Configure the SPM in the CUP

Hello,
Im trying to configure the SPM in the CUP. I have done the steps that the manual "How To...Configure Integration of CUP with SPM.pdf" said.
But how can I do to add another stage so there is an approver before attching the user ID to the FF ID.
Best Regards.
Pablo Mortera.

If you are using a Custom Approver determinator in the stage to find the approvers then check to make sure that the approvers are entered into it correctly. Also check to ensure that the data for the attributes chosen is correct especially if you are using HR / organisation routes as the approver.
If you are trying to use the standard delivered approval method using the "Superuser Owner" approval mechanism, check your patch level as I think this only works in 5.3 SP7 or 8.
Simon

Similar Messages

Configure the tcode SCOT and SMTP for the SPM module in the R/3

Hello,
I want to know if I have to configure the tcode SCOT and SMTP for the SPM module (SAP GRC AC 5.3 SP5) in the R/3 if I want to send information toe the owner & controller.
Best Regards.
Pablo Mortera.

Pablo,
This would normally be a basis function. Be very careful as this is not specific to GRC.
This will impact any external notifications using email / fax etc.
It will also depend on your version and infrastructure.
If you have web application servers, you will be able to do a lot more than if you have standard (older) application servers.
You need to create a node under the INT and assign the appropriate tcp / ip rfc connection to direct it to your email server.
You will then need to define the types of communications to be sent via that method and any appropriate email domain settings.
You also need to create and set the appropriate send jobs to run periodically which will then automatically call the rfcs to process the waiting documents.
Simon

GRC AC 10.0: Info about rejected roles in the CUP Email

Hello all,
the GRC componetent CUP seems to be technically mature in comparison to Role Management component, but there is one thing where I am not sure, is it an error or did I miss some config parameters:
When the CUP Request ist closed, the user gets an email (Template ID: GRAC_AR_CLOSE). Not all of the roles were approved, some of the roles were rejected. But the user gets an email where only the approved roles are listed:
We would like to inform the user about the status of all roles in the CUP requests: which roles were approved and which roles were rejected. Is it possible to configure in MSMP Workflow?
Right now we have the following setting:
Thanks,
regards Sabrina

Hi Sabrina,
To notify the requester for the roles which got rejected, you can try with Email notification template: GRAC_MSMP_ERM_REJECTED for the for the message class.
You can create custom version of this template. For more understanding on how to customize the Email notification template, you can refer to: http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/605077fc-3577-2e10-e1a6-a743514d4eb3?QuickLink=index&…
Hope this helps, Let us know if you face any issues.
Regards,
Ameet

Load approvers, solicitors & workflows to the CUP (SAP GRC AC 5.3)

Hello,
I want to know if there is a way to load the approvers, solicitors & workflows to the CUP (SAP GRC AC 5.3) massively.
Best Regards.
Pablo Mortera.

Most of the configuration screens in CUP have an export button and an associated excel/text upload template. Use this template to mass create/update configuration data.
Regards,
Alpesh

Steps for loading approvers, solicitors & workflows to the CUP

Hello,
I want to know if there is a way or steps to load the approvers, solicitors & workflows in the CUP of SAP GRC AC 5.3.
What I mean is that can I load first the workflows and then the approvers & solicitors and then join the approvers to the workflow, or do I have to put first the approvers & solicitors first and then the workflows & join them??
Please I need help.
Best regards...
Pablo Mortera.

Sorry, Pablo. Just one question::
What do you mean by solicitors?
Having approvers set up and creating workflows are two separate tasks and have no dependency so you don't have to worry about the order. You won't be able to create request without having both of them configured in CUP.
Regards,
Alpesh

Is there any way to download/print/export the CUP Change Log?

Does anyone know if there is a way to export, download, print, etc. the CUP Change Log report? We are on GRC 5.3 SP13.
We have just started an audit review and the Auditors are asking for a report of all changes made since 10/1/2010. I can generate it on the Configuration/Change Log/Search Change Log screen but it doesn't seem to have any export/print options.
If this is not possible, does anyone know what tables make up the Change Log? I may be able to give them a report off of the tables.
Thanks.

Hi Bob,
by default there is no export feature for that one.
To find the right table I only see that you would need to query the tables for one of the entries to find the right one as there is no official DB structure published.
Best,
Frank

How do I configure the Airport utility to allow more than one rule per port?

