Enterprise services consumption by 3rd party - Security

Dear Experts,
I am planning to create a few enterprise services using an inside out approach (using FMs) with an intention of consuming it in a .NET WPF application (protoyping).
These web services would then be consumed by a third party application which is outside our system landscape, in the near future. This 3rd application would thus have access to our data exposed through the interface.
My question is, first of all, is it possible to achieve this kind of communication without any mappings??
Secondly, how safe is it to provide such interfaces externally and will the user authentication settings be enough to assure safe integration? WIll the firewall settings affect this kind of 3rd party communication over the internet?
Are there any problems that you all foresee?
Any comments on this would be great as I plan to start really soon..
Thanks a lot in advance,
Amith

>My question is, first of all, is it possible to achieve this kind of communication without any mappings??
yes once service is created then any .Net application can consume it by using wsdl.
>Secondly, how safe is it to provide such interfaces externally and will the user authentication settings be enough to assure safe integration?
user/password with limited authorization is safe enough but for extra security you probably use certificates.
>WIll the firewall settings affect this kind of 3rd party communication over the internet?
No, if your landscape is open for http communication then firewall will be unable to block any soap communication as it is plain text.
>Are there any problems that you all foresee?
First see what are your security risk appetite then check who will be user, selective partners or anyone who want to use it. For selective users you can create license or certificate key which need to be used to authenticate by calling application. Always create different endpoint for different partners or user so that you can selectively turn on/off the communication and will be able to trace who is doing what?
Hope this helps you.
Regards,
Gourav

Similar Messages

Enterprise Service consumption

Hi ,
Is it possible to consume an enterprise service via XI. If so what are the steps to consume the web service. Is there any exmples or demo's available??
Thanks & Regards
Praveen.

Hi Praveen,
Can u please check if the following link can help you out.
SAP NetWeaver Process Integration 7.1: Service Interface Implementation Example for Enterprise Service Consumption or Provisioning
/people/daniel.bianchin/blog/2007/11/12/sap-netweaver-process-integration-71-service-interface-implementation-example-for-enterprise-service-consumption-or-provisioning
I think the following thread has similar discussios on service consumption that you are looking for
Re: Webservice scenario in PI7.1
Thanks,
Ram.

Error installing NI TPC Service on a 3rd party windows XPe Based Touch Panel

Hi,
First of all sorry for my English.
I'm having trouble when i try to install NI TPC SERVICE on a 3rd party Touch Panel that runs Windows XPe (Embedded).
I have tried lot of time. I'm installing the msi application for XPe from the folder "NI_TP_Service" of the Installation Path for LabVIEW 8.6 Touch Panel Module.
The installer file hungs after installing the service and just when it tries to initialize it and I get a Error Windows that says "Error 1920. Service 'NI TPC Service' (NITPCService) falied to start. Verify that you have sufficient privileges to start system services."
I'm logged as Administrator, and I don't know what to do.
If anyone know what can i do I'll be pleased in hearing the answer.
Regards

Hi AlexDarsigny,
You will need either the Touch Panel Module or the Datalogging and Supervisory Control Module (DSC). Either of these modules will allow you to deploy and install NI software to your touch panel. They also include many other features for developing those applications. You will also need a deployment license for any non-NI touch panel that you plan on deploying the applications to. The other software needed on the touch panel itself will include the LabVIEW Run-Time Engine and the NI TPC Service. The following link has some information on this:
http://zone.ni.com/reference/en-XX/help/371618H-01/lvxpe/tpc_install_tpc_srvc/
Once deployed, the program will run as a stand-alone application that can be started from the HMI itself. Of course this depends on the functionality you create within the application, just like you would for any standard LabVIEW application.
David C

Add 3rd party Security MBeans with weblogic.Admin?

