IDM User Interface: Access Denied, Service Down

Hello,
I have a problem with the login to the IDM UI. I get the message: "Access denied, Service down".
In the userinterface_00.0.log following information is stored:
#2.0 #2010 08 10 12:40:19:898#0-700#Info#/System/UserInterface#
#BC-WD-JAV#tc~wd~webdynpro#0003FF252E3400A600000009000003D8#1050550000000004#sap.com/tc~idm~wd~workflow#
com.sap.tc.webdynpro.services.session.SynchronizedScopeMaintainer#Administrator#9##
164C6500A4B711DF93E60003FF252E34#f8874f50a4b411dfbe830003ff252e34#f8874f50a4b411dfbe830003ff252e34#0#
Thread[HTTP Worker [@25656386],5,Dedicated_Application_Thread]#Plain##
Deprecated scope of type SERVERSESSION_AT_LEAST_ONE_APP_SCOPE is used! Please replace the usage of scopes
with new mechanism based on "Cross application session communication API".#
Can anyone help me please...?!

Hi Sony,
Judith and me use CE 7.2, too. We downloaded the components under this link: https://websmp110.sap-ag.de/support
Choose the following path:
Support Packages and Patches - Entry by Application Group" SAP NetWeaver and complementary products" SAP NW IDENTITY MANAGEMENT" SAP NW IDENTITY MANAGEMENT 7.1
There we downloaded:
- ICDESIGNTIME05_1-10007480.ZIP
- ICRUNTIME05_0-10007481.ZIP
- IDMIC05_0-10007483.SCA
Maybe this helps you...

Similar Messages

SAP IDM 7.1 ACCESS DENIED accessing the IDM interface

Hello,
I have finished configuring my IDM 7.1 . But when i try to access to the IDM webpage it gives me
ACCESS DENIED
SERVICE IS DOWN .
And this happens despite I have gave to the user all the authorizations of the installation guide.
I tried even the function ADD USER into the identity store but still no success.
Someone of you experienced the same issue?
Kind Regards

Hello,
however your input was useful . My problem was related to the JDBC configuration . I have deleted and recreated completely the jdbc connection .
After that the error went away. I faced another error telling me " No identity stores defined for workflow" .
I used this link creating another Identity Store and everything went good.
For the ones tha could face the same problem here is the link :
http://wiki.sdn.sap.com/wiki/display/Security/NWIDM7.0-WorkingwithWorkflowsPartI

Why do my Visitors users get Access Denied in my New Forms - Mobile Devices Only

The issue I have is that I have a SP2013 Site with a group Visitors.
the default Site Permissions have been set to Read.
I then created a SharePoint List with a People Picker.
I broke the Security inheritance and gave the Visitors group Contribute Permissions
In Browser mode, they can access the site, open all links and even add content to list.
When I do the same actions on a mobile device, All the visitors get Access Denied when clicking on the Add Content Link.
The Link I make available is "https://myweb/sites/site/Lists/mylist/NewForm.aspx"
I have found some suggestions about unplublished content, but this does not explain why the user can perform the required actions on a desktop, but not on a mobile device using the same link

Hi,
By mobile do you happen to mean iPhone? There has been quite a few issues with SharePoint 2013 and iOS authentication. You might want to refer to the following exchange.
http://apple.stackexchange.com/questions/146808/ios-8-safari-sharepoint-2013-windows-authentication-support
Eric Overfield - PixelMill -
ericoverfield.com -
@EricOverfield

User Interface Access Customisation for non admin users

Hi,
It is understood that for non-admin users, some features of the Planning Interface is not enabled and this can be controlled by proper access permissions. But, is it possible to extend the customization to provide some additional features in the menu bar for an user?
For example, if View User wants to manage task lists. Is it possible by some sort of customization? Please advise.
Thanks.