How do I configure the Airport Utility (AU) to allow more than one rule per port?
I am on a home network, with broadband cable modem. I have my airport extreme connected to the broadband modem. I have 2 servers in my home that need to be accessed remotely from time (SSH), and they also serve data for an iphone app, so I'm using a variety of protocols. The problem I'm running into is that AU seems to only allow one rule per protocol, so if I go to add another address for access on a specific port that is being used by one of my servers, AU tells me "The Port Mapping Entry Already Exists".
I need to be able to allow SSH on both of my servers, for instance. Am I missing something? Is this doable with AU?
Thanks for any insight.
Khalid

The Port Mapping "rules" on the AirPorts will allow you to: 1. Map a single port to a single IP address OR 2) Map multiple ports to a single IP address.
What you won't be able to do is map a single or multiple ports to multiple IP addresses.

Configuring the authentication scheme for a web application

Hi all,
We have a requirement to configure the authentication scheme for a web application where some set of users should access the application using basic LDAP (userid/password) authentication and some using digital certificate authentication.
Since the deployment descriptor (web.xml) allows only one directive for auth-method in logic-config, we want to know if there is any other way to achieve this requirement. We are thinking of a custom login module approach. But we are not able to figure out how to configure the auth-method at runtime from the login servlet.
Please let us know if there is any other approach to achieve this.
I will be thankful if any body shares any specific solution to this issue.

This forum is probably not the correct one to ask in. It's more related to the web container than Java Programming.
Kaj

Configuring the PATH for jdk1.3.1_01 in WindowsXP

I need help in configuring the autoexec.bat file for jdk1.3.1_01 . I am running on WindowsXP. (I used to have win 98 on my old pc that crashed and had jdk1.2.1 and working just fine) Now I have a new pc and have tried the following:
windir=C:\WINDOWS
SET winbootdir=C:\WINDOWS
SET COMSPEC=C:\WINDOWS\COMMAND.COM
SET PATH=C:\WINDOWS;C:\WINDOWS\COMMAND;C:\jdk1.3.1_01\bin
SET PROMPT=$p$g
SET TEMP=C:\WINDOWS\TEMP
SET TMP=C:\WINDOWS\TEMP
When I type in C:\path ...it does not show the path I entered. I have no clue what I am doing and the instructions I printed out from sun just do not help me out at all. I really need to get this working so I can continue learning. If anyone can please straighten me out on this I would really appreciate it. Feel free to email me at [email protected]
Thanks Reba

Your PATH appears to be correct. However, to verify your PATH you should be able to type the following:
c:\>echo %PATH%
This will display your PATH setting on the console. In addition, you can verify that your PATH setting is correct by typing:
c:\>java -version
If your path is set correctly, you should see something like:
java version "1.3.0"
Java(TM) 2 Runtime Environment, Standard Edition (build 1.3.0-C)
Java HotSpot(TM) Client VM (build 1.3.0-C, mixed mode)
If, instead, you get something like:
"Bad command or file name"
Then your PATH is not configured correctly.
Hope this helps.

Error on my IPad 2. When I'm trying to access in utilities to configure the email, this close suddenly and send me to home page

Error on my IPad 2. When I'm trying to access in utilities to configure the email, this close suddenly and send me to home page.

Not sure about Utilities on your iPad. Do you mean the Settings app?
First thing to try is a reboot of your iPad. Press and hold the Home and Sleep buttons simultaneously ignoring the red slider until the Apple logo appear. Let go of the buttons and let the iPad restart. See if that fixes your problem.

Fedora 13: After upgrading from FF3.6 to FF6.0.2 I no longer have a Java plugin. How do I configure the Java Plugin for FF 6 ? There is no Java Plugin at the site

I am Fedora 13x64 bit. I just installed FF v6.0.2 from the FF download site. I backed up the existing FF 3.6 as firefox_old
I need to have a Java plugin to access company site, how do I configure the Java Plugin ?
At the Plugin area in FF6 there is no Java Plugin available, even after a search.
I have Java 1.6.0 installed in the OS at:
/usr/lib/jvm/java-1.6.0/jre/lib/amd64/libnpjp2.so
I googled how to configure Java Plugin for FF 6 for Fedora 13 and the trick was to create a soft link from /home/<userID>/.mozilla/plugins to the above libnpjp2.so

