Data Federator authentication modes

In Data Federator (3.0 SP1 or previous), Is there any authentication mode similar to AD/LDAP in BOE?
What are the options available for dynamic logon, while connecting to a database via JDBC in the DF Data source definition screen?
Thanks
Tiji

Hi Tiji,
Connecting to Data Federator using BOE applications
In Data Federator XI 3.0 SP1 and previous versions the only way to connect to Data Federator is to provide a user name and password. Data Federator manages its own repository of users.
Using Universe Designer, you can create a Data Federator connection with two authentication modes:
- Configured Identity: the same user name and password is used for all consumers of the connection
- Database Mapping: the DBUser and DBPassword associated to the BOE user are used to connect to Data Federator.
There is no support for single sign on.
Creating a datasource using Data Federator Designer*
When you register a new datasource using Data Federator Designer you have three authentication modes supported:
- Configured Identity: the same user name and password is used to connect to the database (for all DF users).
- Principal Mapping: a mapping can be defined between a DF user and data source credentials. This is done through creating and managing "login domains".
- Caller Impersonation: the DF user and DF password is used to connect to the data source.
The Principal Mapping mode is pretty similar to the feature in BOE called Database Mapping except that you are not restricted to a single DBUser/DFPassword pair whatever data source you want to access. This is more flexible. Note that there is no UI in Administrator to manage login domains. You have to run built in stored procedures in the query tool.
Hope this helps,
Mokrane
Mokrane Amzal
Software Development Manager
SAP BusinessObjects Divison

Similar Messages

Data Federator - Building Web Services Data Source - Request Guidance

Hello -
I am trying to build a web services data source in Data Federator.
I have:
1. In ECC, I have created a web service, proxy, port, endpoint, etc. and am testing it with WS Navigator
2. I have created a Project in Data Federator of the type web service
    a. Here I have assigned the WSDL URL (generated in ECC) as the URL
    b. I have setup web service authentication using the same userid, pwd in the web services definition (note: I have set the
        web services authentication to 'NONE' to avoing authorization issues)\
    c. I am now trying to "Generate Operations"
I keep getting the error :
The File Access Parameters are not valid (directory path = <HERE IS THE PATH TO THE WSDL WITH THE HOST/PORT stripped OUT>; file pattern = document
I believe that it is finding the WSDL, becuase when I change the WSDL from 'Document' to 'RPC', the error changes with the file pattern = rpc.
What needs to be done to the file access parameter piece.
PLEASE provide guidance. Thanks.
- abhi

Ananya,
We are using XI to load data to BI from source system. XI basically uses the same concept as Web Services - Real time data concept via RFC embeded in Proxies.
I was using web services to test data load - eventually we will use XI.
KJs blog is pretty good. I was able to get data loaded - after several iterations and several OSS notes. It is still not perfect - there are several manual steps . I am going to pick KJs brain on that.
We are on SP10 and looks like there are several bugs in RSRDA. Some of these are addressed in SP11 an SP12.
Some notes to consider are
0001003963, 0001008276,0001009260 and 001003265.
Let me know if you have any questions.

Data Federator XI 3.0 using DB2 VARCHAR FOR BIT DATA Column?

