GRC-IDM Integration: missing web-service?

Hi Experts,
I have been loading the GRC provisioning framework for SAP Netweaver IDM, as well as the VDS configuration file (in the templates available, I used SAP Netweaver > GRC Access Control 5.3 SP2). The integration is working fine and IDM is correctly communicating with CUP (I can create requests through IDM, and once the request is approved in CUP, the status is updated in IDM).
However, in IDM when the GRC Provisioning framework gets a status "OK" from CUP, it triggers another task called "read provisioning log" (I am assuming that this is to retrieve the list of approved roles from CUP). This request gives me a fata error:
uLDAPGetEntry got exception
javax.naming.NameNotFoundException: [LDAP: error code 32 -
Couldn't perform DN to Data source mapping]; remaining name '
After some investigations, I noticed that the GRC repository has a constant for the provisioning log web service called VDS2GRC_BRANCH_PROVISIONINGLOG (also described in the GRC integration configuration guide). Default value is ou=provisioninglog. When looking at the VDS, there is NO virtual tree for ou=provisioninglog ... so I am assuming this is the reason why the task fails.
Does anybody went through this already? Is there a procedure for creating this missing VDS entry or does VDS 7.1 SP3 solves this issue? FYI, I am using Netweaver IDM 7.1 SP2 with the same version of the VDS. The GRC provisioning framework is the one currently available on SDN.
Any idea would be appreciated!
Kind regards,
Jean-Christophe

Hi ,
After further investigation and testing, it appears that VDS 7.1 SP3 comes with the correct set of Data sources and web services, therefore solving this integration issue.
Actually, we were facing other technical limitations due to the fact that the latest version of the GRC provisioning framework (available on the SDN) only works if we use VDS 7.1 SP3. For example, the attribute GRC_REQUEST_ID (used in the IDM task for tracking the CUP request ID) was not correctly updated in IDM.
Updating the others components from SP2 to SP3 (IC, RT, webdynpro, etc) was not necessary for us to make this provisioning log web-service work, although I think it is better to keep a consistent patch level accross the components.
Kind regards,
JC

Similar Messages

Problem in tutorial "Integrating RESTFul Web Services"

JDeveloper/ADF downloaded March 2012, JDeveloper Studio Edition Version 11.1.2.1.0 and full ADF download bundle.
I have run through the JDeveloper/ADF tutorial titled, "Integrating RESTFul Web Services". When I get to Step 3, "Test the Web Service" the application fails to deploy. The essential error is, "Caused by: java.lang.ClassNotFoundException: javax.ws.rs.ext.RuntimeDelegate". I done it from scratch 3 times to make sure I was not missing any steps.
An clues would be appreciated.
Thank you,
Russ Ryan

Thanks for the suggestions. I tried both of them:
- including JAR files under lib directly
- including the JAX-RS libraries from the Libraries selection.
Still getting the error about not finding javax.ws.rs.ext.RuntimeDelegate.
I downloaded the finished project from the tutorial (http://docs.oracle.com/cd/E18941_01/tutorials/jdtut_11r2_53/labs/restsolution.zip), did a rebuild and tried the "Test Web Service". I got the same error. I'm wondering if it is a problem with my environment.
Thanks,
Russ Ryan

Integration Event Web Service Upload Trigger

Hello,
have a question about the Integration Event Web Service.
Is it possible to get Data in the Integration queue, if i make an upload? We made the experience that workflows don't trigger with uploads.
Regards,

I'm sorry, I'm not clear on what method you are using for "upload" is this a WS insert request or are you using import to add new records to CRMOD? Also, what object(s) are you working with (i.e. Account)

Oracle Service Bus 11gR1 - missing Web Services Security Configuration?

I am trying to configure a web service which uses username token policy.
The below option is missing in Proxy Service --> Security
Web Services Security Configuration
Process WS-Security Header Yes NoIs there anything that needs to be enabled for the above to show up in Proxy Service-->Security.

This option was enabled by removing the username token policy from the wsdl file.
Thanks for looking.

