Cannot view remote roles while in consumer portal

I have set up federated portal and tested the connection.
I cannot view remote roles, I get the following error in the default trace
SOAP Fault Exception [Actor [prmhpu46.ce.corp.com] com.sapportals.portal.prt.service.soap.exception.SoapFaultHandler] : The U
ser Authentification is not correct to access to the Portal Service com.sap.portal.prt.soap.Bridge or the service was not fou
nd.

#2#PRODUCER_BIK6R8VOZ0#com.sap.security.core.persistence.remote.CommunicationException: SOAP Fault Error (n.a) : The User
Authentification is not correct to access to the Portal Service com.sap.portal.prt.soap.Bridge or the service was not found.
        at com.sap.portal.ivs.global.roles.RemoteProducerAccessImpl.sendToRemote(RemoteProducerAccessImpl.java:438)
        at com.sap.portal.ivs.global.roles.RemoteProducerAccessImpl.checkConnectivity(RemoteProducerAccessImpl.java:210)
        at com.sap.security.core.jmx.impl.CompanyPrincipalFactory.evaluateDatasourcesToSearchFor(CompanyPrincipalFactory.java
:648)
        at com.sap.security.core.jmx.impl.CompanyPrincipalFactory.simplePrincipalSearchByDatasources(CompanyPrincipalFactory.
java:3041)
        at com.sap.security.core.jmx.impl.JmxSearchHelper.getSimpleEntitySearchResult(JmxSearchHelper.java:72)
        at com.sap.security.core.jmx.impl.JmxSearchHelper.calculateSimpleEntityTable(JmxSearchHelper.java:1025)
        at com.sap.security.core.jmx.impl.JmxServer.calculateSimpleEntityTableByDatasources(JmxServer.java:926)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:324)

Similar Messages

Reg FPN Role assignment in consumer portal

Hi Team
We are trying to implement FPN between two portals both are EP7 SP20
i followed the basic steps like
1 establishing the trust between portals
2 regestration of producer portal in consumer portal
I am able to see the roles created in producer portal in consumer portal with the help of User administration--Identity management tool
the probelm we are facing is when i assign the role in consumer portal to a user it is not getting assigned but it is getting assigned in the producer portal
pls let what i need to do inorder for the producer role to be assigned to consumer portal user
thanks in advance

Hi,
already saw this several times. Unfortuantely, it never was a FPN error. It always was human error:
Confused by the Consumer / Producer concept the Admin created the role assignment in the producer and not in the consumer.
Just check that you are really using the consumer.
If so, consider opening up an OSS message.
br,
Tobias

Remote Role assingment Issue: Federated Portal

Hi all,
I have created a Url iview, attached it to a role (in producer). In consumer I have assigned this role to "userX". But the ivew is throwing Access denied (Object(s): portal_content/ContentsToShare/TestRemoteRole/News)." this error.
User store: I have created a "userX" in producer and exported to the consumer.
Can any one help in solving this issue?
Regards
George

Hi all,
I have created a Url iview, attached it to a role (in producer). In consumer I have assigned this role to "userX". But the ivew is throwing Access denied (Object(s): portal_content/ContentsToShare/TestRemoteRole/News)." this error.
User store: I have created a "userX" in producer and exported to the consumer.
Can any one help in solving this issue?
Regards
George

How to link directly to a remotely assigned role in consumer Portal?

Hi all,
For our SRM implementation in the SAP NetWeaver Portal, we need to change the link in the emails. For example, if a user needs to approve a shopping cart, he receives an email with a link that sends him directly to the work item in the enterprise buyer.
So , we have created an iView for the Inbox of SRM. We have agreed with the customer that we change the link in the email that is being sent to a direct link to the Inbox in the Portal.
So we want the user to click on the link in the mail and to get directed to the Inbox iView in the Portal.
We use remote role assignment, so the Inbox iView is located on a producer portal. Users however, only have access to the consumer portal, where they are assigned the remote role.
My question is: How can we make a link that directs the user direclty to the remote role on the consumer Portal?
I have tried remote deltalinking, but that does not seem to work very well combined with remote role assignment. Any tip is highly appreciated and points will be awarded.
Best regards,
Jan Laros

Hi,
u need to do remote role assignment
follow this videos from elearning in sdn
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/a015fd17-c26a-2b10-e6b1-aeecb3148fa9
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/402797a4-c16a-2b10-1490-e366779500cc
Regards,
Satya.

Navigation Tag Library in Consumer Portal of Federated Portal Network

In a FPN scenario, is it possible to use the Navigation Tag Library in the consumer portal for the top level navigation? I have developed a custom top level navigation based on the navigation tag library, but when navigating to the role of the producer and back again I can no longer view the roles in the consumer portal.

