BSP Application: Entering User Credentials again

Hi all,
We are having a BSP application in our Portal and all the related settings of the UserMapping and System creation have been done properly.
Even after performing the UserMapping, when we run that BSP iview , it prompts a dialog box to enter the UserId and Password ( of R/3) .
Why is it not taking the same UserId/psswd assigned in UserMapping ?
How can I stop this Prompt Window .. where I enter the user(r/3) details again .. ?
awaiting for your valuable inputs..
Thnx,
NR

After UserMapping you can add the user name & pwd to BSP URl as below:
http://<host_name>:port/sap/bc/bsp/your_bsp_application_url.htm?sap-user=<sap log on id>&sap-password=<passwrod>&sap-client=<client no>
This will avoid the logon pop-up.But here pwd can been seen by others.
* Reward each useful answer
Raja T
Message was edited by:
Raja Thangamani

Similar Messages

HAP_Document BSP Application "Enter Objective Here "

HI All BSP Expert and PMS Expert.
BSP Standard application "HAP_DOCUMENT" Copy as a Z application. In Standard application "Enter Objective Here" Coming As Label but In Z Application i had changed as Input Field , That Input Field Values it Does not save to R/3 System.
So , Please it is urgent , Suggest me How to save that value to R/3 System.
IF you have any document Related To this Query Please Mail Me.
id : pappu21198mehta @ gmail.com
Thanks & Regard.
Pappu Mehta.

No need to email you the document related to this query. You can find it right [here|http://wiki.sdn.sap.com/wiki/display/HOME/Rules%20of%20Engagement?bc=true].
Cheers
Graham Robbo

BSP Application Login : User Authentication

Hi All,
We have a particular BSP application which we want to open up to the world without any authorization checks/password entries etc. Anybody who knows the URL should be able to access the link without any restrictions. But when I try to access the link it pops me up a logon pad. I am sure this is not from my BSP code. What are the steps I need to take to make sure users dont have to go through without needing to log in?
Any pointers will be greatly appreciated.
Regards,
Karthik

Hello Karthik Boyapalli ,
You can achieve this functionality by giving the logon information in the BSP service directly in Trabnsaction SICF and then navigating to the path sap->bc->bsp-><bspname>. If this is the case then all the users who access this BSP will be logged in with user that is mentioned on that BSP service.
Hope this helps.
Thanks,
Greetson

How to add a BSP application to user role

What is the procedure to add a custom 'Zbsp' BSP application to the user role in PFCG Transaction code ?
When we add a transaction or report. it is working fine.
Please Suggest to add BSP application by defining required parameters

Hi Raja,
The BSP application which i have created used to access a custom based abap program by means of Ztransaction or Z internet service.
In SRM, I want to assign this BSP application page which has link to the abap program to SUS suppliers portal page . i.e add to the particular user role.
When i try to add this application to the user role in PFCG , it asks for the parameters action-id menu no and controller name.
These are all used in the standard BSP appliaction say SRMSUS bsp application..
Suggest what values should i give it to access this BSP application to the particular user role..
If you have questions in my requirement, do ask me.
Thanks in advance

Authenticate BSP application using LDAP

Hi,
Thanks to Durai Raja for his earlier inputs in setting up LDAP connector in SAP. We were able to connect to our LDAP from SAP ( We use Novell eDirectory 8.5).
I also wrote a small program as below and I am getting back results from LDAP. We want to build BSP application where users would enter LDAP User ID and password and we want to Authenticate BSP application based on this input. My questions are
1) Is it possible to Authenticate BSP application based on LDAP user ID and password.
2) IF so, what is the function module to use. I searched LDAP_* but did not find anything.
3) If we authenticate using LDAP user ID and password, do we have to provide SAP User id and password in SICF and allow all users to log in using same SAP user ID and password ?
Niranjan
data: dns_out type table of ldap_dnii,
      ldapinfo type ldap_dnii,
      attrs_io type table of ldap_atii.
call function 'LDAP_SIMPLEBIND'
exporting
    serverid = 'HQLDAP'.   " Logical Server ID set in LDAP tcode
if sy-subrc eq 0.
call function 'LDAP_SEARCH'
    exporting
      base     = 'o=xxxxxxxx' " Company's Base
      filter   = 'uid=xxxxxxxx' " Novell User ID or LDAP user ID
    tables
      dns_out = dns_out
      attrs_io = attrs_io.
if sy-subrc eq 0.
    loop at dns_out into ldapinfo.
    endloop.
endif.
endif.

