GRC 10 - SSO via Portal - how to redirect url in notification variables

Dears,
I am in the process of designing our GRC 10 machine to be accessed via SSO in the Enterprise Portal. Yet I cannot find any info on what will happen with the URLs that are placed by ARM MSMP workflow in the variables of notifications/approvals.
I typically would (as in 5.3) expect a redirect URL to be made available as an option.
As an example: the Firefighter Log notification standard holds a variable pointing the URL to :
http://GRC10server:GRC10port/sap/bc/webdynpro/sap/grac_ui_spm_log_email?sap-client=001&sap-language=EN&WF_ID=53FB8FEAC9E260D6E10000000AF90C44&APP_TYPE=1
Yet now with SSO via the portal we also want this URL to go via the portal instead of directly to the GRC machine. How can we achieve that?
Is there a configuration way to have GRC10server:GRC10port adjusted to the portal address..
(mind that the WF_ID segment in this url is dynamically generated, so directly sqeezing in a static portal url is not an option)
Cheers,
Jim

Hi Neeraj,
Thx for your reaction. This unfortunately will not do the job as pasting the URL in the notification template will make it static. The problem is that the URL inserted by default is a dynamically created one which holds a variable pointer to a workflow object id.
Now i am researching if a custom build portal redirect application will do the job. But there must be others having the same problem if you want the GRC iview in the portal to be the 'one-stop-shop' for your GRC users...
Cheers,
Jim

Similar Messages

BOBJ SAP Integration with Active Directory SSO via Portal

Hi all,
We are only interating BOBJ with BW/BI and the user experience is as follows:
Users login to the SAP Portal using their Windows Active Directory user id and password to gain access to the portal.
From my understanding at the moment, the way the interation kit works is that the BOBJ system is configured as per the manual importing the SAP roles and SAP users who will access the Crystal reports via either GUI or Portal.
My question is: When creating a Crystal report is created, the connection details use SAP login credentials and in the CMC the SSO option can be set so that the SAP user who has logged onto GUI or Portal can launch the report... this is fine and works as intended taken that the user logged on with his/her SAP login. As per the user experience above, users log in using their AD Login into Portal, and never use GUI, where this in theory is SSO into Portal. So how does one get past the login screens (BOBJ and database) while preserving AD SSO to SAP and BOBJ?
Any guidance, documents or comments will be much appreciated.
Thanks
Jacques

HI,
yes it is possible:
take a look at the blogs I did on the install and configuration (specially the SAP Authentication):
BusinessObjects and SAP - Installation and Configuration Part 1 of 4
Install Part #1
BusinessObjects and SAP - Installation and Configuration Part 2 of 4
Install Part #2
BusinessObjects and SAP - Installation and Configuration Part 3 of 4
Install Part #3
BusinessObjects and SAP - Installation and Configuration Part 4 of 4
Install Part #4
BusinessObjects and SAP - Configure SAP Authentication
SAP Authentication
Important here is that:
- the BI System is configured to accept tickets
- the portal and BI system are configured as trusted system
- the SAP authentication is configured
Ingo

Searching ifs via portal thru use of URL ?

I was recently told by my customer that someone from Oracle told
him you could create some sort of a URL inside portal to ifs
that would allow you to search ifs via portal.
I am not aware of anything like this. Can anyone out there shed
some light on this? Can this be done?
Thanks.

Hi Grigoria,
You can open a browser with the function module CALL_BROWSER. Giving the BSP URL, you will be able to call your BSP application from ABAP code.
Alternatively, you can embed your BSP application within SAPgui with an HTML control. Please check demo program CNHTTST1 for a code sample.
Best regards,
Tanguy

How to redirect URL?

Our lab uses Xserve to host our web pages. We want to redirect URLs (without showing real web folder details) when users surf on our web site. For example:
Our web site host name: www.labname.edu
We want that users only see "www.labname.edu" on the browsers, instead of showing "www.labname.edu/folder1/subfolder1/.../filename1.html" or "www.labname.edu/folder2/subfolder2/.../filename2.html"...etc.
I am a new bee for Xserve and do not know how to resolve this task. I will appreciate any suggestion. Xserve admin provides URL aliases and redirects. Is it possible to use that to resolve my problem. Does anyone can teach me how to set up "type", "pattern" and "path"?
Thanks in advance!

