HTTP Call to XI Authentication

HI,
Our Client is using a Web application -- which needs to send data to XI using HTTP call.
The problem is -- in the HTTP call for authentication we have the pass on the uid and pwd in the url ... otherwise the application gives a popup for uid and pwd...
neither of the options (Hardcoding in URL or pop-up)is desired by the client.
Please let us know what other options we have to authenticate this...
Thanks and Regards,
Himadri

The same issue
Re: HTTP Adapter - Security question/issue
Regards,
Prateek

Similar Messages

Sender SOAP Adapter with HTTPs call

Hello,
Our scenarion is .. we will have a sender SOAP adater .. but it needs to be called using HTTPs(SSL).
Now considering we have the certificate generated and installed ..and that integration server is HTTPs enabled....What URL should the sending system call..?
For normal HTTP call the inbound address for inbound Adapter is: http://host:port/XISOAPAdapter/MessageServlet?channel=party:service:channel
For the case of HTTPs just changing the htttp to https and the port number in in the calling system will suffice? Or is there other configurations that needs to be done??
Thanks and Regards,
Himadri

Hi Himadri,
Firstly as suggested by others you can call using https and give the https port in the soap adapter servler URL. Secondly you need to do the following configurations:
1) If its PI 7.0/3.0, deploy the latest version of the SAP Java cryptography toolkit.
2) Configure SAP PI as the server for HTTPS calls. In short
      Using the SSL Provider service:
                            a.      Select whether the J2EE Engine should:
                               ■      Request (but not require) that the user presents a client certificate for authentication.
                               ■      Require that client certificates are to be used for authentication.
                            b.      Import the CAu2019s root certificate into the Trusted Certification Authorities list. (Choose Add.) using the following For all the steps, link is mentioned below for XI 3.0, you can find similar ones for PI 7.0
http://help.sap.com/saphelp_nw04/helpdata/en/f1/2de3be0382df45a398d3f9fb86a36a/content.htm
3) If you want to enable client authentication then you would need to add the client certificate in the TrustedCA keystore view of the SAP J2EE engine.
4) In the SOAP Adapter sender channel, configure Inbound Security level as HTTPS or HTTPs with client authentication based on your scenario.
Best Regards,
Pratik

Creating an HTTP destination with OAuth2SAMLBearerAssertion authentication

Hi All,
I'm trying to create an HTTP destination with OAuth2SAMLBearerAssertion authentication.
However, I'm at a loss as where to put the secret/private key. It should be part of the call to the token service so must be populated somewhere. But where? I'm guessing if I create a destination via a file, there is some parameter that I could set that should contain this key, but I'm not sure what it is - certainly there is nowhere on the HCP cockpit screen that I can use.
Downloading an existing destination that works, it looks like there is an additional "Password" parameter, but when I populate that with the private key, my connection still doesn't work.
Is there a special format that this private key must be entered into the destination file?
Many thanks for you help!
Cheers,
Chris

Hi Timo,
unfortunately not.
There is also a need to pass the private key to the token generation - or to somehow get the public key that is used by HCP so that I can populate that into my remote system..
eg for getting a SAML assert from SuccessFactors I can use (values abbreviated and altered)
https://apisalesdemo8.successfactors.com/oauth/idp?client_id=NWI2YTMyOTdiNjA0ZmYy...kZjM2NTU2NQ&user_id=admin&token_url=…
This generates a SAML assertion (nice of them) that I can use to get a token.
https://apisalesdemo8.successfactors.com/oauth/token?company_id=HCPDISCC&assertion=PD94bWwgdmVy..==&client_id=NWI2YTMyOT…
The receiving system (SuccessFactors) checks the SAML assert against the public key I have maintained against the client key on their side and grants the OAuth token which is used for subsequent authorisation.
So somewhere I need to either - populate the system I am calling with a public key for the private key that is being used to sign the SAML assertion, or somehow pass the private key for the public key that is being used on the called system.
I can't figure out how to do that, I'm guessing that perhaps it is more that there is a public key that I should be using on the receiving end, but not sure where I could find that.
here's a screenshot of a working SuccessFactors connection...
and no TrustStoreLocation so - I don't think it's using a truststore for the certificate...
according to the doco - When the OAuth authorization server is called, it accepts the trust settings of the destination.
Perhaps it is using the public key of the Local Service Provider in "Trust"? Certainly if this is the case it's not very obvious! (but I'm going to try!)
Cheers,
Chris

Is it possible to reduce the number of HTTP calls when using a ReportViewer control?