Business Process Integration using Web Services

Hi!
I'm interested to know if there are any products available today that can help a
Java developer integrate loosely coupled components into a business process. I thought
of doing this using existing Java APIs but I don't want to build all the infrastructure
myself, like translating from Java to XML and back, dealing with persistence of the
process context, correlating messages, etc.
I looked at BEA Workshop but realized it is mainly good for creating asynchronous
web services with a callback pattern but they don't address long-lived multi-step
business processes.
I've also posted my question on TheServerSide.com and was referred to Collaxa's Web
Service Orchestration Server which I'm going to evaluate shortly (http://www.theserverside.com/discussion/thread.jsp
thread_id=13413)
Thanx! Jill.

Jill,
Collaxa offers indeed a solution that reduces the complexity of integrating multiple
synchronous and asynchronous web services into a long-lived multi-step business process.
It relies on an innovative JSP-like abstraction (called ScenarioBeans).
You can download the product and kick the tires at http://www.collaxa.com
Tibco and Web Methods also offer solutions in that space.
Finally you might be able to tweak WLI using XML events to support asynchronous Cajun
style web services.
Best,
Edwin
Best,
Edwin
"Jill Kay" <[email protected]> wrote:
>
Hi!
I'm interested to know if there are any products available today that can
help a
Java developer integrate loosely coupled components into a business process.
I thought
of doing this using existing Java APIs but I don't want to build all the
infrastructure
myself, like translating from Java to XML and back, dealing with persistence
of the
process context, correlating messages, etc.
I looked at BEA Workshop but realized it is mainly good for creating asynchronous
web services with a callback pattern but they don't address long-lived multi-step
business processes.
I've also posted my question on TheServerSide.com and was referred to Collaxa's
Web
Service Orchestration Server which I'm going to evaluate shortly (http://www.theserverside.com/discussion/thread.jsp
thread_id=13413)
Thanx! Jill.

GRC -IdM integration (HCM IdM GRC IdM)

Hi IdM & GRC Gurus,
We want to implement a scenario where IdM (7.1) gets user data from HCM, followed by Workflow and SoD analysis in GRC (5.3) and Finally IdM performing the Provisioning (HCM > IdM > GRC > IdM), however I donu2019t see any documentation for this exact scenario. If SAP's direction is for IdM being provisioning solution and not GRC (CUP), the above scenario should be implemented. SAP documentation "SAP IdM Compliant Provisioning using GRC Access Control Configuration Guide. PDF" is similar but here GRC (CUP) is doing the final provisioning.
I have following questions
1     Which Framework should be imported in IdM to implement IdM - GRC integration, where IdM gets user data from HCM, followed by Workflow and SoD analysis in GRC and Finally IdM performing the Provisioning (HCM > IdM > GRC > IdM)?
2     GRC Provisioning Framework (GRC 53 Provisioning Framework_Folder.mcc) that is available on SDN, is based on HCM to IdM followed by GRC conducting SoD analysis and provisioning. Can the same framework be used for a scenario where IdM does the provisioning in the last step (same as question 1)?
3     "If answer to question 2 is yes? What are the changes/customization required to GRC Provisioning Framework (GRC 53 Provisioning Framework_Folder.mcc)? As per the limitations (page 37) mentioned in the document SAP IdM Compliant Provisioning using GRC Access Control Configuration Guide. PDF, ""It is not possible to only carry out a check for Segregation of Duties, without having the
request provisioned to the GRC Access Control back-ends. It means that the Identity Center
cannot just ask if a certain entitlement assignment is valid.
If the request is approved, the accounts and role assignments will always be performed in
the GRC Access Control back-end systems."" If this is true, how can we impliment HCM > IdM > GRC > IdM (IdM doing provisioning in the end)?"
4     If GRC Provisioning Framework (GRC 53 Provisioning Framework_Folder.mcc) is implemented along with HCM framework (SAP Provisioning Framework_Folder.mcc) and HCM_Staging_Area_Identity store.mcc, which Identity Store should GRC Provisioning Framework be imported (HCM_Staging_Area OR SAP_Master)?
Regards,
Anurag