What you're asking for is not trivial to do; you're basically usurping how the file-based presentation works, which means you're going to be writing some code. Simple redirects are easy, but they don't provide your required transparency with the target files, and the scheme doesn't scale all that well. The hack approach is to use file (or directory) links; the ln command and related. This gets ugly to maintain. The "big hammer" approach is to load the content into a content management system (CMS; eg: Drupal, Wordpress), and let the CMS manage all this stuff for you.

How to redirect url in servlet?

in servlet, i want to redirect page to a url which not in same container, and send to some information to this url, what shall i do?
thanks.

duffymo's solution should do it, then.
You could build on top of that and send serialized data (I'm assuming your data is serializable) over the wire to the other server using an HttpUrlConnection and ObjectOutputStream's writeObject(), and read it at the other end with ObjectInputStream's readObject(). For example for the write operation :
URL url = new URL(other_server_url);
HttpURLConnection urlcon = (HttpURLConnection)url.openConnection();
// after setting urlcon attributes like requestMethod to POST etc...
ObjectOutputStream out = new ObjectOutputStream(urlcon.getOutputStream());
// now write the data, then flush & close the connection
...If the amount if data to transfer is quite large, you could again build on top of the above and use CompressedSerialization :
http://robowiki.dyndns.org/perl/robowiki?CompressedSerialization

Urgent: How to redirect Portal to an external URL on logoff using iViews?

Hi,
Please help me with the below query-
We need to redirect the Portal to an external URL on logoff.
i) But, the Portal is a shared service we cannot make use of the exit URL functionality in the Portal.
ii) Only for one service we need to redirect the URL
Can it be done by changing the Masthead iView - LogoffConfirmMsg.jsp ?
I am new to portal, please help urgently.
Cheers
Anish

Hi Anish,
I was just going through the code:
You may need to try this:
In Logoffconfirmmessage.jsp there is a java script function called logoff()
function logoff()
        if (EPCM.getUAType() == EPCM.MSIE)
            window.returnValue = 'logoff';
        else
            window.opener.logoff();
        closeWindow();
What you could do here is place that code just before closeWindow()
Yes, you could try window.top.location.href="http://.......";
Try this and let me know because I have a feeling that this will change the URL of the confirm message. Not sure though...
Hope this helped.

Calling a web dynpro application via portal using SSO

Hello Expert,
i have a requirement where i need to call a web dnpro application via portal.
But it is asking for user name and password.
i want to call using single sign on.
Can u please suggest a way.
i did the coding like this:-
CALL METHOD cl_wd_utilities=>construct_wd_url
EXPORTING
application_name = l_c_appl_name
IMPORTING
out_absolute_url = l_v_gv_url_string.
l_v_icf_url = l_c_icf_url_val.                      "#EC SYNTCHAR
CALL METHOD cl_icf_tree=>if_icf_tree~service_from_url
EXPORTING
url             = l_v_icf_url
hostnumber      = l_c_0
authority_check = space
IMPORTING
icfactive       = l_v_m_sso_active.
IF l_v_m_sso_active = l_c_x .
CREATE OBJECT o_viewer
EXPORTING
parent = o_empty_co.
CALL METHOD o_viewer->enable_sapsso
EXPORTING
enabled = l_c_x
EXCEPTIONS
OTHERS = 0.
l_v_gv_url_c = l_v_gv_url_string .
CONCATENATE l_v_gv_url_c l_c_url_string p0022-pernr INTO l_v_gv_url_c.
CALL METHOD o_viewer->detach_url_in_browser
EXPORTING
url        = l_v_gv_url_c
EXCEPTIONS
cntl_error = 1
OTHERS     = 2.
IF sy-subrc <> 0.
MESSAGE ID sy-msgid TYPE sy-msgty NUMBER sy-msgno
WITH sy-msgv1 sy-msgv2 sy-msgv3 sy-msgv4
RAISING error_occured.
ENDIF.
cl_gui_cfw=>flush( ).
ENDIF.
but it is not working
thanks
Mahesh

Hi Mahesh,
You need to setup a Single Sign On between SAP Portal and ECC system where yoy are doing the development.
Ask basis team to setup the single sign on and usually this is the job done by Basis teams. Refer the below link to get some idea on SSO setup:
http://scn.sap.com/community/enterprise-portal/blog/2013/12/15/sso-configuration-between-sap-portal-73-and-ecc-60-ehp-6
Thanks
Krishna

