IDM Implementation issue

current design:
There are 5 applications running on weblogic 10 which needs to be integrated with IDM. for this
I have installed sim/sam on sun application server and there is reverse proxy instace for each application and J2ee policy agent on each application . I want to enable single sign on across the application, Please let me know is there a way other than CDSSO

IDM is a user provisioning tool...
For SSO between applications you might want to consider Access Management tools .... like Open SSO, Sun Access manager, CA WAM, Siteminder, Tivoli Access manager etc...
If you are using the same user Directory for all these applications.... you may use IDM as a tool to provision all the accounts from on place....
Thanks
NSankar

Similar Messages

Implementation issues in sap/bw

Hi,
This is srinivas can any one help me in telling what type of issues we will face in implementation project and can any one can send some scenario on cube and ods and multi-provider and infoset. please send me some issues in transporting and what type of issues we will face in implementation and answers for error4,error9 with solutions in sap/bw.
Regards,
srinivas.

These might be due to different reasons need to chk in ST22 for more details..anyway i am listing some
error 4
We will get this error when your flat file is opend and at the same time you are trying to load it, for this you have to close your file and reload it.
or
For invalid chars in the records then u can Go to PSA and edit the error record or go to RSKC and accept the special characters.
Error 9
This is due to timestamp then Replicate the data source and in se38 give RS_TRANSTRU_ACTIVATE_ALL for source system
Or
In ODS activation
Implementation issues
http://help.sap.com/bp_biv170/documentation/SolutionScope_EN.doc
http://help.sap.com/bp_biv235/BI_EN/documentation/BWProjectPlan_EN.mpp
Lifecycle Implementation
Regards,
B

Domain Controller going down after IDM implemented

Hi,
We have implemented IDM 7.1 and are using the PSS (Password Self Service), Password Syncronization functionality for 2 AD and 6 ABAP systems. This PSS is implemented to support our company ESS which is on the internet so that users can reset their own password. Hence to support it we have a architecture having one AD on the DMZ and another internal.
Both the AD repositories have been configured pointing to a perticular DC (Domain Contorller) . All the DC's have Phook installed on them.
Since Go-live we have not had any issue with the DC on the DMZ but the internal DC keeps going down once in a while and it doesnt have a pattern. We tried switching to different DC's also which didnt work. Right now we are keeping a close watch on the DC and we carryout a restart whenever it happens.
Did anyone come across such kind of a issue, if so then please let me know.
Thanks.

Hi Ahmed,
Thank you for your quick response! Our secondary domain controller IP settings were set properly according to the recommendation, but the primary (the one having the issues) was not. I went ahead and changed the settings and did an ipconfig /registerdns
and restarted the netlogon service. Nothing changed after that. I ran a dcdiag and the only one that failed was this:
      Starting test: NCSecDesc
         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
            Replicating Directory Changes In Filtered Set
         access rights for the naming context:
         DC=ForestDnsZones,DC=*hidden*,DC=*hidden*
         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have
            Replicating Directory Changes In Filtered Set
         access rights for the naming context:
         DC=DomainDnsZones,DC=*hidden*,DC=*hidden*
         ......................... *hidden PDC Name* failed test NCSecDesc
I'm going to restart the server tonight after those IP changes and let you know my outcome.
Thanks again!