My application is written in .Net 4 using Visual Studio 2010 (version 10 of the ReportViewer control). The report in question contains a lot of data in the dropdowns used for parameter selection. For example, one dropdown contains 95k options and another
uses 24k options (I know this is bad design, but we need to keep it as-is for this release). When I use Fiddler to profile the report, I see that it makes a lot of HTTP calls and a majority return the same dataset. There are three phases of loading data. Each
one initiates a series of HTTP calls.
Loading the initial header with the filter controls (dropdowns, textboxes, etc).
Changing one of the dropdowns that has a dependent dropdown (start date/end date)
Loading the final report after clicking the View Report button
In total, 13 HTTP calls are made and 10 of those are returning the same 10MB of data. The final report only returns 13 records, but the whole process of loading the report filters, changing report filters and loading the report require 130MB of data to be
exchanged. This is an extreme example, but we do have other reports that are doing the same with smaller amounts of data.
My question: is there any way to modify the ReportViewer or the SSRS server to reduce the number of calls? Is this related to ViewState? Please understand that I am new to Reporting Services and have a lot to learn.

Hi rodeofive,
As per my understanding, the issue is a performance issue. And it is caused by there are thousands of values in the drop-down list of parameters in the report.
To work around this issue, I suggest you should make some changes in the report. For example, we can add additional two parameters with multiple keywords ahead, one for the dropdown contains 95k options, another for dropdown contains 24k options. Then all
of available values which are begin with the keywords will display in the parameter list. In this scenario, we can create cascading parameters. One is a keyword parameter, and the other parameter is the drop-down list that based on the keyword to display the
available values.
For more details about the method, please refer to the following FAQ:
http://social.msdn.microsoft.com/Forums/sqlserver/en-US/8de6c783-9cb4-4b95-9be8-b59bc0049866/forum-faqhow-do-i-add-a-search-feature-in-the-parameter-with-long-drop-down-list?forum=sqlreportingservices#8de6c783-9cb4-4b95-9be8-b59bc0049866
Hope this helps.
Thanks,
Katherine Xiong
Katherine Xiong
TechNet Community Support

Can you make an SSL (https) call from a Java Stored Procedure?

I have loaded a bunch of java classes. Ultimately, one of my routines makes an
https call to another machine (https://machine:443/foo?xml...). I am receiving
the following error message:
SSL implementation not available
I read
http://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_
id=NOT&p_id=103051.1
Which states
3.17.6 You can not do SSL callouts from within 8i to other CORBA or EJBs. This
also means that you can not callback with an SSL connection a CORBA object
running in an 8i client.
Does this mean that I can't do what I am trying to do from within 8.1.7?
If there is any way to do this, I would really appreciate the advice. I need
to call this Java API from a pl/sql routine, and it has to be via SSL. I would
prefer to load all the Java into the database and avoid an exproc call.

Anton/Joe,
Yes, you can do this, but it might not be straightforward based on the version of Oracle you have. I've noticed there's a higher chance of getting this to work with 8.1.7 or higher (otherwise, you may need to load more classes, etc.). Mark Piermarini posted a nice example in a previous thread in this group:
http://osi.oracle.com/~mbpierma/SSL_Java_DB.html
Basically, he connected to UPS to get package tracking info.
Hope this helps,
-Dan
http://www.compuware.com/products/devpartner/db/oracle_debug.htm
Debug PL/SQL and Java in the Oracle Database

Change over from a simple Xml call to a rpc-Http call ....

