CUP unable to provision FF id in ABAP system

Dear Experts,
I have integrated SPM in CUP for Superuser Access Provisioning. Here while testing as requester I am able to create a request by Superuser Access and selecting all necessary field like system, Manager Firefighter id and after submit request was created and send for approval.
Here as Manager i am able to see the request with details and after clicking on approve request was closed.
But in backend ABAP system selected Firefighter ID was not provisioning. As requester when i am login in backend system and executing transaction /VIRSA/VFAT I am unable to see any Firefighter ID was linked to me.
So anyone has clue why its not happening, as in CUP there was no any error while creating and approving request everything works very fine.
Thanks,
With Regards,
Soman

Soman,
   Go to Configuration -> workflow -> autoprovisioning and make sure that ' Auto Provisioning - Provisioning Options' is selected to 'Auto-provision at end of request'. If this is selected then look at the logs. If this was not then change the value and go through the request submission/approval process again.
Regards,
Alpesh

Similar Messages

  • Provisioning of roles to ABAP system deletes role assignments in backend

    Hi all,
    following scenario:
    user has role A in an ABAP system which is connected to IDM. Assignment of role A to the user is not in the identity store.
    Now you assign role B via workflow to the user and IDM provisions this new assignment to the ABAP system.
    What will happen is that the user will get role B but assignment of role A will be deleted.
    This happens because in the job "SetABAPRole&ProfileForUser" the connector attribute "roles" will only consist the role assignments which are in the identity store. All assignments in the ABAP system which are not yet in the IDS will be overwritten.
    This behaviour can be very critical. If you still allow role assignments directly in the backend system and you read these assignments e.g. once a day to the IDS - but in the meantime assignments have been done via workflow - you will lose data.
    My customer wants to assign roles both directly in the system and also by workflow. Every night an ABAP update job runs which writes new assignments to the IDS.
    Do you have any idea how I could solve this? Is there a way NOT to overwrite assignments with the ABAP connector field "roles"? I tried to use multivalue operator but this didn't do the trick.
    I hope I was able to describe my problem properly and you have answers...
    Best regards
    Jörn Kaplan

    No, there is not a way to avoid that IdM replaces the role assignment in ABAP with the current assignments as know by IdM. IdM is the master!
    This is not directly an issue of IdM: The standard BAPIs in ABAP (up to release 7.0) offer "replace all role assignments" but not "add role assignment" or "remove role role assignment".
    However, there exist an exception: Role assignments in ABAP which are created indirectly by an HR-ORG assignment are not touched by IdM. (There role assignment are viewed in blue in transaction SU01.)
    See  http://help.sap.com/saphelp_nw70/helpdata/EN/50/e9683c5de8676fe10000000a114084/frameset.htm for details.
    Kind regards
    Frank Buchholz

  • Unable to open any programs in ABAP editor

    Hi folks i'm unable to open any programs in ABAP Editor.
    When ever i try to open any program it goes to short dump.
    Even when i try to open STO4 to view error log.
    it shows following message
    Short text
        Runtime error, short dump could not be written.
    What happened?
        Error in the ABAP Application Program
        The current ABAP program " " had to be terminated because it has
        come across a statement that unfortunately cannot be executed.
        Unfortunately, the system cannot carry out a detailed analysis of the
        error, as the table SNAP (which gathers information at the time of
        termination) does not contain a suitable short dump.
    Information About Termination Point in XSLT Prog.
        Termination occurred in the XSLT program " ".
        The call took place using CALL TRANSFORMATION from the ABAP
        program specified below.
        In the source code, the termination point is in line " "
        of the (Include) program " ".
    Internal notes
        The termination was triggered in function " "
        of the SAP kernel, in line " " of the module " ".
        The internal operation just processed is " ".
        Internal mode was started at " ".

    hi,
    check whether any exit has been implemented for se38 and because of some statements in that it may goto dump.
    also try to open ur program from SE80.if u have access to se80 then u can do it from there itself.
    reward points  if hlpful.

  • "Unable to provision your device' error when tryin...

    Can someone please help!  I 'upgraded' to v40 firmware for my Nokia 5800 and lost my contacts.  I am trying to sync it with Ovi.com but when I try to SMS the settings the site (not the phone) gives and error 'unable to provision device'. I can't even find a way to enter sync settings manually.  Please help!