End Routine Implementation Issue

Hi Colleagues,
I want to implemente an end routine in order to populate the material type from the material master data.
The source structure of my transformation contain the material.
The target structure of my transformation contain the material and material type infoobject.
I have implemented the following source code in the end routine based on the sdn doc below :
http://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/e73bfc19-0e01-0010-23bc-ef0ad53f2fab
My source code is :
Global data declaration
List of all Employees and corresponding sales organisation
    DATA: BEGIN OF I_S_MATERIAL_TYPE,
      MATERIAL TYPE /BI0/PMATERIAL-MATERIAL,
      MATERIAL_TYPE TYPE /BI0/PMATERIAL-MATL_TYPE,
    END OF I_S_MATERIAL_TYPE.
    DATA: i_t_material_type like table of I_S_material_type.
METHOD end_routine.
*=== Segments ===
    FIELD-SYMBOLS:
      <RESULT_FIELDS>    TYPE tys_TG_1.
    DATA:
      MONITOR_REC     TYPE rstmonitor.
$$ begin of routine - insert your code only below this line        -
local data declaration
    data: e_s_result type tys_TG_1.
    data: e_t_result type tyt_TG_1.
    data: material_type like e_s_result-matl_type.
read master data in local table once
      SELECT MATERIAL MATL_TYPE FROM /BI0/PMATERIAL
        into corresponding fields of table i_t_material_type
        WHERE MATERIAL = <RESULT_FIELDS>-material
        AND    objvers = 'A'.
Do the calculation and add the new rows
*>>
loop over the input result data package
    loop at RESULT_PACKAGE into e_s_result.
get Counter
      read table i_t_material_type into e_t_result with key
      material = e_s_result-material.
         move material_type to e_s_result-matl_type.
         append e_s_result to e_t_result.
    endloop.
add the lines to the output package
    refresh RESULT_PACKAGE.
    move e_t_result[] to RESULT_PACKAGE[].
$$ end of routine - insert your code only before this line -
ENDMETHOD. "end_routine
$$ end of routine - insert your code only before this line         -
ENDMETHOD.                    "end_routine
I have the following error message :
E:"E_T_RESULT" cannot e converted to the line type of
"ME->I_T_MATERIAL_TYPE"
Question :
Can someone explain me what is the issue in my source code ?
Cheers,

Hi Vijay,
Thanks for your precious answer !
I have modified the matl_type - but I still have the same error message on the read table coding part.
Error message: E:"E_T_RESULT" cannot be converted to the line type of
                              "ME->I_T_MATL_TYPE".
Global data declaration
List of all Employees and corresponding sales organisation
    DATA:
    BEGIN OF I_S_MATL_TYPE,
        MATERIAL TYPE /BI0/PMATERIAL-MATERIAL,
        MATL_TYPE TYPE /BI0/PMATERIAL-MATL_TYPE,
    END OF I_S_MATL_TYPE.
    DATA: i_t_matl_type like table of I_S_matl_type.
local data declaration
    data: e_s_result type tys_TG_1.
    data: e_t_result type tyt_TG_1.
    data: matl_type like e_s_result-matl_type.
read master data in local table once
    SELECT MATERIAL MATL_TYPE FROM /BI0/PMATERIAL
    into corresponding fields of table i_t_matl_type
    WHERE MATERIAL = <RESULT_FIELDS>-material
    AND objvers = 'A'.
Do the calculation and add the new rows
loop over the input result data package
    loop at RESULT_PACKAGE assigning <result_fields>.
Error message: E:"E_T_RESULT" cannot be converted to the line type of*
                             "ME->I_T_MATL_TYPE".*
      read table i_t_matl_type into e_t_result with key
      material = e_s_result-material.
      <RESULT_FIELDS>-matl_type = i_t_matl_type-matl_type
      Modify result_pacakage from <result_fields>
    endloop.

Smartform Implementation issue for the report RFKORD50

Hi,
I have a requirement to implement a smartform for FI Invoice.
This smartform should be configured in OB96 for the print program RFKORD50.
Currently the SAP Script F140_DOCU_EXC_01 has been configured for Standard print program RFKORD50.
This SAP Script should be replaced with Smartform. But the issue is the report RFKORD50 is designed to
call only a SAP Scrip. Is there any better way to trigger the Smartform other than modifying the standard program?
Thanks,
Sailaja.A

Hi,
One of the very tough task, when it comes to migrate a script into Smartforms .. With a satndard print program ..
You have a option on samrtform screen , just to migrate a Sapscript into Smartform .. But it is just a migration of Layout.. means just creation of WINDOWS and pages.. All the elements and text node creation still you need to do ..
But one of the major challenge is to Customize your print program..
So i will suggest you to create a Z copy of RFKORD50.. as print prgm .. Then you can feal better
Now keep all the data selection part as it is .. collect it in different structure, then call your samrtform..
and before calling your smartform, prepare your layout ..
Very Imp suggestion, try to work on small small task.

