CUP 5.3 creating users in Portal

Hi Experts,
Our external users will be stored in a Directory Service that is connected via a read/write connection to our External Portal. GRC needs to be able to create users in the Portal. Has anyone tried this and can confirm it works?

If that directory is linked to UME as user store, the directoty should be transparent to CUP. This scenarion should be fine.
Frank.

Similar Messages

Error While Creating user in Portal

Hai Experts...
Errored occured while creating User in portal.
Error : Error occured due to persistance: contact administrator.
Since i have created user in J2EE_ADMIN which has Administrator Role. i am facing this issue.
Kindly help me in this issue..
Regards
Arun Rajan,

Hi ,
Solved problem by changing the UME configuration as ABAP.
after changing the UME configuration , some memory dump problem faced and solved as per server0 getting restarted when i access UME configuration .
Now it is able to create user in portal.
Thanks Juan Reyes and RishiAbrol.
thanks to all helped me to sort out the issue.
Regards
Arun
Edited by: Arun Rajan on Sep 11, 2009 8:43 AM
Edited by: Arun Rajan on Sep 11, 2009 8:45 AM

Not able to create users in portal.

Hi all,
Iam trying to create users in portal through User administration but the system says:
"Current user has user creation permissions in the UME, but cannot create users in the back-end system (data source). The original and possibly untranslated message was: "No active writeable datasource found for user creation, check your Persistence Configuration.".
I have tried creating in backend system and use in the portal , but the same user does not work there , it says Authentication failed.
Iam using the admin user j2ee_admin having all the admin rights , i have done all the confuguration settings through this user id only.
Please help.
Regards,
Akash

Hi Akash,
check if your data source configuration file is read-only in your ume properties. If it's read/write you may check in the ABAP backend if your communication user (per standard SAPJSF) has write-permissions. He needs to have role SAP_BC_JSF_COMMUNICATION not SAP_BC_JSF_COMMUNICATION_RO
see also note 905188
Cheers,
Anja

Cannot create user form portal

Hi
We have installed NW 2004 server on windows SPS9
While creating user form portal , i am getting the following error:
##0#0#Error#1#/System/Security#Java###An exception was thrown in the UME/ABAP user management connector. Message: . --> #2#BAPI_USER_CREATE1@QSACLNT000: ID=01, NUMBER=491, MESSAGE=You are not authorized to create users in group#BAPI_USER_CREATE1@QSACLNT000: ID=01, NUMBER=491, MESSAGE=You are not authorized to create users in group#
#1.5#000C295F1EB3004900000003000000B80004346CD09B385F#1183541868109#com.sap.security.core.persistence.datasource.imp.R3Persistence#sap.com/irj#com.sap.security.core.persistence.datasource.imp.R3Persistence.createPrincipalDatabag()#J2EE_ADMIN#313##pun45idmqa45vm1_QSA_5696050#Guest#104e58202a1211dcab81000c295f1eb3#Thread[PRT-Async 0,5,PRT-Async]##0#0#Error#1#/System/Audit#Java###An exception was thrown in the UME/ABAP user management connector. Message: . --> #2#BAPI_USER_CREATE1@QSACLNT000: ID=01, NUMBER=491, MESSAGE=You are not authorized to create users in group#com.sap.security.core.persistence.datasource.PersistenceException: BAPI_USER_CREATE1@QSACLNT000: ID=01, NUMBER=491, MESSAGE=You are not authorized to create users in group
            at com.sap.security.core.persistence.datasource.imp.R3PersistenceBase.handleBapiRet2Table(R3PersistenceBase.java:3136)
            at com.sap.security.core.persistence.datasource.imp.R3Persistence.doBapiUserCreateChange(R3Persistence.java:5265)
            at com.sap.security.core.persistence.datasource.imp.R3Persistence.doDispatchWrite(R3Persistence.java:3622)
            at com.sap.security.core.persistence.datasource.imp.R3Persistence.createPrincipalDatabag(R3Persistence
Any clue what has to be dome to make it working
Best Regards
Manoj

Hi Manoj,
Looks like your Portal uses the ABAP backend system QSACLNT000 as the
UME. Please ensure that the user being used to create other users in the portal
has sufficient permissions in the backend system also.
Regards
Srikishan