Hi there,
I need to change over from a simple Xml call:
<mx:XML id="urlsGeneral" source="http://www.mySite.com//.../AFS.xml"/>
to a rpc-Http call which is updating the readout if Xml is changed at any time.
I forgot to mention the most important item yet a very simple one: I need this only to be displayed in a title etc, and NOT a datagrid or else example below.
title="{urlsGeneral.urlGeneral.(@name==0).age}
I tried a lot today, but just can't get it right as the id="urlsGeneral" is always the problem.
Any help would be appriciated !!! Thanks in advance. regards aktell2007
<urlsGeneral>
<urlGeneral>
<name>Jim</name>
<age>32</age>
</urlGeneral>
<urlGeneral>
<name>Jim</name>
<age>32</age>
</urlGeneral>
</urlsGeneral>
Another call:
<mx:Script>
<![CDATA[
import mx.collections.ArrayCollection;
import mx.rpc.events.ResultEvent;
public var myData:ArrayCollection;
protected function myHttpService_resultHandler(event:ResultEvent):void {
myData = event.result.urlsGeneral.urlGeneral;
]]>
</mx:Script>
<mx:HTTPService
id="myHttpService"
url="http://www.mySite.com//..../AFS.xml"
result="myHttpService_resultHandler(event)"/>
Preferable I wanted something like this to work:
<mx:Script>
<![CDATA[
import mx.rpc.events.FaultEvent;
import mx.managers.CursorManager;
import mx.controls.Alert;
import mx.rpc.events.ResultEvent;
import mx.rpc.xml.SimpleXMLDecoder;
// Don't use here as it is already used in .swc !
/* import mx.rpc.http.HTTPService; */
private var myHTTP:HTTPService;
private function initConfigCall():void {
myHTTP = new HTTPService();
myHTTP.url = "com/assets/data/changesAppAIRPIOne001.xml";
myHTTP.send();
myHTTP.resultFormat = "xml";
myHTTP.addEventListener(ResultEvent.RESULT, resultHandler);
myHTTP.addEventListener(FaultEvent.FAULT, faultHandler);
CursorManager.setBusyCursor();
private function resultHandler(evt:ResultEvent):void {
var xmlStr:String = evt.result.toString();
var xmlDoc:XMLDocument = new XMLDocument(xmlStr);
var decoder:SimpleXMLDecoder = new SimpleXMLDecoder(true);
var resultObj:Object = decoder.decodeXML(xmlDoc);
// Removed [0] on single node !
appUpdateAvl.text = resultObj.application.configApp.appNewUpDate;
appLastChanged.text = resultObj.application.configApp.appLastChanged;
appChangedSections.text = resultObj.application.configApp.appChangedSections;
CursorManager.removeBusyCursor();
myHTTP.disconnect();
private function faultHandler(event:mx.rpc.events.FaultEvent):void {
var faultInfo:String="fault details: "+event.fault.faultDetail+"\n\n";
faultInfo+="fault faultString: "+event.fault.faultString+"\n\n";
mx.controls.Alert.show(faultInfo,"Fault Information");
var eventInfo:String="event target: "+event.target+"\n\n";
eventInfo+="event type: "+event.type+"\n\n";
mx.controls.Alert.show(eventInfo,"Event Information");
CursorManager.removeBusyCursor();
myHTTP.disconnect();
]]>
</mx:Script>

Hi again,
These days there are more quetions than answeres on any forum, and very seldom anybody shares the answer if they lucky enough to work it out so here is my answer for the above question
Change over from a simple Xml call to a rpc-Http call ....
I had it all along as a commend noted: // Removed [0] on single node !
So instead of title="{urlsGeneral.urlGeneral.(@name==0).age} it would be now title="{resultObj.urlsGeneral.urlGeneral.[0].age} and now it works perfectly well. I hope that one or the other of you can use the answer and the code !!! regards aktell2007

How to send a pdf file via http call

Hi Experts,
Please try to think on how you would send a file like a pdf file via the http call. You might need to convert the pdf in a character string which can be sent via http. The character string then might need to get converted back into a pdf and saved in a file. Read through the Archive Link API guide to see how they send the body of a file.
Please it is urgent......
Thanks
Basu

so you want to push the PDF file over http to external system.
where is pdf file stored.
for examle if its in the clients desktop, you can use gui_upload to upload to internal tabble (type BIN) then use FM SCMS_BINARY_TO_XSTRING to conver the binary table to type string.
then use cl_http_client class to push the file to the destination.

