Authentication for multiple services

I wanna setup a bunch of web services (squirrelmail, blojsom blog, dokuwiki wiki, and an online calendar system - if i can find one). Obviously, I want to make these private, so only employees see them. All of these require separate authentication. Is there a way I can use one login/pass for all these, so they don't have to keep logging in to each individual service? like they go to:
domainname.com/services
and then login, and all their stuff is available.
Any hints?

Similar Messages

Percentage wise Confirmation for Multiple Service line items

Hi,
Percentage wise Confirmation for Multiple Service line items
During doing service entry sheet am able to do % wise confirmaion from
Menu -> Entry Sheet -> Create -> With Planned Service -> Enter Percent.
But this works only for single line item the first line.
If we have multiple line items & if i give 10%, It calculates 10% for
all items.
We want Line wise % confirmation can be given as % confirmation will differ from
line to line.
Thanks
Shashank

Dear ,
This percentage is a header data i.e applicable for all service items
F1 help clearly says
Percentage quantity to be adopted
Use
    If you wish to adopt the planned services from the purchase order, you
    can enter an additional percentage in this field in order to have that
    percentage adopted instead of the total quantity shown in the purchase
    order.
Example:
    Quantity specified.............Quantity to be adopted:.............Quantity specified "
    in purchase order:....................... 10 %..................................entry sheet:
    Service 1.......100 pc ................................................................10 pc
    Service 2.......200 m ...............................................................    20 m
    Service 3. .....30 h   .................................................................   3 h
Edited by: redriver on Jan 22, 2012 6:50 AM

Setting Basic Authentication for Web Service in WLS 6.1

Hi,
I am trying to set-up a Basic Username/Password authentication for a Web Service
that is hosted in WLS 6.1.
How do I go about doing that? Also once I get the username and password, how do
I pass that info
to the SOAP servlet to do the authentication? Can you give me some pointers on
this?
Thanks
Madhu

How do you want to do it? Through use of client.jar for the service or
directly? Here is how I do it directly:
String auth = "guest", pwd = "guest";
URL url = new URL("http://localhost:7001");
URL cmdURL = new URL(url.toString()+"/systemtest/TestWebService");
HttpURLConnection conn = (HttpURLConnection) cmdURL.openConnection();
String encAuth =
new BASE64Encoder().encode((auth + ":" + pwd).getBytes());
// BASE64Encode distributes long strings on multiple
// lines; we don't like that, no siree
int it = 0;
while ((it = encAuth.indexOf('\n')) != -1
|| (it = encAuth.indexOf('\r')) != -1) {
encAuth = encAuth.substring(0, it) +
encAuth.substring(it + 1);
conn.setRequestProperty("Authorization", "Basic " + encAuth);
conn.setRequestProperty("Content-Type", "text/xml");
conn.setRequestProperty("SOAPAction", cmdURL.toString());
conn.setDoOutput(true);
conn.setDoInput(true);
conn.setUseCaches(false);
OutputStream oStr = conn.getOutputStream();
String cmd =
"<?xml version=\"1.0\" ?>\n"
+ "<soap:Envelope xmlns:soap=\"http://schemas.xmls"
+ "oap.org/soap/envelope/\"><soap:Body>"
+ "<ping><arg0>false</arg0></ping>"
+ "</soap:Body></soap:Envelope>";
oStr.write(cmd.getBytes());
oStr.close();
InputStream iStr = conn.getInputStream();
byte[] buffer = new byte[1024];
while (true) {
int size = iStr.read(buffer);
if (size == -1)
break;
System.out.println(new String(buffer, 0, size));
ThorAAge

Commitment Items for Multiple services in Service PO

Hi,
We have created a service master for all the services used in a project. FM is activated. Every service has 1:1 relation with commitment items.
Even after table look up & derivation, system was not picking up correct commitment item in service PO. We have used some exits & BADI's, Now system checks picks the correct commitment item stored in FMDERIVE against the service master.
The issue is, the moment I have multiple service masters in a single service PO with two separate comm. Item. System picks up the commitment item of only for line item 0010 & posts both the entries against one comm. item.
Let me know how system can pick up individual commt items.
Thanks & Regards,
Ajay