ESS implementation issue.

hi all
I am implementing ESS on the NW04s platform. I have done all configuration in the front end and the back end (ECC 5.0). When I assign the role ESS to a user I see only the role, workset and one page (overview). I am not able to see the other pages even though they are attached to the role. Initially I did not even see the role but then attached the everyone group to the same. Now I am unable to find the issue for the pages not appearing. Can I use ECC 5.0 and EP 7.0 for BPs. Any help?
Thank you all.
regards
LNV

Check the permission role and Role content..
you can open the location of ESS content and there right click and open permissions and then assign it to your role.
you can check <a href="http://help.sap.com/erp2005_ehp_02/helpdata/en/f6/263359f8c14ef98384ae7a2becd156/frameset.htm">Setting of permissions</a>
also check the authorization section of <a href="https://www.sdn.sap.com/irj/sdn/weblogs?blog=/pub/wlg/3467">Document</a>
Hope this helps.
Warm regards,
Sudhir

Simple idm implementation question

Hi,
Would anyone with IDM experience comment on what would it take to implement the following in IDM (assuming there are technical people available, though with no idm experience)
1. There is no provisioning to the end systems
2. A requestor logs in, creates a request -> approver logs in and approves -> implementer logs in and marks implemented (that last piece i imagine you'd need a custom workflow and form on a resource/role to add implementers) -> resource/role marked provisioned
3. Basic audit reports for audit
4. requester/approver/implemeter can be setup in different departments so they only see resources/roles for that department
Your advice is much appreciated!

I am no expert in IDM, but what you require is possible and explained in good detail as part of the Deployment Fundementals course run by Sun, which I attended about a month back. It would take too long to explain how to put it in place on this forum I'm afraid. You would need to attend the course. I don't have enough expereince to advise how long this would take. Hope this is of some help.

IDM: Implementing Password Synchronization only

Hello to everyone.
We are currently implementing IDM (7.2) by phases.
For the first phase, we are planing to cover u201Cpaswword synchronizationu201D only. Therefore we are going to continue administrating user accounts in a descentralized way (Active Directory and CUA separately)
Also, this task must be selfservice, meaning, the users will change their own passwords by answering a few questions defined previously
Is it posible to do so?...... how?.... what options do I have?
Any help would much appreciated.
Thanks a lot in advance
Gabriela

Maria,
Please take a look at this document:
http://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/502c39b9-02e8-2d10-18a7-d32fade7b18b
Matt

Roll-out project implementation issue

Dear colleagues,
This issue might have already been turned up but couldn't find any related threads.
We have created our template project, set up the structure, added project documentations (11MBs converted to PDF ), training materials, everything seems to be ok here.
Now we have to create our first implementation project based on the template. Template is defined and is public (visible), Global Rollout Functionality is activated. The issue is, when we cretate the implementation project the structure is copied from the template, even the training materials can be seen in SOLAR02, but none of our blueprint documents are copied to the roll-out project.
Have you ever faced such situation before? Do you have any clue where to find the root cause of this?
thanks in advance for your replies
Szabolcs
Edited by: Szabolcs Dombó on Jul 17, 2008 1:26 PM