How to copy List item from one list to another using SPD workflow using HTTP call web service

Hi,
How to copy List item from one list to another using SPD workflow using HTTP call web service.
Both the Lists are in different Web applications.
Regards, Shreyas R S

Hi Shreyas,
From your post, it seems that you are using SharePoint 2013 workflow platform in SPD.
If that is the case, we can use Call HTTP web service action to get the item data, but we cannot use Call HTTP web service to create a new item in the list in another web application with these data.
As my test, we would get Unauthorized error when using Call HTTP web service action to create a new item in a list in another web application.
So I recommend to achieve this goal programmatically.
More references:
https://msdn.microsoft.com/en-us/library/office/jj164022.aspx
https://msdn.microsoft.com/en-us/library/office/dn292552.aspx?f=255&MSPPError=-2147217396
Thanks,
Victoria
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

BPM Synchronous Call: Error HTTP call to IS unsupported in AEX case

Hello,
we had an PO System 7.4 SP 7 and tried to call a synchronous Interface on PI via an "automated Activity".
But we get the error
"Could not invoke service reference name 0a5b605b-fc7a-410f-920a-0f6952dee18f......
Error while sending message. Reason: Error sending MS message. Exception: HTTP call to IS unsupported in AEX case"
in the same process to call an asynchromous interface on PI is possible.
We also did build the Process and Product complete new in the NWDS, but no change.
Any Ideas ?
Regards
Thorsten

Hello Thorsten,
I have a similar issue right now.
My automated activity is relate to an idoc message
XI30 -> PI -> IDOC_AAE.
This is only the ICO for this step, but I have many other steps (syncrhronous) in this model and all of them Work fine. Actually the idoc is processed, and ok, in ECC, but the entire process remain in "still processing" about 2 hours.
You found the problem? any ideas?
thank u.
Regards
Carlos Andres

HTTP Call to SOAP Sender Adapter

Hi All,
I'm working on a scenario where i plan to use SOAP Sender Adapter for receiving Plain HTTP Calls from the client.
The purpose behind this exercise is to have control over the message flow in case of sender HTTP protocol in XI.
I configured a SOAP channel and used the option 'DO Not Use SOAP Envelope'. But when i post the message to the adapter engine using a HTTP client, it fails.
Can somebody guide me in this case.
Regards,
Anurag

Hi,
>>>But when i post the message to the adapter engine using a HTTP client, it fails.
with which error ?
Regards,
Michal Krawczyk

Flex IO error# 2032 when using IE7 for parallel https calls across two servers

Hi,
Weeks back I faced a wierd issue in the behaviour of flashplayer running on IE7 which is invoking parallel https calls. I have two SSL enabled servers one is listening on port 443 and the other is listening on port 8443 but both running in the same domain. I developed a flex client (using httpservice class) which sends parallel https requests to these two servers. When the number of parallel requests increases say more than 5 requests to each server, the fault handler was encountered with the error message:
[RPC Fault faultString="HTTP request error" faultCode="Server.Error.Request" faultDetail="Error: [IOErrorEvent type="ioError" bubbles=false cancelable=false eventPhase=2 text="Error #2032: Stream Error. URL: https://servlet"]. URL: https://servlet"]
I used some http tracer tools to check if the request jumps out of the browser but that didnt happen. I am 100% sure that I am using the correct url. I was totally helpless . This worked without any issues in IE8 or Chrome or Firefox. This made me think about increasing the number of concurrent connections for IE7 by modifying the windows registry. But still no difference in the behaviour.
After breaking my head for a long days, I got one solution which would work. This issue is happening only if we are sending https requests to different ports in the same domain. So rather than moving one among the two servers to a new domain, I got a new DNS name for the same destination. So presently I got two DNS names pointing to the same machine in which both the servers are mounted.
After this it really worked cool!!! Now that I am using a separate DNS name for the server listening on port 8443 and the old DNS name is used to hit the server listening on 443. And I am happy that its working fine without any issues .
But can anyone tell me if this is really an IE7 issue or do we have anyother solution to fix this.
Please share ur thoughts..