[Weblogic 8 SP4 on Solaris]
Would be great if either through weblogic.Admin or another Java interface I could add 3rd party Security MBeabs (i.e. SiteMinderIdentityAsserter as Identity Asserter). Any ideas? Using the create task in wlconfig doesn't work (NullPointerException while the property table is being updated):
[wlserver] <2005-okt-27 kl 8:12 IRDT> <Warning> <RMI> <BEA-080003> <RuntimeException thrown by rmi server: weblogic.management.internal.AdminMBeanHomeImpl.createAdminMBean(Ljava.lang.String;Ljava.lang.String;Ljava.lang.String)
And I don't want to the console to make additions. Any ideas?

Will take a look at the scripting. Thanks. But the weblogic.Admin command given is a no go. Maybe later version av weblogic (currently using WLS 8 SP4) support domain qualified names but I get the following error:
$ blogic.sspi.auth.SiteMinderIdentityAsserter -name Security:Name=myrealmSiteMinderIdentityAsserter
ObjectName: Invalid value -> Security:Name=myrealmSiteMinderIdentityAsserter
But if I specify with the create command -mbean "Security:Name=myrealmSiteMinderIdentityAsserter,Type=anything" -type com.netegrity.siteminder.weblogic.sspi.auth.SiteMinderIdentityAsserter then the resource is added. Odd thing is that the Type property in the mbean arguement must be stated. I can put anything there. Doesn't matter.

Web console doesn't use 3rd party security cert

I set up a Mobility Service 2.1 server with a 3rd party public security cert.
The system authenticates through GroupWise 2014, set up via trusted app.
It works fine as far as mobile devices using the cert, but the Web console for the server does not use the same cert.
I've found nothing in the documentation outlining where the security cert for the web console is specified.
Anyone have any idea in what file this is defined?

gathagan wrote:
> I've found nothing in the documentation outlining where the security cert for
> the web console is specified. Anyone have any idea in what file this is
> defined?
Yep -
You can also use the same mobility.pem file that you created earlier for
securing the Web
Admin Console. To do so, do the following:
1. Change to /var/lib/datasync/webadmin on the Mobility Service.
2. Back up the existing server.pem file (cp server.pem server.bak)
3. Copy the mobility.pem file that you created earlier into
/var/lib/datasync/webadmin, and
name it server.pem.
4. Restart the Web Admin (rcdatasync-webadmin restart).
Danita
Novell Knowledge Partner
GroupWise Mobility Service 2.0 Guide - http://bit.ly/1cv13RE
If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below...
Are you a GroupWise Power Administrator? Join our site at
http://www.caledonia.net/register

Should i use Business system or Business service for a 3rd party file sys?

Hi Gurus
My requirement is to send a file from 3rd party client system to SAP ECC system.
I want to confugure a file sender CC to pickup the file and send it to ECC system thru proxy.
Now, after going thru the SAP definitions of 3rd party Business system (if the system is present the landscape and technical details are available) and Business service (if system's technical details is not available because it is not present in the landscape. Only the interface details are available, for ex: external webservice), i am not sure which one to use.
What is the use of using a 3rd Business system instead of using business service in my current situation?
In both the cases, i can use a file sender CC and pickup the file from a folder using FTP protocol.
What is the criteria based on which i need to take this decision?
And finally, how are the system name & host name details, which we given during 3rd party technical system definition in SLD useful?
Many Thanks
Chandra

Hi Chandra
Its always preferred to use Business service for communication with systems outside the landscape. As it does not refer to any SLD components and safe to use on internet etc.
What is the use of using a 3rd Business system instead of using business service in my current situation?
If you want to use 3rd party system you need to define party based communication and it acts as a party in production environment. You can also create a Standalone sytem in SLD for your use. Standalone technical system mostly refers to standalone Java applications in landscape.
n both the cases, i can use a file sender CC and pickup the file from a folder using FTP protocol.
What is the criteria based on which i need to take this decision?
If your communication is party based and the 3rd party you refer is a party for ERP then it make sense to use a third party communication and use party name as well.By this i mean business wise. Else its always good to use Business service.
And finally, how are the system name & host name details, which we given during 3rd party technical system definition in SLD useful?
To use this third party system you need to register products on TS else you will not be able to see any Interface etc while configuring in ID. you need to add all details to it in SLD.
Thanks
Gaurav