Hi,
I know this was posted a long time ago, but I'm currently experiencing a similar issue in the TLN between a federated CE and EP portal. Did you manage to resolve your problem? In my case it looks like when you access the CE content from EP it cannot find its way back to EP when clicking on another link on the EP side. Looking at the logs it seems as if it's looking for the content on the CE system even though it's obviously not there.
Cheers,
Dion

Federation, remote role assignment based on ABAP roles on producer

Hi all,
We have implemented the federated portal solution for our ESS users. We use the ABAP stack of the producer portal as user store for consumer and have no problems in assigning portal roles on our consumer based on ABAP roles in the backend (displayed as groups in the portal).
Now we want to add some extra functionality (eg SRM and eRec) and we encounter some problems. These systems all have their own ABAP stack as user store. We have maintained the functional authorization model in the ABAP roles for instance in SRM. So an example:
System I: ABAP + JAVA --> ECC 6.0
Here we have the standard R/3 functionality and the producer portal (A) installed. Roles created on producer portal and assigned based on ABAP roles.
System II: JAVA --> NW 7.0 Portal
Our consumer portal (B) where we use roles created on the producer portal (A) on System I.
System III: ABAP + JAVA --> SRM
Our SRM system with SRM producer portal (C). In the ABAP stack of this sytem the functional SRM roles have been assigned to the users. We have created functional SRM Portal roles in order to use remote role assignment on consumer portal (B).
+PROBLEM+
We want to remotely assign portal roles created on the SRM Producer (C) to users on the consumer portal (B), based on the ABAP role assignment in the backend of system III. How can we achieve this in a fast and efficient way?
Looking forward to your ideas. Anything helpfull will be gladly awarded with SDN points.
Best regards,
Jan Laros

Jan,
Interesting question. Let me share my experience and hope that's of some use to you.
We started off federating corporate NetWeaver Portal (lets say B, parallel to your convention) as consumers to BI Portals (Lets say A).
- B's UME points to Active Directory
- A's UME points to BI ABAP user store
- User ids are identical in both systems
We ran into the problem of dual administration ((de)assigning portal role on both portals instead of just one) for a long time. The issue was because of different reasons at different times as we patched B's and A's. At one point we were on SP15 on both portals and we were told by SAP that RRA can be done on B for remote roles and the assignment propagates to A automatically if the following configuration is set up on both A and B.
- A's permissions are relaxed allowing "Everyone" group checked for "End User" access as per ([http://help.sap.com/saphelp_nw04s/helpdata/en/43/2236fc0b413fe1e10000000a11466f/content.htm|http://help.sap.com/saphelp_nw04s/helpdata/en/43/2236fc0b413fe1e10000000a11466f/content.htm]
However, we chose not to do the permission relaxation as enabling "Everyone" group with "End User" access can allow anyone to launch an iView (if the URL is known somehow) and the user would be able to see the layout of the iView, which can include text, etc. The user won't be able to access any data though, however, there is certain compromise on security which we decided that its not okay. So, we digressed in SAP's suggested practice because of security reasons.
Today we, manage security on B using Active Directory groups and on A using Java groups (ABAP roles).
In your case, I suggest investigating the option of relaxing the security on producer portal like in the above link. If you think its okay, all you have to do is, provision users on B by assigning remote roles from C and A.
Either my story is applicable or I must have got you totally wrong,
Kiran

FPN - error trying to lookup object - remote role assignment not working

Hello everyone,
We have implemented a Federated Portal Network connection in our landscape between our portals.
We use only remote role assignment functionality.
Everything was working fine, but since 2 days we encounter the following error in the Default trace.
Error trying to lookup object: alias: <role name>
It is possible to open the producer portal in the Portal Content Administration and also searching for the Producer portal roles is possible in User administration. But when we assign the remote role the tab is not displayed in the portal only the above mentioned error is shown in the default trace. Our portals run SP 12 and BI Java SP14.
Is there a solution or workaround for this issue ?
Martin

Hi,
I have the same issue as you, I cannot see role tabs in Consumer portal and I get the same error in the defaulttrace as you.
What did you do to resolve this issue?
Many thanks
Gordon

How to make Federated Portal Network Content available in a Consumer Portal

Hello Experts,
we have the following situation:
We have two NW 7.0 Portals: 1 Main Portal on and 1 BI-Portal
We would like to do a remote role assignment via the Federated Portal option in the Portal, so that we can make the BEX-Explorer role from the BI Portal available in our main Portal.
I've already created a connection to the BI-Portal (Producer-Portal) in "Federated Portal" and have already registered the main portal as the Consumer in the BI Portal. I used SAP Help for that:
http://help.sap.com/saphelp_nw04s/helpdata/en/67/7e70424edcc553e10000000a1550b0/frameset.htm
Now I have the problem, that I can not find the remote role from the BI Portal in the Identity Management of our main Portal? Does anybody has a idea (or maybe a solution ) how to fix this problem? The SAP Help is not very helpful, it always deals with the same notes...
Regards
Andreas
PS: Of course u can earn points!!!!