Thanks Raja for your inputs. This is our requirement.
We have about 350 SAP Users and about 700 Novell Users (computers). We want to provide Employee Personnel Information like Vacation details, Savings/Insurance details in BSP application. But half of them cannot access because they don't have access to SAP. We cannot give access to all of them since we have only 400 licenses. So, we were thinking to Authenticate against Novell Used ID and password and show them their personnel details. We have a mapping between Novell Used ID and SAP HR Empl # and so we can easily get their information. So, we want users to authenticate using Novell Used ID and password (each Novell user ID is mapped as LDAP ID) and, if it is successful, show their personnel details.
How can we achieve this ?
Niranjan

Passing Windows User Credentials into AnyConnect

Hello again,
we've configured our ASA to use AAA-Authentication against a Microsoft RADIUS Server which authenticates against Active Directory.
Every Time we want to connect via VPN, the Users get prompted for their Active Directory Credentials by AnyConnect.
Is there a way to directly pass their Windows Credentials (which are the same) into AnyConnect so they wont't have to enter their credentials again (once into the OS, once into AnyConnect)? I noticed that the Windows-integrated VPN Client provides this function, so I thought there might be a chance that AnyConnect will support this too.
Thanks and kind regards

not sure if SSO is what you need, with NAM
http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect30/administration/guide/ac04namconfig.html
Sent from Cisco Technical Support iPad App

User NOT able to login again to BSP application after logging off

Hi Experts,
What the user is doing?
Step 1: User logged into BSP Application. Result: Successful login
Step 2: User logged off from BSP Application. Result: Successful log off
Step 3. User again tries to log into BSP Application with correct login credentials. Result : LOGIN FAILURE
What is being displayed onto the screen after step 3?
1. Login screen does not changes.
2. It does not show any error/warning messages.
3. Next screen, after login screen is NOT being displayed.
What the user does next?
User is deleting all the cookies & cache, and again trying to log into BSP application. Result : Successful login
Question:
Everytime, the user logs off from the BSP application, and again tries to login, he/she is NOT able to login without clearing the cookies and cache.
First, the user has to clear cookies and cache, then ONLY he/she is able login.
Can you please advice on this?
Response will be highly appreciated.
Regards,
Mandar

Hi,
Refer http://help.sap.com/saphelp_nw04/helpdata/en/6b/9d91d062cc52419f23926ff1bf2ad3/content.htm
BSP Application Login/Logoff and http://wiki.sdn.sap.com/wiki/display/BSP/Logon
This may be helpful for your issue.
Thanks,
Chandra

How do you stop BSPs on WebSEAL for asking for user-credentials?

Hi
We are currently having an issue with BSP Pages. When we test the BSP pages on the R/3 system they work OK. When we test them directly on the Portal then they too also work. The problem is that they are not working properly on our Intranet.
The intranet that we use is an IBM Tivoli product (also known as WebSEAL). We currently have WebSEAL SSO to our SAP Portal. This is working OK. When we use WebSEAL to access the portal we are prompted to enter our user-id and password so that the BSP page can be displayed. This should not be happening and it defeats the purpose of SSO. I have attached a screen shot document to demonstate this.
Some time ago we had a similar issue where the transactions on the portal (when executed from WebSEAL) were giving us a Webdynpro time-out error. I later determined that the cookie information was not being passed to WebSEAL. To fix this, I went to the Visual Administrator and went to server >> services >> web container and for the web container "sap.com/irj" I went to the cookie configuration to add a session cookie. By doing this I fixed my previous problem.
Coming back to my problem, I had a junction created in WebSEAL to point to the bsp directory (sap/bc/sap/bsp/*) on the host concerned. I had both a SSL and TCP junction created both resulted in error messages - stating that the client (SAP) is asking for user credentials.
Hoping that I have provided enough information above my question is as follows:
(1) How can I get the BSP messages to work on WebSEAL such that it will not ask for user credentials to be entered? Would this involve making a further change to a Web Container? If so - which container also needs a session cookie to be generated?
Thanks
Kind Regards
Rajdeep Kumar

