How to manage users in generic syncronization process

Hi,
We need to solve the following issue:
We are developping a generic sync application in synchronous mode , it means, our application use generic syncronization to
comunicate with backend R/3 in synchronous mode and this is an indispensable requirement.
We use a table called 'BWAFMAPP' to specify with functions we use and the table called 'MEMAPPDEST' to indicate with RFC
destination is used by each function.
This method make us to use only one RFC user to connect with backend regardless of the user who starts the syncronization.
We'll try to explain the process of generic syncronization in more detail:
Step 1, The user logins into the application and after completes his daily job, starts the generic syncronization.
Step 2, During this syncronization, it logins with MI server with this same user (we can call him 'login user').
step 3, MI server searchs the function and rfc destination that the user need to connect with backend in tables mentioned
above
step 4, Mi server use the RFC user in rfc destination found to connect with R/3 backend
We need to change this last step because we must control the 'login' user`s roles and permission, and not, the rfc user's
permission.
The question is:
There are any way to login with R/3 backend with the same user that syncronization process use to login with MI server? or
We can connect directly with R/3 system from pda application?
Please, We need to solve this issue as soon as possible because it's very important for us to control user's permissions and
until now the only solution we has is to check manually all the authorization objects.
Thanks in advance and best regards,
Satur

Hi Satur,
Yes, suggestion made by Thomas fits your requirements perfectly.
End users have to logon to MI client with their own SAP user accounts (similar to what is setup for them in R/3 backend). Through appropriate roles and profiles you'll be able to restrict their access to backend data / functions and control it easily.
RFC connection between MI server and R/3 backend has to use Trusted connection. And in SM59 you have to specify that end users will use their own user accounts for authentication purpose. Also, ensure that your users' profile includes S_RFCACL authorisation object.
This solution works perfectly in our environment.
Best regards,
Laziz

Similar Messages

SSO and how to Managing User Roles/Privileges with Forms using Oracle db

We are in the process of implementing Oracle Application Server SSO with our custom Forms application using Oracle database -- all 10.2.0.1.0 version.
In our Forms Applications, we have about a dozen roles we have assigned to various users. We need to identify each user using our Forms because we are using the GLOBAL USER throughout the application.
Questions:
-- Do we have to create users/passwords in both OID and application database?
-- Is there a way to easily manage the user and passwords between SSO and Forms App/database in one place? For example, how does a user change their password once, but actually change it in both the database and SSO?
Any advice and/or direction would be greatly appreciated.
Thank you,
Mika
Edited by: user11846198 on Sep 1, 2009 1:41 PM
Edited by: user11846198 on Sep 1, 2009 1:53 PM

Yes, you can have global roles in the DB and assign this roles to specific OID users, and the will heritage the privilages, you can do this using Oracle Identity Management Web Tool http://hostname:7777/oiddas is not complicated.
Greetings.

How to manage users centally in OEM

Hi All,
I am using OEM 12.1.0.1.0, I want to manage users centrally. Actually what I want is I may create user in my external LDAP and the created users appears in OEM also which I can use for say notification purpose. I want every property of the user defined in external LDAP like.. email address etc to get appeared in OEM. Here I am using embedded LDAP which comes by default with WebLogic server. Can anyone suggest me the correct steps to achieve this.
Thanks in Advance!!
Edited by: Roshni Shankar on Nov 25, 2012 10:00 PM

Hi Roshni,
Have you read the Enterprise Manager 12c documentation on Security configuration? http://docs.oracle.com/cd/E24628_01/doc.121/e24473/security.htm#BABGAGIJ
It lists the steps to set up users with external authentication such as LDAP. I don't know if additional user properties such as email will appear in EM though.
I am working on something similar but using AD authentication instead.