We have a column in a DB2 database that is defined as VARCHAR(16) FOR
BIT DATA.
We are using the suggested IBM JDBC driver, db2jcc.jar, against a DB2
OS/390 8.1.5 version database.
The Datasource column displays a data type of NULL, indicating the DF
does not understand or cannot handle this IBM data type.
We have two issues.
First, target tables are not able to return any columns, regardless if
we exclude columns defined as NULL as mentioned above. We see the
'Wait' animation for a very long time when we use the 'Target table
test tool' option. Selecting to display the count only, returns zero.
We are able to fetch and view non-NULL column data when using the
'Query tool' under the Datasource pane.
I also get the same result when using the 'My Query Tool' in Server
Administrator; a selection agains the sources returns data while
selecting from a target table returns no data. Also, a 'select
count(*)' returns zero.
The second issue is in mapping a relationship between two DB2 tables
where the join is between two columns of the above mentioned type
(NULL).
The error we get back when we use "Show Errors" is "The types
'NULL' (in 'S1.PLANNEDGOALID') and 'NULL' (in 'S2.PLANNDEDGOALID') are
not compatible.". When reviewing the relationship, a dashed red line
appears instead of a solid grey line between the two tables in the
"Table relationships and pre-filers" section of our mapping pane.
The following query returns an error via the Server Administrator
Query Tool; "Types 'NULL' and 'NULL' are not compatible for operator
'=' (Error code : 10248)".
select count(*)
from
(select s1.CASEID, s2.PLANNEDGOALID, s2.NAME, s2.PLANNEDGRPSTTYCD
from "/DF_CMS_ODS/sources/CMFSREPT/CMSPROD.PLANNEDGOAL" AS s1
,"/DF_CMS_ODS/sources/CMFSREPT/CMSPROD.PLANNEDGOAL" s2
where s1.PLANNEDGOALID = s2.PLANNEDGOALID)
Here are the properties settings in the Resource Connector Settings
for jdbc.db2.zSeries we are using.
capabilities: isjdbc=true;orderBy=false
driverLocation: drivers/db2jcc_license_cisuz.jar;drivers/db2jcc.jar
jdbcClass: com.ibm.db2.jcc.DB2Driver
sourceType: db2
supportsCatalog: no
urlTemplate: jdbc:db2://<hostname>[:<port>]/<databasename>
Here are the Connection parameters as defined for the datasource in DF
Designer.
Defined resource: jdbc.db2.zSeries
Jdbc connection URL: jdbc:db2://DB2D03:50000/CMFSREPT
Authentication: Use a specific database logon for all Data Federator
users.
User Name: x
Password: hidden
Login domain: -- Choose a defined login domain --
Supports Schema: checked
Schema: is empty
Prefix table names with schema name: checked
Supports catalog: unchecked
Prefix table names with the database name: unchecked
Table types: TABLE and VIEW
So, the following is the two questions we require answers for...
Is this a limitation of Data Federator?
Is there a work around short of changing the datatype in the database.

Hi Darren,
The VARCHAR() FOR BIT DATA is a binary data type and Data Federator does not support binaries. But if in your case, it makes sense to map this column to a VARCHAR data type you can configure the DB2 connector to view this column as a VARCHAR.
Your column can be mapped explicitly to a data type of your choice using a property: castColumnType.
This property can be set updating the resource you selected when you registered you DB2 data source.
If the resource is "jdbc.db2", then:
1. Launch Data Federator Administrator
2. Click on "Administration" tab
3. Click on "Connector Settings"
4. Select the right resource: "jdbc.db2"
5. Click "Add a property"
6. Select "castColumnType"
7. Set its value to: VARCHAR() FOR BIT DATA=VARCHAR
8. Click on Ok
You should see this column as a VARCHAR.
Regards,
Mokrane
PS: For the target table issue, we have forwarded your mail to the Data Federator Designer team.

Exchange ADFS 2.0 integration to provide federated authentication and SSO

Hello,
I've recently been researching methods to provide federated authentication to users of a multi-tenanted Exchange & Lync environment. Currently I am tackling the first challenge which is OWA. I have used the following guides:
http://allmsft.blogspot.com/2012/02/owa-sp2-and-adfs.html
http://www.theidentityguy.com/articles/2010/10/15/access-owa-with-adfs.html
Combined with some other various guides on general ADFS configuration in order to successively configure OWA to allow for ADFS 2.0 to authenticate using the "Claims To Windows Token Service" integration with the OWA site in order to authenticate.
This seems promising, from my novice perspective I am assuming that enabling federation with another domain would simply be a matter of adding the other domain's ADFS 2.0 Proxy as a claims provider trust on the ADFS server in which Exchange exists and then
having a mailbox in the exchange domain which has the UPN that gets passed through from the proxy server.
I've done this much and I am able to authenticate on the ADFS 2.0 proxy page of the user domain, however I am getting a failure which I think is coming from the WIF part of the OWA integration:
Request
Url: https://webmail.lab1.local:443/owa/
User host address: 192.168.23.77
OWA version: 14.2.247.5
Exception
Exception type: System.IdentityModel.Tokens.SecurityTokenException
Exception message: ID1054: The IClaimsIdentity did not contain
a valid UPN Claim. The automatic Windows identity mapping feature requires exactly one non-empty UPN Claim to be provided.
Call stack
Microsoft.IdentityModel.Tokens.WindowsMappingOperations.FindUpn(IClaimsIdentity claimsIdentity)
Microsoft.IdentityModel.Tokens.Saml11.Saml11SecurityTokenHandler.ValidateToken(SecurityToken token)
Microsoft.IdentityModel.Web.TokenReceiver.AuthenticateToken(SecurityToken token, Boolean ensureBearerToken, String endpointUri)
Microsoft.IdentityModel.Web.WSFederationAuthenticationModule.SignInWithResponseMessage(HttpRequest request)
Microsoft.IdentityModel.Web.WSFederationAuthenticationModule.OnAuthenticateRequest(Object sender, EventArgs args)
System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
I am wondering whether this is an issue with the way that I have the Claim Provider setup, or if it's simply an issue with the claim rules either on the Claim Provider or on the Relying Party Trust within the ADFS 2.0 server in the user domain for the Exchange
domain's ADFS 2.0 STS url.
I realize that providing ADFS 2.0 for Outlook, Activesync, and Lync are a whole other animal. If anyone knows of anyone who has actually published a guide on how to achieve this or possibly a third party product that provides the same result I'd appreciate
that information as well.