Hi Peter
I am having an issue with the re-direct and am hoping you might be able to provide a little assistance. If not then not to worry.
My security department have logged a call with IBM 2 days ago yet have not received any response.
In your document you mention that you need to have a junction to AS-JAVA and a junction to AS-ABAP.
We have created the junctions "/sapep" (for AS-JAVA) and "saphr1" (for AS-ABAP).
The junction /sapep" also contains the junction mapping entries "/irj/" and "/SSOTicket/".
The direct URL to the hidden image is : https://uadsfi01.auiag.corp:53001/SSOTicket/1x1.gif. I have tested this (using my user id and password) and it works OK.
When testing the image through TAM (https://test.insideiaghome.iaglimited.net/sapep/SSOTicket/1x1.gif) we get an "unexpected authentication challenge"
I have reviewed the log below and it seems that we are having an authentication issue with the image:
==(START OF LOG)==
2008-06-16-19:59:58.365+10:00I----- thread(136) trace.pdweb.debug:2 /sand/cholt/laura_amweb510_11LA/src/pdweb/wand/wand/log.c:309: -
PD ===> BackEnd -
Thread_ID:52943
GET /SSOTicket/1x1.gif HTTP/1.1
via: HTTP/1.1 uattam01:443
host: uadsfi01.auiag.corp:53001
user-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; MS-RTC LM 8; .NET CLR 2.0.50727)
iv_server_name: uatin1-webseald-uattam01
accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, /
iagsapid: 52975
accept-language: en-au
referer: https://test.insideiaghome.iaglimited.net/sapabap.html
connection: close
iv-user: s52975
2008-06-16-19:59:58.373+10:00I----- thread(136) trace.pdweb.debug:2 /sand/cholt/laura_amweb510_11LA/src/pdweb/wand/wand/log.c:309: -
PD <=== BackEnd -
Thread_ID:52943
HTTP/1.1 401 Unauthorized
content-type: text/html
date: Mon, 16 Jun 2008 09:59:58 GMT
cache-control: no-cache
content-length: 1787
www-authenticate: Basic realm="Upload Protected Area"
server: SAP J2EE Engine/7.00
expires: 0
pragma: no-cache
connection: close
==(END OF LOG)==
When logging into the SAP Portal directly general user ids have no problem accessing this (Non-Administrator portal users), however through Tivoli it is causing an issue.
Do you know what may be causing this issue?
Thanks in advance for any assistance you can offer.
Kind Regards
Rajdeep Kumar

User switch scenario involving BSP application

Hi
I am new to BSP application design. We have requirement from a BSP application wherein different sales force personnel need to see different segments of same data on the BSP application - owing to security requirements. We are thinking of using a default user and then user switch to specific SAP reference user ( based on maybe their windows logon credentials within the BSP application - each reference will have a security that has authorization to see a particular segment of data for a group of sales force people.
Is this approach ok ( of switching user from default to specific reference user and having a reference user as the representative user for each sales force group ) ? Any thoughts/suggestions on experiences that can be shared here to architect this scenario would be highly appreciated.

