End User Login Message

Hi Folks,
Our production IDM setup has 3 IDM instances sharing the same repository. The IDM End user is used for setting passwords in IDM and LDAP.
Recently, couple of users have reported this error while trying to log in into IDM end user login page.
"Your password has expired for account xxxxxx. Please change it now.
Item User:xxxxxx was not found in the repository, it may have been deleted in another session."
I had seen an earlier posting on this but there were no answers. Does any have a clue why this happens?
Any lead will be greatly appreciated.
Thanks in advance!
Suvesh

Hi shivjansi,
This is normal behavior for the service desk. It gives end-users a limited UI compared to the ticket processors. Unfortunately the features of the limited UI are hardcoded so you cannot configure the UI so that end-users get two tabs while a ticket processor gets all six tabs. This may change in SolMan 7.1, let's hope so
SolMan determines if a user is an end-user by checking the auth object
CRM_TXT_ID
Activity <ACTVT>: 02
Text ID <TEXTID>: SU15
If the auth check for this auth object fails, then the user is considered to be an end-user and they get the limited UI.
Good luck!
Jon

Similar Messages

GRC AC 10.1 - End User Login - Request issue

Hi experts!
Im working in GRC AC 10.1 SP07. I have configured END USER LOGIN services; the idea is that end user from ECC system could submit request without having user in GRC box, this is working fine but i´m experimenting next problem.
When i go to search request, those request submited by end user appears like created by Z_END_USER, this is the user in GRC that i have configured in services GRAC_UIBB_END_USER_LOGIN and GRAC_OIF_REQUEST_SUBMISSION_EU.
¿Is possible to configure that request appears "Created By" the requester and not the service´s user? I don´t think so, but if not, ¿is there any way to add the column User ID in Result screen? because it is avaible in parameters search but im not being able to add this in result screen (it´s not like hidden neither).
Parameters "Created by user ID" would be service´s user and "User ID" would be the requester.
Thanks!
Emiliano

Hi Emiliano,
Your understanding is correct, request created by UserID will always show GUEST UserID configured in the End User Logon service.
In search requests there is option to search requests by UserID but the same field has not been enabled to be available in Search Request result screen. This is as per standard functionality. You can check with SAP or can work with ABAPer to make the UserID column as display field in Search Request results.
Regards,
Madhu.

Where are the ID and Password fields in End User Login ?

Hi:
I need to modifiy the ID / Password labels of the end-user login. I searched it in the WPMessages.properties, but i only find the variable UI_PWD_LABEL, and if i change it, it saw in the Admin Login but not in the User Login.
Any idea?
Thanks,
MJ.

Please tell us your first name and update your forum profile with it to help us. Thanks.
The first process sets a convenience cookie with the value the user entered in the username field. This is a session cookie. The code is all there. It has nothing to do with the topic of your post.
The Login process calls the apex login API. This performs authentication and does session registration and sets another cookie for session management.
Where usernames and passwords are stored depends on the type of authentication you have chosen and this is recorded in the Authentication Function attribute of the authentication scheme. For Application Express authentication, the account information is in the table wwv_flow_fnd_user. You might also use your own tables for this, or LDAP, or SSO, ...
Scott

End user login to CI server

Hello,
In R/3 landscape there are 4 Application servers and CI Cluster (2 separate servers) and DB Cluster (2 separate servers)
In one of the CI Server, Message server and Enrique server is running. (allocated virtual IPs for this MSG server & ENQ server)
(End user will connect to the message server)
So when a request comes to message server, it will direct the request to one of the Application servers.
So according to the setup, all the users should reside in the Application servers. End- users are not allowed to login to CI server.
Only BASIS admins can login to this.
But when checking using al08, time to time it shows few users are login to this CI server (erpcv)
How this happens, Is that a problem with the message server or any other issue !!!
regards,

You need to configure your servers in logon groups (SMLG) and distribute the correct logon groups to the users.
My assumption, There may be few users have SAPGUI points to directly to CI.
We also have 4 apps and 1 CI/MS and DB as cluster, but have allowed users to logon to all the servers (4 apps + 1 CI) this is due to nothing is running on CI+MS and technically speaking waste of CI resources if you are not allowing users to logon and using system.
Don't worry SMLG (load balancing) will take care of distributing the load.