AVtech wrote:
. . . If a person can't get an answer here I don't know where else to turn since Sun certainly wouldn't offer tech support for a free product . . .These forums are user forums, and only occasionally visited by Sun employees. Sun does provide Java technical support options, although (of course) at a charge.
See:
http://developers.sun.com/services/
. . . I guess we'll just use JRE 5 until it's unsupported, whenever that will be. I'm still waiting for an answer on that question, too. See:
http://java.sun.com/products/archive/eol.policy.html
http://www.sun.com/service/eosl/
This document (part IV and Appendix) has some debugging and troubleshooting information that may allow someone involved in the problem to resolve the cause:
See:
http://java.sun.com/javase/6/docs/technotes/guides/plugin/developer_guide/contents.htm
Any steps that you can take to isolate the problem to specific Java versions, browsers, applets, web sites, operating systems (and versions), etc, would enhance the possibility of getting help.
You can try the applets at this Sun location and see if any of them are "slow".
See:
http://java.sun.com/javase/6/docs/technotes/samples/demos.html

ASA 5505 8.4. How to configure the switch to the backup channel to the primary with a delay (ex., 5 min) using the SLA?

I have ASA 5505 8.4. How to configure the switch to the backup channel to the primary with a delay (for example 5 min.) using the SLA monitor?
Or as something else to implement it?
My configuration for SLA monitor:
sla monitor 123
type echo protocol ipIcmpEcho IP_GATEWAY_MAIN interface outside_cifra
num-packets 3
timeout 3000
frequency 10
sla monitor schedule 123 life forever start-time now
track 1 rtr 123 reachability

Hey cadet alain,
thank you for your answer :-)
I have deleted all such attempts not working, so a packet-trace will be not very useful conent...
Here is the LogLine when i try to browse port 80 from outside (80.xxx.xxx.180:80) without VPN connection:
3
Nov 21 2011
18:29:56
77.xxx.xxx.99
59068
80.xxx.xxx.180
80
TCP access denied by ACL from 77.xxx.xxx.99/59068 to outside:80.xxx.xxx.180/80
The attached file is only the show running-config
Now i can with my AnyConnect Clients, too, but after connection is up, my vpnclients can't surf the web any longer because anyconnect serves as default route on 0.0.0.0 ... that's bad, too
Actually the AnyConnect and Nat/ACL Problem are my last two open Problems until i setup the second ASA on the right ;-)
Regards.
Chris

HT3382 I have a Samsung VGA Monitor connected to my MacBook Pro using the Mini Display Port to VGA Adapter. How do I configure the computer so that it doesn't sleep when I close the lid of the computer.

I have a Samsung VGA Monitor connected to my MacBook Pro using the Mini Display Port to VGA Adapter. How do I configure the computer so that it doesn't sleep when I close the lid of the computer.

Hi alangium,
Welcome to the Support Communities!
Resetting your computer's PRAM should restore your Macbook Pro's screen appearance.
OS X Mavericks: Reset your computer’s PRAM
http://support.apple.com/kb/ph14222
This article may provide some information about your Mini DisplayPort to AVI adapter. Have you tried to connect a different VGA monitor to your Macbook to see if you get the same results?
Apple Mini DisplayPort adapters: Frequently asked questions (FAQ)
http://support.apple.com/kb/HT3382
18. What is the maximum resolution available for use with the Apple Mini DisplayPort to VGA adapter?
The resolution available with the Apple Mini DisplayPort to VGA Adapter is 1920 x 1200. VGA displays that use higher refresh rates (such as 85 Hz) at resolutions of 1600 x 1200 or greater may not generate video properly until you lower the refresh rate.
Apple computers: Troubleshooting issues with video on internal or external displays
http://support.apple.com/kb/HT1573#5
How can I detect displays?
If the detect displays option is not available, hold down the Option key while you are in the Display pane.
How do I select additional resolutions on my display?
You can use the Display pane of System Preferences to specify how your display works. Not all options appear for all display models. By default the best resolution for your display will already be selected in System Preferences.
To select a different resolution, use the Scaled option. Some additional resolutions may be available when you hold the Option button.
I hope this information helps ....
- Judy

How do I configure the settings on my MBP and Apple TV so it will stream my Netflix movies from my MBP to the TV Screen?]