SSO to ESS via Portal

Hi
Our szenario is:
kerberos from client to Portal
Reference System to map SAP User
Trust between Portal and HR
ESS Backendsystem with auth method SAPLOGONTICKET
-> Works all fine.
Now the problem is ...
We would like to "reduce" the TRUST to enable SSO only for ESS & MSS, and not allow SSO to use it eg. with an trunsaction iVIEW to HR. Simply said, a higher security.
We don't know how to do this. Anybody with ideas?
Am I right, that with SNC I cannot tansport the user to build SSO between Portal and HR?
The idea was, to use SNC, because with SNC you can specify on the HR side who is mapped and allowed to enter with SSO.
But it seems, that between JAVA and ABAP Systems SNC can only be used to encrypt transport messages ???
What I'm wondering is:
With SAP Business Object (BOE) you can setup a SNC connection from BOE => BW to do SSO, or not?
Regards Martin

Hello Martin
how about this:
1. create 2 'system' in your portal, one is for ESS/MSS only and this system can use the SSO.
2. create another system and use UIDPW as the logon method in your protal -> system landscape.
except the ESS/MSS, let all the other transaction iView use the second system.
Regards,
Thunder

How to display swf in full screen mode and how to redirect to a url

Hi,
I have 2 questions :
Question 1 - I have a flash swf file and I want to display it in the browser in full mode meaning it should fit the browser, I have tried adding
fscommand("fullscreen", "true");
in the first frame of a lyaer but it does not work.
Question 2 - How to redirect to another page at the end of the swf movie, I have tried adding :
stop();
navigateToURL( new URLRequest("*www.microsoft.com*"), "_self");
in the last frame but it does not work.
Thank you very very much for your assitance !!
Terry

"fscommand("fullscreen", "true");" only works for self-running executables, not embedded SWFs in a web page.
To get the swf to fill the browser page, the best thing to do would be to adjust the publish settings of the "HTML Wrapper" page and copy the necessary pieces from the resultant HTML file into the HTML file you are putting the swf into.
I have had some successes dealing with similar navigation issues by breaking up the code into multiple tasks:
var url:String = "http://www.microsoft.com";
var urlReq:URLRequest = new URLRequest(url);
navigateToURL(urlReq);
I can't guarantee that will help, but at least I tried. :-)

Portal Logoff redirection URL

Hi,
I want to redirect the URL to another page from the default log on page when the user logs off. I know we can change it in ume.logoff.redirect.url and give the desired URL. But the problem is we have two different sites and each sites should return to different screens once the logoff is clicked. So the URL cannot be maintained in this property. We have two mastheads for both this sites.
I tried to figure it out in the code. The URL to be mentioned is present in logOutComponent which is part of the jar file which comes with masthead. I cant change the desired URL in that component. Where can i change the URL to get the desired result?
Regards,
p188071