Service for Intercompany 3rd party items

Hi,
We are doing Intercompany sales. But we get requests from the Intercompanies for doing service for non-company products.
What I mean is, even if the parts are not made by our company, just for helping in doing the service for Intercompany's Purchased parts, is there a standard solution in SAP to support this?
I know that in SD, we have Service Contracts & also in Customer service we have Feild Service module to handle Service for warranty parts.
But how to use SAP to do service for 3rd party items?
Please do forward me some links to learn.
Thanks,
Pri

close

PI 7.1 enterprise services: How to find & invoke SAP HCM enterprise Service

Hi all,
in PI 7.1, i read, there is support of enterprice services.
is my current understandings right about PI 7.1 and enterprise services:
1.the standard BAPIs, standard RFC that were provided in R/3 are replaced by standard enterprise services in SAP ECC.
2.a nonSAP application can invoke an enterprise service in the same way as a nonSAP application used to call an RFC in the R/3.
I want to view how an enterprise service of any SAP module can be called by a nonSAP applicaiton.
are there any doc or blog which shows this.
is possible with/wihout PI.
We have follwoing things installed.
1. PI 7.1 SP4.
2. SAP ECC 6.0, i am dealing with SAP HCM module.
are there any enterprise services of HCM available (e.g standard enterprise services given by SAP for HCM module).
basically i want to test whether a nonSAP application like a java application, can it get some info using standard HCM enterprise services provided by SAP.
I explored esWorkplace (http://www.sdn.sap.com/irj/sdn/esworkplace), but it does not display HCM related process components under the column "DISCOVER ENTERPRISE SERVICES".
thanks,
Madhu.

Hi Madhu,
YOu can check this page for simple sample applications for enterprise services consumption:
http://esworkplace.sap.com/socoview(bD1lbiZjPTAwMSZkPW1pbg==)/render.asp?packageid=DE0426DD9B0249F19515001A64D3F462&id=EBF08FD8067241F787448B3EB87DA04E
Check this page for ERP-HCM
http://esworkplace.sap.com/socoview(bD1lbiZjPTAwMSZkPW1pbg==)/render.asp?packageid=DE0426DD9B0249F19515001A64D3F462&id=C6AE1E905D8E11DA36BB000F20DAC9EF
and complete business map here:
http://esworkplace.sap.com/socoview(bD1lbiZjPTAwMSZkPW1pbg==)/render.asp?id=13C98C60080711DA1503000BCDDC2565&fragID=&packageid=DE0426DD9B0249F19515001A64D3F462&iv=
Regards,
Ravi

USB Sync with 3rd party Software

Seem like Verizon is determined to press using it's restrictive syncing technique with MS Outlook. I guess they still want to compete with Outlook. There is an issue with USB sync with the Droid X.
Android OS 2.2 supports TETHERING, but Version does not. By allowing tethering, 3rd party software can sync with the Droid X via USB.
Why is Verizon restricting a feature so many business users want? To compete with Apple, Verizon should wise up and support its user communit to allow easy syncs with Outlook (Contacts, Notes, Calendar) at the subdirectory level. Business people will not post their sensitive information on the Google site in order to sync with their phone.
Wise up Verizon! You are missing an opportunity in your battle with Apple!

Hi Nitsan
You need to contact Oracle to see if they can help you. Supporting a Discoverer installation without a support number (CSI Number) is not the right thing to do. You need to pay up and buy the necessary support so that you can get the help you need.
Having said that, Oracle do produce lists of certified operating systems and platforms etc and you will not have a lot of luck if you go outside those boundaries. I'm not saying that you have but usually if their product works on one platform but not on another it is usually something at the platform end that is causing the problem. In this case the first place I would look is to see whether there are any settings within the 3rd party security software that can be applied to tell it that anyone running Discoverer inside IE is allowed to do so.
It may be as simple as allowing JInitiator to work. You may also want to try using the Sun JRE instead to see if that helps.
I strongly recommend you buy a support license. You can buy these relatively cheaply and they can be purchased in groups of I believe 25 requests (could be a different number) thus keeping the cost down. If you yourself are an independent consultant you can buy your own support license and use that to get help for your clients.
Best wishes
Michael