Hi,
You can create right click menus, and you can also create links on the tools page. Would any of these help you?
Here is the doc on those subjects:
Creating and Updating MenusAdministrators can create right-click menus and associate them with data forms, enabling users to click rows or columns in data forms and select menu items to:
Launch another application, URL, or business rule, with or without runtime prompts
Move to another data form
Move to Manage Approvals with a predefined scenario and version
The context of the right-click is relayed to the next action: the POV and the Page, the member the user clicked on, the members to the left (for rows), or above (for columns).
When designing data forms, use Other Options to select menus available for Data Form menu item types. As you update applications, update the appropriate menus. For example, if you delete a business rule referenced by a menu, remove it from the menu.
To create, edit, or delete menus:
Select Administration, then Manage, then Menus.
Perform one action:
To create a menu, click Create, enter the menu's name, and click OK.
To change a menu, select it and click Edit.
To delete menus, select them, click Delete, and click OK.>
Specifying Custom ToolsAdministrators can specify custom tools, or links, for users on the Tools page. Users having access to links can click links from the Tools menu to open pages in secondary browser windows.
To specify custom tools:
Select Administration, then Application, then Settings.
For Show, select Advanced Settings.
Click Go.
Select Custom Tools.
For each link:
For Name, enter the displayed link name.
For URL, enter a fully qualified URL, including the http:// prefix
For User Type, select which users can access the link.
Click Save.

Users getting access denied when trying to create a security group

Hello,
I created an MPR for granting right through an approval workflow for joining security group, but getting the following error. Any thoughts what could be going wrong?
Error processing your request: The operation was rejected because of access control policies.
Reason: The operation failed as a result of insufficient access rights.
Attributes: ExplicitMember
Correlation Id: edc226e9-ecb9-42c2-ab20-4fa8b5643056
Request Id:
Details: No policy grants the Requestor permission to complete all changes.
This is what I see in the even log:
Requestor: urn:uuid:9373552a-c063-4fb9-abcd-3501d151a061
Correlation Identifier: edc226e9-ecb9-42c2-ab20-4fa8b5643056
Microsoft.ResourceManagement.Service: Microsoft.ResourceManagement.WebServices.Exceptions.PermissionDeniedException: ManagementPolicyRule ---> System.Data.SqlClient.SqlException: Reraised Error 50000, Level 16, State 1, Procedure DoEvaluateRequestInner,
Line 1319, Message: Permission denied: <ai><Name>ExplicitMember</Name></ai>
 at System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection)
 at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj)
 at System.Data.SqlClient.TdsParser.Run(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj)
 at System.Data.SqlClient.SqlDataReader.ConsumeMetaData()
 at System.Data.SqlClient.SqlDataReader.get_MetaData()
 at System.Data.SqlClient.SqlCommand.FinishExecuteReader(SqlDataReader ds, RunBehavior runBehavior, String resetOptionsString)
 at System.Data.SqlClient.SqlCommand.RunExecuteReaderTds(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, Boolean async)
 at System.Data.SqlClient.SqlCommand.RunExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, String method, DbAsyncResult result)
 at System.Data.SqlClient.SqlCommand.RunExecuteReader(CommandBehavior cmdBehavior, RunBehavior runBehavior, Boolean returnStream, String method)
 at System.Data.SqlClient.SqlCommand.ExecuteReader(CommandBehavior behavior, String method)
 at System.Data.SqlClient.SqlCommand.ExecuteReader()
 at Microsoft.ResourceManagement.Data.DataAccess.DoRequestCreation(RequestType request, Guid cause, Guid requestMarker, Boolean doEvaluation, Int16 serviceId, Int16 servicePartitionId)
 --- End of inner exception stack trace ---
 at Microsoft.ResourceManagement.WebServices.RequestDispatcher.CreateRequest(UniqueIdentifier requestor, UniqueIdentifier targetIdentifier, OperationType operation, String businessJustification, List`1 requestParameters, CultureInfo locale, Boolean
isChildRequest, Guid cause, Boolean doEvaluation, Nullable`1 serviceId, Nullable`1 servicePartitionId, UniqueId messageIdentifier, UniqueIdentifier requestContextIdentifier, Boolean maintenanceMode)
 at Microsoft.ResourceManagement.WebServices.ResourceManagementService.Put(Message request)
Thanks,
John

Hi,
You probably missing another MPR to give the right (checkbox "Grants permission") to Add and Remove value for attribute "Explicit member". Set an authorization workflow is not enough!
Regards,
Sylvain