Hi Joel,
within the VDS you create a local user ('HR_USER') and you choose some password. Later while configuring the HCM system you use these credentials to define the connection from HCM to the VDS.
Kind regards
Frank

SUN IDM 8.1 - Web Services MQ

Hi
I want to use Web Services using the MQ transport layer using SUN IdM 8.1.
I believe SPML needs to be used but not sure.
Is this something any one has tried before?
If yes can you pls send me any relevant information.
Thanks

Where's your database for this located? On the same server or another server? It is more likely the database than Glassfish being the weak and slow link here unless badly tuned GC is taking up all the CPU cycles.

Siebel integration using Web Service

Hi,
We are in the process of integrating Siebel with external systems using web service. We also use the Virtual business component with customer business service. After web service call, it return Siebel property set in format of XML, we need parse the XML (property set) to populate data into VBC fields in order to display data in user interface.
It seems that writing custom XML parsing script is not very desired as so many fields are involved in the integration object. We just wondering if there is any other better ways to populate data into VBC with out using escript since the integration object created by importing WSDL already listed all integration fields. Can data returned by Web service call directly populated the VBC fields through the integration object?
Thanks
Steve

Effectively what you're looking at doing here is taking your external content (from the Web Service) and then converting that into the very specific Property Set format that a VBC requires.
The EAI Data Transformation Engine is your friend here as it should let you perform the (hopefully simple) transformation between the two, although you'll also need to define the property set as an Integration Object (an External One to keep the additional envelopes created to a minimum) and then after the DTE has been called take a careful look to make sure everything is the way that it should be.
Put all these parts into a workflow itself, and use the workflow to call the external web service and that should cut to a minimum the code you'll need in the VBC.
Graham

Missing Web Service Input Parameters

Hi,
I am creating a form on web services. The source of the webservice is BEPL.
When I register the webservice, I see the in and the out parameters.
Operations
Operation Name     process
Input Parameters
Operation     Parameter Name     Parameter Type
process     Data_source     string
     Data_URI     string
     Token     string
But when I continue to create a form on the service, the next screen shows this message:
* Item Finder
Web Service Input Parameters
no data found
Any idea what may be going on here?
Thanks
-SJ

Hello,
Are you sure it's a public webservice or that you put in the right username/password?
Also if you call the webservice just from an url, does that work for you?
Regards,
Dimitri
http://dgielis.blogspot.com/
http://www.apex-evangelists.com/
http://www.apexblogs.info/

Missing web services

We're looking to provide aggregate usage reports via the web
service api utilizing the following actions:
report-bulk-meeting
report-bulk-meeting-attendance
report-meeting-session
report-meeting-session-slots actions.
Calling these directly returned various invalid status codes.
Later a call to the action-list action did not list these among
available actions which leads to the following questions:
Why is this do they really exist?
If they do exist how do we access them?
What has the community done to gather aggregate usage
data?

report-bulk-meeting & report-bulk-meeting-attendance
actions
<results>
<status code="invalid">
<invalid field="action" type="enum"
subcode="no-such-item"/>
</status>
</results>
report-meeting-session-slots action
<results>
<status code="no-access" subcode="not-available"/>
</results>
The report-meeting-session action does work correctly sorry I
included that one on the first post, but these three are not any
explanations? One last note I am a member of the administrator
group when executing these actions.

How Oracle IDM secure web services ?

Hi,
I am using Oracle Product. Wanted to know How IDM can secure web services or one has to use OWSM/OPSS something like this or what security setting we can do at weblogic level?
Help Appreciated.

Hi,
I am using Oracle Product. Wanted to know How IDM can secure web services or one has to use OWSM/OPSS something like this or what security setting we can do at weblogic level?
Help Appreciated.