    Same problem here, except that I don't know if it was working before because it's the first time I try the service.
    I DO get the SMS from OVI on my phone, but when I open it, it asks for a "Configuration settings PIN" which I don't have.
    Immediately after I receive the SMS I get on the webpage the same error you guys are receiving.
    Don't know what's wrong.
    Any clues anybody?
    Cheers,
    Luis

  • CUPS unable to locate printer

    Up until this morning our two iMacs (one on 10.5, the other on 10.6) were able to print OK to our Magicolor 2300DL.  Not any more. The printer keeps automatically going into pause on both iMacs.  Looking in the console log shows 'CUPS unable to locate printer'. Both iMacs and 2300DL have been power-cycled. The printer can be browsed to quite happily which to my mind suggests that it is there on the network.  I have removed the printer and re-added it. I have reset the printer system. Then re-added the 2300DL.  The printer will happily print a test page from its own panel.
    Digging around a little suggested that perhaps Bonjour was not locating the printer. So I ran Bonjour Browser and did not see any print services displayed.  Thought I was onto a solution (although why both iMacs should fail seemed strange).
    To double-check I fired up my G4 (running 10.5) and that prints quite happily to the 2300DL.  So I ran Bonjour Browser and to my surprise got exactly the same listing as I got on my iMac.
    So now I am really confused and not sure where to go next. I even power-cycled the router!

    In the absence of any suggestions, I have found a workaround and which I post here for the benefit of others. I was able to add the 2300DL ...using the HP JetDirect option.  Seems to work OK

  • Unable to provision to an RO through OIM access policy

    Hi All,
    We have created a group membership and attached it to an access policy which does provisioning for a particular RO.
    When we try to use this, the provisioning process gets stuck in "System Validation" state.
    However, provisioning manually works perfectly fine.
    Is the server looking for something while it tries to provision?
    Thanks!

    Make sure all your required fields are being populated correctly. If you have any checkboxes, make sure they get a 1 or 0 default value. Check the auto save checkbox on your provisioning process definition.
    -Kevin

  • Unable to log in to portal after system copy

    Good day
    I have copied my production portal system to a test system.  I am using an ECC Abap system as my user store.  The portal start successfully and I am able to access the Visual administrator.
    I am however unable to log on to the portal.  The error I get is "User authentication error".
    Below is an extract from the security log:
    #1.5#0011259C05FB0054000002F500001B9800043F56F6157AED#1195542635224#/System/Security/Authentication#sap.com/irj#com.sap.engine.services.security.authentication.logincontext#Guest#0##sapsep.sap.lonmin_SEP_32623050#Guest#af93b280973711dc980a0011259c05fb#SAPEngine_Application_Thread[impl:3]_35##0#0#Error#1#com.sap.engine.services.security.authentication.logincontext#Plain###LOGIN.FAILED
    User: N/A
    Authentication Stack: ticket
    Login Module                                                            Flag        Initialize  Login      Commit     Abort      Details
    com.sap.security.core.server.jaas.EvaluateTicketLoginModule             SUFFICIENT  ok          false      false      true      
    com.sap.security.core.server.jaas.CreateTicketLoginModule               SUFFICIENT  ok          false      false      true      
    com.sap.engine.services.security.server.jaas.BasicPasswordLoginModule   REQUISITE   ok          true       true       true      
    com.sap.security.core.server.jaas.CreateTicketLoginModule               REQUISITE   ok          true       exception  true       null#
    #1.5#0011259C05FB0054000002F700001B9800043F56F61580BC#1195542635240#/System/Security/Audit#sap.com/irj#com.sap.security.core.util.SecurityAudit#Guest#0##sapsep.sap.lonmin_SEP_32623050#Guest#af93b280973711dc980a0011259c05fb#SAPEngine_Application_Thread[impl:3]_35##0#0#Warning#1#com.sap.security.core.util.SecurityAudit#Plain###Guest     | LOGIN.ERROR     | null     |      | Login Method=[default], UserID=[oostw], IP Address=[172.27.2.137], Reason=[Access Denied.]#
    Please can someone assist.
    Thanks
    Wilhelm

    Hello!
    It looks like your system is configured for ticket authentication. As you did a system copy the SSO-ticket might not be working anymore. If this is the case you need fix the SSO or you need to re-configure your Portal (at least temporarily) to allow other authentication methods (like basic password authentication).
    You can configure the order of the authentication methods in VisualAdmin and set the 'levels' (Required/Sufficient/etc.) there as well.
    Hope this helps,
    Jörg

