How to config Rules between Service Identity and Relying Party Application in Azure ACS?
I am going to implement an Authorization Server talks to ACS OAuth2 endpoint with Java following this
article.
First, I created a Service Identity using the ACS Management Service by OData protocol, and then add a password credential in ACS Management Portal.
Id: "22194691",
Name: "oauth2-client-sample",
Description: "Test",
RedirectAddress: "http://localhost:8080",
SystemReserved: false
Second, I created a relying party application in ACS Management Portal with no Identity Providers, assume that its ID is 22194640 and its Realm is "https://oauth2-res-sample.herokuapp.com/".
Third, I created a Delegation by ACS Management Service and got an Authorization Code(for example, XkbSXdM0d0v8wQ835hvKUg==) from ACS,
POST /v2/mgmt/service/Delegations
Authorization: Bearer XXXX(SWT from ACS)
Content-Type: application/json
{"ServiceIdentityId": "22194691", "RelyingPartyId": "22194640",
"NameIdentifier": "[email protected]", "IdentityProvider": "WAAD"}
At last, I posted the authorization code and service identity to ACS to request an Access Token,
POST v2/OAuth2-13
Content-Type: application/x-www-form-urlencoded
grant_type=authorization_code&client_id=oauth2-client-sample
&client_secret=xxxxxxxx&code=XkbSXdM0d0v8wQ835hvKUg%3D%3D
&redirect_uri=http%3A%2F%2Flocalhost%3A8080
&scope=https%3A%2F%2Foauth2-res-sample.herokuapp.com%2F
But I got the following error from ACS,
error: "invalid_request" error_description: "ACS50000: There was an error issuing a token. ACS60000: An error occurred while processing rules for relying party 'https://oauth2-res-sample.herokuapp.com/'
using the service identity or identity provider named 'oauth2-client-sample'. ACS60000: Policy engine execution error. Trace ID: e8a1fa8c-19d8-4271-8095-80938ea45e69 Correlation ID: 82a0e83e-202f-4957-8871-cdcdf927b512 Timestamp: 2015-02-23 02:21:34Z"
This is the Rule Group for the relying party application, pass through all the first claims to output. But
I don't know what's wrong.
Hello Cary!
Request your confirmation if you could resolve the problem stated above? If no, please let us know at the earliest and we'll be glad to help. If yes, please share your valuable inputs for community's reference.
Thank you,
Arvind
Similar Messages
-
Difference between service pack and support pack
Hi,
what is the exact difference between service pack and support pack. Are they same?
The version details presnt in integration builder -> help-> inforamtion of my XI server are as follows :
Service pack: 09
Release: 645_VAL_REL
does it mean that the both support package and service package for my XI server are 09?
thanks in adavance
regards
Jagruthi1. A service pack (in short SP) is a collection of updates, fixes and/or enhancements to a software program delivered in the form of a single installable package. Service packs are usually numbered, and thus shortly referred to as SP1, SP2, etc. It is notable that they may bring, besides bug fixes, entirely new features.
http://help.sap.com/saphelp_nw04/helpdata/en/57/a21f407b402402e10000000a1550b0/frameset.htm
Service packs in 2004 and 2004s;
in 2004 - in 2004s
SP12 & < - SP04 http://XI 3.0
SP13 + 14 - SP05 http://PI 7.0
SP15 - SP06
SP16 - SP07
SP17 - SP08
SP18 - SP09 and so on...
2) Support pack -
http://help.sap.com/saphelp_nw04s/helpdata/en/9e/5bc53f3e0f0228e10000000a114084/frameset.htm
For the ABAP parts of usage type PI, this is the implementation of support packages. For the Java parts, the deployment with the Java Support Package Manager (JSPM) is used.
You can find currently available support packages on SAP Service Marketplace at service.sap.com/sp-stacks.
A description of how to apply support packages is available in SAP Note 879289. -
Difference between Service Enabling and XI Enabling
Is there any difference between Service Enabling and XI enabling?
If so, can anybody explain the difference??
Message was edited by:
Nalini GHi Sejoon,
Thanks a lot for such an informative document.
It has helped me a lot to know more and more:-)
Thanks once again!
I have another important question. Suppose , I have developed some asynchronous service for which there wouldn't be any response, then how can we get to know if the request which was sent to the target system has reach perfectly or not?
In other words, how do we test if that whole Asynchronous service is working fine or not?
Is there any information which would help us to know if the request has successfully reached to the destination system?
Please let me know about this.
Best Regards,
Nalini -
Difference Between Service Account and User Account
What is the Difference Between Service Account and User Account
Hello Mohit,
Basically there are two types of approches which you should understand.