Hi <name>,
I decompiled the "logOutComponent" .class and it containts the following code:
// Decompiled by DJ v3.6.6.79 Copyright 2004 Atanas Neshkov Date: 19-1-2008 18:04:06
// Home Page : http://members.fortunecity.com/neshkov/dj.html - Check often for new version!
// Decompiler options: packimports(3)
// Source File Name:   LogOutComponent.java
package com.sapportals.portal.navigation;
import com.sap.security.api.UMFactory;
import com.sap.security.api.util.IUMParameters;
import com.sapportals.portal.prt.component.*;
import com.sapportals.portal.prt.pom.IEvent;
import com.sapportals.portal.prt.runtime.IPortalRuntimeResources;
import com.sapportals.portal.prt.runtime.PortalRuntime;
// Referenced classes of package com.sapportals.portal.navigation:
//            INavigationGenerator
public class LogOutComponent extends AbstractPortalComponent
    public LogOutComponent()
    public void doOnNodeReady(IPortalComponentRequest request, IEvent event)
        String externalUrl = UMFactory.getProperties().get("ume.logoff.redirect.url");
        boolean silent = UMFactory.getProperties().getBoolean("ume.logoff.redirect.silent", false);
        if(externalUrl != null && !externalUrl.equals("") && !silent)
            request.redirect(externalUrl);
        } else
            INavigationGenerator navigationService = (INavigationGenerator)PortalRuntime.getRuntimeResources().getService("com.sap.portal.navigation.service.navigation");
            String URL = navigationService.getPortalURL(request, null);
            request.redirect(URL);
    public void doContent(IPortalComponentRequest iportalcomponentrequest, IPortalComponentResponse iportalcomponentresponse)
As you can see this module just gets the property "ume.logoff.redirect.url", does an adittional check and then gives back this url..
Not that fancy..
My suggestion to you would be to edit the portalapp.xml, look for the component "default" and extend it with an additional component property called "MyCustomLogOffURL" for example. To do this just copy the allready excisting "Help URL" property and rename.
Example:
<property name="MyCustomLogOffURL" value="http://yourloggofurlforthismasthead.com">
<property name="plainDescription" value="My Custom Logoff URL" />
<property name="category" value="Navigation" />
</property>
Adding this property here makes you set it seperately for both the masterheads you use, because you can just set it in the Property editor of the PCD
In addition you now need to modify the "HeaderiView.jsp" a bit to use your custom parameter instead of the "logOutComponent".
To do that add the following initialisation at the beging of the jsp file:
final String MY_CUSTOM_LOG_OFF_URL = "MyCustomLogOffURL";
....and change the function GetLogoffURL so that it will look like this:
private String GetLogoffURL(IPortalComponentRequest request)
     String value = (String)request.getNode().getValue(MY_CUSTOM_LOG_OFF_URL);
     return value;
<h3>PLEASE TAKE NOTICE OF THE FOLLOWING</h3>
<h5>Never change the SAP component always create a copy and rename it to your own namespace!!!</h5>
Good Luck,
Benjamin Houttuin

How does c:url tag know when the session is cookieless and thus to redirect

i have been looking at the source code for c:url tag and can't figure out how they are doing that. I need a way to do that in a jsp, to check if the cookies are allowed or not.

how does c:url tag know when the session is cookieless and thus to redirecthuh?
What do cookies have to do with redirecting?
Cookies get encoded into a URL using the method in HttpServletResponse: response.encodeURL() or encodeRedirectURL().
That method determines whether or not it prints out the session id as part of the url, or it gets uses cookies.
You can try: request.isRequestedSessionIdFromCookie().
If that is true, you know that session cookies are supported (or at least that one was)

Hiding backend URL in BSP iView / connect via portal-server to backend

wrong posting / folder.. pls delete..
Message was edited by: Mario Kölzsch
Message was edited by: Mario Kölzsch
Message was edited by: Mario Kölzsch

Please let me know with what user the content player is played when accessed via portal? (Common system user or Login user)
Check the user credentials and
check single sign on if you are hoping from one server to other for playing content player

SSO and portal timeout -- other bug?

...this is very probably related to the other post talking about SSO and portal timeout...
I am having another weird issue with dotnet portlets that uses inline refresh (done automatically by dotnet accelerator) and SSO.
When you let the portal session expire, and then click on a button/link within a portlet (hence generate an inline refresh gatewayed request), the full portal window (header/footer etc...) appears within the portlet, instead of the portlet content alone.
I did some http traces (see below) and it seems the problem is due to the windows SSOLogin.aspx (we are using windows auth SSO) not taking the requested portlet gatewayed request url as a post login redirect info... but taking instead the current page url (which is wrong)
Thus, after the gatewayed portlet request is successfully authenticated by the SSOLogin.aspx component, it is automatically redirected to the wrong urll...making the full portal page refresh into the portlet.
So my question is: have anyone already seen such behavior? And has anything been done to fix this?
It really seems like a bug with the SSO servlet...but maybe i am doing something wrong...Just want to have your thoughts on this.
Thanks,
Fabien
============================================================================================
HTTP Trace:
POST     302     Redirect to /portal/sso/SSOLogin.aspx?in_hi_userid=15046&space=CommunityPage&parentid=1&cached=false&control=SetCommunity&PageID=0&CommunityID=205&parentname=Login     http://your.portal.com/portal/server.pt/gateway/PTARGS_0_15046_362_205_0_43/http%3B/your.portletserver.com/yourapp/youraspx.aspx
GET     401     text/html     http://your.portal.com/portal/sso/SSOLogin.aspx?in_hi_userid=15046&space=CommunityPage&parentid=1&cached=false&control=SetCommunity&PageID=0&CommunityID=205&parentname=Login
GET     401     text/html     http://your.portal.com/portal/sso/SSOLogin.aspx?in_hi_userid=15046&space=CommunityPage&parentid=1&cached=false&control=SetCommunity&PageID=0&CommunityID=205&parentname=Login
GET     302     Redirect to http://your.portal.com/portal/server.pt?in_hi_userid=15046&space=CommunityPage&parentid=1&cached=false&control=SetCommunity&PageID=0&CommunityID=205&parentname=Login     http://your.portal.com/portal/sso/SSOLogin.aspx?in_hi_userid=15046&space=CommunityPage&parentid=1&cached=false&control=SetCommunity&PageID=0&CommunityID=205&parentname=Login
GET     200     text/html; charset=utf-8     http://your.portal.com/portal/server.pt?in_hi_userid=15046&space=CommunityPage&parentid=1&cached=false&control=SetCommunity&PageID=0&CommunityID=205&parentname=Login

