Access to Portal Via Company Website

Our company has a website running on oracle which I am addressing here as legacy portal. The employee data is maintainted in SAP and we have recently implemented ECM which is currently being performed through the SAP portal.
We want to introduce the SAP portal link in the legacy portal and avoid the scenario where the user is being challenged to login to the portal.
Our legacy portal is PGP ready and the team pertty much wants to use PGP using which the following will happen.
1. User will login to the legacy portal and click on the link which will direct them to SAP portal
2. We send the user ID and the PGP encrypted password to the SAP portal from the legacy portal
3. Question: How and where do we have to implement the decryption functionality
4. Question: How is the UID and decrypted PWD going to be used to automatically login to the SAP portal
Is there a better and, more importantly, simpler workaround to acheive this objective without PGP?
Appreicate your responses.
Thanks,
Prashanth
Edited by: Prashanth Nanjappa on Apr 22, 2010 10:22 PM
Edited by: Prashanth Nanjappa on Apr 22, 2010 10:24 PM

Your approach has several security design weaknesses in it, particularly relying on the fact that the passwords are the same in different systems, and making them (remotely) decryptable.
How does the user authenticate against the legacy portal and is there a Single-Sign-On technology which both portals support? That is actually what you are looking for, ideally re-authenticating the client user based on a common identity provider service.
System trust-chains are not optimal either, but password-chains are by far the worst option...
Cheers,
Julius

Similar Messages

Accessing peoplesoft portal via internet, outside of your org network

Hi,
I want one component of HRMS to be able to be accessed outside of the network over the internet.
It would be great if someone could give the steps needed to achieve this.
PeopleTools 8.48
Thanks,

Hi Saurabh,
it is bit complicated.
As you Expose FQDN is different and you internal FQDN is different , you have to make some workaround.
Follow below steps.
1.
   The system which you have created on EP for calling backend system , you have make changes all in that.
    Changes mean every where in system where you have maintain the host name portal.server.com has to be replace by static.ip.com , by this changes when you will call the BSP from portal, it will redirect to http://static.ip.com:8000/sap/bsp/bc/sap/zbsp/default.html
2.
Now the problem is that when you will try access the portal from you internal network through URL :- http://portal.server.com:50000/irj/portal and when you will click on BSP , it will indirectly go to internet to resolve the URL :- http://static.ip.com:8000/sap/bsp/bc/sap/zbsp/default.html which is becuase we have made chnages in the system above.
From internal network if you have to resolve URL http://static.ip.com:8000/sap/bsp/bc/sap/zbsp/default.html then you have to make the entry in host file which is like below
static.ip.com              123.123.123.123
From above workaround your URL will resolve from internet as well as from your internal network.
This is all becauase you have dual stack , you have difference in FQDN.
Any query pls reply.
Thanks
Anil
Edited by: Anil Bhandary on Oct 13, 2009 2:50 PM

