In Prod - Consume Fed Env Need SSO to Prod

We are using BW / BI Netweaver 7.0 SP16 and have a federated environment.
BI portal is the Producer. The user has no roles assigned here.
EP portal is the consumer. This is the prime entry point for the user. The roles are mapped to the AD groups.
We have SSO between the BW Abap and the BI Portal.
We have SSO between the BW Abap and the EP Portal.
We have SSO between the BI Portal and the EP Portal.
We have SSO between the EP portal and Active Directory using Vintella so the users signed-on the network are logged in automatically to the portal when they hit the EP Portal url.
Users that use InfoBroadcasting for thier queries get an email from BW abap , but the link in the email points to the BI Portal. When they click on the link they have to supply a user_id / pwd combination. Of course they don't know what it is!!
An option would be for the user to click on the EP link (they are authenticated), then paste the url in the browser url. This works.
However ... our users are not so sophisticated.
What are my other options here?
Mike

Hi Mike,
Very good, in that case you have a few options.
By far the simplest is probably going to be putting Vintela (QSJ for NetWeaver) on that portal too.  Basically the exact same logon module configuration you have for the EP except you need a new service account with a SPN that matches this FQDN.
Another option is to modify the configuration of the BI portal to only accept SSO2 cookies, and redirect to the EP/Vintela auth-and-redirect servlet for authentication and redirection back to the BI portal once a SSO2 cookie has been received.
Thanks!
Kyle

Similar Messages

  • Not able to run openscript scripts in prod/staging siebel env works fine in QA

    Hi All,
    I designed certain scripts to be run on prod env and ran it in QA with all the automation features enabled andSiebel Server Set up for call center auto enabled.
    As described in this  discussion
    https://forums.oracle.com/thread/970136
    Done all steps .. But the automation  component is not downloading for staging enviroenmnt. Even after the same set up as QA.
    Does any one have any solution for this?
    Would be really helpful?
    Thanks
    Radhika

    Its working now. Siebel admin for got to add license key

  • Business Scenarios in Consumer Products Industry -- need help

    Hello Experts,
    I need Scenarios in Consumer Products Industry say for example --P&G what are the practical scenarios available.
    Can anybody help on this. I really appreciate the help.
    Thanks
    Regards
    Mahesh

    Hi Nilson,
    The business processes mentioned can be used for any industry. There is not restriction as such.
    These business processes are more relevant for those industry.
    e.g. Outsourced Manufacturing / WO Collaboration is extensively used by High-Tech companies. Even the recent enhancement requirements have come from High-Tech companies.
    Similarly, Kanban / SMI is extensively used by Automotive. But SMI is also popular with High-Tech.
    CP industry is biggest consumer of Responsive Replenishment process.
    Regards,
    Sandeep