User Creation-Access Denied

Hi All,
I Have Requirement some thing like this.
we are using EP 7.0 SP 9 (Not configured with any directory server)
Only the Administrator user ID should have rights to create a new user ID.
I mean to say the other user id who have super_admin_role, or user administration role should not have rights to create a new user ID. Is it possible?
How can we do?
Please let me know
Regards
Srinivas

Hi Sreenu,
If you directly assign the user administration or super admin role then that user has the right to create a new user id.
So to avoid this copy the roles, remove the identity management iView and assign the copied roles to the users.
Else if u need the identity management iView to be in a display mode then u have to customise or developed the application using the API.
Regards
Basha

Error while deploying IDM 7.1 user interface file on Netweaver Java AS sys

Hi,
I am in process of installing IDM 7.1 in my landscape. I have done IC, RC in one system with windows 2003 + oracle. On other system I have Netweaver 7.0 SP14 Java AS system. I have configured as per SAP documentation.
While deploying IDM user interface 7.1 on SAP Netweaver Java system 7.0, I get following error in SDM:
Loading archive 'E:\software\IDM\DATA_UNITS\IC_UIS_710\IDMIC00_0.sca'
May 11, 2011 5:16:12 PM Error: Unresolved dependencies found for the following SDAs:
1.: development component 'tc/idm/wd/model'/'sap.com'/'MAIN_IDM710_C'/'3542284'/'0'
dependency:
name:     'tc/ddic/runtime/facade'
vendor:     'sap.com'
There is no component either in SDM repository or in Deployment batch that resolves the dependency.
dependency:
name:     'tc/wd/api'
vendor:     'sap.com'
There is no component either in SDM repository or in Deployment batch that resolves the dependency.
dependency:
name:     'engine.j2ee14.facade'
vendor:     'sap.com'
There is no component either in SDM repository or in Deployment batch that resolves the dependency.
dependency:
name:     'tc/bl/logging/api'
vendor:     'sap.com'
There is no component either in SDM repository or in Deployment batch that resolves the dependency.
dependency:
name:     'tc/wd/legacy'
vendor:     'sap.com'
There is no component either in SDM repository or in Deployment batch that resolves the dependency.
dependency:
name:     'tc/bl/exception/lib'
vendor:     'sap.com'
There is no component either in SDM repository or in Deployment batch that resolves the dependency.
dependency:
name:     'tc/aii/base/offline/facade'
vendor:     'sap.com'
There is no component either in SDM repository or in Deployment batch that resolves the dependency.
dependency:
name:     'tc/bl/jrfc/api'
vendor:     'sap.com'
There is no component either in SDM repository or in Deployment batch that resolves the dependency.
Deployment will be aborted.
May 12, 2011 11:04:09... Info: Loading archive 'E:\software\IDM\DATA_UNITS\IC_UIS_700\IDMIC00_0.sca'
Please advise,
Thanks,
Digesh

Hi,
SMP : http://service.sap.com/swdc -> SAP NetWeaver and complementary products" SAP NW IDENTITY MANAGEMENT" SAP NW IDENTITY MANAGEMENT 7.1
You would need to deploy the NW IDM IC 7.10 UIS FOR NW 7.00 component.
Regards,
Srikishan

Access denied error for Read user in sharepoint 2010

Hello,
In sharepoint 2010 subsite a user with Read permission getting Access Denied error while login.
Few points:
1. Master pages are approved not in pending status.
2. Site permissions are not inherited.
Please suggest the way to resolve it.
Thank You,
Santosh_09

Check below threads for troubleshooting access denied issue. You can use fiddler to trace what is causing access denied.
http://sharepoint.stackexchange.com/questions/75263/user-has-correct-permissions-for-subsite-but-access-is-denied
http://sharepoint.stackexchange.com/questions/41225/user-permissions-access-denied-sharepoint-2010
My Blog- http://www.sharepoint-journey.com|
If a post answers your question, please click Mark As Answer on that post and Vote as Helpful

SSM 7.0 - SSM User Interface user access and utilization

Hi,
Does anybody know how to obtain the SMM User Interface access and utilization of the users?
I mean User Interface access statistics like:
- Number of loggins per day, week, month.
- Last loggin
- Tab used
- Minutes log inn
Thank you very much in advance.
Kind regards,
Santiago

