Authentication issue with Xcelsius/Portal integration

I am facing an issue with the way we have integrated our Xcelsius dashboard with our corporate portal. I know this probably is more of a SDK question than Administration, but I figured I will ask it here anyway since Tim and some others are diverse enough in their knowledge base. This might be LONG post but please advise if anyone has any good pointers.
We have an Xcelsius dashboard that needs to be served up via our corporate intranet (based on MS Sharepoint 2007). Now we are NOT using the MS Sharepoint Portal Integration Kit, but just doing a basic integration of the SWF call within a web part on Sharepoint. All this means is that within a portlet (web-part) on Sharepoint, I am making a HTTP call to the openDocument URL to invoke the SWF file. So the SWF is actually served up from our Tomcat App Server, and displayed onto this frame within the portal. That is the basic idea.
To achieve this, what I did was write some custom code using the Java SDK to modify the openDocument a little bit. By doing so, I was able to insert some behind-the-scenes-login code wherein no matter who the portal user (Win AD-based) is, he is logged in to BOE as a generic "dashboard-user" and the dashboard is served up. This worked fine for the first dashboard where all we had was SWF and some WebI linking using openDocument (no full-InfoView access).
But in this second dashboard now, what we also have is a hyperlink for users to get to InfoView to do Ad-hoc reporting. What this does is open a child browser window from within the portal (dashboard) --- and it remembers the BOE session for the generic user id "dashboard-user" and logs the end-user in to InfoView using that. But what I actually want is that the end-users, on this new window, should only be prompted at the traditional InfoView logon screen where they can manually enter their Windows AD password and get in. Thus, I would like to keep the dashboard SWF page session separate from the InfoView ad-hoc session, which I cannot seem to do because of the browser relationship and session maintenance.
I am trying to find a way where I can simulate a single sign-on for dashboard viewers on the portal, but at the same time let them jump off to InfoView as themselves.
Any thoughts on how I can do this?
Notes:
We DO NOT have Single Sign-On enabled for InfoView
We are using Windows AD authentication (manual, no SSO)
We are on Tomcat

Sarang Deshpande wrote:
1) If the InfoView app on Tomcat (desktoplaunch) is configured with Vintela, openDocument calls from the portal with automatically work using behind the scenes SSO, correct?
in XIR2 everything that falls under infoview should SSO when infoview is setup for SSO (not the case in XI 3.x)
Sarang Deshpande wrote:
2) What is the best practice when it comes to the service accounts needed? I have implemented Windows AD manual auth already so I have a service account that use for that. Should I be using the same on and making vintela/SSO-specific changes to it...or should I have a separate vintela service account and deal with two different ones..each for a diff purpose?
There is no best practice per se but the less service account the lower your chances to duplicate an SPN, functionally everything seems to work just as well with multiple as it does with 1 (of course with 1 there is less management work) If you click the SSO link in my forum sticky post I have a section explaining this with some suggested methods of deploying a service account(s)
Sarang Deshpande wrote:
3) Other than some minor browser configurations that might be required, is there anything else that I should communicate to the team about what might be required to be "pushed" to users' PCs?
Using the default config nothing should be required on the client machine (unless SSO has been disabled in the browser or you intend to use a url that contains a period ..... (i.e. FQDN or IP) with hostname URL (the default) it should just work.
To note if you have XP SP2 or older there is a microsoft spnego bug you may need to apply a fix if you aren't patched to SP3 (about 5% of our customers run into this).
Regards,
Tim

Similar Messages

  • ACS 5.2 Authentication Issue with Local & Global ADs

    Hi I am facing authentication issue with ACS 5.2. Below is AAA flow (EAP-TLS),
    - Wireless Users >> Cisco WLC >> ADs <-- everything OK
    - Wireless Users >> Cisco WLC >> ACS 5.2 >> ADs <-- problem
    Last time I tested with ACS, it worked but didn't do migration as there'll be changes from ADs.
    Now my customer wants ACS migration by creating new Group in AD, I also update ACS config.
    For the user from the old group, authentication is ok.
    For the user from the new group, authentication fails. With subject not found error, showing the user is from the old group.
    Seems like ACS is querying from old records (own cache or database). Already restared the ACS but still the same error.
    Can anyone advice to troubleshoot the issue?
    Note: My customer can only access their local ADs (trusted by Global ADs). Local ADs & ACS are in the same network, ACS should go to local AD first.
    How can we check or make sure it?
    Thanks ahead,
    Ye