Hi,
I am building a mobile employee directory and for that I am using Flash Builder 4.6/AIR 3.1.0. I am using RESTful web service to get XML results and to display on my mobile application. I am getting the same below error when accessing the webservice from mobile app (Android - Galaxy Tab 7 inch).
Error: [IOErrorEvent type="ioError" bubbles=false cancelable=false eventPhase=2 text="Error # 2032"] URL: http://adfdevp.alshaya.com:7013/RESTEmployeeDetails-EmployeeDetails-co">http://adfdevp.alshaya.com:7013/RESTEmployeeDetails-EmployeeDetails-co ntext-root/jersey/restlabhttp://adfdevp.alshaya.com:7013/RESTEmployeeDetails-http://adfdevp.als haya.com:7013/RESTEmployeeDetails-EmployeeDetails-co ntext-root/jersey/restlabEmployeeDetails-context-root/jersey/restlab
The same code is working in Flash Builder 4.6. I have checked Network Monitor to "Disabled" before deploying to mobile. What am i doing wrong here? I am pasting my code below-
<?xml version="1.0" encoding="utf-8"?>
<s:View xmlns:fx="http://ns.adobe.com/mxml/2009"
   xmlns:s="library://ns.adobe.com/flex/spark" title="HomeView" xmlns:dao="dao.*"
   xmlns:mx="library://ns.adobe.com/flex/mx">
<fx:Script>
   <![CDATA[
    import mx.collections.ArrayCollection;
    import mx.collections.IList;
    import mx.collections.XMLListCollection;
    import mx.events.FlexEvent;
    import mx.rpc.events.FaultEvent;
    import mx.rpc.events.ResultEvent;
    import mx.rpc.xml.SimpleXMLDecoder;
    import mx.utils.ArrayUtil;
    import valueObjects.EmployeeDetail;
    [Bindable]
    private var myXml:XML;
    [Bindable]
    public var resultCollection:IList;
    public function handleXml(event:ResultEvent):void
     var xmlListCollection:XMLListCollection = new XMLListCollection(event.result.children());
     var xmlListCollectionValues:XMLListCollection = new XMLListCollection(event.result.emp.children());
     var resultArray:Array = xmlListCollection.toArray();
     var resultArrayValues:Array = xmlListCollectionValues.toArray();
     var objEmployeeDetails:EmployeeDetail;
     var resultCollection:ArrayCollection = new ArrayCollection();
     var j:int = 0;
     for(var i:int=0;i<resultArray.length;i++){
      objEmployeeDetails = new EmployeeDetail();
      objEmployeeDetails.brand = resultArrayValues[j];
      objEmployeeDetails.division = resultArrayValues[j+1];
      objEmployeeDetails.email = resultArrayValues[j+2];
      objEmployeeDetails.employee_name = resultArrayValues[j+3];
      objEmployeeDetails.employee_number = resultArrayValues[j+4];
      objEmployeeDetails.grade = resultArrayValues[j+5];
      objEmployeeDetails.mobile = resultArrayValues[j+6];
      objEmployeeDetails.position = resultArrayValues[j+7];
      j = j + 8;
      resultCollection.addItem(objEmployeeDetails);
     list.dataProvider = resultCollection;
     //return resultCollection;
    public function handleFault(event:FaultEvent):void
     //Alert.show(event.fault.faultDetail, "Error");
    protected function sesrchEmployee():void
     xmlRpc.send();
   ]]>
</fx:Script>
<fx:Declarations>
   <dao:EmployeeDAO id="srv"/>
   <mx:HTTPService id="xmlRpc"
       url="http://adfdevp.alshaya.com:7013/RESTEmployeeDetails-EmployeeDetails-co ntext-root/jersey/restlab"
       result="handleXml(event)"
       fault="handleFault(event)"
       resultFormat="e4x" showBusyCursor="true">
    <mx:request xmlns="">
     <data>{key.text}</data>
     <data>{key1.text}</data>
    </mx:request>
   </mx:HTTPService>
</fx:Declarations>
<s:navigationContent/>
<s:titleContent>
   <s:VGroup width="100%">
   <s:HGroup width="100%">
    <s:Label top="40" paddingTop="10" paddingRight="13" height="29" text="Employee Name:"/>
    <s:TextInput id="key" width="559"/>
   </s:HGroup>
   <s:HGroup width="100%">
    <s:Label height="30" paddingTop="10" text="Employee Number:"/>
    <s:TextInput id="key1" width="100%"/>
   </s:HGroup>
   </s:VGroup>
</s:titleContent>
<s:actionContent>
   <s:Button icon="@Embed('assets/search.png')" click="sesrchEmployee()"/>
</s:actionContent>
<s:List id="list" top="0" bottom="0" left="0" right="0"
    change="navigator.pushView(EmployeeDetails, list.selectedItem)">
   <s:itemRenderer>
    <fx:Component>
     <s:IconItemRenderer label="{data.employee_name}"
          messageField="position">
     </s:IconItemRenderer>
    </fx:Component>
   </s:itemRenderer>
</s:List>
</s:View>
Please help me to resolve this issue as soon as possible. Appreciate your quick response in this regard.
Thanks,
Murtaza Ghodawala
Mobile: +965 97180549
[email protected]