Hi Ajay,
I believe that there is one standard solution for what you developed. Let me explain better.
Please check your table FM01X. You can enable one these flags in table FM01X, depending on your business needs:
FLG_PO_PROTECT if you want to always inherit the fm account assignment from the reference PO and therefore skip FMDERIVE
FLG_FMDERIVE_FORCE if you always want to force a call to fmderive in all cases
FLG_SES_OVERWRITE in services, if you wish to overwrite the account assignment from the SES with the derived values from FMDERIVE.
You can find more information in note 1146677 and 923672. Please review the information of the notes and run the programs
according your needs.
FMDERIVE is skipped for GR/IR lines and the Commitment item is inherited from the PO regardless of whether or not the GR/IR line is FM relevant. This is SAP standard behavior.
If you want to force the Commitment item to be derived from the GL account for the GR/IR line, you can use the FLG_FMDERIVE_FORCE flag as described in note 923672. This will allow FMDERIVE to be called for these lines. Please be sure to fully test this to ensure that FM account assignments that you do not want to be overwritten are
not incorrectly derived.
Bear in mind that for PO´s that does not have account assignment you should run FMCN/FMCT + FMN4N. For this you would need to check the flags and which one is more related to your needs. With the appropriate flag marked in FM01X (active with X) you should be able to run the transactions without any issue.
Based on note 189761, after doing all the previous suggestions and the issue does not appear anymore, I suggest you to run the programs described in the note.
I believe that this will help you.
Best Regards,
Vanessa.

SUP user authentication for web services

Hi there.
Has anyone in the comunity had any experience with building Web Service based Mobile Business Object (MBO) in SUP 1.5.2. We have built a mobile application for a blackberry device which consumes two ERP web services. The application deploys successfully and runs on the blackberry device just fine. However, untill now the user credentials needed to authenticate a consumer to a web service has been hard-coded into the mobile business object. This, from an accountability point of view, is not an acceptible model (i.e. all mobile users would be logging in to the ERP backend with 1 common user ID).
Has anyone had any experience and could suggest an an alternative solution to this that would support accountability i.e. map SUP users to ERP users, trusted connections etc. and is this possible with SUP 1.5.2?
S

Actually, SUP 1.5.2 just provides the HTTP basic authentication for WS-MBO. It is enable that to create 'username' and 'password' on the WS-MBO as two input parameters. Thus, you can design your device app in SUP to prompt the dialog to accpet the username and password before you access your WS-MBO. Similar, if your web-service has input argument for username and password, you also can design a dialog like above.

Server-side authentication for web services

I was hoping to use Azure's server-side authentication for a HTML/JS web app. Some things are a bit unclear. For example, if a new user authenticates via Facebook, I want to create an associated record on the server-side and associate extra data with the
user, irrespective of the service used to log in. If they log in again, I want the client to be able to get this extra data (eg preferences) from the server. On the back-end, I also want to be able to update particular fields of this record that the user cannot
change themselves. I know how to go about this in a plain Node.js backend, but not sure how some of these basic things map to using Azure's services.

Once the user logs in, you will have their information available to your server scripts. So one option is to use a custom API (or a Mobile Services Table) to insert/read/update the user data. You would protect this endpoint so that only logged-in users can
access it, and then access the
user object to obtain an ID an associate it in a table row. Lookups could be performed by similarly querying for the ID.
In terms of some fields being restricted, you could remove these from the update request itself.
Some pointers that might be helpful:
http://azure.microsoft.com/en-us/documentation/articles/mobile-services-html-get-started-data/
http://azure.microsoft.com/en-us/documentation/articles/mobile-services-html-call-custom-api/
http://azure.microsoft.com/en-us/documentation/articles/mobile-services-html-authorize-users-in-scripts/