IPayment with 3rd Party payment system

Hi All,
I have to configure iPayment with the third party payment system. the 3rd party talks with the Paymentech for credit card processing.
Here in this case,
1. 3rd party server is providing web services to talk with them
2. 3rd party server is working fine with the Paymentech
Issues
1. As per my understanding, I have to use Gateway model overhere. Correct me if I am worng?
2. Do I need to create any configuration servlet to talk with 3rd party server or is there any other way?
3. At which point I should call the web services provided by 3rd party?
4. How to create request as per the web service requirements and how to solve the response provided by web services?
Thanks in advance

Hi,
If your third party system talks with Payment Tech, Is it possible for you to confiure payment Tech directly with iPayment. As you know that oracle provides all the necessary confguration and servelt. Its pretty striagt forward and simple.
Find out whether you can use payment tech directly, that should solve most of your issues. If you need more information, let me know
Thanks,
RK
925 998 1494
Independent Techno Func Consultant

3rd part security providers for SSL Server

Hello,
I was wondering if anyone knows if you can use a 3rd party security provider to
provide SSL for Weblogic 7.x Server ???
What is the best way to accomplish this (eg. MBeans) ???
Does anyone have experience attempting this ???
I would really like to use our security provider which includes support for PKCS#11
hardware etc.
Thanks,
Trevor.

Hi Christian,
I would really like to check out the example you specified in the below URL, but
it appears to be invalid. Could you please send another URL for the example.
PS. Our security provider is a JSSE/JCE implementation. Do you guys have any
implementations or examples of the Sun JSSE provider being used with the BEA Weblogic
model. This would also be very helpful.
Thanks,
Trevor Nielsen
Wedgetail Communications
"Security for Network Devices"
"Christian Plenagl" <[email protected]> wrote:
>
Hi Trevor,
sure you can use your own security provider with WLS 7,
to do this please read the following document:
http://e-docs.bea.com/wls/docs70/dvspisec/index.html
We also provide a sample security provider which is available
at http://dev2dev/direct/SampleSecurityProvidersUnmanaged.zip
Christian Plenagl
Developer Relations Engineer
BEA Support
"Trevor Nielsen" <[email protected]> wrote:
Hello,
I was wondering if anyone knows if you can use a 3rd party securityprovider
to
provide SSL for Weblogic 7.x Server ???
What is the best way to accomplish this (eg. MBeans) ???
Does anyone have experience attempting this ???
I would really like to use our security provider which includes support
for PKCS#11
hardware etc.
Thanks,
Trevor.

Service desk integration with 3rd party tool

Hi all,
I've problems understanding the setup of connecting a 3rd party service desk tool with solman itsm.
So far it's clear that I need to activate and configure the service provider and consumer in soamanager.
The webservice then will be called by the 3rd party tool with corresponding data.
However, according to spro I need to define a value mapping for incoming/outgoing calls.
I do not understand this mapping... the WSDL of webservice ICT_SERVICE_DESK_API contains lots of fields, but in spro -> value mapping I can only define the following fields (which are hard coded in type pool AIICT):
SAPCategory
SAPComponent
SAPDatabase
SAPFrontend
SAPIncidentID
SAPIncidentStatus
SAPInstNo
SAPOperatingSystem
SAPSoftwareComponent
SAPSoftwareComponentPatch
SAPSoftwareComponentRelease
SAPSubject
SAPSystemClient
SAPSystemID
SAPSystemType
SAPUserStatus
What about attachments, priority etc.?
Will the interface parameters mapped to these ones?
For what purpose do I need to maintain the value mapping?
Can you give me a hint?
Regards, Richard Pietsch

can you please check the WIKI Solution manager Service Desk Integration with third party service desk - SAP Solution Manager - Security and Authorizat…

Securing 3rd party webservice

I would like some advice please.
We are building a flex application which is consuming a 3rd
party web-service. We want to make sure that only the flex
application we made can have access to this 3rd party web-service.
The flex application will be publicly available, so there is no way
of putting in some authentication here. How should I configure the
proxy-config.xml to prevent other consumers (other than our flex
app) from using the web-service available through the flex proxy.