  • Still stuck with the same old producer consumer weight problem need help

    Hello All,
    This is the problem I am stuck with right now.
    I have two array lists one producer array list and one consumer array list denoted by a and b
    P1 P2 P3 P4 P5
    5 6 7 8 9
    C1 C2 C3 C4 C5
    2 3 4 5 6
    Now we find all those producer consumer pairs which satisfy the criteria Pi>=Ci
    We have the following sets
    (5,2)(6,2)(7,2),(8,2),(9,2)
    (5,3)(6,3)(7,3),(8,3),(9,3)
    (5,4)(6,4)(7,4),(8,4),(9,4)
    (5,5)(6,5)(7,5),(8,5),(9,5)
    (6,6)(7,6)(8,6),(9,6)
    Let us done each of them with Si
    so we have S1,S2,S3,S4,S5
    we assign a third parameter called weight to each element in Si which has satisfied the condition Pi>=Ci;
    so we we will have
    (5,2,ai),(6,2,bi),(7,2,ci)....etc for S1
    similarly for S2 and so on.
    We need to find in each set Si the the pair which has the smallest weight.
    if we have (5,2,3) and (6,2,4) then 5,2,3 should be chosen.We should make sure that there is only one pair in every set which is finally chosen on the basis of weight.
    Suppose we get a pair (5,2,3) in S1 and (5,2,3) in S2 we should see that (5,2,3) is not used to compare to compare with any other elements in the same set S2,
    Finally we should arrive at the best element pair in each set.They should be non repeating in other sets.
    Given a problem
    P0 P1 P2 P3 P4
    9 5 2 2 8
    6 5 4 5 3
    C0 C1 C2 C3 C4
    we have So as (P0,C0) and (P4,C0)
    assuming that the one with the smaller index has lesser weight PO is selected.In the program I have used random weights.from set S1 we select the pair PO,CO
    S1 =(P0,C1),(P1,C1) and (P4,C1)
    since P0 and P4 are already used in previous set we dont use them for checking in S1 so we have (P1,C1) as best.
    S2=(P0,C2),(P1,C2) and (P4,C2) so we dont use P0,C2 and P1 and C2 because PO and P1 are already used in S1.
    So we choose P4,C2
    in S3 and S4 ae have (P0,C3),(P1,C3),(P4,C3) so we dont choose anything
    and same in S4 also.
    So answer is
    (P0,C0),(P1,C1) and (P4,C2).
    My program is trying to assign weights and I am trying to print the weights along with the sets.It doesnt work fine.I need help to write this program to do this.
    Thanks.
    Regards.
    NP
    What I have tried till now.
    I have one more question could you help me with this.
    I have an array list of this form.
    package mypackage1;
    import java.util.*;
    public class DD
    private  int P;
    private  int C;
    private int weight;
    public void set_p(int P1)
    P=P1;
    public void set_c(int C1)
    C=C1;
    public void set_weight(int W1)
    weight=W1;
    public int get_p()
    return P;
    public int get_c()
    return C;
    public int get_x()
    return weight;
    public static void main(String args[])
    ArrayList a=new ArrayList();
    ArrayList min_weights_int=new ArrayList();
    ArrayList rows=new ArrayList();
    ArrayList temp=new ArrayList();
    Hashtable h=new Hashtable();
    String v;
    int o=0;
    DD[] d=new DD[5];
    for(int i=0;i<4;i++)
    d=new DD();
    for(int i=0;i<4;i++)
    d[i].set_p(((int)(StrictMath.random()*10 + 1)));
    d[i].set_c((int)(StrictMath.random()*10 + 1));
    d[i].set_weight(0);
    System.out.println("Producers");
    for(int i=0;i<4;i++)
    System.out.println(d[i].get_p());
    System.out.println("Consumers");
    for(int i=0;i<4;i++)
    System.out.println(d[i].get_c());
    System.out.println("Weights");
    for(int i=0;i<4;i++)
    System.out.println(d[i].get_x());
    for(int i=0;i<4;i++ )
    int bi =d[i].get_c();
    ArrayList row=new ArrayList();
    for(int j=0;j<4;j++)
    if( d[j].get_p() >=bi)
    d[j].set_weight((int)(StrictMath.random()*10 + 1));
    row.add("(" + bi + "," + d[j].get_p() + "," +d[j].get_x() + ")");
    else
    d[j].set_weight(0);
    row.add("null");
    rows.add(row);
    System.out.println(rows);
    int f=0;
    for(Iterator p=rows.iterator();p.hasNext();)
    temp=(ArrayList)p.next();
    String S="S" +f;
    h.put(S,temp);
    String tt=new String();
    for(int j=0;j<4;j++)
    if(temp.get(j).toString() !="null")
    // System.out.println("In if loop");
    //System.out.println(temp.get(j).toString());
    String l=temp.get(j).toString();
    System.out.println(l);
    //System.out.println("Comma matches" + l.lastIndexOf(","));
    //System.out.println(min_weights);
    f++;
    for(Enumeration e=h.keys();e.hasMoreElements();)
    //System.out.println("I am here");
    int ii=0;
    int smallest=0;
    String key=(String)e.nextElement();
    System.out.println("key=" + key);
    temp=(ArrayList)h.get(key);
    System.out.println("Array List" + temp);
    for( int j=0;j<4;j++)
    String l=(temp.get(j).toString());
    if(l!="null")
    System.out.println("l=" +l);
    [\code]

    In your example you selected the pair with the greatest
    distance from the first set, and the pair with the least
    distance from the second. I don't see how the distance
    function was used.
    Also it's not clear to me that there is always a solution,
    and, if there is, whether consistently choosing the
    furthest or the closest pairs will always work.
    The most obvious approach is to systematically try
    all possibilities until the answer is reached, or there
    are no possibilities left. This means backtracking whenever
    a point is reached where you cannot continue. In this case
    backtrack one step and try another possibility at this
    step. After all possible choices of the previous step,
    backtrack one more step and so on.
    This seems rather involved, and it probably is.
    Interestingly, if you know Prolog, it is ridiculously
    easy because Prolog does all the backtracking for you.
    In Java, you can implement the algorithm in much the same
    way as Prolog implementations do it--keep a list of all the
    choice points and work through them until success or there
    are none left.
    If you do know Prolog, you could generate lots of random
    problems and see if there is always a solution.

