How can I map LDAP departments to portal groups?

Hi All,
we connected our NW 7.0 Portal to the corporate LDAP server using the profile dataSourceConfiguration_novell_readonly_db.xml. Connection is up and running and the UME lists all users from the LDAP and they can logon.
The LDAP cannot provide any groups or roles. However, it provides a department name for every user.
My question is if it is possible to make a user automatically a member of a portal group named like the department he or she is working in and how this mapping can be achieved.
I downloaded the XML-file and studied the SAP-help concearning this matter, but I'm a little lost because of all the different tags of the XML-file and I don't quite comprehend how the mapping is done exactly. I'm not that keen on experimenting with the different tags since this requires frequent portal restarts and there seem to be many possible combinations.
I figure my request is not that exotic so maybe someone has done that before. Could someone out there help? It would be very much appreciated.
Thanks a lot in advance,
Jens

Hi Jens,
There is an easier way to do this. Since you provide a department name for every user, configure virtual groups to use the department attribute.
http://help.sap.com/saphelp_nw04s/helpdata/en/43/fcfa2942ed7067e10000000a1553f6/frameset.htm
Configure the department names you use and the UME will generate virtual groups based on the department names at runtime.
-Michael

Similar Messages

  • How can I use LDAP searching from OSX Lion Server to Mozilla Thunderbird?

    How can I use LDAP searching from OSX Lion Server to Mozilla Thunderbird?  We have a super awesome contacts server that works great for our Mac users.  About 30% of our company are on PCs, and I would like to use the Mozilla Thunderbird mail client for them.  I see that in Thunderbird I can set up LDAP searching, and would like to have this feature point to our contacts server.  I've tried several different settings, and looked all over the web, but could not find the proper way to configure this.  Does anyone know if this can be done, or if not, would have a better suggestion?  Thank you for your time!!

    try double clicking keychain acces should launch and ask if you want to install login, system, System roots
    A dialog box will launch asking where to install the cert since your configuring a vpn I would put the certificate it in system.

  • How can  I  restrain the user login portal once, in the same time ???

    Hi
    I need to restrain the user can't repeat to login portal ....
    to reduce portal loading
    How can I restrain the user login portal once, in the same time???
    Which attributs in Identity Manager or amconsole I can do it to restrain the user ??
    tks

    Does your portal support anonymous access? If so, make sure you are using the authlessanonymous mode. This mode only creates one session that is shared for all anonymous users. This is much more efficient than anonymous access, which creates a session for each anonymous user.
    I have no other recommendation for limiting users to a single login. In general, web applications do not behave like this. What if a user closes their browser without logging out? Does the user have to wait until the session times out in order to log back in again?
    The same thing is true for users that are mobile. If a user leaves their office without logging out and then attempts to log in with a laptop in the conference room, then access will be denied in your implementation. Users do not expect this type of limitation being built into the system.
    If you are having problems scaling, then you need to look at your architecture and perhaps add some more resources. Also, make sure you are making efficient use of the authlessanonymous access mode as stated above.
    - Jim

  • How can I map the composite_dn name with a composite in run time

    Hi All,
    I want to craete a report on number of total business and system faults with the help of Information Publisher in OEM 12c Cloud Control. I am fetching data from the table composite_instance_fault present in SOAINFRA schema. Below os my SQL statement:-
    select error_category,count(error_category) from prefix_SOAINFRA.composite_instance_fault where composite_dn=??EMIP_BIND_TARGET_GUID?? group by error_category
    Now I want to know that how can I map the composite_dn name with a composite in run time. When we fetch data from the repository we used to map target in rumtime by using ??EMIP_BIND_TARGET_GUID?? but here as I am not fetching data from repository, how can I map target in run time.
    On executing the above SQL statement its returing an empty table without any data.
    Please guide!!
    Thanks in Advance!!

    Hi,
    try something like this.
    Mike
    Attachments:
    Unbenannt 5_LV80.vi ‏12 KB

  • How can i enable ldap service in my system?

    How can i enable ldap service in my system?while running my prgram i am getting an error connection refused why?

    hi
    thanks for u r kind attention.
    i want execute simple jndi program on WinXPwhich uses ldap sevices.
    in the JNDI Tutorial it is given that u can make use of ldap service provided by JDK.i am using a latest version of jdk.
    where the programs for enabling ldap sevice is located in JDk ?how can i enable it?
    and also i have down latest releases of openLDAP software?if the earlier is not possible u tell me how to configure openLDAP?
    thanks in advance

  • How to use Domino LDAP in WebLogic Portal 8.1?

    Hi, all
    I'm trying to solve the problem of how to use Domino LDAP in WebLogic Portal 8.1. Anybody who have this experience please help me.
    Best Regards,
    Sean

    Hi,
    I just spoke to BEA and domino LDAP not supported although they gave me these
    LDAP filters that might help -
    http://support.bea.com/application?namespace=askbea&origin=ask_bea_answer.jsp&event=link.view_answer_page_solution&answerpage=solution&page=wls/S-09460.htm
    Sean Lin <[email protected]> wrote:
    Hi, all
    I'm trying to solve the problem of how to use Domino LDAP in WebLogic
    Portal 8.1. Anybody who have this experience please help me.
    Best Regards,
    Sean

  • How can i map the SLD of BWSEM  and XI?

    hai pals,
         how can i map WAS OF the BWSEM system and Xi system.
    can u anybody help me out in this issue.
    with cheers rajesh.