In many environments, administrators prefer to simply create a domain user account and assign appropriate privileges to it. Then this user account is used in order to start a specific service on a computer.
In that case there is really no difference between a user account and the so called service accounts. Since this service account is simply a domain user, all the task related to managing the domain users apply to it. For example you
should keep the password up to date manually. Some environment move step forward and assign
Deny Logon Locally of this type of service account in order to enhance the security.
The second concept is Managed Service Accounts. There are plenty of differences between a Managed Service Account and a User Account.
The Display Icon is different from a view perspective.
The type of object is different.
Managed service accounts password management is automatic.
You can not create Managed Service Accounts using GUI. They are only created using Powershell.
You can refer to link below for more inormation:
Service Accounts Step-by-Step Guide
Regards.
Mahdi Tehrani |
|
www.mahditehrani.ir
Please click on Propose As Answer or to mark this post as
and helpful for other people.
This posting is provided AS-IS with no warranties, and confers no rights.
How to query members of 'Local Administrators' group in all computers? -
Diference between Service tax and GTA service tax
Hi,
Kindly tell me what is the difference between service tax and GTA service tax and their accounting entries in SAP ?
With Regards,
SamratHi,
Service Tax is charged by the service vendor and you pay the service tax to the vendor along with his payment. Once you pay the service tax, it is the liability of the vendor to pay the service tax amount collected from you to the Government.
GTA is Goods Transport Authority. When you receive any service from any transport vendor, he will not charge service tax from you though it attracts service tax. It is your liability to pay the service tax to Government for the services received from the transport vendor.
In case of normal service tax it is treated as input tax and credit for the same is taken (similar to excise). But, in case of GTA you have to create the liability at the time of receiving the service and make the payment directly to the Government.
Regards
Ramakrishna -
How to provide joins between oracle tables and sql server tables
Hi,
I have a requirement that i need to generate a report form two different data base. i.e Oracle and Sql Server.
how to provide joins between oracle tables and sql server tables ? Any help on this
Regards,
Malliuser10675696 wrote:
I have a requirement that i need to generate a report form two different data base. i.e Oracle and Sql Server. Bad idea most times. Heterogeneous joins do not exactly scale and performance can be severely degraded by network speed and b/w availability. And there is nothing you can do in the application and database layers to address performance issue at the network level in this case - your code's performance is simply at the mercy of network performance. With a single glaring fact - network performance is continually degrading. All the time. Always. Until it is upgraded. When the performance degradation starts all over again.
If the tables are not small (few 1000 rows each) and row volumes static, I would not consider doing a heterogeneous join. Instead I would rather go for a materialised view on the Oracle side, use a proper table and index structure, and do a local database join. -
How can I distinguish between the first and the rest in Smartforms??
I have made an Invoice in Smartform. I have to take three copies of that. In the first copy it will be printed "ORGINAL INVOICE" and in the next copies it will print "Duplicate copy". How can I distinguish between the first and the rest in Smartforms??
Regards,
Subhasish>
Subhasish Ganguly wrote:
> I have made an Invoice in Smartform. I have to take three copies of that. In the first copy it will be printed "ORGINAL INVOICE" and in the next copies it will print "Duplicate copy". How can I distinguish between the first and the rest in Smartforms??
Hello Vamshi,
As per the OP's requirement he has to print 3 copies of the invoice. Which according to my understanding should be printed at the same time ? May be i am wrong in interpreting this.
You must be knowing you can control the print params of the SmartForms in CONTROL_PARAMETERS where you set the NO_DIALOG & in the OUTPUT_OPTIONS pass the number of copies.
I think the solution you have proposed the "Original Copy" will be printed only once. (Correct me if i am wrong)
Every time the user prints the invoice again he will be getting a "Duplicate Copy". If this is what the OP wants the logic is perfect
Cheers,
SUhas -
Difference between Service order and service contract
Hi
Can any one plz differenciate the service contract and service order??
why only service contract products can carry object list entries and why not service products??
Thanks in advance.Appriciated with points.
Regards,
Nagi ReddyService Order:
A service order is a short-term agreement between service provider and service recipient, in which one-time services are ordered by the service recipient and resource-related billing performed upon completion. Such an order could be, for example, to maintain or repair some equipment, making it necessary to send a technician along with spare parts. These services are usually billed.
Service Contracts:
Service contracts are outline agreements with business partners which define services offered for a particular period. You support service contracts by processing contract-based and planned services.
Service contracts represent long-term service agreements with customers in relation to the content and scope of services guaranteed within specific tolerance limits for certain parameters, for example, within a predefined timeframe.