Portal 7.3 & Web Dynpro iView, both accessed from Internet via Web Dispatch

Hi guru,
I'd like to know the best (or the correct) way to configure the FQDN and required DNS setting to allow user access ABAP Web Dynpro iview from internet.
My setup here is very typical:
One EP 7.3 in intranet, having "ep.internal.mycomp.com" as FQDN (given during installation)
One SAP ECC in intranet, having "erp.internal.mycomp.com" as SAPLOCALHOSTFULL parameter
One Web Dispatcher in DMZ, having "service.mycomp.com", and listen to 80 port (later added 8000 port for AS ABAP).
   User access my portal by using http://service.mycomp.com/irj, no problem.
But problem raised during access WD4A iview, here are my problem and questions:
[Problem]
At the beginning, we found that the WD4A iView can only be accessed in intranet, not from internet. Eventhough we register "service.mycomp.com" in public DNS. After some http level analysis, I was shock that the WD4A iview is provided directly by AS ABAP which running this WD4A, EP does not play a "relay" role. (Don't believe the URL bar in your IE, use Tamper Data or HTTP live to check the HTTP requests, you will get it). Since we DO NOT have "erp.internal.mycomp.com" in public DNS, so the iview cannot be displayed. But I DON'T want direct access to my ERP box.
I don't know a way to get rid of the "erp.mycomp.com" request generated by EP. So I tried to overcome the problem by leveraging the same Web Dispatcher used by EP. And I did make the WDisp -> ERP WD4A work using WDisp's FQDN (ie. service.mycomp.com:8000, also keep original service.mycomp.com:80 to EP), but the iview in EP does not use this FQDN. It use the SAPLOCALHOSTFULL parameter configured in backend ERP. WDisp does not do any URL replacement for me.
[Question 1]
Is there any way to hide WD4A iview in EP (server to server communication only)?
[Question 2]
If I can only have "service.mycomp.com" entry in my public DNS, should I change the SAPLOCALHOSTFULL in ERP to "service.mycomp.com"? I doubt that it may cause a "loop" situation between WDisp and ERP ?
[Question 3]
Is it possible to access WD4A on ERP by two different FQDNs (one for public via WDisp, the other for internal access w/o WDisp) ? I know there is only one SAPLOCALHOSTFULL configuration.
Anyone have done such integration ? please share your configuraiton. Thanks

Hay Wei-Shang Ku,
Many thanks to your prompt reply of this very old post I tried to ask!
for the /sap/* redirect, think it required to use icm/HTTP/redirect_<xx> parametet in WDISP profile. And i did applied below too to make default WDISP URL go to /irj (Portal login page).
icm/HTTP/redirect_0 = PREFIX=/,TO=/irj
so for "all request to /sap/* will go to ERP":
icm/HTTP/redirect_0 = PREFIX=/sap/*,TO=/??? (how do you set the TO value here?)
May i have your WDISP profile setting for reference? Did you make use of parameter wdisp/system_0?
And here is my overall setting:
we only have "service.mycomp.com" entry in public DNS.
1. "service.mycomp.com" is WDISP URL mapped to 1 public IP (we used default http 80 port)
2. we want user can access JPortal & also backend ERP via WebDynpro iView in JPortal via
   service.mycomp.com (only port only)
3. ERP system profile:
    SAPLOCALHOSTFULL = <ERPHOSTNAME>.mycomp.com (not in public DNS)
    icm/server_port_0 = PROT=HTTP,PORT=80$$,TIMEOUT=3600,PROCTIMEOUT=3600
4. Portal:
    ABAP WebDynpro iView setting -
   System = XXX (where XXX is alias of system iView)
System iView setting -
    Logical System Name = ERPCLNTXXX
    ITS host = <ERPHOSTNAME>.mycomp.com:8000
Thanks again your information, have headache of this issue for long times....
Gary

Cant access my portal applicaion via internet

hi
i have installed 10.1.0.2 OAS infrastructure and middle tier "portal and wireless"
OS = win 2003 server
/etc/host file I have included 10.132.12.132 myservername.dpw.gov.za mytest
my machine is on the domain=dpw.gov.za
i have created page_group named PG_myapp and configure it to be accessed bu public user"checked display to public users "
i can access the pagegroup by using http://myservername.dpw.gov.za/portal/page?_pageid=33,1&_dad=portal&_schema=portal on:
1.the machine/pc that the apllication(OAS) is installed ()
2.the machine/pc that is on the same domain as myserver= copying the page group url and paste it on the other machine that is on the same network and share the same domain
my problem is: i cannot access the same url/pagegroup using my laptop (not on the domain) uses mobile connection to the internet
my aim is to create application that will be access by users via network and internet sitting in different provinces
please help, what do i need to do
thanks
user599495

hi all
i got my answer, its a departmental/organisational issue
they need to put on the production and configure url(after testing the app on test machine )then give the url to outside user to access the app
thanks