    hi Rajesh,
    If you want to create BW and SEM inside XI
    you don't have to :
    cause they're defined as products:
    SAP BW     2.0B, 2.1C, 3.0A, 3.0B, 3.1 CONTENT
    SAP SEM     2.0B, 3.0A, 3.0B, 3.1A, 3.1B, 3.2, 3.5, 4.0
    you only have to define WAS fo those systems :
    you nedd to have WAS of SEM and BW
    (instances of those servers ) created as technical systems:
    if you need a technical system take a look at my weblog:
    /people/michal.krawczyk2/blog/2005/03/10/registering-a-new-technical-system-in-sld--abap-based
    you also nedd business systems for every Client (100,200 etc) mapped as business system
    business system creation
    http://help.sap.com/saphelp_nw04/helpdata/en/fe/39ae3d47afd652e10000000a114084/content.htm
    Regards,
    michal

  • How can i change the image in portal logon screen

    hi guys
    pls tel me
    how can i change the image in portal logon screen
    thanks
    regards
    kamal

    Hi
    Download the par file com.sap.portal.runtime.logon.par.bak from
    Go to System Administration -- Support -- Portal Runtime -- Browse Deployment.
    The path should ROOT/WEB-INF/deployment/pcd. Now download that file into local system.
    Create a Par project and make necessary chenages ..i.e
    Open the downloaded par file with WinZip and inside the lib folder three jar files named com.sap.
    portal.runtime.logon_api.jar, com.sap.portal.runtime.logon_core.jar and umelogonbase.jar will be there. Copy those files in the folder u2018libu2019 in par project.
    Now change a branding Image...i.e
    Replace the branding-image. jpg with your company branding image in the same name.
    Once modifications are done,then create a par project and upload the par file into portal.
    Go to the path System Administration -- Support -- Support Desk -- Portal Runtime -- Administration console.
    then browse the file and click on upload.
    Connect to server where the Portal WebAS is running and go to:
    (drive):\usr\sap\<system id>\<system instance>\j2ee\cluster\server0\apps\sap.com\com.sap.security.core.admin\servlet_jsp\logon\root\layout.
    There you will find the images used on logon screen, you can replace them for your
    company images, please take care with the width of the images, as usual, to make this
    change effective, you must restart the whole WebAS.
    Regards,
    Raju

  • How can we map a file in the recepents file in smtp server

    hai all,
    how can we map a file to teh recipents file in smtp server configuration.
    because i didnt hard code the email id there so i has to kept any file or any variable so can any one help me out.
    thanks,
    Rajesh

    Hi There
    You can try to use SSIS expressions in your DTSX package which reads the values from the file and then populates the recipient field. This would require some script tasks to read the data and then populate the variables used in the SSIS expression.
    [https://www.google.com/search?sclient=psy-ab&hl=en&safe=off&site=&source=hp&q=ssisexpressions&btnK=GoogleSearch#sclient=psy-ab&hl=en&safe=off&source=hp&q=sqlssisexpressions&oq=sqlssis+expressions&aq=f&aqi=&aql=&gs_sm=e&gs_upl=9137l9524l0l9847l4l3l0l0l0l1l522l522l5-1l1l0&bav=on.2,or.r_gc.r_pw.r_cp.,cf.osb&fp=67c17c5b88ef2530&biw=1440&bih=799]
    It could be easier to configure a distribution list on your exchange server or domino server, and then send an email to the distribution list email address. Then you could manage the recipients from the mail server.
    Another way to achieve this, is to put a prompt in the data manager package to pass the recipient email addresses, and then pass that value to script logic. In the script logic it would call a stored procedure with the dynamic input and send the mail.
    [http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/d01ce779-f1b2-2b10-07ba-da3734013245]
    You could use the SMTP relay functions from SQL server.
    There are various options available. each option has pro's and con's you will need to decide which is better and easier to manage. 
    I hope this helps.
    kind Regards
    Daniel

  • What is Investment allowance on asset. and How can we map into SAP?

    Hi all,
    I want know what is investment allowance on asset and how can we map into sap?
    Thank you in advance.
    Regards,
    Chandu.

    hello chandu ,
    In order to encourage substantial investment in plant or machinery clause 5 of the Finance Bill, 2013 seeks to insert new section 32AC in the Income-tax Act, 1961 to provide for deduction for
    investment in new plant or machinery by a company.   It is allowed over and above the depreciation rates.   This is for tax calculation purpose for availing this benefit so many conditions to be fullfilled.   In sap this can be handled through development only.  n.selvakumar.

  • How can I send an email to a group in my address book, but hide the individual names and email addresses?

    how can I send an email to a group in my address book, but hide the individual names and email addresses?

    You used to be able to do this through leaving unchecked the box in preferences "when sending to a group show all member addresses". However, that feature failed some time ago (two or three years?) and the only way to hide the addresses now is to put the group in the BCC field.

  • How can I send one sms to a group of people?

    how can I send one sms to a group of people?

    Read the User's Guide which covers basic functionality such as this.

  • How can I hide the recipients of a group text message?

    How can I hide the recipients of a group text message?

    This is Illustrator, no matter which version you are using.
    It doesn't work like in other programmes and Illustrator's behaviour is often undesired.
    There is no good trick that I'm aware of to mimic Draw's or Freehand's way to do it.

  • HT2486 How can you put same contact in a Group multiple times so that you can print the same mailing label multiple times?

    How can you put same contact in a Group multiple times so that you can print the same mailing label multiple times?

    Hello,
    Avery...
    https://discussions.apple.com/thread/2588943?start=0&tstart=0
    Or...
    http://www.belightsoft.com/products/labelsaddresses/overview.php

  • How can I add facebook contacts in a group in ios 6

    Hi I need to know how can I add facebook contacts in a group in ios 6 without getting them in my contact list, thanks.

    They are automatically put in a group called Facebook, and your other contacts in another group...if synced from a Mac, they will be labled From My Mac. In the contacts app you can chose what groups are visible: Contacts>Groups...add or remove the check by touching the group.

Maybe you are looking for