Invoking a web-service through Aqualogic BPM

I have seen some posts regarding integration of web-services with BPM but could not solve my problem (as I am very new to BPM, just 2 days old :) ).
I am trying to integrate with the weather web-service whose WSDL is available at http://wsrp.bea.com/portal/boulder/weather.wsdl
This is what I did
1. Created a module in the Catalog
2. Right-clicked on the created module, Catalogue Component -> Web Service and provided the WSDL
3. Introspection was done and the External Resoures folder was also populated automatically.
4. I then created a global activity for invoking this web-service.
But the problem that I am facing is that what method should I write for the global activity that I have created so that the web-service can be invoked.
Please reply
Thanks.

You just need to call the Web service exposed method from the global activity.
if your module name is WS. The name of the webservice you catalogued is Weather. The service name which you can see when you expand the Weather. Then you will be able to view the exposed method.
WS.Weather.WeatherService.getWeather
Regards
Right Chord

Consuming web service in portal

Hi all,
I had a web service now i want to use it in my portal.
Can anyone help me in this regard.

Hi Lokesh,
To consume a Web service, you can create a deployable or a standalone proxy for the Web service in the SAP NetWeaver Developer Studio using a WSDL document as a basis. This can be done with just a few mouse clicks.
The difference between a deployable and a standalone proxy is that, for a deployable proxy, the application of the Web service client must be deployed on the J2EE engine. A standalone proxy can be executed without the J2EE engine.
The role of the Web service client developer has been created so that Web services can be consumed.
The Web service client developer has the task of integrating a Web service in an application. He or she knows the specific requirements for the Web service and creates the Web service client proxy definition. Afterwards, the developer programs the client application using the service endpoint interface.
Please read through this Step by Step approach for same:-
[Consume WebServices in Portal|https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/c2188ae5-0601-0010-dd93-c23e381ef41e]
Hope this helps,
Regards,
Shailesh

RPC Style Web Service and SSL

Hi,
Has anyone tried (and maybe succeeded) in accessing an
RPC-style Web Service deployed on WebLogic Server 6.1 using
SSL? I have a Web Service deployed and am able to access it using JNDI and the
weblogic.soap.http.SoapInitialContextFactory
INITIAL_CONTEXT_FACTORY. However, when I try to set the
Context.SECURITY_PROTOCOL to "ssl" and access the secure port,
I get a "java.net.SocketException: Unexpected end of file from
the server" error message.
Does the weblogic.soap.http.SoapInitialContextFactory not
support SSL? Do I need to do the SOAP/XML messaging myself,
without being able to make use of the WebLogic convenience
classes? Thanks! Rob