Kerberos authentication for Excel Services

Hi,
I am configuring Keberos for Excel Service Application and facing some issue. Things i have done so far:
Configured web application to use Kerberos: Verified it from server authentication logs, klist and net mon that web application is using kerberos.
Excel service Account: domain\ExcelSVA
SQL server service account: domain\SQLSERV
C2WTS account : domain\C2wts
set spn on in using setspn - s sp/excelservices domain\ExcelSVA and delegated constarined authentication to domain\SQLSERV
then setspn - s sp/c2wts domain\C2wts and delegated constrained authentication to domain\SQLSERV.
C2WS account has impersonate identity ,logon as service and act as part of OS rights in app servers where excel and c2wt are running
Now when i try to refresh data i get error :The data connection uses Windows Authentication and user credentials could not be delegated.
The following connections failed to refresh: SQLServername port, databasename
http://technet.microsoft.com/en-us/library/ff487975.aspx
First 3 errors don't apply to me since i cant see these errors in SP log files and my sharepoint and database servers are in same domain.
For UPN, there is a email id assoisated with account that i am using and i have been using that email id to logon to other services in my company so UPN should be done too.
The Excel Services service account must have Active Directory permissions to query the object. Now this got me confusing. Where do i actually
give this? In sql server or AD? Which object does it need to query? The excel database in sql server. If it is so, then the permission needs to be granted on sql .
Also this link http://social.msdn.microsoft.com/Forums/en-US/99a3cf4f-dabc-4ac9-9ea8-afa677199ffa/kerberos-and-excel-services?forum=sharepointgeneralprevious
Microsoft solution described here is weired. I don't think sql server has c2wts or excel service application started on it. And from drop down list that is i don't know what is the solution talking of.
Does any one have any idea if i am missing any delegation or any step?
sachin

Any idea??
sachin

User Authentication for Web Services

Hi,
I am developing a web services that resides in Intranet. Thus, would like to implement application layer of user authetication, i.e. to match the input user name and password against Database record through a web service logon() method. If authentication is passed, the client program is allowed to call subsequence web service methods, else exception needs to be thrown when calling subsequence methods.
As understand that each method call to web services is treated seperately. Thus, how can we implement the authentication so that the client program only passes in the user name and password at once through logon() method, instead of perfoming the authentication for each method?
Appreciate the advice. Thanks.

Hi,
But, I need to develop the web services logon method using WSDL which generated the LogonBindingImpl.java, instead of web services using EJB bean.
Besides, the Web Service logon method (LogonBindingImpl.java) need to accept the input user name and password to check with the user name and password that stored in database table through the EJB bean. If checking successful, client program is allowed to invoke other WebServices method, else login failed exception need to be thrown when client calling other web services methods.
Appreciate the advice here on how to achieve that. Thanks.

Authentication for multiple AD domains

Hello,
Currently we have MS AD datasource as UME for all our internal portal users. We also have spnego setup for authentication for our EP 7.0 The user path and group path is of the form   dc=dom1 dc=company dc=domain dc=com.
Now we are planning to add additional domains to authenticate users .
Will the configuration differ if they are maintained on a different ldap server altogether or when only the user and group paths are different for the new domains as shown below? The user path and group path is of the form dc=dom2,dc=company,dc=domain,dc=com and
dc=dom3,dc=company,dc=domain,dc=com.
It seems that we have to change the datasource file for the additional ldap scenario.But are both of these the same,Would appreciate if someone could clarify this.
Rgds