  • Unable to read software component version from System Landscape Directory "

    I've worked in past creating/importing SWCV, but this is new system PI7.0 and stuck.
    A) Is my understanding on resolution correct?
    Should I go and apply notes 940309 and create client copy of existing client 001
                                        OR
    change role of client 001; SXMB_ADMIN -> 'Integration Engine Configuration' to 'Integration Server'
    I have no problem in using client 001 as Integration server, all I want is import of SWCV to work. Thanks. Appreciate the help.
    B) Here is what I have done and the error:
    1) Followed weblog below and created product, software component, technical system, business sytem in SLD.
    /people/srinivas.vanamala2/blog/2007/02/05/step-by-step-guide-xml-file-2-xml-file-scenario-part-i
    2) When I import the SWC from integration repository getting error
    (Unable to read software component version from System Landscape Directory "server:5<system number>00").
    C) Pointers used from the forum to debug the issue, but still no luck
    Below are the points checked from the forum and all steps are correct, but still have issues with the import
    1) check the RFCs SAPSLDAPI, LCRSAPRFC, connection test pass as the program ID registered with Jco
    2) T-code SLDCHECK no errors (followed http://help.sap.com/saphelp_nw04/helpdata/de/78/20244134a56532e10000000a1550b0/content.htm)
    3) T-code SLDAPICUST got user PIAPPLUSER, pwd is correct (reset the pwd)
    4) logged using PIAPPLUSER http://server:port/sld and it works
    5) One of the weblog SLD Check Failed (LCR_LIST_BUSINESS_SYSTEMS function doesn't work) referred to apply notes 940309
    Notes: 940309
    You are installing 'SAP NetWeaver 2004s SR1 ABAP+Java' Usage Type 'NetWeaver Process Integration (PI)'.
    You don't want to use the default client 001, but another client as Integration Server.

    applied portion (PIPostInstallProcess) of OSS notes 940309 and it resolved.
    Note:
    I still retained client 001 and didn't do client copy as mentioned in the notes. The wizard based CTC tool helped. Here are the details if someone has similar issue and want to know further details:
    A NetWeaver Process Integration (PI) Installation (ABAP+Java) has two parts: Installation and configuration. The former is done by the Installer, the latter by the 'Central Template Configuration' (CTC) Tool.
    http://help.sap.com/saphelp_nw04s/helpdata/en/14/39084136b5f423e10000000a155106/frameset.htm
    1.      Call the wizard-based configuration tool as described in Configuration Wizard.
           2.      Select the scenario PI and the task PIPostInstallProcess.
           3.      Choose Execute.
    A list of the steps to be executed by the wizard is displayed.
           4.      Choose Install.

  • Unable to read software component versions from System Landscape

    Dear all,
    I have an ECC system with ABAP and Java installed.
    I already configured so that SLDCheck, RFC destination configuration run successfully.
    PIAPPLUSER is not locked and can logon.
    However, when I import software component version in Integration Builder, the system return error message "Unable to read software component versions from System Landscape Directory "Server:50000".
    Please tell me how to correct this error.
    Giang

    Hi,
    Check this
    http://****************/Tips/XI/SWComponentError/Resolve.htm
    "Unable to read software component versions from System Landscape Directory
    Unable to read software component versions from System Landscape Directory
    unable to import from SLD
    Regards
    Seshagiri

  • Java Add-in on ABAP system

    HI,
    WE have sucessfully installed Java Addin for ABAP system.
    After sucessfully installation of central Instance for Java Add-in, we were unable to find Java instance in MMC.
    During the installation we have installed central services instance (SCS) java Addin, DB instance and CI java Add-on.
    Are there any post-installation steps to be followed.
    Regards,
    Magham.

    due to services problem it is not visible, check wether http://hostname:portnumber
    is working or not
    you can find the entry after restarting the server
    Samrat