Hi
first of all i would check that the SSO is working between the two portals..
Log into one of the portal.. Change the URL to the other portal. If you have to log in, then there is a problem with your SSO. Remember to have enough permission on both the portal.
If that works, then log into the consumer portal and check what you find in the portal content of the producer portal.
Let me know the result, and I will help you further..
Best Regards
Kristoffer Engh

Error while integrating 2 portals

We are trying to set up an FPN between our EP (EP 7.0) and BI (BI 7.0) systems. We have enabled trust between the 2 systems and done all the required steps. However when we create an Iview in EP which calls a query from the BI system it asks for a used id and password. SSO has been enabled already. Connection tests are working fine. Even after providing the user id and password it gives an error "esid not found". Please help.
Regards,
Sridevi

Did you say you're making an iView on the portal system? That's not really portal federation, which is where you deploy the iViews to one portal (eg: your BI portal) and then either copy them on the other portal from the content producers folder, or do assignment of remote roles from the BI portal..

Can KM Document iView be used through Remote Role in Federated Portal?

I have a Producer Portal and a Consumer portal using Remote Role Assignment. In the same remote role, the KM Navigation iView is working fine, but the KM Document iView is giving http 400 error (The webpage cannot be found). I understand normally we should put KM on the consumer. But some of our KM document iViews are used in the roles in the BI portal, which is the producer.
I cannot find SAP document or notes that tells "If KM Document iView is supposed to work through Remote Role". If you could clarify for me, I will know if it's worthwhile to troubleshoot the issue.
Thanks,
Fubo Liu

Hi Fubo,
There are no restrictions regarding the KM documents iView in the Central Note regarding FPN: [880482|https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/oss_notes/sdn_oss_ep_pin/~form/handler%7B5f4150503d3030323030363832353030303030303031393732265f4556454e543d444953504c4159265f4e4e554d3d383830343832%7D]
So this should work fine.
Best regards,
Robert

SSO issue when Webi Iview is viewed from consumer portal

Hi,
We have our BI Portal federated to another Portal. I have a Web Intelligence report iview created in our producer Portal using Open Doc link in an URL iview. It opens perfectly fine when viewed in the producer portal. But when the same Iview is viewed from the consumer portal, SSO doesn't seem to work. I get the following error when the Iview is opened,
Account information not recognized: Logon ticket could not be validated by system BM7CLNT100. Message: TICKET_ENCODING_ERROR. Ticket/logon string: AjExMDAgAA9wb3J0YWw6UEFSQVgwMjWIABNiYXNpY2F1dGhlbnRpY2F0aW9uAQAIUEFSQVgwMjUCAAMwMDADAANF
RDcEAAwyMDEwMDkyOTE1NDIFAAQAAAAICgAIUEFSQVgwMjX/AQUwggEBBgkqhkiG9w0BBwKggfMwgfACAQExCzAJBg
UrDgMCGgUAMAsGCSqGSIb3DQEHATGB0DCBzQIBATAiMB0
xDDAKBgNVBAMTA0VENzENMAsGA1UECxMESjJFRQIBADAJBgUrDgMCGgUAoF0wGAYJKoZIhvcNAQkDMQsGCSqGSIb3D
QEHATAcBgkqhkiG9w0BCQUxDxcNMTAwOTI5MTU0MjM1WjAjBgkqhkiG9w0BCQQxFgQUcqdcKGLWYPOuXMqwm!cXEQxMX
t8wCQYHKoZIzjgEAwQvMC0CFD7tYQD9VjOPYK/!7UwY28KoWoGEAhUA5n4BVetumsFn3i!KpivWTDqlRYM=
This message appears above the BO Infoview login screen. The userid part is pre-populated with my user id.
BM7CLNT100 is our producer portal. BEx Iviews are working fine from consumer portal. Am I supposed to pass any extra application parameter? Could you please help me out with this issue?
Thanks,
Ashwin