Santiago,
Strategy Management does not track that kind of usage of the system. Any tracking like that might be something that NetWeaver CE could do, but that would be a question for the NetWeaver CE Forum as I couldn't provide guidance on how to set it up.
Regards,
Bob

Content Library / Web Interface - access issue

BPC Microsoft 7.5 SP6
Windows 2008 R2 server
We have puublished an Excel template as an HTML page to allow (web only users) access to a menuing system and have subsequent access to their individual reports in PDF format. The menu page comes up without errors but I encounter the error "You don't have access" when clicking on a menu option (cells within template). The cells contain an Excel Hyperlink function in conjunction with a EVBNV function to launch this report. (No BPC or excel errors exist within template)
We have created a virtual directory for BPC application in addition to Reports and ReportServer for Reporting Services. We have modified the Site Settings and Folder Setttings in Reporting Services configuration to allow web users to correct role access.Users can access Reporting services Report url without a problem but the web interface does not want to launch/retrieve a pdf file. We have the correct BPC task capabilities and task profiles assigned, insuring they can access and use the content library.
Thoughts?
Thanks in advance.

It appears there is an issue with EVBNV formula and its ability to dynamically pass parameters in HTML format.
IM 0003554460/20111

Short Name for same user results in different service authorization

New to Mac Server. Not new to Unix, command line, or sys admin.
I have a Mini Server, with two users; me and my wife.
Both Accounts have two short names each: Initals+Lastname, and First Name only
With iChat on the server, my account can login using both short names.
Her account can only login to iChat using the Initals+Lastname, not First Name.
Actually her account can log in to iChat using any variation of short names (I've added extra ones), but not the short name of just her first name.
Both users have identical permissions everywhere I can see, both are authorized for iChat.
The short name works if I remove permissions on iChat (I don't want to do this)
Both users are OD users, not local. I only have an admin account for local access.
Here is a snippet of the Jabber log:
jabberd/c2s[40845]: [11] SASL authentication succeeded: mechanism=DIGEST-MD5; authzid=[email protected], TLS negotiated
jabberd/c2s[40845]: odauth_check_servicemembership: checking user "kaarinas" access for service "chat"
jabberd/c2s[40845]: odauth_check_servicemembership: mbrcheck_servicemembership returned 0
jabberd/c2s[40845]: odauth_check_servicemembership: user "kaarinas" is authorized to access service "chat"
jabberd/c2s[40845]: [11] SASL authentication succeeded: mechanism=DIGEST-MD5; authzid=[email protected], TLS negotiated
jabberd/c2s[40845]: odauth_check_servicemembership: checking user "kaarina" access for service "chat"
jabberd/c2s[40845]: odauth_check_servicemembership: mbrcheck_servicemembership returned 0
jabberd/c2s[40845]: odauth_check_servicemembership: user "kaarina" is not authorized to access service "chat"
I'm stumped as to why one short name would work, the other not. Looking for hints on how to hunt down and solve the problem.

This isn't working for me. There was never a local "intern2" account, but I deleted the one in the ldap anyway, made and removed the local intern2 account. I then remade the intern2 account in the ldap directory(which increased the uid), rebooted the server, and the error remains the same as what you report.
Jun 8 13:36:00 server jabberd/c2s[212]: od_auth_check_service_membership: user "intern2" is not authorized to access service "chat"
There are 12 other accounts connected just fine. The issue is with this new intern account only.
Server 10.6.6.