Hi,
There are ways to secure destinations. Please visit the URL
below for details on how to secure destinations.
http://livedocs.adobe.com/blazeds/1/blazeds_devguide/services_config_3.html
Hope this helps.

How to Integrate HRMS with a 3rd party application via restful web services?

Hi All,
I am new to Oracle network and wanted to know how we can integrate Oracle HRMS with our external website via web services. I have already looked in PL/SQL APIs but that is not what i need but i want the integration to be web based like SOAP/XML or JSON.
Thanks,
Aqeel

Hi
Yes we have implemented SSO with 3rd party application running on IIS server (running on Windows 2003 server).
Here you go the link
http://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/security/s-u/using sap logon tickets for sso to microsoft-based web applications.pdf
forum
/thread/11711 [original link is broken]
DEMO
https://www.sdn.sap.com/irj/sdn/developerareas/ep?rid=/webcontent/uuid/110ff05d-0501-0010-a19d-958247c9f798
Cheers
Jawahar Govindaraj
PS:Reward pts

SPA IP Phone - * (Star Key) not working using 3rd party conference service

Hi - I have an SPA 504G with SIP service and use a third party conference service to host conference call. The 3rd party service requires me to log in as the Leader and to do this I have to press the * key. This doesn't work possibly becuse * has been configured as a short action code.
Does anyone know of a way to disable short codes (*) whilst a call is in progress?
Thanks

This doesn't work possibly becuse * has been configured as a short action code.
Then deconfiguration of such action codes and/or relevant supplemental services should solve your problem.
It may help you to know that I have no problem using * against remote IVR with the following configuration (SPA508G with firmware 7.5.4):
Vertical Service Activation Codes
Call Return Code:
Blind Transfer Code:
Call Back Act Code:
*4
Call Back Deact Code:
#4
Cfwd All Act Code:
*21
Cfwd All Deact Code:
#21
Cfwd Busy Act Code:
*67
Cfwd Busy Deact Code:
#67
Cfwd No Ans Act Code:
*61
Cfwd No Ans Deact Code:
#61
CW Act Code:
CW Deact Code:
CW Per Call Act Code:
CW Per Call Deact Code:
Block CID Act Code:
Block CID Deact Code:
Block CID Per Call Act Code:
Block CID Per Call Deact Code:
Block ANC Act Code:
Block ANC Deact Code:
DND Act Code:
*85
DND Deact Code:
#85
Secure All Call Act Code:
Secure No Call Act Code:
Secure One Call Act Code:
Secure One Call Deact Code:
Paging Code:
Call Park Code:
Call Pickup Code:
*1
Call UnPark Code:
Group Call Pickup Code:
*1
Media Loopback Code:
Referral Services Codes:
Feature Dial Services Codes:
*61*`c`|*21*`c`
Supplementary Services
Conference Serv:
yes\r no
Attn Transfer Serv:
yes\r no
Blind Transfer Serv:
yes\r no
DND Serv:
yes\r no
Block ANC Serv:
yes\r no
Call Back Serv:
yes\r no
Block CID Serv:
yes\r no
Secure Call Serv:
yes\r no
Cfwd All Serv:
yes\r no
Cfwd Busy Serv:
yes\r no
Cfwd No Ans Serv:
yes\r no
Paging Serv:
yes\r no
Call Park Serv:
yes\r no
Call Pick Up Serv:
yes\r no
ACD Login Serv:
yes\r no
Group Call Pick Up Serv:
yes\r no
ACD Ext:
1234
Service Annc Serv:
yes\r no

Enterprise services consumption by 3rd party - Security

Similar Messages

Maybe you are looking for