I have this happen in v6.0 sp1. We have worked around the problem with a bit of work and synchronization of settings. Below, I've outlined how we've worked around the problem (which is indeed a problem that should be fixed). Also, if you have a load balancer, you'll need to set your session timeout on the load balancer to a bit more than the refresh rate that you set for your communities and My Pages.
Resolving the Portlet Timeout / Refresh Problem in ALUI Portal_
Problem: Users occasionally receive the portal page within a portlet error
Cause: The root cause has not been determined; however it appears that the primary event that exhibits the behavior is when a teammember’s session has expired on the portal server and they then utilize a .NET form-based portlet which refreshes in place. Because we are using WIA SSO to enable automatic logins to the portal, it makes the error seem to occur randomly.
Resolution:
The workaround solution is to – 1) increase the portal session timeout on the portal web servers from the default 20min to 4 hours, and 2) set the MyPage refresh interval setting for all portal users to 3 hours. The setting name is a bit of a misnomer, as it will actually refresh the entire portal page automatically if the user is idle on either a My Page or a Community Page, as these are the only two places that portlets reside.
Increasing the portal session timeout:
The portal session timeout is controlled in two places, and both settings should match. On the portal virtual directory in IIS, edit the configuration and increase the timeout setting to 240 (minutes). Then, edit the portal application’s web.config file (d:\portal\ptportal\6.0\webapp\portal\web\) and increase the sessionState Timeout variable to 240. Editting the config file will require you to restart the services before you see the change.
Initial setting of the MyPage refresh interval:
The initial setting will need to be done by a SQL script in order to apply it to all existing users. The Default Profile should also be updated so that all new user synched from AD will have this setting applied automatically.
/* Delete refresh interval settings for all users first so that there are no conflicts on the inserts */
DELETE FROM portaldbuser.ptprefs WHERE prefname = 'intMyPageRefreshRate'
/* Insert desired page refresh setting for all users */
INSERT INTO portaldbuser.ptprefs (userid,gadgetid,prefclassid,prefobjectid,prefname,prefvaluetype,prefvalue,pagenumber) SELECT objectid,0,0,0,'intMyPageRefreshRate',3,180,0 FROM portaldbuser.ptusers
From Administration, access the Default Profiles utility. Check the Default Profile entry and click on the Edit Profile Layout link. Click on the My Account link in the Portal Settings portlet and then on the Display Options link on the next page. In the Page and Portlet Settings, update the Your My Page will be updated: setting to 4 hours. Click Finish twice to return to Administration.
Updating the MyPage refresh interval:
To update the setting just modify the insert portion of the SQL script. Change the prefvalue number (180) to the desired timeout in minutes and rerun both statements of the script.
The Default Profile should be also be modified per the instructions above.
I hope this helps...
-tom

SSO between Portal and Nakia.....problem with SSO... library not found..