CUPS 8.0 end user login issue

Hi All,
I am having CUCM 7.1.5 and CUPS 8.0(4) installed. The problem is when I tried to login the CUPS user page the it says "login failed". The CUPS intergration with CUCM seem to be fine because all the end users can be seen in CUPS. But I am not able to login the CUPS user page. Users have needed roles assigned to them.
CUCM is sycronized with LDAP server over SSL
Can anyone pls help me on this. What else I need to check? Is there any log to check on CUCM or CUPS?
Thanks

Hi Ronak,
It is not the problem login to the CUPC (still I didn't tried it), I have problem login to the CUPS User Web page using end user credentials in CUCM
End users have needed roles assigned and they also are CUP enabled users
Pls can you suggest me to any thing to check, As I said our CUCM is sycronized with LDAP server over SSL
Thanks

Portal - cutom message to end users (like sm02)

Hello All,
Is it possible in Enterprise portal to display a custom message (like sm02 in ABAP ) when end users login.
Thanks
Tom

Yes...
1. Buy Software that can do it for you --> http://www.sweetlets.com/w/solutions/system-messenger/
2. Build it yourself.
a. simple html file that you can embed in your framework that you can set on the fly (simple solution)
b. time based publishing of content via KM http://help.sap.com/saphelp_nw70ehp1/helpdata/en/e8/a9a76828b8dc469969ff450ec81ced/frameset.htm (medium solution)
c. develop some application (in webdynpro for example) that can do this all for you (advanced solution).
Cheers,
Benjamin

Anonymous User Login

Hi All,
I have an issue with 'Forgot Password' button in the end user login. When a Forgot Password button is clicked, a Question Login workflow will trigger (I think I am right?) .Now I would like to customize the 'Question Login' workflow as per my requirements, but unfortunately I am not, I modified the system configuration object, but still with no luck I am not able to customize that workflow.
So I thought of using anonymous login page and I can launch my own workflow as per my requirements. I have registered my workflow at 'anonymous end user tasks'. and I try to launch the anonymous login page using the url 'http://localhost:8080/idm/user/anonlogin.jsp'. I am getting the following errors.
An unrecoverable error has occurred processing the request. Contact your system administrator.
Syslog ID = LG-1111-024933.
Only the Reset Administrator may access this view.
I don't know, where I am doing wrong. For the first time I am trying to use anonymous login page.
Did anybody faced similar problems?
Can anybody please post some points, like what is the procedure to use a Anonymous login page?
Thanks in advance

Well, first, I visited Configure > User Interface, and enabled Anonymous Enrollment.
Next, I went to user/login.jsp, and saw "Request Account". I clicked on it, and up popped the user/anonEnrollment.jsp page. (I was looking at using this for one of our requirements; turned out I didn't need it, and did something else).
Anyway, a quick check with Live HTTP Headers for Firefox shows that the post was directly to anonEnrollment.jsp; anonEnrollment.jsp has this at the top:
String anonUser = LoginHelper.getAnonymousUser(session);
if (anonUser == null) {
    String url = "user/login.jsp";
    LoginHelper.redirect(req, out, url);
    return;
}Not a huge amount of help. However, it does establish that there is an "getAnonymousUser" method, which is documented to return "the currently registered anonymous user name if any". And reading the Workflows, Forms, and Views manual, it states that the anonymous main page is for "... when a user who does not have a Identity Manager account logs in, an Identity Manager user object is created ...". Basically, if you're using pass through auth, and have a source system that will let a user authenticate, they can then set themselves up.
So, I visited "anonmain.jsp" after clearing all cookies, and up popped "anonlogin.jsp", with a login box. I entered "anonymous", and lo!, I was logged in, and saw the anonymous user menu. In other words, I was "provisionally" logged in with an account that doesn't really exist (anonymous).
However, I had to provide that extra bit of information, namely, my "fake" user name of "anonymous". I don't know how you'd do that without JSP customization.
Basically, "anonymous" means "has a username, but we don't have an account", rather than "truely anonymous" as near as I can tell. The system will do it for you in the case of "Request Account" (the generated login page has some Javascript code to redirect to anonEnrollment.jsp), but it doesn't seem to be an exposed API.
You might get somewhere with customizing the "Request Account" string in the messages catalogue, and then customizing the anonymous enrollment workflow.

End User Unlock and Password Reset in GRC AC 10.0

Hi Dears,
I have an issue related to End User Unlock and Password Reset.
We maintained Data Source as SU01 in SPRO, So that User can able to access GRC Application through End User Login with ECC System login
Details for raise a request.
If user is locked or forget ECC system password, then user not able to access GRC Application through End User Login with ECC System login Details for Unlock or reset Password.
In this situation, how user can unlock or reset the Password for ECC System.
Could you please provide the solution to resolve the Issue.
Note:- No LDAP or Acitive Directory.
System Details :- GRC AC 10.0 , SP12.
Regards,
Karnatak.

