
Thanks for the feedback. I am relatively new to EP...so please I won't mind if you can guide me on how to go about this.
This is what I did...
I chose System Administration > Permissions
In the PCD, I located my system with the alias, SAP_PRD
It opened up the permission assignment area.
Now I have these permissions set
Administrator - Full Control
Administrators - Full control
com.sap.caf.eu.gp.roles.superuser - Full control
Everyone (built in group) - Full control
Everyone (Everyone role)- Full control
super_admin_role - Owner
For all the above End User box is checked.
I can't find anyone end user group .
Once I pick UIDPW, the alias disapperars from the reference system list.
Please help.

Scheduled automatic upload of roles/user mapping from R/3 to EP6

EP6.0 offers a nice tool to upload roles together with the user mapping from an R/3 backend system to the portal. This works very well, but in an environment where the user mapping happens on the backend system this manual process has to be repeated to keep the user mapping up to date.
It would be very useful if this process could run in batch mode and could be scheduled. Does anyone has a solution for this problem?
The way the portal user administration is designed works maybe very good for small companies, but for large companies with many users a batch upload tool is really needed!
People from SAP have told me that they are thinking about such a tool, but the pressure from the customers is not high enough to put it on their project list. So maybe we can unite forces to increase pressure on SAP project management.

Dear Krishna,
There are a few solutions for this problem and we are investigating some of them now:
- you can use an LDAP server. Transfer users and the groups to which they belong from the R3 system to LDAP. The groups correspond to the roles the users have. The portal can use the groups on the LDAP server. The portal roles have to be attached to the groups and not to the users.
- we are also thinking about writing a JAVA program that automizes the manual role upload that SAP delivers in the portal. The KM part of the portal contains a scheduler which can be used to schedule the upload of uesr mappings from R3 to the portal.
- you can also make an ABAP web service that is called from a program on the portal to transfer the usermapping. The program makes use of the UME API.
- Or you can make an ABAP program on R3 that calls a JAVA program on the portal that makes use of the UME API to store the user mapping on the portal.
your iview question:
Maybe you can change the default setting for the preferred GUI in the master iview that is used for the creation of the iviews. When you create a new iview the portal creates a delta link based on the master iview., so when you change the master iview all new created iview based on the master iview will have the correct setting immediately.
Best regards,
Johan

Error in User Mapping with SR1 Package

Hi
I have installed the SR1 Package for Web AS and EP.
While trying to achieve User Mapping the following error is being displayed
Portal Runtime Error
An exception occurred while processing a request for :
iView : pcd:portal_content/administrator/super_admin/super_admin_role/com.sap.portal.user_administration/com.sap.portal.user_mapping/com.sap.portal.userMappingAdmin/com.sap.portal.userMappingAdmin
Component Name : com.sap.portal.usermanagement.admin.UserMappingAdmin
User Mapping not fully available..
Exception id: 02:08_12/07/05_0005_4483250
Has anyone come across with this problem?
Also the 'Personalize' link on the Portal is not working.
I have come across the same problem on two machines in which the SR1 package has been installed.
Please respond if there is a solution.
Thanks in advance.
Regards
Priya

Hi Priya,
I'm glad to hear that you have solved your problem on your own, but not so glad to see that you did not check the mentioned links! ;-(
If you would have, then you would have seen that you've done exactly what I mentioned in that thread. But more important, that this is the easiest way to solve the problem but not at all the safest and therefor NOT RECOMMENDED by SAP. I would also rather suggest to solve this problem by installing and using the unlimited strength jurisdiction policy files from Sun Microsystems, Inc.
Maybe you take your time and read the Note and the mentioned links so that you're informed about the security risks.
Regards,
Robert

Error while user mapping

Whenever I try to map a user I get an error. I go to
User Administration -> User Mapping, find the user,
select them, select the system, enter the information,
click save, and then I receive this error.
Portal Runtime Error
An exception occurred while processing a request for :
iView : pcd:portal_content/administrator/super_admin/
super_admin_role/com.sap.portal.user_administration/
com.sap.portal.user_mapping/com.sap.portal.
userMappingAdmin/com.sap.portal.userMappingAdmin
Component Name : com.sap.portal.usermanagement.admin.UserMappingAdmin
Service not found: com.sap.portal.ivs.systemlandscapeservice.systemsrv.
Exception id: 01:52_25/08/04_0012
See the details for the exception ID in the log file
If someone can help that would be appreciated. Or if you can tell me where I can find the log file. I haven't been able to find that either.
Thanks

There are no *.par.err files. I couldn't see anything in the console logs, other than startup and shutdown information. Something else to note is that this has worked before. I have mapped a user before. This has only started recently. As far a I know there have been no changes to the configuration, or any new installs to the server.
I found a portalapp.xml file that exists under the com.sap.portal.ivs.systemlandscapeservice directory. Here is the section from that file that talks about the landscape editor.
================================================
===============================================
Is there something in this file I should be looking at?