    Hello,
    There is an enhacement request open already:
    http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCte92062
    ACS should be able to query only desired DCs
    Symptom:
    Currently on 5.0 and 5.1, the ACS queries the  DNS with the domain, in order to get a list of all the DCs in the domain  and then tries to communicate with all of them.If the connection to even one DC fails, then the ACS connection to the domain is declared as failed.A lot of customers are asking for a change on this behavior.
    It  should be possible to define which DCs to contact and/or make ACS to  interpret  DNS Resource Records Registered by the Active Directory  Domain Controller to facilitate the location of domain controllers.  Active Directory uses service locator, or SRV, records. An SRV record is  a new type of DNS record described in RFC 2782, and is used to identify  services located on a Transmission Control Protocol/Internet Protocol  (TCP/IP) network.
    Conditions:
    Domain with multiple DCs were some are not accessible from the ACS due to security/geographic constraints.
    Workaround:
    Make sure ALL DCs are UP and reachable from the ACS.
    At the moment, we cannot determine which Domain Controller on the AD the ACS will contact. The enhacement request will include a feature on which we can specify the appropriate the Domain Controllers the ACS should contact on a AD Domain.
    Hope this clarifies it.
    Regards.

  • User log in issue with Xcelsius SWF file

    HI,
    I am using the BI as source to  BO. Xcelsius dashboard is using webi data by live office.
    I have exported the xcelsius in  swf file &  ppt format.
    i am using the credentials user name, password  and authentication as SAP.
    I have the roles which are created in BI and imported to BO and the roles have users in BI , which came by default to BO.
    Now I have created the new users in BI with initial password. I cant login to infoview or swf until i change the initial password in BI and thn with new password i can log in to BO. I understood this concept.
    But confusing part is after changing to new password in BI, i can be able to log in to swf or PPT but not fetching latest data from data base.
    if i log on first into infoview , thn i can be able to log onto swf file or PPT correctly and access the latest data.
    If i directly access the ppt file , i get 'failed to get the document information. lo 26315". But if i login to infoview first then to swf or ppt i wont get any problem.
    The problem is,  users are access the dashboard file from ppt and pdf. So , is there any work around that, the new user can directly access the data from swf or ppt, without entering the infoview???

    Hi sapbi83 ,
    May i Know which connection you are using for fetching data into xcelsius, is it LO(Live Office) or Qaaws
    if it is Live Office  then what is the refresh property  set for live office object? and how many live office objects or how many qaaws connection u are using.?
    provide the answe of all the above question, i'll be able to help you and Infoview has nothing to do it with the real time data connectivity. the dashboard is completely dependent on the connections used to get data into the xcelsius, if the error is coming in PPT or PDF standalone then there is some issue with the connection used in xcelsius, just let me know the answer of all the above questions.

  • SAP Authentication issue in Xcelsius 2008 SP4

    Ingo Can you help me?
    Xcelsius 2008 SP4 Failed to Open/Save from BusinessObjects Enterprise and throws an error Failed While Trying to Logon User "0000" RFC error: "LOGON_DATA_INCOMPLETE" when using SAP Authentication.
    It works perfect with Enterprise.
    Recently we have upgraded from Xcelsius 2008 SP3 FP 3.5 to Xcelsius 2008 SP4. It also displays the password without encrypting.
    BOE 3.1 Sp3
    Integration Kit SP3Fix Pack 3.2
    SAP GUI 720
    Xcelsius 2008 SP4
    It was working good with SAP Authentication when using Xcelsius 2008 SP3 FP3.5
    Thanks
    Dais

    Hi,
    As a starting point, i would strongly recommend you standardise all your component versions.
    from what i can see, you've just asserted that Server, Integration Kit, and Client  are all on different Fix levels..
    that's not a nice baseline on which to investigate!  
    Also, patching would also include importing the correct SAP Transports into your BW. (they change almost every FP)
    Regards,
    H
    Edited by: Henry Banks on Feb 10, 2012 4:00 PM