How to manage user account and management through AMS

Hi all,
I’m in the process of designing a new mobile app that requires user registration, login and password reset. Basically all the standard user self service activities that public apps provide. Imagine Instagram for example.
We’re already looking at Azure Mobile Services and Facebook, Live, etc. authentication. But I’m a bit unclear on how to best handle manual user registrations. How would you best handle a user who decides that they want to register
without their social account?
User table in the custom application DB with user name, password, etc. and custom user management pages for registration, login, password reset
Azure Active Directory and OAuth same as with facebook, etc. Then build custom user management pages for registration, login, password reset, etc.
Some other Azure service that I don't know about?
Something else?
I noticed there is already another related question here:
https://social.msdn.microsoft.com/Forums/azure/en-US/ca5527f6-1130-4ebb-b335-2d4d6eda7734/create-new-account-and-reset-password-options-on-aad-signin-page?forum=azuremobile
The 2 important aims for this app are to require minimal maintenance and support overhead and high security at the same time.
Thanks,
Kia

I am not saying that, but with your question it looks like you want a custom auth.
Did you saw these article:
Register your apps to use an Azure Active Directory Account login
Authenticate your app with Active Directory Authentication Library Single Sign-On
Sara Silva - Microsoft Visual C# MVP
My blog |
My Windows 8 Store Apps Samples |
More Samples
Follow me in Twitter @saramgsilva
My Windows 8 Store Apps:
Female Pill |
Galinho (Tic tac Toe) |
24 |
My Snake
My Windows Phone Apps

MapViewer: how to manage user selections in business components Java class

Hi list,
I'm a GIS developer with experience on Mapserver and Mapguide. Buit I'm totally new on Oracle Mapviewer and I'm doing a feasibility study on a project where I basically have a very simple GIS use case, but I don't know if it is possible to manage by use Oracle ADF Java API and Oracle Mapviewer.
I would like to use JDeveloper / ADF Business Components / ADF Faces.
This is the use case:
- Mapviewer should display a polygon layer from Oracle Spatial
- Mapviewer should display a polygon layer from WFS
- User should be able to select a polygon on Oracle Spatial layer and another polygon in WFS layer
- ADF Face map control should:
a) hilglight these two polygon
b) execute my buiseness component Java function passing the user selection (id?... coordinates?... or anything useful to get these two polygons in the business Java function) as parameter.
Is it possible?...
Any suggestions (or samples) for point b)?...
Thanks in advance for any help

Hi Arnd,
Thanks for answer.
Can you adreess me to some ADF project that include ADF Geographic Map control?
I've carefully studied what explained in manuls contained in JDeveloper Help. I've made something, but I have some issue I can't solve.
Here you are in details what I've made:
1) I've installed Mapviewer Quick Starter Kit
2) I've configured themes and base map by use on MapBuilder
3) I've built an ADF application with separated business and model-view-controller projects
4) I've created entities and views in ADF business project
5) I've created a JSF page in model-view-controller project
6) I've put inside page an ADF Geographic Map assigning my base map and his related toolbar.
Up to now it worked fine. My problems started at this point, on the attempt to add themes to be exposed to user interaction.
PROBLEM 1
I've seen that there are basically two options to add theme for user interaction:
a) add a predefined themes
b) add a color/point/graph bindable themes
Option b) seems not fit for my needs.
Color theme is only for regions and forces me to set a range of colors (I want to set exatctly two different color for two different table attribute value).
Lines seem not covered from any of them.
So the solution should be option a), predefined themes. But predefined theme seems not selectable and I don't know how to attach a selection listener.
Please note (about selection listener) that in JDeveloper Help, book "Web User Intercace Developer Guide", "Using ADF Geographic Component" there is a code sample, but the explaination on how to enter the backing bean method is truncated (it says "For example," and stop, nothing else).
My questions are: predefined theme can be selectable? And how can I attach the selection listener?.
PROBLEM 2
Up to now I've made no test on WFS themes, but of course, also these themes should be exposed to user interaction in the same way of predefined layers.
Is it possible?...
PROBLEM 3
Legends activated by ADF Map Toolbar seem not working for predefied themes, they display nothing.
Is it possible to fix or workaround in some way?...
PROBLEM 4
Are there any way to print maps?...
Best regards
Francesco

How to manage User Session in Adf ?

Is there any guide line to manage the user session in adf ?

View layer Http session if it is not a desktop based application. Model layer also you can store session using
getSession().getUserData()But before that the information you provided is not enough. You need to describe in more detail of what session and what exactly are you looking for

How to manage users on multiple publish instances?