User mapping certificate in UME (J2EE) with ABAP system as Backend (SNC)

I hope someone can help me with the user mapping concept (X.509 V3 certificates) for both "worlds" (ABAP and JAVA Stack).
I know how to install and configure certificate based (X.509) login to SAP ABAP and SAP JAVA (J2EE) Stack (--> enable encryption for communication and Single Sign On).
Situation:
We have a ready installed and configured X.509 certificate authentication environment for the ABAP world (between SAP GUI and SAP Server System)
and the user mapping was configured in the ABAP System (SU01). As the users are using certificates, the passwords are deactivated on the ABAP System.
Now if you want to integrate a JAVA (J2EE) Sytem and you want to configure the UME to the ABAP System (as Backend), you have an administrative effort problem with the user mapping (X.509) in the UME configuration.
1.) It is possible to assign manually the user public key to every user --> But to much effort
2.) As the user does not have a password (deactivated in the ABAP system), the way to combine the automatic mapping with a user login does not work.
3.) In the distinguished name of the user certificate there is no information about the SAP username itself
--> you are not able to use any information of the DN to bind a user in the Login Module configuration.
Now my question:
Is it possible to use the sncname information from the ABAP System (still configured and available) for the UME configuration?
As i know, it is possible to write an own Login Module. Does anybody has a customized Login module for this issue?
At the end the best solution would be to enable the same user mapping mechanism on the JAVA world as on the ABAP world. --> Mapping the Distinguished Name to the SAP User

We have developed a login module which is working with Kerberos auth, not x.509 auth, but still solves a very similar problem to the problem you are describing. As you know, when SNC is used to logon to ABAP stack, the SNC name of the user is mapped onto a SAP user via entries in the USRACL table. Our mapping login module takes the authenticated user principal name from the shared state and uses this to lookup the entry in USRACL table on ABAP stack, and from this it will know which SAP user to use, and can update shared state with this info so that CreateTicketLoginModule will created an SSO2 ticekt for the mapped SAP user id.
This means that mapping of users externally authetnicated identity onto SAP user/client can be managed in one place, e.g in ABAP stack using USRACL table entires and su01 t-code etc.
I know it is not exactly what you wanted, since you are looking to use x.509 certifiates instead of Kerberos authentication, but I thought it was worth sharing so that you know the concept has already been implemeneted many times. Many of our customers use this login module when they have our product, for the same reasons that you have stated.
Thanks,
Tim

Problems with user mapping to download ESS Business Package for EP 6.0

Hi,
I am trying to download ESS Business Package for EP 6.0 but facing problems inspite of reading the SAP document on downloading Business Package. Here is my problem:
I start to download the package and to map the user ids. I am mapping the SDN user id to a SAP Service Marketplace user id as mentioned in the SDN website. But the download option is not working and gave an error when I clicked on the 'Download' link after user mapping.
It would help me a lot if anyone else who tried to download BPs after user mapping gave their feedback.
Can someone please clarify about the user ids and describe how can I download the ESS Business Package?
Thanks and Regards

Hi,
from the description you provide I can't tell what the problem might be, so to determine the cause we need more information on this. Screenshots of the error message would be ideal.
In general, the following needs to be done:
- you need to be signed in at SDN with your Service Marektplace s user id
- the user mapping for the data source 'Service Marketplace' needs to be maintained
Please send the error information to: [email protected]
and we will try to solve it.
Thanks, Anke

Different ways to do User Mapping

Hello all,
Could some one tell me about the ways in which we could map the user id to SAP r3 id. We already have a reference system which will do the user mapping.
Another way is to have the LDAP save the Mapped user id along with the authentication data.
Wanted to know if there are any other ways to do such a user mapping.
Thanks ,
Meghna

Hi,
User mapping is used for Single Sign-On (SSO) to back-end systems. User mapping maps a portal user ID to the user ID of the back-end system.
Systems are represented by their default alias in various interfaces, such as the User Mapping dialog that displays during personalization. To make a system available for user mapping, you must:
● In the System Aliases Editor, define a default alias for each system that you create. For information about creating system aliases and default system aliases,
● In the System Property Editor, set the User Mapping Type property to either:
--> User: Only the end user can set user mapping
--> Admin: Only the administrator can set user mapping
-->Admin/User: Both the end user and the administrator can set user mapping
User mapping supports the following authentication methods:
● SSO using user ID and password
This method always requires user mapping. The portal ID is mapped to the user ID and password of the back-end system.
● SSO using logon tickets to ABAP-based systems
This method only requires user mapping if users have different user IDs in the SAP NetWeaver Portal and ABAP-based systems. Passwords are not mapped.
To access more than one ABAP back-end system, you can define a reference system. As long as all the ABAP back-end systems use the same user ID, the user can access all the systems by mapping their portal user ID to the user ID on the reference system.
Go through these helpful links for Setting User Mapping with Backend:-
http://help.sap.com/erp2005ehp_03/helpdata/EN/f8/3b514ca29011d5bdeb006094191908/frameset.htm_
http://help.sap.com/erp2005ehp_03/helpdata/EN/0d/fd76a0c4e0834ba1a17698d0b5553d/frameset.htm_
Hope these helps,
Reward points if helpful
Regards,
Shailesh Nagar