Hi Sdn's and Nakisa tehnical experts,
We have a Portal environment 7.02 , a Nakisa environment 3.0 (CE) and and HR backend environment 701 (604).
We are busy setting up SSO between Portal and Nakisa via the, URL iview for the Org chart (http://<host>:<port>OrgChart/default.jsp).
We have done as indicated in wiki:
http://wiki.sdn.sap.com/wiki/display/ERPHCM/SAPSSOAuthenticationwithverify.pseusingSAPSSOEXT
We are however stil having issues with the SSO and in the cds.log the following is being displayed:
++01 Aug 2011 13:11:42 ERROR com.nakisa.Logger - com.mysap.sso.SSO2Ticket : Could not load library: sapsecu.dll - java.lang.Exception: MySapInitialize failed: rc= 14null++
++01 Aug 2011 13:11:42 ERROR com.nakisa.Logger - com.nakisa.framework.login.Credentials_SapSso : java.lang.Exception: MySapEvalLogonTicketEx failed: standard error= 9, ssf error= 0++
++01 Aug 2011 13:11:42 ERROR com.nakisa.Logger - com.nakisa.framework.login.Credentials_SapSso : Internal error (9) - No SSF error (0)++
Can someone indicate what I am doing wrong?
Regards Dries

Hi Luke,
thanks a lot for your help so far.
I have created a root/XML folder under the diretory, and the path is now as follows:
K:\usr\sap\NKP\J14\j2ee\cluster\apps\Nakisa\OrgChart\servlet_jsp\OrgChart\root\.system\Admin_Config\__000__Sasol_DEV_LIVE\.delta\root\XML
It seems like it finds the verify.pse, but not the library, sapsecu.dll.
My credentials.xml file is as follows:
<credentials>
<assembly name="SapSso"/>
<info>
    <item name="PseFilePath">XML\verify.pse</item>
    <item name="SsfLibFilePath">XML\sapsecu.dll</item>
    <item name="PsePassword"></item>
    <item name="WindowsPlatform">64</item>
    <item name="TicketFile"></item>
    <item name="Base64decode">true</item>
   </info>
</credentials>
I however stilll get the following in the cds.log
15 Aug 2011 13:59:53 INFO com.nakisa.Logger - Tenant ID: 000
15 Aug 2011 13:59:55 INFO com.nakisa.Logger - LoginSettingsObject Load: 1719
15 Aug 2011 13:59:55 INFO com.nakisa.Logger - com.nakisa.framework.login.Main : LogIn : Credential provider SapSso
15 Aug 2011 13:59:55 INFO com.nakisa.Logger - com.nakisa.framework.login.Credentials_SapSso : Using cert: K:\usr\sap\NKP\J14\j2ee\cluster\apps\Nakisa\OrgChart\servlet_jsp\OrgChart\root\XML\verify.pse
15 Aug 2011 13:59:55 INFO com.nakisa.Logger - com.nakisa.framework.login.Credentials_SapSso : Ticket is: AjExMDAgAA9wb3J0YWw6eXNzZWxhZ2OIABNiYXNpY2F1dGhlbnRpY2F0aW9uAQAIWVNTRUxBR0MCAAMwMDADAANEUDkEAAwyMDExMDgxNTExNDcFAAQAAAAICgAIWVNTRUxBR0P%2FAQQwggEABgkqhkiG9w0BBwKggfIwge8CAQExCzAJBgUrDgMCGgUAMAsGCSqGSIb3DQEHATGBzzCBzAIBATAiMB0xDDAKBgNVBAMTA0RQOTENMAsGA1UECxMESjJFRQIBADAJBgUrDgMCGgUAoF0wGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTEwODE1MTE0NzIwWjAjBgkqhkiG9w0BCQQxFgQUK13ubzFiQrY4H%2FLRk2ysyvPSvccwCQYHKoZIzjgEAwQuMCwCFF1W9d!tAjLvP8dnb1bs4XghaHSBAhQ9kd9N!bJubUWITtkzU!za96lxNg%3D%3D
15 Aug 2011 13:59:55 INFO com.nakisa.Logger - com.nakisa.framework.login.Credentials_SapSso : Version of SAPSSOEXT: SAPSSOEXT 4
15 Aug 2011 13:59:55 INFO com.nakisa.Logger - com.nakisa.framework.login.Credentials_SapSso : SCUE LIB base path is:
15 Aug 2011 13:59:55 ERROR com.nakisa.Logger - com.mysap.sso.SSO2Ticket : Could not load library: sapsecu.dll - java.lang.Exception: MySapInitialize failed: rc= 14null
15 Aug 2011 13:59:55 ERROR com.nakisa.Logger - com.nakisa.framework.login.Credentials_SapSso : java.lang.Exception: MySapEvalLogonTicketEx failed: standard error= 9, ssf error= 0