Vineeth,
Within the 1 file, you can setup n-number of datasources. Below is an example.
As for having SPNego work for only 1 of those datasources (AD domains), I can't say if that will work. We have SPNego working for all our domains. There is probably something you can do within AD or your domain controller to limit Kerberos authentication.
<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE dataSources SYSTEM "dataSourceConfiguration.dtd">
<dataSources>
     <dataSource id="PRIVATE_DATASOURCE1" className="com.sap.security.core.persistence.datasource.imp.DataBasePersistence" isReadonly="false" isPrimary="true">
          <homeFor>
               <principals>
                    <principal type="group"/>
                    <principal type="user"/>
                    <principal type="account"/>
                    <principal type="team"/>
                    <principal type="ROOT"/>
                    <principal type="OOOO"/>
               </principals>
          </homeFor>
          <notHomeFor/>
          <responsibleFor>
               <principals>
                    <principal type="group"/>
                    <principal type="user"/>
                    <principal type="account"/>
                    <principal type="team"/>
                    <principal type="ROOT"/>
                    <principal type="OOOO"/>
               </principals>
          </responsibleFor>
          <privateSection/>
     </dataSource>
    <dataSource id="PRIVATE_DATASOURCE2" className="com.sap.security.core.persistence.datasource.imp.DataBasePersistence" isReadonly="false" isPrimary="true">
            <homeFor>
                <principals>
                    <principal type="group"/>
                    <principal type="user"/>
                    <principal type="account"/>
                    <principal type="team"/>
                    <principal type="ROOT"/>
                    <principal type="OOOO"/>
                </principals>
            </homeFor>
            <notHomeFor/>
            <responsibleFor>
                <principals>
                    <principal type="group"/>
                    <principal type="user"/>
                    <principal type="account"/>
                    <principal type="team"/>
                    <principal type="ROOT"/>
                    <principal type="OOOO"/>
                </principals>
            </responsibleFor>
            <privateSection/>
    </dataSource>
    <dataSource id="PRIVATE_DATASOURCE3" className="com.sap.security.core.persistence.datasource.imp.DataBasePersistence" isReadonly="false" isPrimary="true">
            <homeFor>
                <principals>
                    <principal type="group"/>
                    <principal type="user"/>
                    <principal type="account"/>
                    <principal type="team"/>
                    <principal type="ROOT"/>
                    <principal type="OOOO"/>
                </principals>
            </homeFor>
            <notHomeFor/>
            <responsibleFor>
                <principals>
                    <principal type="group"/>
                    <principal type="user"/>
                    <principal type="account"/>
                    <principal type="team"/>
                    <principal type="ROOT"/>
                    <principal type="OOOO"/>
                </principals>
            </responsibleFor>
            <privateSection/>
    </dataSource>
</dataSources>

BAPI_PO_CREATE1 for Multiple service line items

Hi Exports,
I am using BAPI_PO_CREATE1 to create service PO. I am facing problem when each line item(ebelp) has multiple service line items. I am unable to map multiple service line items to a single line item (ebelp) properly.
Can anyone help.
Regards,
Kiran

Hi ,
I am able to create service PO when only one service line item is there.
If multiple service line items are there. then i have to put the below code with in the loop.
here i am facing the probelm.
        w_poservices-pckg_no    = g_pckg.
        w_poservices-line_no    = g_pckg.
        w_poservices-outl_ind   = c_x.
        w_poservices-subpckg_no = g_pckg + 1.
        w_poservices-service    = w_sdata-srvpos.
     w_poservices-short_text = w_idata-ktext1.
     w_poservices-quantity   = w_idata-menge.
     w_poservices-base_uom   = w_idata-meins.
     w_poservices-gr_price   = w_idata-tbtwr.
     w_poservices-matl_group = w_idata-matkl.
        APPEND w_poservices TO i_poservices.
        CLEAR: w_poservices.
        w_poservices-pckg_no    = g_pckg + 1.
        w_poservices-line_no    = g_pckg + 1.
        w_poservices-ext_line   = 0000000010.
        w_poservices-outl_ind   = c_x.
     w_poservices-subpckg_no = g_pckg + 2.
        w_poservices-service    = w_sdata-srvpos.
        w_poservices-short_text = w_sdata-ktext1.
        w_poservices-quantity   = w_sdata-menge.
        w_poservices-base_uom   = w_sdata-meins.
        w_poservices-gr_price   = w_sdata-tbtwr.
        w_poservices-matl_group = w_idata-matkl.
        APPEND w_poservices TO i_poservices.
        CLEAR: w_poservices.
        w_posrvaccessvalues-pckg_no    = g_pckg + 1.
        w_posrvaccessvalues-line_no    = g_pckg + 1.
        w_posrvaccessvalues-serno_line = 01.
        w_posrvaccessvalues-serial_no = 01.
        w_posrvaccessvalues-quantity   = w_idata-menge.
        APPEND w_posrvaccessvalues TO i_posrvaccessvalues.
thank you.
Regards,
Kiran

Using a single HeaderHandler of JaxWS for multiple services

Hi,
In our application,we are using 3 different services.The authentication credentials are different for each one of them.So,we have created 3 different Headerhandlers for each one of them.
I wish to know if it is possible to have a single HeaderHandler for all 3 services.Please let me know if we can set the username/password in Headerhandler at runtime.
I am not able to pass the parameters in handleMessage(SOAPMessageContext smc).
Please suggest.