Alright!
Glad you got it working ;-)
Actually, the problem with the protocol being hardcoded to http in the wsdl.jsp,
is a bit strange. It's unusual that the BEA engineers that coded the wsgen component
and support classes, didn't use something like the following:
<soap:address location="<%= request.getScheme() + "://" + request.getServerName()
+ ":" + request.getServerPort() %>/security/examples/webservices/security/PhoneBookService"/>
I don't use wsgen too much, because I need to have more control over the J2EE
packaging. It (wsgen) is great for spitting out stuff, but not really setup for
doing Web service packaging that use classes (i.e. helper files, frameworks, etc.)
that it doesn't generate. I think they (BEA) might be looking into integrating
the Web Services assembly process with other tools like WebGain, Forte, etc. to
alleviate these types of issues.
Anyway, glad you got it working, so now you can help somebody else (time permitting,
of course) with this topic in the future!
Regards,
Mike Wooten
"Rob Nelson" <[email protected]> wrote:
>
Mike,
Thank you very much for your response! The next to
last sentence did it for me (when you mentioned checking
that the location attribute of the soap:address element
was set properly)! I noticed that when I viewed the WSDL
file via the browser (by clicking on the link in the
index.html page), I saw http://host:<unsecure_port> when
I requested it over the unsecure port, but I saw
http://host:<secure_port> when I requested the WSDL over
the secure port. Notice it did not say https!
So, I unjarred the EAR file that was generated by my
wsgen task, and then unjarred the generated WAR file
contained therein. When I looked at wsdl.jsp, I noticed
that "http" was hard-coded in the location attribute, but
that the host name and port number were dynamically
generated. So I added a scriplet to dynamically place an
"s" after "http" (if request.isSecure()) and rejarred up
the WAR and EAR files.
Now when I deployed the EAR file, I see "https" when
I request the WSDL over the secure port, and my client
(actually your client;) works! Awesome! I really appreciate
your help! Now my only issue is why did the wsdl.jsp have
"http" hard-coded, not accounting for secure requests.
These files were generated by the WSGEN task in ANT.
I figure it's either: I have a configuration problem,
I have a problem with my ANT build script, my version of
WebLogic Server (6.1 w/SP1 built 9/18/2001) has a bug, or
maybe you just have to manually go in and modify the wsdl.jsp
file if you want to use https :(. Please let me know if
you have any insight on this, and I will also follow up
with WebLogic support. Thanks again! Rob
"Michael Wooten" <[email protected]> wrote:
Hi Rob,
I am absolutely sure the code I posted works, so we need to approach
this from
a different angle ;-)
First, I know why the Context.SECURITY_PROTOCOL approach doesn't works.
It's because
the namespace in the Web Services code examples is not the same oneas
the one
used for RMI objects, EJBs, JDBC Data Sources, etc. For those objects,
the Context.PROVIDER_URL
is something like "t3://localhost:7001", and the INITIAL_CONTEXT_FACTORY
is "weblogic.jndi.WLInitialContextFactory".
The one being used with WebLogic Web Services, is mainly just functioning
as a
mechanism for manufacturing WebServiceProxy objects, because it is a
non-instanciable!
It does this by using a subclass of javax.naming.Context called SOAPContext,
which
is completely hidden from you, but also doesn't do much except implement
the lookup()
method. The implementation of this method ignores the Context.SECURITY_URL
property,
but it does pay attention to the "java.naming.security.principal" and
"java.naming.security.credentials"
properties. You don't need these properties for SSL, just Basic Authentication.
Enough about that, though. The service end-point is a servlet right?
So this means
it has a URL that begins with http or https, which in turn means the
WebLogic
servlet engine gets the SOAP request and sends it to the StatelessSessionAdapter
servlet. To WLS, this is just like any other HTTP/HTTPS request sent
to it ;-)
There is no special "SOAP-related" HTTP/HTTPS handler in WLS, but the
SSL challenge
dance still happens. So my first question is, are you sure you havethe
HTTPS
attributes set properly in the WebLogic console. SSL/HTTPS should be
enabled and
the "Hostname Verification Ignored" checkbox should be checked. Next,
are you
sure the URL assigned to the location attribute of the <service> element
in the
WSDL is correct (i.e. https://localhost:7002)? Are you using the "dynamic
client"
approach?
Regards,
Mike Wooten
"Rob Nelson" <[email protected]> wrote:
Mike,
Thanks for your response. I downloaded the code example that
you
posted
last week, as well as the code example that you posted in October for
a similar
request (BEA Support pointed me towards that). Unfortunately, I still
can't get
the Web Service to respond to the client request when the client uses
the HTTPS
port for the WebLogic Server.
I tried two different client approaches. The first uses the client
code
that you posted in October, the WebServiceProxy approach. The second
approach
is based on the example in the WebLogic documentation, which uses the
weblogic.soap.SoapInitialContextFactory
class with the javax.naming.Context object to perform a lookup on the
service
(which closely resembles rmi without the narrowing).
Both client classes fail to invoke the the service itself viaHTTPS
(although
they both work when making HTTP requests to the unsecure port). However,
when
I run the client based on the client class that you posted in October
and make
an HTTPS request, I can see in the output where it is able to download
the WSDL
file and use it (via the WebServiceProxy) to describe the availablemethods
for
the associated Web Service. It is only when the actual invoke() method
is called
on the SoapMethod object (which in turn sends the XML request to the
Web Service
Servlet), that the server doesn't respond, and the client fails with
an UnexpectedEndOfFileException
(i.e. no response).
So, do you know why the servlet that the RPC-style Web Serviceuses
to handle
requests would not respond to HTTPS requests, when it processes HTTP
requests
without a problem (using the same client code that fails with the HTTPS
request)?
I am using WebLogic Server 6.1 w/SP1 on a Solaris 8 platform. Thanks
for any
advice you can give me! Rob
"Michael Wooten" <[email protected]> wrote:
Hi Rob,
Check out the attached zip for "insights" into how to do this. It
contains
the
code for two Web service "consumers" (that the new fangled word fora
"client")
and the web.xml and weblogic.xml for the RPC-style Web Service, that
they consume.
Hope this helps,
Mike Wooten
"Rob Nelson" <[email protected]> wrote:
Hi,
Has anyone tried (and maybe succeeded) in accessing an
RPC-style Web Service deployed on WebLogic Server 6.1 using
SSL? I have a Web Service deployed and am able to access it using
JNDI
and the
weblogic.soap.http.SoapInitialContextFactory
INITIAL_CONTEXT_FACTORY. However, when I try to set the
Context.SECURITY_PROTOCOL to "ssl" and access the secure port,
I get a "java.net.SocketException: Unexpected end of file from
the server" error message.
Does the weblogic.soap.http.SoapInitialContextFactory not
support SSL? Do I need to do the SOAP/XML messaging myself,
without being able to make use of the WebLogic convenience
classes? Thanks! Rob