I bought a new Apple TV 3rd Gen.(which is currently updated) so I could stream the Netflix movies on my MacBook Pro Computer running Yosemite, onto my TV Screen. However, if I configure the settings on my Computer and Apple TV so that everything on my Desktop is displayed on the TV Screen, then Netflix can't even get the movie on my MBP open. It just keeps spinning until I get an error message about not being able to use Mirroring or Air Play if I want to stream my movie to the TV. So, when I switched the settings so that all mirroring and Air Play options were unchecked and selected all the streaming options using the internet. Then the Netflix movie would open up quick and easy, but there was nothing on the TV Screen.
I also was never able to Pair my Apple TV with my Bluetooth.(If they;re even supposed to be Paired, but something I read implied they should be Paired.f) My MBP Bluetooth discovered the Apple TV immediately and issued a Pairing Number to enter in the Bluethooth's setting for the Apple TV, but the Apple TV Bluetooth just kept spinning. I don't know if that is part of the problem or not, since it wasn't mentioned in any documentation I read.
Also, when I was digging for information on the browser, going to Netflix Website and Apple TV's information at apple.com, I did come across a few links while searching the browser for any answers to my questions, that said I needed to Activate my Netflix Account for streaming by finding my Apple TVs activation code and then enter it on Netflix's site in my Netflix account. And other's mentioned a registration code from my Apple TV needed to be entered to activate the "streaming" of Netflix movie content. And again, I've searched for hours and hours trying to find out where or how I could find the two codes, but never had any success. So, I have exhausted all avenues I can think of and with no luck, and I'm hoping my wonderful Apple Community can help me out or get me heading in the right direction. Thanks, RVAF

There is a native Netflix app on Apple TV. If you are attempting to use a VPN via MBP then that is not supported.

In EPM 11.1.2.1 Has anyone sucessfully configured the SSODiag web app

Hi All, we are installing and configuring Oracle EPM 11.1.2.1 with Foundation services running on a Windows 2008 R2 Standard server. Our users have been waiting for us to provide single sign-on for the Web applications (we are currently on 9.3.3). We installed and configured Foundation services and started the config for SSO using Kerberos and Active Directory.
We have performed the following :
1) setup the active directory user to use as the Kerberos principle
2) usign SETSPN, KTPASS configured the principle user and had the keytab file generated using:
ktpass -out SVC_ORACLEEPM.keytab -mapuser SVC_ORACLEEPM -crypto DES-CBC-CRC -princ HTTP/[email protected] -pass PASSWORD -ptype KRB5_NT_PRINCIPAL
3) copied the keytab file copied to the Foundation Services server (DEVEMP01) and placed in "C:\Oracle\Middleware\user_projects\domains\EPMSystem"
4) Verified the keytab using the java kinit commands
java -Dsun.security.krb5.debug=true sun.security.krb5.internal.tools.Kinit -k -t C:\Oracle\Middleware\user_projects\domains\EPMSystem\SVC_ORACLEEPM.keytab HTTP/[email protected]
was able to get the kerberos ticket cached successfully:
--- KrbAsRep cons in KrbAsReq.getReply HTTP/devepm01.domain.com
--- New ticket is stored in cache file C:\Users\svc_oracleepm\krb5cc_SVC_ORACLEEPM
5) configured the Active Directory provider in Weblogic (can retreive all users including my service account)
6) configured the Negotiate Identity provider
7) installed and configured the SSODiag web application per the 11.1.2.0 document "http://www.oracle.com/technetwork/middleware/bi-foundation/config-epm-foundation-kerberos-303841.pdf " as the 11.1.2.1 document is incomplete. I also found some missing steps in the 11.1.2.0 doc, but was able to get it.
8) service account is used to log onto the Windows server and is used to starte the FoundationServices service and weblogic admin console.
in the above - the "DOMAIN.COM" is the Kerberos domain
The problems now are the SSODiag app is not authenticating the user. All our active directory users authenticate to MS Sharepoint through Kerberos, so the browsers and users are setup properly, I did double check the browser settings just in case.
I also have an open support ticket with Oracle support, but wanted to find out if anyone out there has sucessfully configured SSODiag and has it working with Kerberos, Active Directory and Weblogic 10.3.x included with EPM 11.1.2.1.
Any assistance is appreciated.
Rob Armstrong
** Updated to add #8
Edited by: Robert Armstrong on Jul 13, 2011 8:47 AM

For anyone interested, we were finally able to configure SSO. Working with Oracle support and a web conf with the developers was needed.
The documentation is lacking all the instructions to make a sucessful connection and has incorrect information as well. The SSODiag app was working for all XP and IE6/IE7 machines, my Windows 7 and IE8 machine would not work and is still an outstanding issue with development.

Configure the SPM in the CUP

Similar Messages

Maybe you are looking for