Archive Link - encrypt HTTP call parameters

Hello!
I have an Archive Link which is configured to open an Internet Explorer (web application). I would like to prevent user from copying the IE address bar and starting the application manually with the same or changed parameters. How do I do this?
I was thinking: Is there a way to encrypt parameters of a HTTP call triggered by Archive Link, which would be decrypted at a server application?
Or is there some other way to acomplish security of the HTTP call parameters?
Thanks in advance!
Kind regards,
Boris

Hi Thomas,
It is Meridio for DMS and IIS for Content Server, to be more precise this is the enviroment: SAP 4.7 with ArchiveLink 0046,Meridio 4.4, FI repository , http as protocol calling external IExplorer.
BNJ

Cant see synchronous http-calls in message monitoring

Hi all,
I 've got a synchronous http call. When the request was bad I saw the failed request and response messages in XI message monitoring with red lights. But now the call seems to work fine, because the sequenced step is showing. But I can not see the http-message in message monitoring.
Any ideas?
Regards
Mathias

hi,
have a look at my blog:
/people/michal.krawczyk2/blog/2005/05/10/xi-i-cannot-see-some-of-my-messages-in-the-sxmbmoni
how to turn it on
logging_sync
Regards,
michal
<a href="/people/michal.krawczyk2/blog/2005/06/28/xipi-faq-frequently-asked-questions"><b>XI / PI FAQ - Frequently Asked Questions</b></a>

How to make HTTP call to encoded URL?

Hi expert,
I need to make an HTTP call to this url submitted by
<form action='http://www.ncbi.nlm.nih.gov/BLAST/Blast.cgi' enctype="application/x-www-form-urlencoded" method="POST" NAME="FormatForm" TARGET="Blast_Results_for_25530"><script src="../../../blastcgi.js"></script>
if i use the action url in the form tag, it does not work. it looks like it is encoded by the enctype=.... is it possible to connect to this url? thanks.

Do the first POST to Blast.cgi, with URL encoded parameters.
Get the Refresh header from the response.
Split the Refresh header into wait_time and next_url (find the ; and take two substrings)
currentThread.wait(wait_time * 1000);
next_url.openConnection().connect();
Either you'll get your response, or you'll be told to wait longer (I don't know the details of Blast.cgi, you might need to loop).

Error in http call soap run time exception

Hi All,
we are facing an issue whenever we are sending the file using soap protocal.
the issue here is.
when one user trying to send files he is getting error in http call soap run time exception.
when he try to login to other PC then he can able to send the file without any exception.
we have checked the local setting and coockies.
any one please help me.
Regards,
Vishal Kommera

Its not in the notepad file but when I open it in internet explorer etc it appears... But cant see the '-' in the internal table though.
I have also found one interesting this, when i pass the XML directly i.e hard code it there is no exception caused...
Edited by: sk123456 on Oct 19, 2009 9:05 AM
Edited by: sk123456 on Oct 19, 2009 9:07 AM

HTTP Call to XI Authentication

Similar Messages

Maybe you are looking for