I am setting up a cloud that has mutliple publish instances that the dispatchers and load balancer handle. Currently there are only 2 publish instances, but there could very possibly be more. I ran into an issue that when a user goes to the site, if they sign up, it only sends their information to ONE of the publish machines (the one that they were directed to). Then when I try to login to the site, the first few attempts fail, because I am being directed to the other publish instance, which doesn't have my credentials on it. How would you suggest going about doing this? I have considered reverse-replication back to the author (and then having that replicate), or clustering the publish instances (although I don't know much about that at all), but I'm really not sure what the best route is, or if there is a different route I don't know about.

Follow this link and check it helps you.

How get the user initiador in gp?

hi all
How get the user initiator of a process GP with a Web Dynpro Callable Object?
because with this code I get the current user...
IWDClientUser wdUser = WDClientUser.getCurrentUser();
IUser user = wdUser.getSAPUser();
String userid = user.getUniqueID();
thanks!

Hi,
processId is the design time template id of the process. This you can find in the instantiation tab while designing the process.
Code for getting user context:
IWDClientUser wdUser = WDClientUser.getCurrentUser();
               IUser user = wdUser.getSAPUser();
               IGPUserContext userContext = GPContextFactory.getContextManager()
                         .createUserContext(user);
               IGPRuntimeManager rtm = GPProcessFactory.getRuntimeManager();
Hope it helps.
Regards,
Srinivasan Subbiah

Manage User Sessions

I know how to manage user sessions from Visual Administrator using Security Provider Service - Login Sessions. How can I do the same using SAP Netweaver Administrator?

HI,
What do you mean? usualy you use users ....... by going to T-CODE su01..
Your question is not clear. There is such nothing called using SAP NETWEAVER Administrator. or I dont have knowledge.
Hope You got the work done by going to su01..
Thanks,

How to manage the payment approver users?

Hello community,
I would like to understand more on the payment approval process in SAP Business ByDesign. Despite it is quite easy to find the payment approval process in the help center, it is really hard to find how to manage to whom the payment approval request is sent. How can a system administrator can decide which users have the faculty to approve payments? How to change/update the list of approver users?
Of course I have the rights to manage all users by assigning them business roles and access rights. I have access to all workcenters.
Thank you in advance for your help.
Luca

Hi Luca,
You can define threshold amounts for payment approvals depending on company, payment method, and user. No task will be created if the amount of the outgoing payment is below the specified threshold.
You can define this threshold for both incoming and outgoing payments on the Fine-Tune task Business Task Management for Payment and Liquidity Management
After maintaining a threshold amount to trigger the approval process, you can define who is the approver via Application and User Management work center, Employee Work Distribution view. In the Finance and Administration group, define the approvers within Approver for Liquidity Management.
The approval task is then sent to all approvers that you've maintained. If the task is completed for one of them, the payment gets approved. If there is no approver maintained, the task is sent to all authorized managers.
Please, mark my reply as answered or helpful if this answers your question.
Additionally, I'd also suggest you to post financial related questions on the Financial Management forum (http://scn.sap.com/community/bydesignbc/fm), which would have a greater visibility from our financial experts team.
Thanks a lot.
Best Regards,
Alexandre.

How can HelpDesk manage users in multiple Organizations in OIM R2

Hi All,
I looking to satisfy a requirement for OIM 11g R2 where a helpdesk administrator can only manage users that belong to a particular institution. However, there are approximately 50% of users that belong to more than one institution, where helpdesk staff from each institution should be able to manage the user. Customer is currently
doing this in Waveset by assigning users to orgs dynamically through rules which allows multiple virtual orgs. OIM unfortunately has no way to assign a user to multiple orgs, making OOTB authorization management very difficult.
How can a administrators from different org manage same User. If that user belongs to different org?
How to achieve this in OIM R2?
Thanks
Akshat

Hi Adr,
I know the OIM Authorization is around the Organization, and a user can present in only one org in OIM.
I wanted to know, can we force the authorization based on Department/Institutions rather than Org. I am thinking in reagards of OES Authorization policies.
OIM unfortunately has no way to assign a user to multiple orgs, making OOTB authorization management slightly difficult.
I am looking to determine the best approach to accommodate this requirement. Due to the high number of users that reside within multiple institutions, leveraging organizations will not work. Asa far i know OES APM should be able to accommodate this, but could not find any solid guidance in the Oracle training or Oracle by Example documentation.
Any thoughts?
-Ak