Portal runtime error while creating users in portal content administrator

I am getting this error while creating new users in portal.
Portal Runtime Error
An exception occurred while processing a request for :
iView : pcd:portal_content/administrator/super_admin/super_admin_role/com.sap.portal.user_administration/com.sap.portal.user_admin_ws/com.sap.portal.user_management/com.sap.portal.createNewUser/com.sap.portal.createNewUser
Component Name : com.sap.portal.usermanagement.admin.CreateNewUser
com/sap/security/core/util/imp/Util.patternMatch(Ljava/lang/String;Ljava/lang/String;Z)Z.
Exception id: 03:51_27/08/08_0028_7431850
See the details for the exception ID in the log file
any help is appreciated...

log file look something like
this
2,5,PRT-Async]##0#0#Error#1#/System/Server#Java###Exception in PortalRequestManager.dispatchRequest without timeout
[EXCEPTION]
#1#java.lang.NoSuchMethodError: com/sap/security/core/util/imp/Util.patternMatch(Ljava/lang/String;Ljava/lang/String;Z)Z
     at com.sap.security.core.admin.util.checkEmail(util.java:110)
     at com.sap.security.core.admin.UserBean.checkFieldValidity(UserBean.java:695)
     at com.sap.security.core.admin.UserBean.checkUser(UserBean.java:591)
     at com.sap.security.core.admin.UserAdminLogic.performUserModify(UserAdminLogic.java:3226)
     at com.sap.security.core.admin.UserAdminLogic.executeRequest(UserAdminLogic.java:552)
     at com.sapportals.portal.prt.component.usermanagement.admin.UserAdminComponent.doContent(UserAdminComponent.java:71)
     at com.sapportals.portal.prt.component.AbstractPortalComponent.serviceDeprecated(AbstractPortalComponent.java:209)
     at com.sapportals.portal.prt.component.AbstractPortalComponent.service(AbstractPortalComponent.java:114)
     at com.sapportals.portal.prt.core.PortalRequestManager.callPortalComponent(PortalRequestManager.java:328)
     at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:136)
     at com.sapportals.portal.prt.core.async.AsyncIncludeRunnable$1$DoDispatchRequest.run(AsyncIncludeRunnable.java:377)
     at java.security.AccessController.doPrivileged(AccessController.java:241)
     at com.sapportals.portal.prt.core.async.AsyncIncludeRunnable.run(AsyncIncludeRunnable.java:390)
     at com.sapportals.portal.prt.core.async.ThreadContextRunnable.run(ThreadContextRunnable.java:164)
     at EDU.oswego.cs.dl.util.concurrent.PooledExecutor$Worker.run(PooledExecutor.java:729)
     at java.lang.Thread.run(Thread.java:758)
#1.5#001125A6576A008C00000015000550E2000455943BAE9D63#1219995051656#com.sap.portal.portal#sap.com/irj#com.sap.portal.portal#Administrator#197794##irconepd_EPD_7431850#Administrator#f4d062d0759411ddb89b001125a6576a#Thread[PRT-Async 2,5,PRT-Async]##0#0#Error#1#/System/Server#Java###Exception ID:01:00_29/08/08_0043_7431850
[EXCEPTION]
#1#com.sapportals.portal.prt.component.PortalComponentException: Error in service call of Portal Component
Component : pcd:portal_content/administrator/super_admin/super_admin_role/com.sap.portal.user_administration/com.sap.portal.user_admin_ws/com.sap.portal.user_management/com.sap.portal.userSearch/com.sap.portal.userSearch
Component class : com.sapportals.portal.prt.component.usermanagement.admin.UserAdminComponent
User : Administrator
     at com.sapportals.portal.prt.core.PortalRequestManager.handlePortalComponentException(PortalRequestManager.java:969)
     at com.sapportals.portal.prt.core.PortalRequestManager.callPortalComponent(PortalRequestManager.java:343)
     at com.sapportals.portal.prt.core.PortalRequestManager.dispatchRequest(PortalRequestManager.java:136)
     at com.sapportals.portal.prt.core.async.AsyncIncludeRunnable$1$DoDispatchRequest.run(AsyncIncludeRunnable.java:377)
     at java.security.AccessController.doPrivileged(AccessController.java:241)
     at com.sapportals.portal.prt.core.async.AsyncIncludeRunnable.run(AsyncIncludeRunnable.java:390)
     at com.sapportals.portal.prt.core.async.ThreadContextRunnable.run(ThreadContextRunnable.java:164)
     at EDU.oswego.cs.dl.util.concurrent.PooledExecutor$Worker.run(PooledExecutor.java:729)
     at java.lang.Thread.run(Thread.java:758)
Caused by: java.lang.NoSuchMethodError: com/sap/security/core/util/imp/Util.patternMatch(Ljava/lang/String;Ljava/lang/String;Z)Z
     at com.sap.security.core.admin.util.checkEmail(util.java:110)
     at com.sap.security.core.admin.UserBean.checkFieldValidity(UserBean.java:695)
     at com.sap.security.core.admin.UserBean.checkUser(UserBean.java:591)
     at com.sap.security.core.admin.UserAdminLogic.performUserModify(UserAdminLogic.java:3226)
     at com.sap.security.core.admin.UserAdminLogic.executeRequest(UserAdminLogic.java:552)
     at com.sapportals.portal.prt.component.usermanagement.admin.UserAdminComponent.doContent(UserAdminComponent.java:71)
     at com.sapportals.portal.prt.component.AbstractPortalComponent.serviceDeprecated(AbstractPortalComponent.java:209)
     at com.sapportals.portal.prt.component.AbstractPortalComponent.service(AbstractPortalComponent.java:114)
     at com.sapportals.portal.prt.core.PortalRequestManager.callPortalComponent(PortalRequestManager.java:328)
     ... 7 more