I hope this helps -
What is the difference between Service Station and Tempro?
Searched for information on this but haven't been able to find it:
What is the difference between Service Station and Tempro?
I have just run the Toshiba Upgrade Assistant and it has installed Service Station but Tempro is already installed and seems to do the same thing.
Regards
BushyHi
Both tools are from Toshiba an notifies you about the new driver updates available on the Toshiba driver page.
As far as I know Tempro is little bit older than the Service Station.
Furthermore the Service Station seems to provide a little bit more options and features as Tempro tool.
However, i recommend using only one Utility my favorite is Service Station -
Difference between Service BOM and Manufacturing BOM
One fundamental question
What is the difference between Service BOM and Manufacturing BOM. Also what is the difference between Manufacturing BOM and Engineering BOM.
Why should a business create these 3 kinds of BOM's for their operations. cant 1 kind of BOM suffice ?This is a business definition that your business people should be able to tell you.
Both are BoMs - it's just a question of which parts are defined under each category.
Usually, "Service" BOMs are created by service org personnel as and when required, eg at new item introduction or new option introduction.
"Manufacturing" BoMs are created by Engineering personnel and are the ones used when creating an order for a machine.
Hope that it helps.
Cheers,
TC -
EPM9.3.1: Difference between service pack and service fix
Hi,
Tell me pls, what is a difference between service pack and service fix of Oracle EPM products for 9.3.1 release?
Is it an installation process difference&Hi,
Usually a service pack is a consolidation of service fixes / patches.
Cheers
John
http://john-goodwin.blogspot.com/ -
Difference between service request and service order
hi all,
What is the differnce between service request and service order? when to use what?
Thanks
RaghavService Order -> "You use service orders to record the details of a one-off service agreed upon by a service provider and a service recipient. Service orders contain all the information needed to plan, execute, and bill for a service."
Service Request -> "You use service request management to reliably submit, dispatch, approve, monitor, and fulfill requests for service by your customers. Service requests can be used internally by companies where a department delivers services, for example, in shared service center scenarios, as well as in external customer-facing scenarios.
Service requests can be logged through a service desk, directly by the service personnel, or by the users themselves into the system and then, if necessary, can be dispatched to the appropriate personnel for service delivery."
Taken from http://help.sap.com/
Rg,
Harshit -
Difference between service agreement and service contract
Hi gurus
please explain the exact difference between service agreements and service contractsHi rajaram,
Service agreement contains only pricing details.
While in case of contracts it contains pricing details, warrenty details & sla details.
Pricing agreement is a subset of contract.
Best Regards,
Pratik Patel
Reward with points if it is of any help to you! -
I am new to Apple; how do I toggle between the pc and an overhead projector? Which keys?
Not sure how your question relates to an AirPort Extreme, AirPort Express or Time Capsule......these products:
It appears that you have a question about a MacBook Air. If that is the case, then please post your question in the support area for the MacBook Air linked below:
MacBook Air -
Link Between Service Notification and Sales Order
Hi All,
In our business process, we will create sales order from Service Notification and we can see the same in the Document flow. But when i check in the VBFA table, there are no entries. I would like to know how the document flow is updated without updating the VBFA Table or is there any other table gets updated for this flow.
Please guide me.
With Regards
Vinu.NHello Vinu
For one Sales Order # figures in Notification header table- VIQMEL-VBELN.
Similarly Notification # figures in Sales Order Header table- VBAK-QMNUM
That is a solid link right there.
I Also guess technical objects like Equipment, Serial number also form link between the Sales and Service Documents.
Also check out the logic in document flow program RIBELF20, may be it will give you the clues to the problem.
Hope this helps.
Maybe you are looking for
-
What are the major differences between 4.6 C, 4.7 and ECC6 Versions
Hi, Please can any boyd explain me the major differences between 4.6C, 4.7 and ECC6 Versions... Regards sankar
-
Downloading music from my ipod to itunes music list
i am trying to take my music from my ipod and put it on my i tunes list can you help please
-
Not loaded adobe store, what to do?
Installed Adobe Creative Kloud but the manager for desktop does not work( Sync icon permanently gray! Help me please!
-
Extract / Report of Installed Base and partners related to compoents
Hello, we use SolMan 3.2 and want to create different reports about the installed base (ib) and the businesspartner related to the ib-components. How can we extract all data of the installed base or does already exist any SAP InfoSet? Are there any f
-
Hi I have a Macbook. Yesterday and quite often it freezes and runs really slow. But I was working on my accounts programme and it froze and now that file won't open. It says to do the recover command on the file, but not sure how to do it! Version is