  • Need SSO Information

    I am looking for any information / docs on creating a custom SSO.  I can't use any of the 3rd party SSOs that exist within Plumtree.  I need to create one that will work with our own SSO solution.    Any suggestions?  Thanks.

    if the weblogic app performs the authentication, you need to see how you can login the user into the other app without needing a password (ideally). This is totally dependent on your other app.
    Again since no requirements are known there's really not much anyone can tell you
    a. Can you make changes to the third party app?
    b. Is authentication always on weblogic or can authentication be on any app ,and single sign on must still happen seamlessly
    c. Can you have anything like a reverse proxy in front of both your weblogic and other app?
    d. Whats the authentication store? how does the other app get user data? is the store of user information the same? is the password accessed from the same store?
    A token is nothing special.You just need to find some way to pass data between apps (usually using public/private key encryption) such that this data cant be spoofed or reused by any sniffer. Take a look at the SAML protocol
    regards
    deepak

  • Third party prod in R3 system needed?

    Hi Friends,
    I have to do Communication between R/3 and Third party Legacy system. I will create the technical system for R/3 by executing RZ70 transaction which will create Technical system in SLD of XI.
    While creating the Third party system first I need to create the product. Suppose I create product by Name "PR_TEST"., then I create Third party technical system and assign the Product to this System.
       I have doubt do I need to assign the same product to R/3 technical system also.
    Please revert back if u have any queries on my question.
    Thanks
    Prem

    Hi,
    >>I have doubt do I need to assign the same product to R/3 technical system also.
    No Need,
    You have to Assign the PRD While creating the  the third party TS only.
    In case of R/3 TS Creation, we have the standard SWCV & PRD's inbuilt itself
    No need to create them.
    & the Product(third-party) which u have created is use for only third Party TS Creation.
    Regards
    Seshagiri

  • Need SSO Tutorials

    Hi guyz,
    I am new to SSO and would like to understand the technology
    I googled and found commercial articles on SSO.
    Can someone plz point out some useful online resources on SSO which are not vendor specific.
    Thanx -a-lot.
    Deep

    Check out the SAML specifications
    http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=security
    and liberty
    http://www.projectliberty.org/

  • CMS and Parallel GC consumes high CPU-Need Help

    Hi,
    We are using Hot Spot 64 bit JVM(java.runtime.version=1.6.0_26-b03,java.vm.version=20.1-b02),And in production we are facing a issue with long pause time during GC.While monitoring we also observed that CPU consumption(Almost >90%) during GC was very high.
    Currently we use three 8 core 32 GB RHEL server each having total of 4 JVM with following config
    Box(Server) 1:
    1)2 online JVM with xms=xmx=4g and xmn=1g,GC-CMS,initialoccupationfrequency=50%
    2)2 batch JVM with xmx=4GB,xms=512MB,GC-parallelGC
    Box(Server) 2:
    1)2 online JVM with xms=xmx=4g and xmn=1g,GC-CMS,initialoccupationfrequency=50%
    2)2 batch JVM with xmx=4GB,xms=512MB ,GC-parallelGC
    Box(Server) 3:
    1)2 online JVM with xms=xmx=4g and xmn=1g,GC-parallelGC
    2)2 batch JVM with xmx=4GB,xms=512MB GC-parallelGC
    We are facing similar issue in all the three servers,At first we had CMS for all the online JVM's.We suspected CMS as the reason for CPU consumption so we swapped to ParallelGC on one box but still facing the same issue.We have a dependency from an external system,if the GC is more than 60 sec the extrenal system will disconnect.thisi is hampering our daily activities a lot.This issue is occuring during less load on the system with less network utilization Can any one help on this.
    My quesstions
    1)How much resource normally CMS or Parallel GC consumes?
    2)Does having 4 JVM in a server causes this problem?What is the optimum to have?
    3)What will happen if all the four JVM triggers GC