Hi Phillip,
both scenarios will work. One CSS can certainly manage more than 3 services! You can even use just one VIP for all traffic, then just create the proper rules to send specific traffic to the corresponding service(s). No need for 3 VIPs.
Regards
-juerg

HTTP Basic authentication for proxy service and its wsdl?

Hello:
For some reasons I needed to configure the HTTP basic authentication on a proxy service at OSB 11g. Everything was OK until I realized that, additionally to the authentication when calling the service, the OSB also asks for credentials when I try to get that proxy wsdl file.
My requirements are to secure the proxy service when is called only, not when retrieving the wsdl.
Is this possible to configure on OSB / WLS? How?
Greetings!
Edited by: user4483647 on 02-sep-2010 12:59
Edited by: user4483647 on 02-sep-2010 13:25

If I'm not wrong, Basic authentication is Transport level feature. So passing User/Password in SOAPHeader doesn't make sense. SOAP message can only be sent when you have a HTTP Connection open. During opening of HTTP connection User/Password is required for basic authentication.
http://www.student.nada.kth.se/~d95-cro/j2eetutorial14/doc/Security7.html#wp156943
Edited by: mneelapu on Apr 2, 2009 2:09 PM

Basic Authentication for Web Services

I have build Web Service according to the weblogic 6.1 examples
successfully deploying the .ear file etc.
Now I want to add security to the WebService uri.
I have added a <web-resource-collection> tag to the web.xml file, but
what should I put for the <url-pattern> ?
Am I obliged to 'manually' add <servlet> tags to the web.xml file in
order to add a security constraint to a WebService deployed thru a
.ear ?
Taking WebLogic's own statelessSession.Weather example, what is the
minimum I need to add to the web.xml file to have basic authentication
on the weatheruri ?
Thanks,
Adam

Ok, now I'm confused. Is this a Flex app (runs in the browser) or an AIR app? This makes a difference because in the browser, Flash Player/Flex uses the browser's http mechanism for transport, while AIR implements it directly. The original posted indicated some difference between Firefox and IE, which led me to believe it was a Flex browser app. Difference between these two would make me think something was wrong with the server response, and the two browsers were passing it (the problem) back to Flash Player differently.
Mark

Implementing authentication for web services

Hi all,
I'm struggling trying to guess how to implement basic HTTP authentication as well as using certificates in order to apply HTTPS, for some web services we've created, running on the Oracle Application Server 10.1.12. The web services were implemented using JDeveloper 9.0.4. Any help would be very appreciated.
Thanks in advanced and regards,
Luis

Hi,
But, I need to develop the web services logon method using WSDL which generated the LogonBindingImpl.java, instead of web services using EJB bean.
Besides, the Web Service logon method (LogonBindingImpl.java) need to accept the input user name and password to check with the user name and password that stored in database table through the EJB bean. If checking successful, client program is allowed to invoke other WebServices method, else login failed exception need to be thrown when client calling other web services methods.
Appreciate the advice here on how to achieve that. Thanks.

How to configure basic authentication for external services

I have a BPM Project (11g) and within the composite I've added an external Web Service reference. This service uses basic authentication.
I would like to deploy the composite with the username and password already configured.
I have tried setting oracle.webservices.auth.username as a binding property and also as a property but neither seem to work. When the composite is deployed the basic authentication username is blank within Enterprise Manager.
It also resets after updating it manually during subsequent releases.
Any ideas?

hi Mahender,
Thanks for your posting!
For this issue, you could refer to this document and tutorials (Microsoft Antimalware Whitepaper ). And you need use the Azure Powershell (http://msdn.microsoft.com/en-us/library/azure/dn771718.aspx).
Regards,
Will
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Authentication for multiple services

Similar Messages

Maybe you are looking for