Hi,
Below mentioned is the details of using the SOLMAN for template rollout project. Hope this helps you.
The process of setting up and using the template in projects involves two or more individual projects. The first project is referred as "Master Project".
For Master project: Global Program Setup(Project Preparation)
- Create a master project. this must be of project type template since this will allow the packaging of reuse elements.
- Create the required number of templates(with in master project). At this stage, these templates are empty packages.
- Select standard scenarios as a starting point to build business scenarios in the master project, in the same way as for a normal project.
For Master project: Global Buisness Blueprint
- Detail standard scenarios to customer specific solution structure
- Assign template(s) at the scenario level of the customer specific solution structure
- Set global attributes to determine global/standard/harmonised/local processes
- Describe global business and technical requirement.
==========================================
Reuse of template at local rollout site
Project Preparation:
- Create a local "rollout" project. This can be either an implemetation project type or can itself be a template project type if you may need to reuse sections of this project in its own right.
- Select one or multiple templates and related scenarios in the scope tabbed page.
Note: there is no direct relationship between the templates choosen here. In other words you can attach tempalte form multiple other "master" projects, which may have no other relationship to one another.
Business Blueprint:
- The contents of the templates which have been attached to the "roll-out" project appears as elements of the project structure.
- Processes defined as global attributes with in the template area dopted wholesale with no changes.
- Adapt harmonised and local processes to local specific requirement(such as enhance process scope).
- Document local specific requirements of harmonised or local processes.
- Add further local specific structure elements as required and document.
Hope this help. Pls assign points.
Rgds
Manish

Oracle IDM authentication issue

HI.,
I am new to IDM 11g and we added the tenants/users/admin users/roles to the IDM for UI access via LDAP. We donot have problem with logging into UI via LDAP/IDM. We have an issue where ,when ever we log into IDM identity page [i.e URL will be http://HOSTNAME:7777/identity/faces/pages/identity.jspx ] it throws an error as shown below
OracleJSP error: java.io.FileNotFoundException:
Set the init-param debug_mode to "true" to see the complete exception message.
Please help me identify what exactly an issue is, this applies to the "read only" users or "limited" roles [i.e less admin roles]. Can you please let me know where exactly log file should we review and where to turn on debug mode.
Thanks.

qwe16235 wrote:
Our source is Oracle data base, where S_date is defined as DATE. Why did you say STRING , when it defined as DATE data type?I doubt you source is an Oracle database. You may have it stored in an Oracle database, but it cam form somewhere else, and was very likely inserted into the table as a string, wherever it came from. Given a string that resembles a date, Oracle will try to convert it to a date using the nls_date_format parameter for the session (which can either be set in the session or inherited form the database). Perhaps this will help explain:
SQL> create table t (conv_type varchar2(10), dt date);
Table created.
SQL> alter session set nls_date_format = 'dd-mon-rr';
Session altered.
SQL> insert into t values ('Implicit', '01-jun-31');
1 row created.
SQL> insert into t values ('Explicit', to_date('01-jun-1931', 'dd-mon-yyyy'));
1 row created.
SQL> commit;
Commit complete.
SQL> select conv_type, to_char(dt, 'dd-mon-yyyy') dt
2 from t;
CONV_TYPE DT
Implicit 01-jun-2031
Explicit 01-jun-1931So, unless you are really inserting dates, not strings that look like dates, you are going to have problems.
John

HCM - IDM Integration issues

Hello Experts,
I am working on the HCM & IDM Integration and I have done the configurations on HCM & VDS as per the Systems Landscape document.
When I Run the export query from the HCM, The data is not coming to the staging area.
I have turned on the Operational log trace and reran the query and found the following is logged in the logs. But it is not of much help to understand why the roll back is happening.
Could anyone face such kind of error earlier ? Any thoughts on how to proceed further !!
I am on IDM 7.2 SP7
Thanks,
Krishna.

Hello Deepak,
Thanks for your reply.
Yes, I am using PERNR to calculate my MSKEYVALUE. But I believe in the current issue, it is not going to that stage at all.
1. When we run the extract programme from HCM, VDS first writes the data to HCM_Staging_Area identity store to the MX_HCM_EMPLOYEE entry type.
2. When this happens, based on the event tasks defined on MX_HCM_EMPLOYEE type attribute, the job "Write HCM Employee To SAP Master" will be triggered where the MSKEYVALUE is calculated and be written to Master ID store.
In the current scenario,VDS is not writing the data to HCM_Staging_Area at all.
When examined, the logs i got entry rejection as mentioned the screenshot in my initial post.
~ Krishna.