  • Xcelsius Portal Integration kit for Sharepoint not showing in the gallary

    Hi Experts,
    I am testing the Xcelsius in my organization. After creating a dashboard , I am trying to integrate it in my Sharepoint portal.
    For that I installed SP webpart container in the server. During installation it was not showing any wizard to me for selecting the options. After installation , i am trying to configure it in the webpart galary but ! couln't find the Xcelsius Webpart container in that list.
    What to do to show it ? Could anyone guide me ?
    Regards,
    Jyothi

    i'm not sure how it works with Sharepoint... however, i can tell you how we use the portal integration kit within WebSphere Portal.
    first, the PIK itself is only used for BO integration, not Xcelsius integration (unless you are doing SSO in which case the BO login module is required).
    the Xcelsius integration comes from creating the web parts on the client. For example, for WebSphere there is a tool that is loaded onto the client machine called "XcelsiusPortletCreationUtility". the purpose of this utility is to take a swf file and wrap it in a war file that can be deployed to the portal. i would assume that  Sharepoint works in a similar way with a client utility.
    also, within the Xcelsius file you must create a portal data connection, even if it's not actually used.
    please look through your Xcelsius documentation or try to find the specific document that explains Sharepoint integration.

  • Issue with Office 365 integration module

    I have an issue with the Office 365 integration module on one of my customer's Windows Server 2012 Essentials servers.
    Recently they switched to a new Office 365 plan, but the integration module still thinks the customer is on the old plan. This doesn't seem to affect functionality at all, so I think it's just cosmetic. On the Office 365 tab of the Windows Server Essentials
    dashboard, under Subscription it lists the old plan and says the subscription has expired. Under Licenses it says "your subscription includes 0 licenses" and "0 licenses are assigned to user accounts."
    Steps I've tried to resolve this issue:
    Created a new Office 365 test user account (after switching plans) and then on the Windows Server 2012 Essentials dashboard clicked 'Change the Office 365 administrator account.' This made no difference.
    Uninstalled and then reinstalled the Office 365 integration module. Again, this made no difference.
    I suspected there might be an issue in the Office 365 back-end, where the customer's Office 365 account was somehow still associated with the old plan, but they said that wasn't the case.
    I opened a service request with Office 365 support about the issue with the server dashboard, but this was their response: "As we are online service support team, we provide limited support on local application extension...you may need to contact the
    Windows Server support team for further help."
    As it seems to be just a cosmetic issue, I'm not going to open a paid service request with the Windows Server support team, but I'm interested to know if anyone on the forum has struck this issue before or has any suggestions.

    Not seen this issue myself, you may be right in that it Is just a cosmetic issue, and I would be surprised if a fix was forthcoming even if you opened a case (or we opened a case for you) due to resources having shifted to the Windows 10.
    You could grab the OIM logs from programdata\windowsserver\logs and we can see if there is anything obvious in there.
    Robert Pearman SBS MVP
    itauthority.co.uk |
    Title(Required)
    Facebook |
    Twitter |
    Linked in |
    Google+