Cannot access the content producer portal via reverse proxy

Hi all,
I hope my post is in the right forum
We have an FPN environment using RRA with our EP (NW 7.0 SPS18) as the consumer and our BI portal (NW 7.0 SPS18) as the content producer. The consumer is registered with the producer using HTTP protocol. Everything works as expected.
We're trying to implement an Apache reverse proxy for our FPN with SSL termination so that we can access the portals from the Internet with HTTPS protocol while keeping HTTP protocol for the internal users.
Through the reverse proxy, we can access the consumer portal and we can access the producer portal directly without any problem. The only problem is that, if we logged onto the consumer via the reverse proxy, we cannot access the content from the producer. We'd get the browser security warning message
"Although this page is encrypted. The information you have entered will be sent over an unencrypted connection. ..."
When we hit the Continue button, we'd get the eror 404 Not Found - The request resource does not exist.
Our Unix admin tried both Apache and SAP Web Dispatcher but we couldn't get it to work properly. We went through a lot of blogs and documents and we are at our wits end. We would greatly appreciate if someone can point out where we should look at.
Thank you very much in advance.
Dao

Hi Kevin,
Unfortunately, our Unix admin thinks you missed the point because my question was not clear enough
We do not have problems with the "correct name" in the reverse proxy and our main SSL termination works fine.
It's just that the consumer is registered with the producer using HTTP protocol; as a result, the producer's URL link is 'hard-coded' to use HTTP protocol in the consumer portal since we are not using SSL in the internal network. Hence, we'd like to know if there's any way to change them to HTTPS for the Internet clients while keeping the HTTP protocol for the internal users.
I hope I made it clearer this time
Regards,
Dao

Using Multiple Domain Names to Access Our Portal

We operate one domain corp.company.com but all internal intranet web servers get assigned the address inside.ZZZ. The inside.ZZZ is on our IE exclusion list but company.com is not. Adding company.com seems to be a miserable task so we are looking at adding an alias so our users can access the server at the new inside.ZZZ url. We have DNS pointing the URL to the right server and that seems to be working properly.
Something within the application is redirecting the page to gnwhepdev.corp. company .com (our servers domain address) after the initial login. Since *.corp. company .com is not in the exclusion list, it is considered an outside address and rerouted. We are trying to find some way to pass the alias within the application itself so that we dont need *.corp. company .com in the exclusion list and we can point users to the inside.ZZZ url.
Our team researched this issue and found documentation that supported the use of multiple domain names to access a Enterprise Portal. The documentation that we found is below:
How ToConfigure the J2EE Engine Deployment Descriptor (Version 1.00 July 2004)
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/d0eb8120-b66c-2910-5795-894f384fc054
Particularly on page 13-15 in the documentation it talks about enabling the portal via multiple domain names (Section 3.7: Using Multiple Domain Names to Access the Portal). Also, the documentation says the following:
You must have sever proxy servers, each with a different domain name. You then activate the filter mechanism and configure it to work with several proxy servers
We have several questions about the possiblities of being able to set this up and whether it would require another server where Web Dispatcher would need to be installed for this configuration to work properly. Can someone please provide some insight into what needs to be configured and answer the question about the Web Dispatcher? Also, if Web Dispatcher is required, what steps need to be done to configure? If Web Dispatcher is not needed, what will we need to do apart from that to set this up for our Enterprise Portal system?

It is but you have to use masking......
http://iwebfaq.org/site/iWeb_Domains.html

Internet Access to Portal located in DMZ

I've seen questions on the forum regarding gaing Internet access to the Oracle Portal located in the DMZ. This answer does not resolve the issue of having multple DADs to access your portal like abc.com and xyz.com. For that see note:162044.1 on metalink. http://metalink.oracle.com.
If you registered a domain name e.g. abc.com and have the portal up and running in the DMZ. Your local network should be accessing the portal just fine. Your computer name for example is portal. The URL translates into http://portal.abc.com. You opened the ports in the DMZ to allow access and wonder why you get partial portal pages, no login, etc. It's becase users can't resolve the DNS entry for portal.abc.com. Call your ISP and get an "A Record" entry. After a few hours and propogation of the A Record, users on the Internet can successfuly access your site. This A Record should be free.
Good luck
Kellan

Hi,
You've to open the ITS for internet for accessing things from Portal too. As I've told you in previous post, the request goes directly to ITS server (http://itsserver.com/scripts..) and not as (http://myportal.com/scripts..). The idea of having it via Portal will be to mask the URL of ITS , which will not be visible (except for time you click on iview which will display in status bar). In any case, you can directly acces ITS as what you've told, however you give the proxy.
Regards,
Siva
P.S: Award points if you find this useful.