Hi,
you can do this. Therefore you have to setup an use the nodes via sicf. User switch involves also
a new registration with authorization. You can lok at bsp application SYSTEM for that.
On the otherhand: build role via Profile generator: TXN PFCG and do authorization checks as you do
it in SAPGui Dynpro Programmining. Why not. We have build big applications with many user roles
using this approach.
The first ones makes only sense, when you have a public area using a public user. Therefore you enter the public account in thze right sicf nodes.
Best regards,
Stefan

Data entered by ITS application partly not available at BSP application

Environment:
We have an old ITS application to enter absences and presences to SAP HR.
And we have a new BSP application to delete absences and presences.
Both applications are available for the employee in an employee self service, that has an navigation developed with BSP.
Problem:
All data entered with the ITS application, could not be deleted in the BSP application, if the user does not log off. Or until he deletes one dataset, that he did not entered after the current login. If he deleted one old dataset, all new datasets can also be deleted.
The ITS application stores the data with the function HR_MAINTAIN_MASTERDATA.
The BSP application deletes the data also with the HR_MAINTAIN_MASTERDATA function.
But its strange, that I can read the newly entered data with select from the Database or the function HR_READ_INFOTYPE. But when the users selects this dataset, the BSP class currently read, the HR_MAINTAIN_MASTERDATA cant delete, because of the message "no data in timeperiod". Even the function 'BAPI_ABSENCE_GETDETAIL' reads the data.
Seems to be some kind of buffer problem. Reading the data is possible, but trying to modify/delete does not work.
Also this did not help:
*using more commit works.
*Try to initialize buffers with the functions "HR_INITIALIZE_BUFFER", 'HR_PSBUFFER_INITIALIZE', "HRPAD00_FREE_PLOG_TAB" or "HR_PSA_CLEAR_BUFFER"
Trying to delete the absences with the function 'BAPI_ABSENCE_DELETE' instead of the HR_MAINTAIN_MASTERDATA function (without DESTINATION and with DESTINATION 'NONE').
Does anybody has an idea, why my BSP application works fine with all datasets, entered before the current login, but can not delete datasets I newly entered (but I can read them, I only cant delete them!). And what is more strange: after I delete on old dataset, then I can delete also the new datasets!

Is your provisioning profile for Development or Ad-Hoc distribution?
Also, it would help if you posted a screenshot of you target settings as well as your Info.plist file.

Download internal table from BSP application to C:\ drive of the user

Hi,
How do we download a internal table data from a BSP application to the C:\ drive of the user. Have tried GUI Download, but it doesn't work. Also don't want a pop up to appear while this is happening. The code has to there in 'OnInputProcessing' event.
Regards,
Jaison

Hi Raja,
I went through few of the blogs and wrote the below code for downloading data. My requirement is that in the InputProcessing event i need to write a subset of data to the users C:\ drive. But even after doing the below change i'm unable to get the requirement done. Can you please tell me as to what i'm missing. I'm new to BSP development and help would be highly appreciated.
if not it_messages1[] is initial.
clear wa_messages1.
loop at it_messages1 into wa_messages1.
   clear temp_string.
   concatenate wa_messages1-PROJECT wa_messages1-FILENAME.......
   into temp_string separated by CL_ABAP_CHAR_UTILITIES=>HORIZONTAL_TAB.
   concatenate main_string temp_string into main_string separated by
   CL_ABAP_CHAR_UTILITIES=>CR_LF.
endloop.
CALL FUNCTION 'SCMS_STRING_TO_XSTRING'
EXPORTING
    TEXT                 = main_string
    MIMETYPE        = 'APPLICATION/MSEXCEL;charset=utf-16le'
ENCODING       =
IMPORTING
   BUFFER         = xmain_string.
EXCEPTIONS
FAILED         = 1
OTHERS         = 2
CALL METHOD cl_bsp_utility=>download
EXPORTING
    object_s = xmain_string
    content_type = 'APPLICATION/MSEXCEL;charset=utf-16le'
    content_disposition = 'attachment;filename=test.xls'
    response = mresponse
    navigation = navigation.
Edited by: Jaison Yohannan on Jun 3, 2009 2:16 PM

User validation for the BSP application

I wanted a user to access the bsp application.
I already have the user names maintained in the database who will be using the application.
i am using the application class for my application.
where should i do the user validation and how.
i know tst if i would had used the model class then i can do it in the request method of the model class.
but where to do it when using the application class.
Thanks