Hi Rupesh
That was my warning on the post I linked you to
Quite a few PSS solutions have this as a setup (even SCN). The key thing you are reliant on is that the email account must be restricted to only the user to receive the password/link as well as appropriate Challenge Response Questions defined as part of their registration.
But yes, they can technically enter any User id to request the password and if they know the answers to the questions then they will get the password issue.
Your alternatively is to introduce another system (i.e. AD which you ruled out) or see if there is a way to introduce a second factor authentication (I don't believe this is delivered with GRC).
Regards
Colleen

Where can i find the user login form

Hi everyone
Do you know the name of the end user login form? I want to add a button on it but i don't know where i can find it.
Somebody has an idea?

Thanks everyone
I found the solution in the login.jsp (idm/user/login.jsp). I will just add a link which will execute a workflow.
I needed to have the number of failed login attemps. So I uses this code in the login JSP
com.waveset.server.Server _server = com.waveset.server.Server.getServer();
    com.waveset.repository.Repository _repo = _server.getRepository();
    com.waveset.object.WSUser uo = (com.waveset.object.WSUser)_repo.getIfExists(com.waveset.object.Type.USER, "test");
    int nb = 0;
    if (uo != null ) {
        com.waveset.object.ObjectCache _serverCache = _server.getCache();
        uo.setCache(_serverCache);
        nb = uo.getFailedPasswordLoginAttemptsCount();
        %>
            The user is not null <BR>
            nb == <%=nb %>
        <%
    else{
        %>the user is null <BR><%
    }good luck.

Find the User ID through which the end user logged in BEx Analyzer?

I want to fetch the end user USERID who is executing the query. I am the end user and want to view a report, so I will login into BEx Analyzer with my userid and start executing query. Is there any way I can find that ID, in any table, program, function module or some where........?
I don't want 'created by', 'last changed by'. I want ID through which end user is logging into in Analyzer.
Also if the end user is logging in through RSRT wanted to know the SAP login user ID through which the user logged in?

Hi,
If you want to see the end user id that is running the query, and then open the workbook, select Layout from the menu u2013 Display Text elements. Click on All (or General, Filters or Variables based on your requirement). It will display the technical name, info provider, current user details. You can save it as existing work book transport to production, then when this query executed you can find end user login id.
May be you can check RSRWBTEMPLATE table for workbook users details. Mostly end user will not have access to RSRT.
Hope it helps you
Thanks
Riyez

I get a message saying: "Before proceeding you must first launch Adobe Acrobat and accept the End User License Agreement". HELP!!

Hi i have an iMac with 10.9.3 and when i tried to open a PDF link or a PDF document in Safari 7.0.4 this message appears: "Before proceeding you must first launch Adobe Acrobat and accept the End User License Agreement". What can i do to solve this?

Back up all data before making any changes.
Please take each of the following steps until the problem is resolved.
Step 1
If Adobe Reader or Acrobat is installed, and the problem is just that you can't print or save PDF's displayed in Safari, you may be able to do so by moving the cursor to the the bottom edge of the page, somewhere near the middle. A black toolbar should appear under the cursor. Click the printer or disk icon.
Step 2
There should be a setting in the preferences of the Adobe application such as Display PDF in Browser. I don't use those applications myself, so I can't be more precise. Deselect that setting, if it's selected.
Step 3
If you get a message such as ""Adobe Reader blocked for this website," then from the Safari menu bar, select
Safari ▹ Preferences... ▹ Security
and check the box marked
Allow Plug-ins
Then click
Manage Website Settings...
and make any required changes to the security settings for the Adobe PDF plugin.
Step 4
Triple-click anywhere in the line of text below on this page to select it, the copy the selected text to the Clipboard by pressing the key combination command-C:
/Library/Internet Plug-ins
In the Finder, select
Go ▹ Go to Folder...
from the menu bar, or press the key combination shift-command-G. Paste into the text box that opens by pressing command-V, then press return.
From the folder that opens, move to the Trash any items that have "Adobe" or “PDF” in the name. You may be prompted for your login password. Then quit and relaunch Safari.
Step 5
The "Silverlight" web plugin distributed by Microsoft can interfere with PDF display in Safari, so you may need to remove it, if it's present. The same goes for a plugin called "iGetter," and perhaps others—I don't have a complete list. Don't remove Silverlight if you use the "Netflix" video-streaming service.
Step 6
Do as in Step 4 with this line:
~/Library/Internet Plug-ins
If you don’t like the results of this procedure, restore the items from the backup you made before you started. Relaunch Safari.