The main thing was just getting the web.config right in regards to that article. I had the most trouble using ADFS 2.0 as I'd never used it before.
Web.config follows:
The one undocumented change I made was to add a "homerealm" tag which makes it so the user doesn't have to select their home organization/sts.
<configuration>
<configSections>
<section name="microsoft.identityModel" type="Microsoft.IdentityModel.Configuration.MicrosoftIdentityModelSection, Microsoft.IdentityModel, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" />
</configSections>
<appSettings>
<add key="FederationMetadataLocation" value="https://sts.lab1.local/FederationMetadata/2007-06/FederationMetadata.xml" />
</appSettings>
<location path="FederationMetadata">
<system.web>
<authorization>
<allow users="*" />
</authorization>
</system.web>
</location>
<system.web>
<authorization>
<deny users="?" />
</authorization>
<authentication mode="None" />
<compilation>
<assemblies>
<add assembly="Microsoft.IdentityModel, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
</assemblies>
</compilation>

</system.web>
<system.webServer>
<modules runAllManagedModulesForAllRequests="true">
<add name="WSFederationAuthenticationModule" type="Microsoft.IdentityModel.Web.WSFederationAuthenticationModule, Microsoft.IdentityModel, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" preCondition="managedHandler" />
<add name="SessionAuthenticationModule" type="Microsoft.IdentityModel.Web.SessionAuthenticationModule, Microsoft.IdentityModel, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" preCondition="managedHandler" />
</modules>
</system.webServer>
<microsoft.identityModel>
<service>
<audienceUris>
<add value="https://webmail.lab1.local/owa/" />
</audienceUris>
<securityTokenHandlers>
<add type="Microsoft.IdentityModel.Tokens.Saml11.Saml11SecurityTokenHandler, Microsoft.IdentityModel, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35">
<samlSecurityTokenRequirement mapToWindows="true" useWindowsTokenService="true" />
</add>
</securityTokenHandlers>
<applicationService>
<claimTypeRequired>
<claimType type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name" optional="true" />
<claimType type="http://schemas.microsoft.com/ws/2008/06/identity/claims/role" optional="true" />
<claimType type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn" optional="true" />



















</claimTypeRequired>
</applicationService>
<federatedAuthentication>
<wsFederation passiveRedirectEnabled="true" issuer="https://sts.lab1.local/adfs/ls/" realm="https://webmail.lab1.local/owa/" requireHttps="true" homeRealm="http://sts.lab2.local/adfs/services/trust" />
<cookieHandler requireSsl="true" path="/" />
</federatedAuthentication>
<issuerNameRegistry type="Microsoft.IdentityModel.Tokens.ConfigurationBasedIssuerNameRegistry, Microsoft.IdentityModel, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35">
<trustedIssuers>
<add thumbprint="0FD7F936AC9589983AAD5AD3E655C493B8FCA07E" name="http://sts.lab1.local/adfs/services/trust" />
</trustedIssuers>
</issuerNameRegistry>
</service>
</microsoft.identityModel>
</configuration>