Hi Din,
I assume that the usernames that are present in your Database also exists in the WAS Server.
i.e. The database has a part of users that are present in the WAS Server.
Your need is to allow only those users in the database to access your bsp application and not others correct!
If your first BSP Page is a ...
View
1.In the DO_INIT method of the Corresponding Controller Class populate the internal table that is present in the Application Class with the usernames that are present in the database.
2. In the DO_REQUEST method of the Corresponding Controller Class check for the username who runs your BSP Application is present in the Database.
You can get the username who run the bsp application using the system field...
data: username type string.
username = sy-uname.
So if the username is in the database show your bsp page else show an error page.
You can directly check for the sy-uname is present in the database.
Page with Flow Logic
It is same as MVC only thing is that method name changes...
Place the code in the DO_INIT of MVC in onCreate of Page with Flow logic.(Populate the internal table of the application class with the usernames from the database)
Place the code in the DO_REQUEST of MVC in onRequest of Page with Flow logic.(Check whether the sy-uname is present in the itab or directly in the database).
Hope it solves your problem
Regards,
Maheswaran.B

How to secure BSP applications for external users on the internet?

I posted this question under Enterprise Portal forum but got no response. I am hoping some of you experts in this area can help.
We have developed BSP applications and set them up as iViews in Enterprise Portal 6. Our portal implementation will be used by external users.
We have security concerns that the access to the BSPs allows external users direct access to the R/3 system. We were told that we should use ITS application instead of BSP application for external users.
Do any of you have any insight into how we could work around the security problem with BSP applications, or BSP applications in EP6? Your help will be greatly appreciated.

In sense they are correct as to whether it is more secure or not would have to be a call by people who are more of an expert than myself.
But I can see there point the BSP runs directly on the system and uses the system security where as the ITS is basically just an RFC call. However for us we use a 620 server with BSP's and make RFC calls to our R/3 systems thus keeping people of the R/3 directly - however we are not opened to the Internet.
If your message is answered please remember to mark it solved so others searching in the future can find the solved ones quicker - just click on the yellow star.

How user will execute the BSP application I created...

Hi,
I have created a BSP application which has various pages with flow logic.
Now to execute it I use execute icon and then I get moved to web browser.
The application is working cool.
But what I am wondering is user is not going to go to code and use excute button to execute the code.
So how can he do the execution of page ?

You have lots of options (and no generally users don't go to SE80 and launch your application from there).
1. Give out the URL to your application. Users can launch the application directly from the URL in the browser. The URL could be stored in the Browser Favorites or as a desktop icon.
2. If you use the Netweaver Portal - create a BSP iView for the application and attach it to the users' role.
3. A BSP URL can be added as a link in the SAP Easy Access Menu. Under favorites, just choose Insert Other Object
4. You can create an ABAP Transaction code. In the program under this transaction code, you could host the BSP application in an HTML Control or open it externally in a browser via CL_GUI_FRONTEND_SERVICES=>EXECUTE. It is fairly easy to create a generic ABAP program to launch BSP application and receive the application name via a Transaction Code Parameter. You can build a specfic URL to a BSP application in code using CL_BSP_RUNTIME=>CONSTRUCT_BSP_URL.

BSP application error : An internal error occurred. Please try again later.

Hi,
One of my BSP application in HR application (Talent developement) is giving error when run through portal 7.0.
Respected SICF service is already activated for the BSP application under /sap/bc/bsp/sap, but when try to test service through ECC system it display message :
Internal error : An internal error occurred. Please try again later.
Same message is displayed in Portal.
Please guide were exactly issue is lying.
Thanks & Regards,
SK

Hi,
Can anyone share pointer on this.
As this error is coming in Succession Planing in Talent Development Buss Pkg in Portal
And subsequent service for this hrrcf_start_int is not getting run properly in ECC system.
Regards,
SK

BSP Application: Entering User Credentials again

Similar Messages

Maybe you are looking for