  • Delete Role Assignments directly from an ABAP System

    Hi folks!
    I'm working on a synchronization job and I have a particular challenge, delete Roles assigned to a user in the ABAP System.
    Our use case is this: IDM is regarded as the authoritative source and as such if the user has a privilege in IDM, it should be in the backend.  Easy enough!
    However if the privilege is not in IDM but is in the back-end, it needs to be removed.  Is there a way to do this in IDM? From what I saw in the Framework, we are assuming that the role already exists in IDM.
    I suppose the work around would be to assign and then remove the matching privilege in IDM, but I really don't like that at all, for a number of reasons.
    I looked in the business suite and plain ABAP portions of the framework.  I'll take a more detailed look and also check the RDS, but I get the feeling this will be a toughie.
    Thanks for your help!
    Matt

    Hello Matt,
    so you want to remove local administrated role?
    If the object really is to undo the local administration, I would do this:
    Create a batch job, the passes would be a FromSAP, a ToGeneric and one/two ToSAP
    At first a cleaning pass (the ToGeneric one) which fixes all incorrect assigned privs (re-add directly or remove, depends on what you want/need). The source tab query and destination tab script have to be written though (I guess that is the most time consuming part of the job during implementation)
    The pending privs have to be considered in the provisioning script (I would prefer our own written script over the SAP delivered anytime)
    Copy the Read ABAP pass for users. Remove everything but the logonuid and the role assignments (profile assignments only if needed, too). Maybe use a different table name like sap<repName>userAssignRecon. If the system is very large, this pass has to be optimized filters
    Copy the role provisioning pass from the in-use plugin (SAP or adjusted one) and adjust it like this:
    Source tab query: A query which selects all mskeys of users that have more assigned in the sap table as in the link view. Using the Identity Store so everything of the identity is selected
    Destination tab: Remove the profiles as you haven't mentioned them. If needed I would do the same for profiles as for the roles in a second pass with the profileAssign table.
    Best regards
    Dominik

  • SU01 Parameters across ABAP systems using IDM

    Anyone have some ideas on how to handle SU01 Parameters across multiple ABAP systems ?
    Our difficulty is that the parameters required in the ERP system do not exist in the SOLMAN system so I cant create a 'global parameter' list for a user in the MX_PARAMETER and let IDM send it out everywhere.
    Parameter examples are ;
    /RWD/LANG=EN
    MOL=     13
    thanks

    We looked at creating a PARAM<system number> type field and then changing all the required provisioning tasks, but after a closer look, we decided that parameters on the main ERP/HCM system will be done with an ABAP program. So immediately after HRUSER process has created the SU01 record, the abap program inserts inserts the required 30 or so PIDs according to the HR area. Other reason for doing it this way is that once the PID's are assigned to the user, the user can then change some of them via their transaction screens. So we didn't want IDM changing or even tracking the PIDS after the initial creation.
    All other systems had minimal use of parameters and these will be done manually.
    Would be a great addition to the IDM application if it did politely handle differing PIDs in multiple ABAP systems !

  • Error while installing J2EE Add- In to the ABAP system

    Error while installing J2EE Add-In to the ABAP system 
    We are installing J2EE Add-In to the ECC5 System in the new hardware.
    When are getting Error while installing J2EE Add-In to the ABAP system.
    Transaction Begin*****************************
    ERROR 2005-08-10 14:58:28
    CJSlibModule::writeLogEntry()
    CJS-20011 J2EE engine configuration error. DIAGNOSIS: Error when
    configuring J2EE Engine. See output of
    logfile /usr/sap/QSS/install/batchconfig.log: 'My Library Path
    is: /usr/j2se/jre/lib/sparcv9/server:/usr/j2se/jre/lib/sparcv9:/usr/j2se/jre/../lib/sparcv9:/tmp/sapinst_exe.13084.1123702275:/usr/lib::/usr/openwin/lib:/usr/sap/QSS/SYS/exe/run:/oracle/QSS/920_64/lib:/oracle/QSS/920_64/lib32:/usr/lib
    ElementInfoTask has finished successfully on dispatcher
    ConsoleLogsTask has finished successfully on dispatcher
    ChangeManagerPropsTask has finished successfully. Manager:
    LockingManager on dispatcher
    ChangeManagerPropsTask has finished successfully. Manager:
    ClusterManager on dispatcher
    ElementInfoTask has finished successfully on server
    ConsoleLogsTask has finished successfully on server
    ChangeManagerPropsTask has finished successfully. Manager:
    LockingManager on server
    ChangeManagerPropsTask has finished successfully. Manager:
    ClusterManager on server
    ChangeServicePropsTask has finished successfully. Service: dbpool on
    server
    ChangePasswordsTask finished successfully.
    Error occured while connecting to database (UploadFile). Msg: No such
    algorithm: DESede
    Transaction end***********************************
    We tried twice clean installation, after removing j2ee dir, SCS and
    resp profiles and droping PSAPQSSDB tablespace and SAPQSSDB user.
    I have also confirmed the passwords in ABAP system/000 for SAPJSF, DDIC, J2EE_ADMIN, J2EE_GUEST.
    We are getting the same error in both tries.
    Kindly advice us to resolve the problem.
    Thanks and Regards,
    Srinivas