Creating User in Portal and SAP Backend simultaneously?

Is it possible when you create a new user for the portal (in my case, active Directory is used as central user storage) for SSO, that this user will also be created simultaneously in different SAP Backends without creating it manually everytime? Or is it perhaps possible to connect Active directory to these SAP backends as central user storage, too? My Problem is that everytime I must create manually the users in portal and all belonging SAP backends but I think it's not very comfortable.
Regards,
Frank

Hi Frank,
There are ways to integrate complete User Management where either SAP or the local LDAP (i.e. MS ADS) drive as the central store for users. Ultimately, the CUA concept can be entirely driven by SAP including the MS ADS ID's for the network. It involves a proposal that is uploaded into the ADS which includes the SAP required schema. When populated (or if configured as such) they can be applied as user properties for the backend systems. There is a tool within R/3 called LDAPSYNCH that allows the replication (either direction) of user data.
This concept is referred to as Identity Management. Start at http://service.sap.com/security. Then go to "Security in Detail" ==> "Secure User Access" ==> "Identity Management". There you can find info/docs on the CUA concept within the SAP landscape as well as the integration into the corporate LDAP.
I have seen most customers use separate R/3 backend User Management from the ADS. I assume that this is due to the complexity of adopting a whole new global user management process with existing "cultured" processes. However the SAP systems can support the entire corporate user management driven from within the R/3 core (HR).
I hope that this helps,
Regards,
Judson

Can't create user into backend system and contents in portal.

hi expert,
I installed EP(EP,BI-JAVA) as add in installation on existing BI-ABAP system based NW04s.
I can log on portal by abap user. But unubale to create any content and user in ABAP through portal.
What must be done after setup Addin JAVA STACK??
I assign following roles to test user.
Administrators :UME Database
Authenticated Users:Built-in Group Authenticated Users Built-in Groups Adapter
Everyone
but the error message is like "An error occurred in the persistence. The original and possible not translatet message was: "BAPI_USER_CREATE1@BWBCLNT100: ID=01, NUMBER=491, MESSAGE=You are not authorized to create users in group". Contact your system administrator. "
If anyone can advice me, it would be appreciated very much.
Regards
MASAKI

If this is what you mean "But unubale to create any content and user in ABAP through portal"....
creating users in portal is not possible since your UME is now linked to the ABAP in an add-in installation or a dual stack system users can only be created in the ABAP system and with the roles SAP_BC_JSF_COMMUNICATION_RO /without RO should let you create users in the ABAP stack....
you can only assign roles to users on the Portal for the ABAP users ...
heres the reason...
Combined AS for ABAP + Java installation
If you install an AS for ABAP + Java, UME is automatically set up to use the ABAP user management of the same Web AS installation. This option uses the configuration file dataSourceConfiguration_abap.xml.
AS for Java installation
If you install SAP Net Weaver AS for Java the UME is linked to the java database with users and groups in the Java system database, or if you want to subsequently connect an LDAP directory to the UME. This option uses the configuration file dataSourceConfiguration_database_only.xml

How to create user in UME,

HI gurus,
In requeriment for project, the customer request is about a aplication to create user in the UME automaticall after fill a survey with questions of security, my questions are;
1. Exist a way for create users automatically ??, a RFC ? a Web Service ? or this step is strictly done for a human
(UME isn´t integrated with abap data source).
2. ¿ In KM exist a application that permit show a questionary, and questions and answers were filled from information hosted in tables z in R3 ?
THanks in advance