Integration of my company website

Hi ,
I need to integrate my company website into the portal. ie.it should should have the same look n feel as of the portal and we are having a emp login in our site. so if a employee logs into the portal and click the login he should directly go into it.
i have integrated with application integrator into the portal but i am not able to get the look n feel. and also the the SSO for employees.
thanks in advance.

Hi,
I would advice shibboleth as Authentication and Authorization Infrastructure for your SSO. Check http://shibboleth.internet2.edu/ for this.
For the L&F, check things like
/thread/20449 [original link is broken]
Eddy
PS. Which type of SDN Ubergeek/BPX suit are <a href="/people/eddy.declercq/blog/2007/05/14/which-type-of-sdn-ubergeekbpx-suit-are-you">you</a>?

Error 403 accessing Oracle Portal

Hello,
I have just installed Oracle Application Server 10.1.2.0.2, and I am working on setting up Oracle Portal. I am able to access the portal by using an internal domain name (i.e, http://my.domain.local:7778/pls/portal), it will work fine using this url, SSO works also. I am trying to host this so people can see it from the outside world, beyond our internal network. I am getting error 403 when I try to access http://my.domain.com/portal. It states that the website declined to show this page. I am guessing there is a .conf file out there I need to edit, but I am unsure of which one or what kind of code is needed. I have seen a few other posts about this that had no answers to the problem. If anyone has any tips on this, they would be greatly appreciated!
Thanks,
Jordan

You will have to punch a hole through your firewall for port 7777 and 7778 to your application server.
You should refer to the guides for 10g configuration to help you.
http://download-east.oracle.com/docs/cd/B15904_01/nav/docindex.htm
Frank

How do I access the portal "builder"?

It seems like I am successfully logging in as the orcladmin user via the Login link off of the portal home page (/pls/portal/portal.home), because there is no error upon logging in and I can access the OID admin pages. However, I can't seem to figure out how I get to the pages that will allow me to build portal pages, etc. All I see is the "Home", "Community" , "Refresh","Login" and "Help" buttons on the top navigator. Is there a url that I can type in to access the portal builder pages?
I am quite certain that I am logging in properly because after my initial login, when I click the Login link, it does not take me to the login page, just leaves me where I am at.
Upon my initial login, should'nt I be forwarded to the portal admin page or something??
Any help would be appreciated.

once you login, click on the "corporate documents" tab.
a link to the "builder" should show up in the top right.
clicking on that gets you what you want. (there is then a link to navigator on the top right of that page...if you want to work on pages).

Problem accessing BBC News via iPad 2, iPhone or web

Anybody else have these problems - and solutions?
I have continuous, but erratic problems accessing BBC News either through MacBook Pro, iPhone 3G or iPad 2 (64G Wi-Fi & 3G). Until a few months ago, I never had problems accessing BBC News via my computer. Now I often cannot access the site at all, and problems occur whether I use Google Chrome (11.0.696.57)or Safari (5.0.5). Erratically and less frequently, however, the pages load OK. I have no problem loading other news websites, e.g. CNN or Al Jazeera. I live in Spain. My internet provider is Movistar. I have an ADSL connection of 10Mb (maximum available here) and a wireless router. My MacBook Pro runs OS X 10.6.7.
When trying to access BBC through Google Chrome, I get the following message:
Oops! Google Chrome could not find www.bbc.co.uk
Try reloading: www.bbc.co.uk/news/
Additional suggestions:
Access a cached copy of www.bbc.co.uk/news/
Trying to access BBC on Safari, I get this message:
Safari can’t find the server.
Safari can’t open the page “http://www.bbc.co.uk/news/world/” because Safari can’t find the server “www.bbc.co.uk”.
Using the BBC app on my iPad 2 and iPhone 3G, sometimes the BBC News loads OK, but more often, again, I get this message:
No network connection.
Sorry, you are currently offline and will not be able to view any updated content.
N.B. I am clearly NOT "offline" at this time, since I can open any other web page.