Questions about user-defined functions

Hello all,
I've got some questions about user-defined function in a message mapping:
1) How can I get the current date/time in format yyyy-mm-dd hh:mm:ss ? What is the java code for this?
2) I want to use the StreamTransformation constant TIME_SENT, only this is not in the right time-zone.
It is GMT and it should be CET (1 hour difference). How can I convert this in Java?
Can somebody help me with this?
Thanks in advance.
Kind regards,
Marco van Iersel

Hi Marco,
If the date format is fixed as you have mentioned,please use this:
                                String test = "2009-03-27 23:15:30";
          String test1 = test.substring(11,13);
          if(!test1.equals("23"))
          int a = Integer.parseInt(test1);
          int b = a+1;
          System.out.println("b"+b);
          String c = Integer.toString(b);
                                test = test.substring(0,10)+" " + c + test.substring(13,19);
                                return test;
          if(test1.equals("23"))
          test = test.substring(0,10)+ " 00" + test.substring(13,19);
          return test;
                                else return "";
Kindly let me know if this works.
Thanks.
Regards.
Shweta

User Mapping in JCO Destination

Hi All,
My current configuration is as follows:
EP6 SP17 -> User mapped through Portal to R3 system.
JCO Destinations -> I use a one technical user for all the WAS users ('user/password' option)
I want that the JCO will use the same mapping as the Portal.
Is it possible?
Is there a guide/tutorial for configuring the User Mapping option for a JCO destionation?
p.s
i cannot use SAPLOGONTICKET because the WAS (Portal) user and the R3 user are different.
Thanks,
Omri

Hi Omri,
I don`t think the Portal user mapping could be utilized by JCo destination on WAS in a trivial way.
You can try to read such data using Portal service in your WD application and afterward pass JCo connection to RFC model but may be it is not so good idea.
Another option is to move user mapping logic to R/3 ( don`t ask how it is just guess ).
Also there is no user mapping on the WAS regarding JCo destination (at least I have never heard about it).
Best regards, Maksim Rashchynski.

Http System and User Mapping

hi,
I have created a Http system and mapped the user ID and password for the login page of that System. Now when i created a URL Iview for a particular application using the System defined above and after passing the username and password parameters as mapped user and mapped Password, i am not able to login into the web application. Its displaying the login page again asking for username and password.
What should be done so that i could login to the application directly after logging into the Portal.And also plz tell me the required parameters that needs to be filled in while creating the system.Also the consolidated list of steps to be followed.
Thanks in advance,
Jules

Hi Jules,
What you are talking about is also called SSO. Well you have to also do a minor change in the setting. Go to HTTP System which you have created and in the Property Category dropdoen select User Management. Here you will find the user mapping type. Chnage the option of this user mapping according to your need. There will be three option for that:
1) User - If only user need to be mapped.
2) Admin - If only admin need to be mapped.
3) User,Admin - If both User and admin need to be mapped. (prefered if SSO has to provided for application to all users including Admin).
Also I beleive that you have create dthe System alias for the HTTP system you have created, because you will need that for user mapping in the further steps.
I hope this solves your problem.
Regards
Pravesh
PS: Please consider rewarding points on SDN for helpful answers. Thanks in Advance!!

Questions about shared maps

Hi,
I have some questions about shared maps. Our Olite Applications has 96 tables. On these 96 tables, 54 tables are tables with DISABLED DML = UID. So, change on the client database are not uploaded to the server. Some of those tables have no where clause and some have a where clause which is the same where clause for all.
Is it true to say I could put all those tables as shared maps?
Are they automatically shared because DISABLED DML = UID?
What would be the advantages of putting those publications items as shared maps?
Thanks for your help.

Thanks for your help.
I looked into CMP$ tables and CLID$$CS is not 0 but egal to my usersnames. I use a java program to create my items and publications.
I also found in the table C$ALL_TEMPLATE_ITEMS a COLUMN named SHARED and they are all with the value N. So I think they are not shared.
I think I found where in the API I should make the table shared. It is in the addPublicationItem procedure of the Class ConsolidatorManager. I will try it.
If we want all users to have all the table data, must we use the groups you talked about?
If yes, how do i define those groups?
Thanks

About user mapping in ep

Similar Messages

Maybe you are looking for