    Hi,
    We are using Hot Spot 64 bit JVM(java.runtime.version=1.6.0_26-b03,java.vm.version=20.1-b02),And in production we are facing a issue with long pause time during GC.While monitoring we also observed that CPU consumption(Almost >90%) during GC was very high.
    Currently we use three 8 core 32 GB RHEL server each having total of 4 JVM with following config
    Box(Server) 1:
    1)2 online JVM with xms=xmx=4g and xmn=1g,GC-CMS,initialoccupationfrequency=50%
    2)2 batch JVM with xmx=4GB,xms=512MB,GC-parallelGC
    Box(Server) 2:
    1)2 online JVM with xms=xmx=4g and xmn=1g,GC-CMS,initialoccupationfrequency=50%
    2)2 batch JVM with xmx=4GB,xms=512MB ,GC-parallelGC
    Box(Server) 3:
    1)2 online JVM with xms=xmx=4g and xmn=1g,GC-parallelGC
    2)2 batch JVM with xmx=4GB,xms=512MB GC-parallelGC
    We are facing similar issue in all the three servers,At first we had CMS for all the online JVM's.We suspected CMS as the reason for CPU consumption so we swapped to ParallelGC on one box but still facing the same issue.We have a dependency from an external system,if the GC is more than 60 sec the extrenal system will disconnect.thisi is hampering our daily activities a lot.This issue is occuring during less load on the system with less network utilization Can any one help on this.
    My quesstions
    1)How much resource normally CMS or Parallel GC consumes?
    2)Does having 4 JVM in a server causes this problem?What is the optimum to have?
    3)What will happen if all the four JVM triggers GC

  • Newbie Prod in right direction needed...

    Hi,
    I'm looking to create an apple script that will only open itunes at login if the external drive the library is stored on is mounted?

    Here:
    tell application "Finder"
    set disk_exists to exists disk "Macintosh HD"
    end tell
    if disk_exists then
    tell application "iTunes"
    run
    end tell
    end if
    with Macintosh HD replaced with the disk's name in the Finder.
    (21077)

  • QAAWS in not found in prod Qaaws after promoting from dev to prod

    Hi Expert,
                  I have promoted my all qaaws from dev to production server,
    all the qaaws are shows in CMC production but, while i am open in Query as a web service
    it not showing any qaaws.
    I have restart the BO production server , still the same problem is happend
    Tell me how to rectify that issue.
    Thanks and Regards
    Lalit Kumar

    Well i have some strange thoughts:
    when the idoc is send in sender-system the values on sender informations are:
    Port: SAPPSI
    Partner number: PSICLNT010
    Type: LS
    The error we receive is:
    no service for system SAPPSI, client 010 in Integration Directory
    Shouldn't there be the Partner-Number like PSICLNT010?!
    Can someone confirm and tell me if i am right?!
    br

  • Restore DB "A" in a DB "B"

    I have two DB with the same struct in the same host (prod and test), my questions is,I have a cold backup of DB "prod" and I wanna restore this information (Datafiles etc) in the DB "test", How can I do it?

    What's Oracle version and OS ?
    Since the two DB are on same host, you need to take precaution while copying cold backup files , don't accidentally overwrite prod.
    Basically you need to restore prod's cold backup copy to other directory and create a new control file of test DB to point to these new location.
    Steps posted in this article is good start,
    http://www.dba-oracle.com/oracle_tips_db_copy.htm

  • Need to replace Consumer creation in B2C webshop

    Dear experts
    CRM 5.0,
    The current business partners of our client are created in the role consumer. Now we are planning to deploy CRM ISA on the same system. When shoppers would register themselves in the B2C webshop, it would create them in the role consumer in the backend system. Is it possible to change the role in which a B2C user gets created as a business partner or any other way to programmatically change the grouping so that even though the B2C user is a consumer, the number range assigned for him/her is different.
    Thanks
    Ritwik Sharma

    Hi Ritwik,
    What I would suggest you:
    B2C new registered users are created based on a Reference User. Try create a new "Reference User" (template user) with the Consumer Role you need and assign all the necessary B2C Security Profiles/Roles that you actually have.
    Once it is done, restart your B2C application. All your new registered users must now have the same BP Role that your Reference user.
    Kind Regards,
    Diego Felix.