  • Issue with SIEBEL - XI Integration with SOAP

    Hi,
    I have an issue with the integration of SIEBEL and XI via SOAP.
    In the scenario Siebel calls a synch Web Service on XI. The provided WSDL was implemented on Siebel and when Siebel calls the Web Service the message is received correctly by the XI SOAP Sender Adapter and I can see the message in the Message Monitoring (SXMB_MONI).
    The issue is during the mapping as the payload does not seem to comply with the structure XI expects in the message interface. When I load the payload of the SOAP Request send by Siebel into the Message Mapping Test Tool, all fields below the Message Type are in red. I found out that the problem lies in the way the namespace is addressed.
    The payload I receive from Siebel that is not working in the mapping looks like this:
      <?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
    - <MT_KUNDE_CRM xmlns="http://www.xyz.de/ariva/Kunden" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    - <KUNDE>
    - <Account>
      <CRM_Account_ID>1-S3YU</CRM_Account_ID>
      <Customer_Segment>Other Account</Customer_Segment>
      <Target_Market>Other Markets</Target_Market>
      <Currency>DEM</Currency>
      <Inactive_Account>N</Inactive_Account>
      <Country />
      <Account_Name>ATK Test Company 1</Account_Name>
      </Account>
    - <Account_Address>
      <Country>England</Country>
      </Account_Address>
      </KUNDE>
      </MT_KUNDE_CRM>
    The structure that works looks like this:
      <?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
    - <kun:MT_KUNDE_CRM xmlns:kun="http://www.xyz.de/ariva/Kunden" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
    - <KUNDE>
    - <Account>
      <CRM_Account_ID>1-S3YU</CRM_Account_ID>
      <Customer_Segment>Other Account</Customer_Segment>
      <Target_Market>Other Markets</Target_Market>
      <Currency>DEM</Currency>
      <Inactive_Account>N</Inactive_Account>
      <Country />
      <Account_Name>ATK Test Company 1</Account_Name>
      </Account>
    - <Account_Address>
      <Country>England</Country>
      </Account_Address>
      </KUNDE>
      </kun:MT_KUNDE_CRM>
    The ony difference between the two is that the second messages uses a prefix (kun) for the namespace while the first does not use it, although it is correct from an XML syntax perspective.
    Can anybody help?
    Thanks in advance.
    Alex

    Hi
    Why don't you try and create a schema (XSD) which will prefix kun to the input, instead of using the message type created by XI.
    Just a suggestion.
    regards
    Sameer

  • LMS 3.2 : issue with custom portal : high CPU

    Hi,
    Customer has a big issue with LMS.
    When he connects to the standard portal, it works fine.
    pdshow seems ok.
    But when he wants to work with custom portal (portal.jpg), it makes a long time to display information and when he wants select something it hangs.
    CPU is very high. He must stoped/restart LMS to have a normal CPU.
    I asked him to :
    - restart LMS, he made at 14h30
    - CPU was ok and he worked with standard portal withou problems but when he tried to put debug for portal CPU increase at 15h30:
    Common Services -> server -> Admin ->  CS Log Configurations: debug on CiscoWorks Portal, CiscoWorks portlets and CS Home
    Process which takes a lot of CPU is tomcat, you will find pdshow.txt, stdout.log and stderr.log.
    He tries to go to the custom portal but it hangs, you will find logs from debug : CSHomePage.log and CSPortal.log
    he sent me AAD.log because there was " high severity alert".
    Many thanks for your help,
    Elisabeth

    The most obvious problem is that DfmBroker is down.  Check to make sure tcp/9002 is not in user, then try a server reboot.  See if the AAD problems go away (and perhaps the CPU problem will as well).  If not, post the NMSROOT/objects/local/logs/broker.log.

  • IE11 Issues with sap portal

    Hi,
        I am getting compatibility issues in IE11 with SAP portal....I have followed the procedure to set compatibility view(tools-->compatibility view Settings...)..but the issue hasn't been solved.....I am getting this error...the application
    was stopped due to critical error rendering....activate compatibility mode....could anybody tell me what are the different ways to activate compatibility mode in IE11
    Thanks...

    Unfortunately your post is off topic as it's not specific to Microsoft Training and Certification.  
    This is a standard response I’ve written in advance to help the many people who post their question in this forum in error, but please don’t ignore it.  The links I provide below will help you determine the right forum to ask your question
    in.
    For technical issues with Microsoft products that you would run into as an end user, please visit the Microsoft Answers forum ( http://answers.microsoft.com ) which has sections for Windows, Hotmail,
    Office, IE, and other products.
    For Technical issues with Microsoft products that you might have as an IT professional (like technical installation issues, or other IT issues), please head to the TechNet Discussion forums at http://social.technet.microsoft.com/forums/en-us, and
    search for your product name.
    For issues with products you might have as a Developer (like how to talk to APIs, what version of software do what, or other developer issues), please head to the MSDN discussion forums at http://social.msdn.microsoft.com/forums/en-us, and
    search for your product or issue.
    If you’re asking a question particularly about one of the Microsoft Dynamics products, a great place to start is here: http://community.dynamics.com/ 
    If you think your issue is related to Microsoft Training and Certification and I've flagged it as Off-topic, I apologise.  Please repost your question and include as much detail as possible about your problem so that someone can assist you further. 
    If you really have no idea where to post your question please visit the Where is the forum for…? forum http://social.msdn.microsoft.com/forums/en-us/whatforum/ 
    When you see answers and helpful posts, please click Vote As Helpful,
    Propose As Answer, and/or Mark As Answer
    Jeff Wharton
    MSysDev (C.Sturt), MDbDsgnMgt (C.Sturt), MCT, MCSE: Data Platform & Business Intelligence
    Blog: Mr. Wharty's Ramblings
    Twitter: @Mr_Wharty
    MC ID:
    Microsoft Transcript