Notification message box of Hyperion Planning when user login

Can we have a notification message box popup when user login Hyperion Planning or Workspace application? We would like to communicate to the end users by the system instead of just email because some end users may not check the email so frequently. It is the best to notify end users about any latest changes e.g. budget rate, etc when they login the system to check data or print reports.
We noticed that there is a broadcast message feature but only limit to those users already online. And the message will not shown when there are some users login later. We would like to have some notice board like message instead of instant messaging.
The online help of "broadcast message" feature:
"Use broadcast messaging to communicate a text message to all Planning users currently logged on to an application. For example, you can send messages about system availability or periodic maintenance. You should also send broadcast messages to request that users log out before upgrading or migrating applications.
You can send broadcast messages using the Web client or a command line utility. If you send them using the Web, they are sent to users of your current application. If you send them using the command line, you can specify any application, without being logged on to it. You can also schedule messages using standard operating system mechanisms. "
Thanks in advance!

I have tried the above step and it only works when i am in the advanced mode. but when i change to basic mode i can see the forms and still can access without any disturbance. for your help i am pasting the planningcentral.jsp so that you could suggest me something other.
Thanks in advance...
the original file :
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Frameset//EN" "http://www.w3.org/TR/html4/frameset.dtd">
<html>
<%@ include file="Common.jin" %>
<% nWhichPage = HspConstants.PLANNING_CENTRAL;
String redirectString = request.getParameter("Redirect");
String mainFrameContentURL = (String)session.getAttribute(HspConstants.SESSION_MAIN_FRAME_CONTENT);
String mainFrameContent = ((inAdvancedMode) && (mainFrameContentURL != null)) ? mainFrameContentURL : "SelectForm.jsp";
     String queryString = request.getQueryString();
     String mastHeadURL = "BT_Masthead.jsp" + ((queryString != null) ? "?" + queryString : "");
%>
<%@ include file="SessionValidate.jin" %>
<%-- Section for Checking latest CSS version and redirecting to AppSettings.jsp --%>
<%     if ((HspPlanning != null) && (HspPlanning.isApplicationOwner()))     {
          boolean isHubRegistered = (HspPlanning.getHubServer() != null);
          if ((!isHubRegistered) || (HspPlanning.isUserMigrationReqd())) {
               inAdvancedMode = true;
               redirectString = null;
               mainFrameContent = "AppSettings.jsp?RND=" + Math.random();
%>
<%-- End CSS validation section --%>
<html>
<head>
<title><%= HspMsgs.LABEL_WELCOME_TO_HP %></title>
<%@ include file="PlanningLibraries.jin" %>
<script language="JavaScript">
var isPlanningFramework = true;
     var topFrameLoaded = false;
     var taskListViewPaneLoaded = false;
     var processBarLoaded = false;
</script>
</head>
<frameset id="mainframeset" rows="72,19,*" cols="*" frameborder="NO" border="1" framespacing="0">
     <frame src="<%= mastHeadURL %>" name="topFrame" id="topFrame" scrolling="auto" noresize >
     <frame src="BT_ProcessBar.jsp" title="object palette header" id="objPaletteHeader" name="objPaletteHeader" scrolling="no">
     <frameset id="nestedFrameSet" cols="20%,*" frameborder="NO" border="0" framespacing="0">
<% if (inAdvancedMode) { %>
     <frame src="LP_ObjectPalette.jsp" id="leftPalette" name="leftPalette" scrolling="no">
     <frame src="<%= (redirectString != null) ? redirectString : mainFrameContent %>" id="mainFrame" name="mainFrame" scrolling="auto">
<% } else { %>
<%     int currentTLId = -1;
     HspTaskList thisTL = (HspTaskList)session.getAttribute(HspConstants.SESSION_TASK_LIST);
     if (thisTL != null) thisTL = HspPlanning.getTaskList(thisTL.getId());
     if (thisTL != null) {
          currentTLId = thisTL.getId();
     } else {
     Vector availableTaskLists = null;
     availableTaskLists = HspPlanning.getTaskLists();
     HspObjectPositionComparator hspObjectCompare = new HspObjectPositionComparator();
     HspCSM.sortVector(availableTaskLists, hspObjectCompare);
     if ((availableTaskLists != null) && (availableTaskLists.size() > 0))
          currentTLId = ((HspTaskList)availableTaskLists.firstElement()).getId();
     } %>
     <frame src="LP_ObjectPalette.jsp?TaskList=<%= currentTLId %>" id="leftPalette" name="leftPalette" scrolling="no">
     <frameset id="wizardFrameSet" name="wizardFrameSet" rows="*,0" frameborder="NO" border="0" framespacing="0">
<%     if (currentTLId != -1) {
          String wizardFrameContent = "TL_Navigator.jsp?TaskList=" + currentTLId;
          HspTask currentSessionTask = (HspTask)session.getAttribute(HspConstants.SESSION_TASK);
          if (currentSessionTask != null) {
               wizardFrameContent = "TL_Navigator.jsp?TaskList=" + currentTLId + "&SelectedTask=" + currentSessionTask.getId() + "&ShowWizard=true";
               mainFrameContent = "TL_Wait.jsp";
          } else {
               mainFrameContent = "TaskListStatus.jsp?TaskList=" + currentTLId;
          %>
          <frame src="<%= mainFrameContent %>" id="mainFrame" name="mainFrame" scrolling="auto" noresize>
          <frame src="<%= (redirectString != null) ? redirectString : wizardFrameContent %>" id="wizardFrame" name="wizardFrame" scrolling="NO" noresize>
<%      } else { %>
          <frame src="<%= (redirectString != null) ? redirectString : "Error.jsp" %>" id="mainFrame" name="mainFrame" scrolling="auto">
<%      } %>
<% } %>
     </frameset>
</frameset>
<noframes><body>
</body></noframes>
</html>