Hi Pacheco Mauricio,
1. Exist a way for create users automatically ??, a RFC ? a Web Service ? or this step is strictly done for a human
(UME isn´t integrated with abap data source).
         It is already answered by Erhan
1- There isnt a standart way to create user in portal. You can code a web service to create user using portal apis
         using API's only you can create Application which help to create Users in Portal UME.
2. ¿ In KM exist a application that permit show a questionary, and questions and answers were filled from information hosted in tables z in R3 ?
2- And also there isnt a standart way to create a poll using ecc tables. But there is a way to create poll in portal.
          SAP had provided a Poll Facility in Portal what Erhan suggested, but problem is you can at a time put only one question in a poll, but if you want some more functionality along with polls, you can go for Sweetlets which is third party tool.
         But if you want to develop a Survey kind of application where you want different type of questions along with different answer options than you have to build application from scratch like how we develop Custom Web Dynpro Java Applications.
Regards,
Tushar Shinde.

Error while creating user

Hi,
I am trying to craete user in portal which is ending up with error " an error occured in the persistance.the original message was LDAP- error code 50-00000005 SecErr DSID-03151E04, Problem 4003(Insuff_Access_Rights) data 0 : something like taht.
I am new to this creating users.
The UME config shows
Datasource: Microsoft ADS(Deep heirarchy)+database
Data Source file name: dataSourceConfiguration_Ads_deep_writable.db.xml
What does the above config means? If i create a user under sys admin in portal, where is the user getting created? is it the portal DB or LDAP?
Thanks in advance.

Hi,
if i want to create some portal users in portal DB, what should be the UME configuration?
if you want to create user in portal database then you have to use UME confiuration as DATABASE ONLY.
pls refer the below link
http://help.sap.com/saphelp_nw70ehp1/helpdata/en/7e/a2d475e5384335a2b1b2d80e1a3a20/content.htm
http://help.sap.com/saphelp_nw70ehp1/helpdata/en/38/caeaf49cce45d0a11fb8d7fef151b0/content.htm
Thanks
Anil

How to create user in local datasource when UME is already switched to LDAP

HI,
Info : I have portal ( NW 700), recently i switched the datasource of portal to LDAP from local datasource.
issue: if i create user in portal it get created in LDAP, i want create few users in Local datasource.
how to create user in local datasource when UME is already switched to LDAP?
one solution is change the ume back to local datasource > create user > then switch back to LDAP.
do you know any other sol?
Regards
Shridhar Gowda

Please let me know the Datasource file name .. i.e. the .xml filename.
try to analyze this name and see whether you get a solution or post it here.
Reward points if helpful -

Programmatically creating users

How can I bulk create users in Portal 8.1?
Any sample code would help.
Thanks
Mike

Hi Martin,
Can you pls forward me the sample code? It would be great.
Thanks
S.Suganya
"Martin Porter" <[email protected]> wrote:
>
>
A quick and simple way to do this is to create a pageflow with a JSP
that takes
a file of the usernames and passwords. Add an action from the jsp (button
or whatever).
Drag the Portal EJB User Manager control into the action view. Then read
all your
data from the file and in the loop just call the createUser() method.
We used this to bulk load users to our WLS Embedded LDAP domain and the
Portal
DB and it worked fine....
userManager.createUser(username,password);
Can email you the sample code off line.
Hope it helps
Martin
"Mike Milkani" <[email protected]> wrote:
How can I bulk create users in Portal 8.1?
Any sample code would help.
Thanks
Mike

Server Error on Create user page in 9iAS Portal 9.0.2.0

Hi,
I have installed Oracle 9iAS Portal 9.0.2.0 on WinNT
I got the SSO page loging thru admin login and everything is fine .....i can get into build page groups etc.....
Problem
creation of users
When i click Build --> Administer --> Create User
Page error:
Internal Server Error
The server encountered an internal error or misconfiguration and was unable to complete your request.
Please contact the server administrator, [email protected] and inform them of the time the error occurred, and anything you might have done that may have caused the error.
More information about this error may be available in the server error log.
Oracle HTTP Server/1.3.22 Server at accentur-jpdq.accenture.com Port 7777
Kindly let me know how to solve this and get the Create User page --> To Create users ....
Thanks & Regards,
Gopinath.G
Accenture Technology services.
Bangalore,INDIA

Can you pls confirm if OC4J_DAS instance is up?
Refer Oracle9i Application Server Administrator's Guide
Release 2 (9.0.2) -> Starting and Stopping the Application Server for 'Starting an Infrastructure'
link: http://download-west.oracle.com/docs/cd/A97329_01/core.902/a92171/start.htm#1011347