  • SMTP relay authentication issue with DynDNS MailHop Outbound

    Hi,
    I'm trying to use the SMTP relay functionality of my OS X Server but I get following log message:
    Apr 4 21:40:21 mydomain postfix/smtp[7629]: 4EE3686F529: to=<xxxx@xxxxx>, relay=outbound.mailhop.org[204.13.248.71]:465, delay=140731, delays=140130/0.06/600/0, dsn=4.4.2, status=deferred (conversation with outbound.mailhop.org[204.13.248.71] timed out while receiving the initial server greeting)
    I configured the relay settings in Server-Admin for host: outbound.mailhop.org:465 and added my dyndns username and password.
    I would appreciate if someone could help me to figure out what I'm missing.
    Thanks

    If you're getting a 550 error then it indicates an issue with the SMTP server you're using / how you're connecting to it. Either the mail server you've got configured for SMTP isn't setup to handle email for you, or in addition to setting the server address
    in the SMTP settings, you also need to configure it to configure authentication on the email accounts. In the account settings you need to select More settings (I think, I don't have an Outlook 2007 copy to check on), then you'll see an Outgoing
    Server tab, within which you can configure the required authentication. It will either be the same as the POP3 login, in which case you can select "Use same settings as my incoming mail server", or if they're different you can enter the specific details that
    are required to send.

  • HR Renewal Self Services Integration Issue with SAP Portal

    Hi,
    We are  Implementing  HR Renewal 2.0 FP1 and the Self-Services Landing Page to be launched from within SAP Portal.
    I have imported the PFCG role ZSAP_EMPLOYEE_ESS_XX_UI5_1  into portal and assigned to the user. The End User read permission is provided.
    We see the landing page with all lanes coming up fine when launched from portal. But subsequently when we click on the SAPUI5 delivered applications in the MY INFO Lane like Employee Profile, Salary Statement, Leave Application etc, they open from inside the portal in a new window via the below Standard Launchpad Start URL application
    /irj/portal?NavigationTarget=ROLES%3A%2F%2Fportal_content%2Fcom.sap.pct%2Fevery_user%2Fcom.sap.pct.erp.common.bp_folder%2Fcom.sap.pct.erp.common.roles%2Fcom.sap.pct.erp.common.erp_common%2Fcom.sap.pct.erp.common.lpd_start_url&RequestMethod=GET&System=SAP_HCM_PROXY&URLTemplate=<System.wap.WAS.protocol>%3A%2F%2F<System.wap.WAS.hostname><System.wap.WAS.path>%2Fsap%2Fbc%2Fui5_ui5%2Fsap%2FHRESS_PAYSLIP_G%2Findex.html%3Fsap-client%3D<System.client>%26sap-language%3DEN&PrevNavTarget=navurl%3A%2F%2F9302a2e5cab6590e376f9e6a16fffb13&NavMode=3&CurrentWindowId=WID1411300030322
    and getting the below error.
    Page not found. Refresh the page or try again later. If the problem persists, contact your Portal administrator for assistance
    Is any other configurations missing to launch the my info individual service application via portal as NavigationTarget.
    Appreciate your response.
    PS: No business packages (WD ABAP based etc.,) are installed in the portal side.
    Thanks,
    Urmi

    Hi All,
    The issue got fixed after installing the portal business package, Common Parts ERP 1.61.
    Thanks,
    Urmi

  • Issue with Crystal Report integration with SAP Portal

    Hi,
      Crystal Report using Crystal Reports 2008 trail version is created.This .rpt file is present on my desktop and I would like this report to be published on SAP Portal.Can anyone please let me know steps to do so?
    Regards,
    Madhu.