How to read User ID from the request Form and pre populating in the AD User process form before provisioning

I am trying to read the user Id from the submitted AD User request form( Catalogue AD User form. I need User Id,firstname and lastname inorder to prepopulate the common name as in this format - lastname,firstname (userid) for the user to be provisioned in Active Directory.
So after filling the AD User request form with User Id and Organization and submitting the request, I am trying to
prepopulate the common name in the process form before the provisioning.
The prepopulate adopter for the common name is configured to read the firstname, lastname and userid. firstname and
lastname variables are mapped to User definition and user Id is mapped to Process Data. In this setup I am not getting the
User Id value from process data, it is empty.
Is this a bug with OIM 11g R2 or I need to do it differently in order to read the user Id that user has entered in the
request form for populating the common name?
Thanks

Ghulam Yassen wrote:
How to get USER_ID and IP_AddressWhy exactly do you need this data and what do you plan to do with it?
The data is not reliable and trustworthy. IP addresses can easily be spoofed (a few seconds if you know what to do and how to do it). Also, IP addresses are not static. Users also do not use the same network device to access the database - different devices will have different IP addresses.
The o/s user on the client is supplied by the client driver. This can also be spoofed.
The user can also use a virtualised device - which means that recording the IP and o/s user seen from the server side, is pretty much useless and meaningless.
So if this data is intended to be used for auditing for example - it would be pretty suspect data to use for that purpose.

How to uninstall a Greasemonkey userscript in Firefox 3.6.16? Manage User Scripts box doesn't appear as before.

I need to uninstall an old userscript installed through Greasemonkey. Usually I go via Tools-->Greasemonkey-->Manage User Scripts or right-click on the monkey icon on the bottom left and choose Manage User Scripts and get this large window where I can manage whatever userscripts I have on here, but now I only get the small Add-ons window with the monkey icon last in the row (after Plugins and Installation icons) and the white area below is completely empty (whereas for example under Extensions I can see and handle those). How do I do this/Why can't I get the 'usual' managing window to show??

I also have this problem and it just started in the last week or so. It seems to be dependent on my home network and the problem only exists with firefox. I have used chrome and IE8 with no issues. I can verify tomorrow that it only exists in my network but one thing I was able to test is that the problem exists even on my linux boot. I am totally dumbfounded with this problem and I can't find anything that will allow the gmail page to load. All other pages I have tried load fine, all be it a little slower than normal but they load. If anyone knows of a difference between firefox and all other browsers on how it goes through the router I would appreciate the info cause I don't know of any differences.

Can we add users to the 'Manage Access Request' field to process site access request in SharePoint Online?

Hi,
I have a requirement in which I have to assign couple of email ids to the "Manage Access Request" field to process site access requests. And, this is possible using server object model but I have to achieve this on SharePoint Online with the help
of CSOM.
There are two properties which control the access request configuration, first is "RequestAccessEnabled", a Boolean flag which turns on or off the access request feature for the site. The second property defines one or more email addresses where
requests will be sent to. It is named "RequestAccessEmail".
The above both properties are available for server object model but not for CSOM.
So, is there any other workaround or way to achieve the sane in CSOM?
Thanks,

I don't think there is a programmatic workaround for SharePoint Online. But the email address is just used for Notification. Anyone with Manage Permissions can approve Access Requests. If you create an email distribution list for the multiple
addresses that should be notified you should be able to add the email address for the distribution list into the Access request email field using the user interface.
Paul Stork SharePoint Server MVP
Principal Architect: Blue Chip Consulting Group
Blog: http://dontpapanic.com/blog
Twitter: Follow @pstork
Please remember to mark your question as "answered" if this solves your problem.

How to change the maximum number of process per user in BW ?

Hi,
Do you know how to change the maximum number of process allowed per user ?
With RSRT we can customize the number of process per query but I don't know where we can customize the maximum number of process per user.
In fact, my production environment reach always the max number of process available in SM50...
Thanks a lot

Hi,
A user is not have the No. of processor but a work process can handle N No. of users. If a user hit any transaction v acn say from a list of N worl proceesor which has been taken the work.
Correct if I am wrong.
Regards
Syed.

How to manage users in generic syncronization process

Similar Messages

Maybe you are looking for