Usage Tracking - Access problem when Authentication Mode = Windows

Hi Everyone,
I´m working on UPK Usage Tracking configuration, in order to provide the finished training material.
1) In Server01 (on Window Server 2003) the UPK Usage Tracking is installed
2) In Server02 (also on Windows Server 2003) the Usage Tracking database is installed
3) By accessing the configuration file (http://Server01/ODSTrack/configuration/setup.aspx) on Server01,I setup the Authentication Mode = Forms
Note: The rest of the configurations were done.
4) Once the configuration from step 3 is done, I execute the traning material (on Server01) from another node of the windows network
and as a result I´m able to perform it.
5) I access the Statistc data on Server01 by accessing the file (http://Server01/ODSTrack/admin/default.aspx)and I´m also able to see the results.
6) When I execute the step 3 but with Authentication Mode = Windows, and including the GROUP name (windows group specially created for this goal where my user is included),
- I still have access to the training material (step 4)
- I have NO aceess to the statistics data any more (step 5) and the following message is display
"You do not have permission to access this page. Please contact your Usage Tracking Server Administrator to update your permissions. "
I don´t know what else I can do, and I wonder if some other configurations need to be done at windows network and/or explorer lever or any other.
Any help would be appreciated.
Best Regards//
Rubén Zamudio

Hi All,
This problem was solved by reconfiguring Usage Tracking in the authentication method (was anonymous and the solution was Windows integrated).
It is important to count on people from your organization working on Networks with some knowledge in IIS.
Best Regards
Ruben

Database access only authentication mode don't access in windows mode.

Hi, I Had create new database in sql server authentication mode but don't access in windows mode how, only show authentication mode not show in windows mode .

Can you rephrase the question. I'm trying to determine what the exact question is, but I'm unsure.
Are you asking of you can configure an SQL Server only accept logins using SQL Server authentication and not Windows authentication, for instance?
same here
and also the thread title talks about "database authentication"
Andreas Wolter (Blog |
Twitter)
MCSM: Microsoft Certified Solutions Master Data Platform, MCM, MVP
www.SarpedonQualityLab.com |
www.SQL-Server-Master-Class.com

Data Federator - View Data in DF

Hi,
Can we view data in Data Federator if data source is SAP BW

>
> Although you may have tested the connection, check your "leselect" log file
>
Checked in leSelect.log
Could not start server: Connect to SAP gateway failed
>
> Is it a case of resolving the DNS name? check in BW via RZ11 that the name is fully qualified as that is what DF is expecting.
>
Tried. However what parameter supposed to be entered. should it be I_RFC_DEXTINATION ?

Can't view data in browse mode.

I have a database of about 50 records I can view the data in list mode but when I switch to Browse the page turns grey. I trashed the preferences but no improvement.
Any help?

Hello
- 1 - AppleWorks will NOT be updated. It will be replaced by iWork.
- 2 - If you wish, you may attach your file to a mail and send it to:
koenig then a dot then yvan then an @ then tele2 then a dot then fr
If you do, I will be able to look if the file is working well on another machine.
So you will know if the oddity is to be searched in your machine itself.
Yvan KOENIG (from FRANCE mercredi 21 décembre 2005 9:12:42)

Error when creating a new user in Data Federator XI 3.0

Hi there,
I am completely new to Data Federator so please bear with me.
I have successfully created a new user but I am not able to run the command:
GRANT EXECUTE ON PROCEDURE executeUpdateNativeQuery TO user1
as I get the following error: Incorrect procedure name: 'executeUpdateNativeQuery' (Error code: 10000)
I am following page 482 of the Data Federator User Guide.
Thanks!
Jason

>
Jason Hattrick wrote:
> I am completely new to Data Federator so please bear with me.
>
> I have successfully created a new user but I am not able to run the command:
>
> GRANT EXECUTE ON PROCEDURE executeUpdateNativeQuery TO user1
>
> as I get the following error: Incorrect procedure name: 'executeUpdateNativeQuery' (Error code: 10000)
>
> I am following page 482 of the Data Federator User Guide.
>
> Thanks!
> Jason
Hi Jason
There is a typo in the documentation, the name of the procedure is:
executeNativeUpdateQuery
By the way, you can get the full procedure list by entering the following query in the administrator
SELECT * FROM leselect.system.procedures
Hope this helps,
Fred

Data federator

Hello Experts,
I am just wondering how is Data federator to create Web Intelligence reports on top of SAP BW Infoproviders using Relational universe instead of OLAP universe.
My requirement is that we want to create universes with all the custom objects for calculations in it instead of creating them in bex query or in some in reporting level.
Please advise and also I would appreciate if some can please provide me some links on Data federator.
Thanks.
Rag

Data Federator uses the Data Federator facade to query the BW analytic engine, bypassing the OLAP MDX engine. It transforms the data into relational structures. You can then query these relational tables using a universe and webi.