Why do I get parsing errors with my WSDL URL for Web Services usage

Hi,
I am puzzled with the errors I get when I want to create a Web Service datastore.
Scenario: I have created a SAP Web Service from CRM using SOAMANAGER. The WSDL URL produced by SOAMANAGER is accessibile when pasting the URL directly in Internet Explorer. WSDL URL [http://UXCIQ0M.WDF.SAP.CORP:50076/sap/bc/srt/wsdl/srvc_CBDCB34C89C29304E10000000A4282C0/wsdl11/allinone/ws_policy/document?sap-client=504]
When using the WSDL URL in the Web Service datastore URL field, I get the error An error occurred while importing metadata: WSDLException; faultcode=PARSER_ERROR: Problem parsing: The element type "br" must be terminated by matching tag "/br". (BODI-1111469) (BODI-1112446)
When I save the WSDL defintion in a local file and use a local file path, I get the errors An error occurred while importing metadata: WSDLException (at /wsdl:definitions/wsdl:portype/wsp:Policy): faultcode=INVALID_WSDL: Encountered unexpected element 'Policy. (BODI-1111469) (BODI-1112446)
My questions:
- Why do I get different parsing errors despite the fact that the XML is the same?
- The WSDL is generated by SOAMANAGER. Shouldn't it work directly when integrating with Web Services generated from an SAP environment?
- Is this related to confiurgation issue? I have set the Job Manager to Support adapter, message broker and SNMP communication
- What is the difference between the datastore of type Adapter and the datastore Web Service? In the white paper [http://www.sdn.sap.com/irj/boc/go/portal/prtroot/docs/library/uuid/20bd5e60-11f9-2b10-2bbb-b5109cceff08?quicklink=index&overridelayout=true] it is mentioned to use the Adapter type to consume a Web Service. It is not clear to me why we have those 2 types.
Thanks & Best Regards
Isabelle

Some updates on this issue, which might help others in the community.
- Data Service doesn't support ws_policy.
- SAP NetWeaver 7.0 SOAMANAGER generate WDSL with ws_policy. In future releases, it is possible to specify not to use ws_policy
- In most cases, replacing ws_policy with standard in the URL directly, works. It doesn't work with Data Services :(.
- Replacing ALL ws_policy in the XML directly is currently the only way to have the WSDL definition being parsed properly by Data Services.

GRC-IDM Integration: missing web-service?

Similar Messages

Maybe you are looking for