Error while creating user in LDAP (MS ADS) from SAP Portal 7.0

Hi,
Is it obliged to use SSL connection to create new user in LDAP (MS ADS) from SAP Portal 7.0 ?
I've configured the UME with ldap server adress and port 389. And use configuration file "dataSourceConfiguration_ads_writeable_db.xml"
I succeed to view users existing in LDAP but when I try to create new user I've the following error message:
LDAP: error code 53 - 0000001F: SvcErr: DSID-031A0FC0, problem 5003 (WILL_NOT_PERFORM), data 0)
Thanks and regards

check this link
http://help.sap.com/saphelp_nw70/helpdata/EN/37/cfd93f130f9115e10000000a155106/frameset.htm
and at the end of the page there is a qoute "We strongly recommend that you configure SSL between the UME and the LDAP directory. Some LDAP directories, such as Microsoft Active Directory Server, require an SSL connection if you want to create users on the LDAP directory"
hence follow this link to configure SSL
http://help.sap.com/saphelp_nw70/helpdata/EN/7d/77fa735e5f47a2a50b5336fd1b5a61/frameset.htm
hope this helps..
[Rahul|http://rahulursportal.blogspot.com/]

Creating users in enterprise portals with CUA as userbase

Hi All,
we are using CUA system for maintaining the users and we want this users to be used in enterprise portals. So while installing WebAs itself, we specified the connection details to this CUA system. then we installed portal and we were able to view the users of CUA in portal.
now i am creating a user from portal, create user option in UserManagement. but i just get an error like, could not create a user.
i checked out in system administration->umconfiguration-> sap system. all the details that we specified during the webas installation appear there by default.
so could you please let me know what the problem could be
thank you

Raj,
I know that your problem was solved, but I've come across following SAP link. Hope, it helps other ppl..
TITLE: Requirements for Service User Used to Connect to SAP Systems
http://help.sap.com/saphelp_ep60sp2/helpdata/en/8f/67d27676ace84080964d4c4223bb3c/content.htm
Thanks,
Pritesh.

Error on creating user CUP to SAP backend

Hello experts,
I am implementing CUP 5.3 for one client but on the initial configuration of the workflow for new account, but when the request it's on the final stage the system it is not provisioning the users on SAP back end, and send the next error u201CError al crear usuario: <Sistema> - No se ha accedido al sistema centralu201D as you can see the system itu2019s configured in Spanish, so I can translate it like this: u201CError on creating user: <System> - Central system it is not been accessedu201D. Going to the logs it show the next Error:
2011-02-14 18:19:54,296 [SAPEngine_Application_Thread[impl:3]_20] ERROR com.virsa.ae.service.ServiceException: No se ha accedido al sistema central
com.virsa.ae.service.ServiceException: No se ha accedido al sistema central
     at com.virsa.ae.service.sap.SAPProvisionDAO.createUser(SAPProvisionDAO.java:317)
     at com.virsa.ae.service.sap.ProvisionSAPUserDAO.createUserInNonCUA(ProvisionSAPUserDAO.java:1736)
     at com.virsa.ae.service.sap.ProvisionSAPUserDAO.createUser(ProvisionSAPUserDAO.java:334)
     at com.virsa.ae.service.sap.ProvisionSAPUserDAO.provisionUser(ProvisionSAPUserDAO.java:109)
     at com.virsa.ae.accessrequests.bo.ManualProvisioningBO.createUserAndSendEmail(ManualProvisioningBO.java:426)
     at com.virsa.ae.accessrequests.actions.UserProvisioningAction.continueHandler(UserProvisioningAction.java:280)
     at com.virsa.ae.accessrequests.actions.UserProvisioningAction.execute(UserProvisioningAction.java:83)
     at com.virsa.ae.commons.utils.framework.NavigationEngine.execute(NavigationEngine.java:295)
     at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:431)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
     at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
     at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
     at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
     at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
     at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
     at java.security.AccessController.doPrivileged(Native Method)
     at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)
     at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)
Any one please help me to know the solution for this?

Thanks Sunny for your response,
Yes, the connectors are working fine, even if I assign a role to an existing user the role provisioning is done right in the back end, the problem comes when I try to create a new user because the system shows me the Error. I try adding the action USER_DEFAULTS to the request but nothing. Also the CUA configuration is set on u201Cselectu201D. I donu2019t know what is missing.
Thank you for your help.
Luis Fernando

CUP 5.3 creating users in Portal

Similar Messages

Maybe you are looking for