Data Federator connection from universe - commProtocol EBUS error

I am working with a prospect that is attempting to get a universe to communicate with DataFederator via JDBC. We modified the jdbc.sbo file and added the line
<Paramter Name="URL format">jdbc:datafederator://$DATASOURCE$;catalog'&quot';$DATABASE$'&quot';;commProtocol=EBUS</Parameter>
(single quotes were added above to preserver contents in quote marks, they are not really in the file)
along with the appropriate classpaths, per the XI3 datafederator release notes. However when the customer tries to connect via the connection manager in the universe the following error is thrown:
[Data Federator Driver] Invalid identifier for site wrapper in parameter 'commProtocol'. Reason: EBUS
Has anybody seen an error like this, and have any suggestion on how to correct it?
Thank you.

Hi Eric,
Can you tell me which version of Data Federator and BOE you are using?
It looks like you tried to configure Data Federator JDBC driver with a commProtocol that is not supported by this version of DF.
Are you using Data Federator XI 3.0 SP1 (12.1.0.0) or later version?
You can check the version of the Data Federator JDBC driver you are using by clicking "Test Connection" in Universe Designer. You will see the driver and database (DF) versions.
Make sure you are using the 12.1.0.0 version or later for both driver and server.
Regards,
Mokrane
Mokrane Amzal
Software Development Manager

Data Federator Configuration

Hi,
I would like to configure Data federator for using the data from SQL 2005 and Access Databases.
Can someone guide me in the proper direction to get this things done..
Thanks,

Hi addie,
you require a driver which you can download from website and place it in the following directory
E:\Program Files\Business Objects\BusinessObjects Data Federator 12\LeSelect\drivers
and then you can add the data source in data federator designer and you can click on Microsoft >MS SQL SERVER>JDBC and give the parameters and you are connected
Regards and thanks
Abid paul

Data Federator connecting to BW 3.5

I would like to use the Data Federator against a BW 3.5 system - is it possible to connect the DF to BW? Can someone help me with either documentation or how to do that. I'm currently using a OLAP universe and the performance is not very good
Thanks for the Help

Did you find a solution to this ?
there is a SAP to Data federator guide available did you try this ?
Regards,
Manu

Data Federator 3.1

I could not locate Data Federator 3.1 on SAP SMP, only XI 3.0 and XI R2 are available for download.
Anyone has a link for DF 3.1 download?

Hi Gowtha,
an example of a DF setup looks like this
(ODBC 1, ODBC 2, ODBC 3) -> DF -> ODBC (OpenAccess Bridge) -> Universe
Once you install the DataFederator Drivers (Look for the subfolder in the folder you extracted the contents of the DF package) you will be able to setup an ODBC connection which allows you to access data within a DF project (you should be able to access all virtual tables and target tables defined there) from your universe.
Please check the DF user guide for more infos on this.
Regards,
Stratos

Data Federator Universe Date Functions

Hi,
I created a Data Federator Universe from target tables (Source Tables from: Sql Server 2005 and Oracle 10g). Now, I want to create a object in the universe: "Days between 2 dates"(coming from 2 different target tables). I don't see any other date functions other than CURDATE(). How to create my object?
Alternatively, Can I create a caliculated column in the existing target table? For Example, I want to create a new column "Days between 2 Dates" from 2 different tables by using a formula in Default mapping of the target table.
Thanks & Regards,
Peter

Hi Amit,
Thanks for your reply.
Ok. So, Universe on top of Data Federator has limited functionality.
And, other option you mentioned is on report level. I am creating an adhoc universe and I have few objects which will calculate days between 2 dates coming from 2 different tables.
But, how can I achieve this on Data Federator level. I have no function there to find Days Between 2 dates. I see lot of time and date functions but not the one I required. Also, I added a column in the target table and tried to apply the formula there in the default mapping area. But, I see only the selected target table. I need another date column from another table, which is not displayed in the default mapping area.
How can I achieve this?
Regards,
-Peter

Data Federator authentication modes

Similar Messages

Maybe you are looking for