Formula implementation issue

I have facing a problem to implement below issue.
below is the example
Master table
code     desc
1     REVENUES
2     CAPITAL CHARGE
3     REVENUES / Capital charge., %
Transaction table
code     process month     Amount
1     30-Apr-11     100
2     1-May-11     5000
we have to calculate value for code 3 like (code 1 /code 2)*100
I want we want to keep this formula in a table and calculate as per formula given in the table ( formula is changeable) and because of this we can't write any direct formula in the procedure.
I am seeking help from forum on this issue. Thanks in advance.

Your solution needs small adjustement. You shoud generate xml not for whole table but just for the current row:
SQL> select * from t
2 /
REVENUES CAPITAL_CHARGE EQUATION
        10            100 REVENUES / CAPITAL_CHARGE
        20             50 REVENUES / CAPITAL_CHARGE
SQL> SELECT
2                   REVENUES, CAPITAL_CHARGE,
3                    TO_NUMBER (
4                       EXTRACTVALUE (
5                          xmltype (
6                             DBMS_XMLGEN.
7                              getxml ( 'SELECT '||EQUATION ||' RESULT FROM T'
8                                )),
9                          '/ROWSET/ROW/RESULT'))
10                       result
11               FROM t
12 /
                        xmltype (
ERROR at line 5:
ORA-19025: EXTRACTVALUE returns value of only one node
SQL > SELECT
                  REVENUES, CAPITAL_CHARGE,
                   TO_NUMBER (
                      EXTRACTVALUE (
                         xmltype (
                            DBMS_XMLGEN.
                             getxml ( 'SELECT '||EQUATION ||' RESULT FROM T WHERE ROWID = ''' || ROWID || ''''
                         '/ROWSET/ROW/RESULT'))
                      result
              FROM t
REVENUES CAPITAL_CHARGE     RESULT
        10            100         .1
        20             50         .4
SQL> SY.

How to implement issuing stock in-transit for stock transport orders

Hello,
We are using stock transport orders in SAP. At the moment the supplying plant does a post goods issue for the delivery, the stock in-transit is "owned" by the receiving plant. Our Finance department wants this to be changed in such a way that the stock will be owned by the issuing plant until it has been received by the reciving plant.
It seems there is a possibility to do that, but I can not figure out what exactly needs to be done. Can someone explain to me the steps that need to be taken to implement this?
Thanks,
Ed

Try MB5TD. Please also check OSS notes 1120843, 1268193, 925384.
Edited by: Csaba Szommer on May 22, 2009 8:28 AM

Specific attributes for IDM implementation

I am trying to integrate webcenter with Oracle IDM environment, to do the same i required to know the specific attributes for oracle webcenter users
the input is required for the IDM team to create the schemas,
Can anybody enlighten me about the same,

Read this link and around: http://docs.oracle.com/cd/E21764_01/webcenter.1111/e12405/wcadm_security_id_store.htm#CFHJEJID
Note, that you will not integrate "WebCenter", but rather "its LDAP".

Q4_How to manage software material and BOM in SAP_High-tech Industry PLM Implementation Issues

Hello,
We are implementing SAP PLM for a high-tech company which designs and manufactures mobile phones (ODM). Since we are new in PLM consulting and we are facing with some implementation difficulties, we are looking for some solutions here.
Question 4: How to manage software material and BOM in SAP?
Currently, software are not managed as material in the BOM. How to manage software material in PLM, can anyone help us with some suggestions.
Question 5: PADS integration with PLM.
Currently, customer is using Pro/E and PADS to design their product. SAP has already provided standard interface for Pro/E integration. But for PADS, there is no such interface. Because of the specialization of electrical components managed in PADS, different from structural parts in Pro/E, how to transfer them between PLM system and manage them in the PLM system has become an difficulty. We will appreciate a lot if anyone can share us with some successful solutions.

Hi,
software, typically a released version of software, is typically managed as a normal material master, and a related document with the code as a package (e.g. ZIP), if really needed.
Software in development is managed typically with a dedicated Software Configuration Management tool like Rational ClearCase, Subversion, MKS Integrity, ....
Regards, Ulf

IDM Implementation issue

Similar Messages

Maybe you are looking for