  • Webcenter in prod env

    Hi,
    Can I use Oracle Webcenter with ADF technology for prod or do i need to buy license? Based on answer, I need to plan to use oracle or jboss richfaces
    Technology stack is
    Oracle WebCenter
    Oracle ADF
    MySQL
    JBOSS Application Server or Tomcat
    Thanks
    Edited by: iamkrishna on Sep 6, 2011 3:58 PM

    You should post this question to the WebCenter Portal forum. This is the WebLogic Portal forum.
    WebCenter Portal
    Brad

  • OBIEE 10G SSO Issue

    HI
    We have configured OBIEE 10g on IIS (ver-6) server. We have a business requirement where we need to integrate OBIEE with another ASP.NET application. So, user should log in once and to view OBIEE reports he should not log in again.
    Now we have checked GO URL option given in Chapter 11 of Oracle® Business Intelligence Presentation Services Administration Guide. But problem is our company policy does not allow us to pass Password in HTTP URL. So we cannot use that solution.
    We are trying to use SSO and referred to Chapter 8 of Deployment Guide. We followed all the steps give in that chapter
    Also, we modified isapiconfig.xml and entered &lt;CredentialStore&gt; paramaters in it.
    But when we Go to Analytics URL (for remote machine) Login screen show "Not Logged In" message.
    currently we are using REMOTE_USER method as it is given in documention.
    So we did everything by the book. Now my question is:
    1) We do not have any SSO server/Product, is there is any way we can integrate OBIEE application to other ASP.Net application on another IIS SERVER? There was a suggestion that if we pass remoter_user parameter in HTTP header, is it possible to work this way.
    2) Is it possible that if we host both the ASP.NET and OBIEE 10g on SAME IIS server there is way to integrate them using SSO without any SSO server again by passing remote_user HTTP header
    3) What options do we have to integrate ASP.NET application and OBIEE without using SSO server itself and without using GO url method as we cannot pass password in header. Will Cookie Enabling Method can work in this scenerio.
    4) Is there is way that OBIEE directly take windows ID without SSO server, I know question might sound stupid as in prerequisite i read that we need “SSO system of Choice” but we need to be absolutely sure about our option and possibilities.
    we also reffered to following thread:
    10g - how to configure sso with iis-
    But, this one seems to be unresolved So kindly help
    Regards
    Saurabh

    Hi Praveen,
    Thanks for your response. I was doing a bit of R&D on SOAP API, tell me if i am wrong.
    In case we use SOAP API to Authenticate then we will get Response in terms of XML and we have to write our own code to render it in tables or charts.
    We dont want that we just want to automate the Authentication part and want to use OBIEE use Interactive Dashboards. Kindly suggest if I am wrong and if we just write a piece of Code to get the Authentication done and it will not affect the further use of OBIEE.
    Regards
    Saurabh

  • SSO from Non-SAP portal to EP

    Hi.
    We need SSO from Non-SAP portal to EP.
    The Non-SAP Portal has publish Form-based authentification.
    I mean userid&password set to URL.
    Then the EP can generate SAP Logon ticket to backend system?
    regards,

    How to Enable Single Sign-on with Non-SAP Web Application                    
    I have very good material coollected for the same implement this.
    http://help.sap.com/saphelp_nw04/helpdata/en/12/9f244183bb8639e10000000a1550b0/content.htm                                             
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/a7b5ba90-0201-0010-4dbc-8f999dcd2798                                                                                
    Cheers!!                                             
    SJ.

Maybe you are looking for

  • G/L Account against Vendor

    Hi, I have a FICO report and want some fields related to it.. Field are: Profit Center, G/L Account, Purchasing document Number ...........against Vendor Number I found in BSEG, but due to cluster table, join not possible... Plz tell me other table f

  • MTS thumbnails not displaying in PrE9

    I have a thumbnail problem. I just bought PrE9 because I was unhappy with Studio V14's slow/jerky performance with AVCHD.  I have a Canon HF20 and used Windows to move the videos (MTS's) over to my harddrive.  They are all HD videos in MTS format.  M

  • Syncing ipod when you have playlists from another computer on ipod

    i have a playlist on my ipod given to me by a friend. She did this by syncing my ipod to her itunes on her computer. Now i want to re-dock & sync my ipod to MY itunes library, but am worried it will wipe the gifted playlist off my ipod. How do i do t

  • Regarding developement project

    HI, Can anyone please mention the role of an abapper in developement project and implementation project? What is technical specification?Could u plz provide a sample technical specification?

  • 24p Advanced project

    I'm trying to transcode a quicktime .mov file for use in Encore 2.0. It is a 23.976fps 24pA (advanced) clip that is almost 6 minutes. The footage was shot on a Pansonic DVX100B. Every time I try to transcode the asset upon import, my program freezes