How to create a LOGIN Form & LOGIN ID & PASSWORD for END USERS

hi,
i have just created a Database and Forms & Reports using developer 6i.
now i want to deleiver that Database to end users, but i dont know that how to create a LOGIN Form for the end users and also i want to assign each user a Login ID & Password.
Plz help me to solve out this problem.

1. Create the user accounts on the database CREATE USER ... IDENTIFIED BY...
2. Grant CONNECT Role to the Users
3. in the main form (the one which is being called initially at runtime) in the ON-LOGON-Trigger create a CALL_FORM() to the Login Form
4. The Login Form will be called; build a Block with username, password and a Button
5. In the Button call the LOGON Built-In
6. Control will be passed to the initially called form again
I also noticed a thread in here explaining this in more detail...
Message was edited by:
user434854

Custom Help Message Text on user/login.jsp

Hello,
I am trying to get some custom text to appear in the help box associated with the user/login.jsp page. I did some digging around in the docs and looked at the includes/helpServer.jsp file. I found the <$WSHOME>/help/html/help/en_US/com/waveset/msgcat/help/user/login-help.html file.
I replaced this file with our own custom version. I can not get our custom version to load. The old version still continues to load. I cleared out all the cache options I could find in the debug pages, then rebooted the server. Still no luck. Does anyone know how I can change the contents of this help message?
Thanks,
Jim

Here's a solution that works too. Application server is: Tomcat 5.0.28. Identity Manger 7.0 Running on a Windows 2003 server and a SQL Server dbms.
This is not the ideal solution because upgrades (i.e. new releases from Sun) will over write the changes.
This example over writes the HELP button content on the End User Menu.
This approach should work for all App servers however the folder structure will vary.
1. Stop Tomcat
2. Clear cache. (i.e. delete the localhost folder and its contents found in C:\tomcat\work\Catalina\localhost).
3. Create the following folder structure C:\com\waveset\msgcat\help\user
4. Copy the original html file from: C:\tomcat\webapps\wavex\help\html\help\en_US\com\waveset\msgcat\help\user to C:\com\waveset\msgcat\help\user. In this example main-help.html is the file being copied.
5. Make your changes to C:\com\waveset\msgcat\help\user\main-help.html
6. Open C:\tomcat\webapps\wavex\WEB-INF\lib\idm.jar with WinZip and add file C:\com\waveset\msgcat\help\user\main-help.html.
7. Close WinZip
7b. If you want you can check your results.
7c. Open C:\tomcat\webapps\wavex\WEB-INF\lib\idm.jar using WinZip.
7d. Find main-help.html and open it using your favorite web browser to see if your changes have been included.
7e. Hope it worked for you.
8. Start Tomcat
9. Test Change
9a. Log into Identity Manger's end user interface.
9b. Click the HELP button to see your changes.
Good Luck.

How do I access the End User Licensing Agreement? I clicked on it and it gives me a message that I need to launch Adobe Reader, accept and close and reopen. Trouble is I can't get to an icon for file to launch. I am working on a Mac and have installed Mac

I am using a Mac and have installed Adobe Reader for Mac, latest version. I cannot access the End User Licensing Agreement. I clicked on it and it gives me a message that I must launch Adobe, check that I agree, close and reopen. The problem is I can't find any way to launch Adobe because it appears nowhere on my launch pad, nor in my document files or on the control panel. Because of this, I cannot print bank statements nor can I get into my insurance companies billing department to make a payment. HELP!

How about in your Applications folder?

End User Login Message

Similar Messages

Maybe you are looking for