Hi Keshari,
Thanks for the reply. Both the links you have mentioned are problems that I am not facing. I have no SSO issue in the producer portal. It logs me in and takes me directly to the Webi report. I have the error occuring only when I try to access this report from the consumer portal exposed as remote role.
This is the path it is taking.
consumer portal to producer portal (SSO) - working
producer portal to BO (SSO) - working
but consumer portal to BO through producer portal - not working
Thanks,
Ashwin

Federated Portal Language change not visible on remote role

Hi,
Remote role assigment is done on consumer portal. This remote portal role comes from a BI Producer portal.
This roles has worksets and iviews attached to it like km navigation iview etc.
User on consumer portal has options to change his language to french from default english.
Here the issue is, this language change does not reflect or apply to the remote role and its iviews or contents.(It continues to show in english) . But it works without problem o n local roles or ivews as expected.
Any idea on how this language change can be effected on the remote role and its contentc will be much appreciated.
Regards,
Ashok D

Hello Ashok,
You must remember that because this is RRA the content will actually run on the producer (unless this is an AI iView).
This means that the language will be determine according to the user's language defined on the producer itself, therefor you have to change the language of that specific user on the producer portal.
If this does not help it might be that the iView is forcing the language, then we'll have to try somehthing else.
Update me with the results of the first triage,
Also have a look at SAP Note # 1295703 under the Language category, it explains the algorithem of determining the language.
Best Regards,
Nadav.

Assign remote roles with Federated portals

Hello all,
We're trying to implement a federated Portal network using the "Implementing a Federated Portal Network" in Detail document.
The steps that we have follow successfully are:
1. Connect to the user repository (Producer and Consumer).
2. Configure system settings (Producer and Consumer).
3. Define and Configure producers (consumer).
4. Set permisions (producer).
Now we want to assign remote roles to local users in User Administration -> Proxy-to-remote Roles option. But Proxy-to-remote Roles tab doesn't appear in the second level navigation...
We are working with EP7 SP10.
Any idea?
Thanks in advance

Maybe a clue: According to the Remote Role assigment question, We have a similar problem using the Remote content copy option.
In the consumer EP, Content Administration -> Portal Content, the Netweaver Content Producers contains the producer connection icon but it's empty. So, the content share can't be done...
Now... Any idea?
Thanks!
Message was edited by:
Marta Sánchez

Last search might be inaccurate while assigning remote role

Hi everyone,
I implemented a federated portal network containing 2 portal systems. Both of them consumers and also producers of eachother.
But I have a problem during the remote role assignment. When I try to assign a role of the producer portal to a user in consumer portal, I can't find the remote role although I can see it in Content administration. When I search the remote role, it gives the message "Last search might be inaccurate".
Does anyone have an idea?
Helpful answers will be awarded with points.
Regards,
Tolga

Hi Tolga,Sreedhar,Ali
I don't know how you have configured Federated portal for getting RRA and RDL
Please go thru this documentation hope it help you solving your issues,
1. [https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/70191d1e-2bd1-2a10-d9b7-ba19500da527]
2.[https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/70191d1e-2bd1-2a10-d9b7-ba19500da527]
3.[https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/c06fe1c5-f21f-2a10-2aaf-e0e1f2fd6514]
4.[https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/408ab575-de1f-2a10-4d89-981de66ed2e7]
5.[https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a03376e4-9da4-2a10-158c-e29acba3ed63]
6.[http://help.sap.com/saphelp_nw04s/helpdata/en/89/f9ed428ccd5604e10000000a155106/frameset.htm]
Let me know if you still face the problem.
Points if helpful
Regards
Vijai

How do assign the user of Consumer Portal to the role of Product Portal?

Hello All:
Use FPN, now I want to assignment the role of Consumber Product Portal the user of Consumer Portal to the user of Consumer Portal(RRA) .But because There are too many user that needed be configured.It is arduous work.
So Pls help me and tell me how to import the role of Product portal to the user of Consumter Portal,
Thanks In addvance.
jideliang

Thank all:
Because I want assign the Remote Role of Produce to user of Consumer with FPN.Use:
[Role]
rid=Role1
rdesc=Role description
user=MarcPeters;JackSmith;Alan_Fox;
group=HappyBuyersOf2003;HappyBuyersOf2002
Can not import.
I have find the document "How to Automate Content Creation via XML Content and Actions (NW7[1].0).pdf", it help me to use XML to import the role,the following format:
<Action id="com.sap.portal.roleassignment">
<Roles>
<Role name="pcd:portal_content/myFolder/myRole" producer.alias = "myProducer">
<Principal type="user" id="test"/>
But when I import the XML file.There is a error.
Have someone used it ?
jideliang
</Role>
</Roles>
</Action>
How

Cannot view remote roles while in consumer portal

Similar Messages

Maybe you are looking for