Access denied:com.sap.ip.bi.web.portal.integration.launcher

Hi Friends,
I have installed a Standalone Portal ( EP, EP core, BI Java) , configured LDAP as data source and imported the Portal content from Source system . ( in Development, Quality, Production)
I completed all configuration and testing completed.
But the portal user created with customized iviews roles are working fine in Development and Production.
But ....Access denied:com.sap.ip.bi.web.portal.integration.launcher error is encountered in Quality system.
In QAS system, while installation I have selected EP, EP core as Usage type.. and after Insatllation I have installed additional Usage tye BI JAVA using JSPM
Whereas in DEV, PRD ( EP, EP core, BI Java) were taken as Usage types while installation only..
Above reason may effect the Test user for access denied error.
Please suggest.
Thanks
Venkat

Ramana,
It looks like a permissions issue, right click on the system created for BI under System Admin-System Configuration-System landscape and open the permissions and ensure you have the everyone group added there and enduser checked.
Good Luck!
Sandeep Tudumu

Access denied solved by ¨disabling rollback

We had an eval license of Contribute 3 which was working
fine. Users could edit and publish pages without any problem. I
then purchased Contribute 4 (which was just out) and installed. Now
users got "Access Denied. The file may not exist, or the could be a
permission problem." when they tried to publish a page. The page
actually was published but it gave the error message anyway. After
reading in the ng:s etc. I turned on the option to allow file
deletion for the group (to allow .lck files to be removed). Now it
still showed the access denied error but no page was published and
there was no .lck files creates. After reading some more I decided
to try to disable the rollback feature and now all of a sudden it
works like expected. But hey, rollbacks are great, I don't want to
do without it! Why does it only work with rollback disabled? I am
fairly sure that file/share permissions are OK since it worked fine
with the Contribute 3 eval license.

I am having the same problem with a WebDAV connection to a
new server. We used to use SFTP and "rollback" worked fine. With
the WebDAV connection and Contribute 3.1, I get an error of "Access
Denied. File May Not Exist or there could be a permission problem".
Looking at the remote files on the server, the original file is
gone replaced with a file with a .new extension. If I disable
"rollback" and delete the .new extension, it works.
The "rollback" feature also breaks Dreamweaver's file upload
capability.
Any ideas?

User interfaces to access Content services...

I am using the following user interfaces to access content services:
1) Web UI
2) Oracle drive
3) WebDAV with Windows XP
But in the oracle content sevices data sheet which I downloaded from the Oracle site, its given there is a rich WebUI with dynamic tree structure with drag & drop features. I want to know if this exits? If yes, I want to know how to access that and work with it. Does it need any downloads or configurations to be done.

Hi
I have selected "Accessiblity mode" button to launch the web interface. Now for this user even if i select the "Lauch" button. it still shows up the interface of accessibility mode. Is there any way I forced the user to switch back to the Lauch button interface mode.
Regards,
Navin

IDM UI: access denied

Hi,
 
I transported my configuration to a production environment and my IDM Webdynpro's are showing access denied.
This is the error in the defaulttracefile:
 