    Ananda,
    you saved my day!  I've been banging my head against the wall with this same problem during a J2EE add-in installation for SRM 4.0 on Windows, in preparation of an LAC 2.0 installation.  I had tried deleting the schema first, but that didn't work.  After I removed the sys\global\security folder as well, it worked perfectly.
    Thank you.

  • Error while installing the java add-on on abap system

    Dear All,
    We are trying to install java add-on with EP on present ABAP system, but getting struck up with error as below at creating java users (sapjsf) in central instance installation phase.
    ENVIRONMENT:
    ECC6.0
    WIN 2003
    KERNEL 136
    SUPPORT PACK LEVEL AT 13
    NETWEAVER 2004S SR1.
    DB- ORACLE
    error: ( usercheck.log)
    java.lang.NoClassDefFoundError: com/sun/tools/javac/Main
    Exception in thread "main" Reserved 1610612736 (0x60000000) bytes before loading DLLs.
    Critical Error
    Launching program failed
    -> Internal program error (rc = -1)
    error: (sapinst.log)
    WARNING 2008-08-11 15:00:00
    Execution of the command "C:\usr\sap\B60\DVEBMGS00\exe\jlaunch.exe UserCheck.jlaunch com.sap.security.tools.UserCheck "C:\Program Files\sapinst_instdir\ERP\LM\AS-JAVA\ADDIN\ORA\CENTRAL\CI\install\lib;C:\Program Files\sapinst_instdir\ERP\LM\AS-JAVA\ADDIN\ORA\CENTRAL\CI\install\sharedlib;C:\Program Files\sapinst_instdir\ERP\LM\AS-JAVA\ADDIN\ORA\CENTRAL\CI\install" -c sysnr=00 -c ashost=sapserver -c client=001 -c user=DDIC -c XXXXXX -a checkCreate -u SAPJSF -p XXXXXX -r SAP_BC_JSF_COMMUNICATION_RO -message_file UserCheck.message" finished with return code -1. Output:
    java.lang.NoClassDefFoundError: com/sun/tools/javac/Main
    Exception in thread "main" Reserved 1610612736 (0x60000000) bytes before loading DLLs.
    Critical Error
    Launching program failed
    -> Internal program error (rc = -1)
    INFO 2008-08-11 15:00:00
    Removing file C:\Program Files\sapinst_instdir\ERP\LM\AS-JAVA\ADDIN\ORA\CENTRAL\CI\dev_UserCheck.
    ERROR 2008-08-11 15:00:00
    CJS-30197  . For more details see output of logfile:
    ERROR 2008-08-11 15:00:00
    FCO-00011  The step createJSF with step key |NW_Addin_CI|ind|ind|ind|ind|0|0|NW_CI_Instance|ind|ind|ind|ind|8|0|NW_CI_Instance_Doublestack|ind|ind|ind|ind|2|0|createJSF was executed with status ERROR .
    Please help us out at your earliest convenience.
    Thanks and warm regards,

    Dear Samrat Dangeti ,
    Thanks.
    Inst version:   701.
    JDK version:  1.4.2_13
    Regards,

  • SSO between 2 ABAP systems

    Hello All,
    There are 2 ABAP systems into consideration here.
    A custom application is running on R/3 4.7 system.
    This application also accesses data from another system - ECC 6.0
    Issue:
    Users get a login prompt to access ECC..which is to be removed...
    Question:
    How can I set a SSO connection between these two ABAP systems?
    Awaiting Reply.
    Thanks and Warm Regards,
    Ritu

    Hi Ritu,
    First you need to ensure that your systems support SSL.
    Use the procedure given here:
    http://help.sap.com/saphelp_nw70/helpdata/en/65/6a563cef658a06e10000000a11405a/frameset.htm
    Once SSL works, you can then setup SSO as per the link given in the previous post.

Maybe you are looking for