15 Aug 2011 13:59:55 ERROR com.nakisa.Logger - com.nakisa.framework.login.Credentials_SapSso : Internal error (9) - No SSF error (0)
15 Aug 2011 13:59:55 INFO com.nakisa.Logger - com.nakisa.framework.login.Main : LogIn : User to authenticate null
15 Aug 2011 13:59:55 INFO com.nakisa.Logger - com.nakisa.framework.login.Main : LogIn : Authentication provider SapSso
15 Aug 2011 14:00:00 INFO com.nakisa.Logger - com.nakisa.framework.login.Main : LogIn : User authenticated null
15 Aug 2011 14:00:00 INFO com.nakisa.Logger - com.nakisa.framework.login.Main : LogIn : Authentication row is {SapSsoTicket=AjExMDAgAA9wb3J0YWw6eXNzZWxhZ2OIABNiYXNpY2F1dGhlbnRpY2F0aW9uAQAIWVNTRUxBR0MCAAMwMDADAANEUDkEAAwyMDExMDgxNTExNDcFAAQAAAAICgAIWVNTRUxBR0P%2FAQQwggEABgkqhkiG9w0BBwKggfIwge8CAQExCzAJBgUrDgMCGgUAMAsGCSqGSIb3DQEHATGBzzCBzAIBATAiMB0xDDAKBgNVBAMTA0RQOTENMAsGA1UECxMESjJFRQIBADAJBgUrDgMCGgUAoF0wGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTEwODE1MTE0NzIwWjAjBgkqhkiG9w0BCQQxFgQUK13ubzFiQrY4H%2FLRk2ysyvPSvccwCQYHKoZIzjgEAwQuMCwCFF1W9d!tAjLvP8dnb1bs4XghaHSBAhQ9kd9N!bJubUWITtkzU!za96lxNg%3D%3D}
15 Aug 2011 14:00:00 INFO com.nakisa.Logger - com.nakisa.framework.login.Main : LogIn : User population provider is Database
15 Aug 2011 14:00:00 INFO com.nakisa.Logger - FunctionRunner : ensurePool : Current pool size:0
15 Aug 2011 14:00:00 INFO com.nakisa.Logger - FunctionRunner : ensurePool : Current pool size:0
15 Aug 2011 14:00:00 INFO com.nakisa.Logger - FunctionRunner.executeFunctionDirect: /NAKISA/RFC_REPORT took: 266ms
15 Aug 2011 14:00:00 INFO com.nakisa.Logger - BAPI_SAP_OTFProcessor_Report : WhereClause : ( (Userid is null) or (Userid='') ); Table : (SAP_UserPopulation); Dataelement : (UserPopulationInfo)
15 Aug 2011 14:00:00 INFO com.nakisa.Logger - com.nakisa.framework.login.Main : LogIn : User populated
15 Aug 2011 14:00:00 INFO com.nakisa.Logger - com.nakisa.framework.login.Main : LogIn : Role mapping provider is: SAP
15 Aug 2011 14:00:00 ERROR com.nakisa.Logger - SAPRoleMapping_SAP.MapRoles() : while trying to invoke the method java.lang.String.toUpperCase() of an object loaded from local variable 'value'
15 Aug 2011 14:00:00 INFO com.nakisa.Logger - com.nakisa.framework.login.Main : LogIn : Login process finished with errors
Any ideas? Should I maybe hardcode the location in the credentials.xml?
Kind regards
Dries Yssel

SSO between Portal and Java WD application

Hi Experts,
I am using CE 7.2 on localhost and I am very new to SAP.
I need to know how can I get SSO between Portal and Java WD. I have a WD application that displays the logged in user using "IUser currentUser = WDClientUser.getCurrentUser().getSAPUser()", as well I can use "IUser user = UMFactory.getAuthenticator().getLoggedInUser()". Both work.
Q1. What is the difference in the 2 above?
Q2. My WD application is set to authenticate user. The WD application is in URL iView. I need SSO between Portal and WD application. Is there a way to get this SSO without SAP Backend (ECC), for now I just need SSO between Portal and Java WD appl.
Everything is in localhost.
Please advice. Thanks.

> need to know how can I get SSO between Portal and Java WD.
Then I suggest you ask your question in the Web Dynpro Java forum instead of the Web Dynpro ABAP one.

GRC 10 - SSO via Portal - how to redirect url in notification variables

Similar Messages

Maybe you are looking for