    You need to install SAP integration kit. There are some configurations you need to do.Please go through the below URLs for more details:
    [http://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a00ee3b2-5283-2b10-f1bf-8c6413e0898f;jsessionid=(J2EE3414800)ID0872910550DB10406683879540656926End]
    [http://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/004aacbb-4983-2b10-8da7-cdff5dcbb948;jsessionid=(J2EE3414800)ID0872910550DB10406683879540656926End]
    Publishing:
    [http://www.sdn.sap.com/irj/scn/weblogs;jsessionid=(J2EE3414800)ID0872910550DB10406683879540656926End?blog=/pub/wlg/11144]
    [http://www.sdn.sap.com/irj/scn/weblogs;jsessionid=(J2EE3414800)ID0872910550DB10406683879540656926End?blog=/pub/wlg/11146]
    [http://www.sdn.sap.com/irj/scn/weblogs;jsessionid=(J2EE3414800)ID0872910550DB10406683879540656926End?blog=/pub/wlg/11147]
    Hope this helps!!!

  • Issue with EP KM integration with Business Objects

    Hi,
    We have integrated BOBJ with EP KM and are able to view the Business object repository (Inbox, MyFavorites & Root Folder) in KM.
    The issue is when a webi document is added to My Favourites in Business object Infoview, the same is not reflecting in the EP KM. It takes around 30 mins to show the latest content in KM
    Any clue on this.? While configuring BOBJ repository manager in KM, we dont specify any cache or pull mechanism to fetch the latest webi documents from BOBJ. Am I missing some configuration from portal end.?
    Thanks,
    Siva

    Any clue on this. I am still facing this issue and haven't got any work around.

  • Custom Authentication Issue with Policy Agent

    Hi,
    I have a custom authentication module which is hosted on the BEA application server and I am trying to access through the policy agent on apache.
    I have set the following property in AMAgent.properties file
    com.sun.am.policy.am.loginURL= http://host:port/amserver/UI/Login
    So When the user requests a protected resource, the policy agent forwards the user to Identity Server with the module as CustomLoginModule. However, after this, authentication is succeed, user sesion is being created and I get the following error message in the agent log file.
    2004-10-19 16:20:26.908 Error 27620:e1140 PolicyEngine: am_policy_evaluate: InternalException in Service::construct_auth_svc with error message:Application authentication failed during service creation. and code:3
    2004-10-19 16:20:26.908 128 27620:e1140 RemoteLog: User unknown was denied access to http://hostname:port/weblogic/protapp/protected/a.html.
    2004-10-19 16:20:26.908 Error 27620:e1140 LogService: LogService::logMessage() loggedBy SSOTokenID is invalid.
    2004-10-19 16:20:26.909 Error 27620:e1140 all: am_log_vlog() failed with status AM_REMOTE_LOG_FAILURE.
    2004-10-19 16:20:26.909 -1 27620:e1140 PolicyAgent: URL Access Agent: access denied to unknown user
    The necessary policy object is already created in Identity Server. Please send your suggestions to fix this problem.
    Thanks
    Neeraj

    Hi Neeraj,
    I still have not been able to resolve that issue. Let me know If you find a solution for the same.
    Thanks,
    Srinivas

  • Language setting issue with Xcelsius 2008 - Web Service NW BI

    French language is set during Xcelsius installation.
    In Xcelsius, English is always set as the preference language.
    With Web Service NW BI, I get text data returned in French.
    English is also defined as  default language in SAP BW BI .
    I would like to get text data in English.
    I don't get this situation when executing the same dashboard in an another PC with only english installation.
    Can someone could explain to me how to solve this issue ?
    Thanks in advance
    Mai

    Hi Sana,
    You might be using Flex 3 sdk library files.
    Just check in Properies of your Flex project -> Flex Build Path -> Library Path .
    You might get the library files as Flex 3.*
    If it is the case then change it to Flex 2.0.1 Hotfix 3.
    now create a new project and compile your application and use the same swf.
    Otherwise try to import any existing Flex 2 project folder with compiler flex 2 ver. then try the same swf in your xcelsius application.
    Regards,
    Vivek

Maybe you are looking for