Full Message Text
 
Exception getting tab visibility
[EXCEPTION]
com.sap.idm.jmx.exceptions.IdmException: Access denied
at com.sap.idm.jmx.ic.EntryUtil.getTabVisibility(EntryUtil.java:1746)
at com.sap.idm.jmx.impl.SAP_ITSAM_IDM_Service_Impl_Impl.retrieveTabs(SAP_ITSAM_IDM_Service_Impl_Impl.java:1369)
at com.sap.idm.jmx.SAP_ITSAM_IDM_ServiceWrapper.invoke(SAP_ITSAM_IDM_ServiceWrapper.java:450)
at com.sap.pj.jmx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:944)
at com.sap.pj.jmx.server.interceptor.MBeanServerWrapperInterceptor.invoke(MBeanServerWrapperInterceptor.java:288)
at com.sap.engine.services.jmx.CompletionInterceptor.invoke(CompletionInterceptor.java:409)
at com.sap.pj.jmx.server.interceptor.BasicMBeanServerInterceptor.invoke(BasicMBeanServerInterceptor.java:277)
at com.sap.jmx.provider.ProviderInterceptor.invoke(ProviderInterceptor.java:258)
at com.sap.engine.services.jmx.RedirectInterceptor.invoke(RedirectInterceptor.java:340)
at com.sap.pj.jmx.server.interceptor.MBeanServerInterceptorChain.invoke(MBeanServerInterceptorChain.java:330)
at com.sap.engine.services.jmx.MBeanServerSecurityWrapper.invoke(MBeanServerSecurityWrapper.java:287)
at com.sap.engine.services.jmx.ClusterInterceptor.invoke(ClusterInterceptor.java:776)
at com.sap.pj.jmx.server.interceptor.MBeanServerInterceptorChain.invoke(MBeanServerInterceptorChain.java:330)
at com.sap.idm.wd.jmx.SAP_ITSAM_IDM_Service$Impl.retrieveTabs(SAP_ITSAM_IDM_Service.java:434)
at com.sap.idm.wd.modelwrapper.ModelWrapperInterface.getTabVisibility(ModelWrapperInterface.java:478)
at com.sap.idm.wd.modelwrapper.wdp.InternalModelWrapperInterface.getTabVisibility(InternalModelWrapperInterface.java:184)
at com.sap.idm.wd.modelwrapper.wdp.InternalModelWrapperInterface$External.getTabVisibility(InternalModelWrapperInterface.java:351)
at com.sap.idm.wd.wf.toptab.TopTab.InitializeContext(TopTab.java:372)
at com.sap.idm.wd.wf.toptab.wdp.InternalTopTab.InitializeContext(InternalTopTab.java:216)
at com.sap.idm.wd.wf.toptab.TopTabView.wdDoInit(TopTabView.java:101)
at com.sap.idm.wd.wf.toptab.wdp.InternalTopTabView.wdDoInit(InternalTopTabView.java:186)
at com.sap.tc.webdynpro.progmodel.generation.DelegatingView.doInit(DelegatingView.java:61)
at com.sap.tc.webdynpro.progmodel.controller.Controller.initController(Controller.java:215)
at com.sap.tc.webdynpro.progmodel.view.View.initController(View.java:445)
at com.sap.tc.webdynpro.progmodel.controller.Controller.init(Controller.java:200)
at com.sap.tc.webdynpro.progmodel.view.ViewManager.getView(ViewManager.java:709)
at com.sap.tc.webdynpro.progmodel.view.ViewManager.bindRoot(ViewManager.java:579)
at com.sap.tc.webdynpro.progmodel.view.ViewManager.init(ViewManager.java:155)
at com.sap.tc.webdynpro.clientserver.window.WebDynproWindow.doOpen(WebDynproWindow.java:295)
at com.sap.tc.webdynpro.clientserver.window.ApplicationWindow.show(ApplicationWindow.java:182)
at com.sap.tc.webdynpro.clientserver.window.ApplicationWindow.open(ApplicationWindow.java:177)
at com.sap.tc.webdynpro.clientserver.cal.ClientApplication.init(ClientApplication.java:364)
at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.initApplication(ApplicationSession.java:754)
at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doProcessing(ApplicationSession.java:289)
at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessingStandalone(ClientSession.java:713)
at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessing(ClientSession.java:666)
at com.sap.tc.webdynpro.clientserver.session.ClientSession.doProcessing(ClientSession.java:250)
at com.sap.tc.webdynpro.clientserver.session.RequestManager.doProcessing(RequestManager.java:149)
at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doContent(DispatcherServlet.java:62)
at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doGet(DispatcherServlet.java:46)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:740)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
at java.security.AccessController.doPrivileged(AccessController.java:219)
at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)
at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)
 
I checked the configuration again and again: 
1. We are using a user that is created in the UME. This user is known in the IDM ID store and is member of the privileges: 
- MX_PRIV:WD:TAB_HISTORY 
- MX_PRIV:WD:TAB_MANAGE 
- MX_PRIV:WD:TAB_REPORT 
- MX_PRIV:WD:TAB_TODO 
2.Visual admin 
- The ID of the used ID store is 3. 
- The DB connection is working 
3. Version info of the webdynpro is exactly the same as the development environment. 
4. We allready did an undeploy, restart, deploy & restart ... 
 
What are we missing? 
 
kr, 
Joachim

Hi,
All configuration seems correct.
IDStore is set.
When I try with a user who's not in the IDStore, I can see an other error message in the logfile:
No user found with username=USERNAME.
When I start the Searchentry-webdynpro (tcidmwdworkflow/SearchEntry and not tcidmwdworkflow/idm) , I can execute all tasks with the valid user.
Version is 7.0 (same version as on development server and there it's working)
kr,
Joachim

IDM User Interface: Access Denied, Service Down

Similar Messages

Maybe you are looking for