I'm trying to access BBC news on iPad 2 through the app. Have the same problems.
I wrote to BBC tech support complaining about my access problem through computer, iPhone and iPad. On May 2, I received the following reply:
Thank you for your email.
We are aware that some people in Spain are having problems accessing the
BBC News site. We have identified the problem to the Telefonica ISP.
We have contacted Telefonica and they have advised anyone with problems
to contact them directly
Kind regards,
BBC News website
Hence, I contacted Movistar (new name of Telefonica) tech support. I was told they knew nothing about the problem and tried to blame my computer for it. And then they hang up!!! Not impressed!!
I wrote to BBC again on May 19 asking WHO I should contact in Telefonica/Movistar, since their tech support staff claim not to know about the problem As of today, no reply from BBC, so still very frustrated!

Access Enterprise Search via ABAP Web Service

Hello ES experts,
I am looking for more information on how to access Enterprise Search via ABAP web service QSDispatcher, using processQuery operation. I created a client proxy and need information on structure of input and output parameters (query and query result)
Thanks, Srdjan

Hi Srdjan
You can access the SAP ABAP system by configuring it in the NW ES admin console, any system with version > 4.6C can be integrated in the search engine.
The UI for NW ES is a WebDynpro via Web Browser (In the future will be integrated in Widgets and Portal, etc) but i'm not sure if you want to use the WS to access the results of the ES searching or if you want to integrate a WS from ABAP as part of the searching area...
Please clarify.
Thanks,
Best Regards,
Luis

I can't access my email via mobile me from my husbands ipad

I'm trying to access my email via mobile me from my husbands iPad, but every time I try to sign on with my user id I just get a screen offering me to "find this iPad" or for him to set up for mobile me. It won't allow me to sign in to my own account. Any ideas?
Thanks for any help, Sally

You can't access the MobileMe website from an iPad (using safari or other browser). You use the various built-in and downloadable apps to access all your MobileMe data. This includes the email app.

Lawson portal is a website for school system payroll that only accepts internet explorer browser, anyway to get there from ipad by doing something creative?

lawson portal is a website for a school systems payroll but it will not accept safari or other browsers to access except internet explorer.. any creative way to access that you know of using IPAD..thank you

There's also a browser called Atomic Web that allows you to 'look like' another browser.
No idea if it works but you can try.
You might also contact the portal tech support. maybe they know of a way to make their site work with ipads

How to restrict access to portal based on entitlements.

Hi,
I am working on weblogic 8.1 portal project. i want to restrict the user to access
the portal based on the entitlements. However when user try to login he is seeing
Weblogic Error 403 forbidden page. How to display custom error page, instead of
weblogic default error page.
How to programatically check whether user has access to portal or not based on
entitlements.
Please give me code.
regards,
-chada-

Chada,
The 403 is by design. If you want to place a page in front of one or more
portal desktops and only show links to desktops the current user is entitled
to, review the attachment.
-Phil
"Chada" <[email protected]> wrote in message
news:3fcd6969$[email protected]..
>
Hi,
I am working on weblogic 8.1 portal project. i want to restrict the userto access
the portal based on the entitlements. However when user try to login he isseeing
Weblogic Error 403 forbidden page. How to display custom error page,instead of
weblogic default error page.
How to programatically check whether user has access to portal or notbased on
entitlements.
Please give me code.
regards,
-chada-[login.zip]

*Access to Portal Via Company Website*

Similar Messages

Maybe you are looking for

Access to Portal Via Company Website