Integration of Web Interface of a Application in portal for external users

Hello portal experts,
our portal can be accessed from the internet (per ISA-Server and https). We have some applications that should be integrated in the portal.
This application having a web interface that should be used in this context. It's easy to do this for our interal users which could access the web interface of the applications directly.
But our requirement is to make this application accessible for our external users, too. I have tried a lot with the URL-iView and the server side fetching mode. The first page is shown but with broken images and the buttons are not clickable (Javascript not working).
Is it possible to use the portal as a kind of proxy that would get the request from the client and forward this to the application in the intranet or is the only way to match our requirement in making the applications accessible directly from the internet? Is there any other solution?
Best regards
Florian

Hi Florian,
No its not possible to use the SAP Portal as web proxy to your other web-app.
From my experiance I can tell you to stop searching/trying on the serverside fetching part, it wil not do wat you want.
There is only one solution direction and that is that you place some kind of reverse proxy in front of your Portal...
This reverse proxy solution (I keap it abstract as there are multiple solutions for this) should listen on the WWW and translate requests to the right servers.
For example calls to "/" could be translated to "/irj/portal/" and back
But also "/yourotherapp" can be translated to "http://yourotherappserver:port/yourotherapp and back
Resulting in that all calls to http://yourexternalurl/ will go to SAP Portal and all requests to http://yourexternalurl/yourotherapp will go to your other app. When this works you can use the URL or Intergrater iView using the default client side fetching.
I know that it is possible with Apache as a reverse proxy so I guess (and hope for you) that its also possible with ISA.
Good luck,
Benjamin Houttuin

Similar Messages

How to publish a sharepoint web application to internet for external users.

Hi
how to publish a share point site to internet,
In test server : we branded a publishing enabled site and uploaded content and want to publish for internet users
we have a production sharepont server,
1) how to configure alternate access mappings in default zone,internet zone when we create new web application in prod share point server.
adil

For internet publishing ifyou want or need change the authentication method you need to EXTEND the website and enable the CLAIM authentication so the user can login using a HTML form for username and password.
SharePoint make a url parsing to identify the content
to display so you need to explain all the server name used for contacting the WebApplication. You can use 5 different name for the same server
(AAM Alternate Access Mapping).
N.B. http and https are different name (AAM Alternate Access Mapping)Lorenzo
LSo Lorenzo Soncini Trento TN - Italy

BPS Web Interface don't show multiple documents for each cell

Hi gurus,
I have an issue... we are trying use text documents from BPS on the WEB interface. Everything works fine, I can input text documents on each cell on the web, and from Query as well.
I saved several other documents from the query for the very same cell, and I can see these other documents from BPS itself or from the Query by clicking on the title... but on BPS WEB interface, it shows only the last text document saved.
Is there anything wrong on the configuration, or is it possible for the WEB interface to show the titles so that the user can choose which document he wants to open?
Thanks in advance,
Chen

Hi Luke,
did you check whether the document attributes are generated for your Characteristics?
AWB -> Documents -> Administration -> Generated Properties
There is also a SAP Note 431126, which you might want to consult.
Regards,
Eric

Setting Application Context Attributes for Enterprise Users Based on Roles

Hello,
We have an Oracle 11g database with a table containing data from multiple sites (a SiteID field identifies the site for a record). Since application users can have access to different subsets of sites, we would like to use Oracle's Virtual Private Database feature to enforce row-level security on the table.
I did a successful proof-of-concept with database users. I created a role for each site (example: USER_SITE_A, USER_SITE_B, ...), and then assigned the appropriate site roles to each database user. I then created a package (run via a logon trigger) which set application context attributes for each site. If the current database user has been assigned a role for a given site, then the corresponding attribute named "SITE_PRIVILEGE_SiteID" is set to 'Y'... otherwise, it is set to 'N'. Here is the code which worked to set application context attributes for database users:
-- For each record in my RoleSitePrivileges table, set
--   an attribute named 'SITE_PRIVILEGE_<SiteID>'.
--   If the current user has been assigned a role matching
--   the value in the 'RoleName' field, set the corresponding
--   attribute to 'Y'... otherwise, set it to 'N'.
FOR iPrivRec IN (SELECT RoleName, SiteID
                   FROM RoleSitePrivileges
                   ORDER BY SiteID)
   LOOP
      SELECT COUNT(*)
        INTO roleExists
        FROM dba_role_privs
        WHERE granted_role = UPPER(iPrivRec.RoleName)
          AND grantee = USER;
      IF roleExists > 0 THEN
         DBMS_SESSION.set_context(
                     namespace   => 'my_ctx',
                     attribute   => 'SITE_PRIVILEGE_' || iPrivRec.SiteID,
                     value       => 'Y');
      ELSE
         DBMS_SESSION.set_context(
                     namespace   => 'my_ctx',
                     attribute   => 'SITE_PRIVILEGE_' || iPrivRec.SiteID,
                     value       => 'N');
      END IF;
   END LOOP;To finish things off, I created a security policy function for the table which returns the following:
RETURN 'SiteID IN (SELECT TO_NUMBER(SUBSTR(attribute, 15))
                     FROM session_context
                     WHERE attribute LIKE ''SITE_PRIVILEGE_%''
                        AND value = ''Y'')';This setup worked great for database users. I am now working to do a comparable proof-of-concept for enterprise users created in Oracle Internet Directory (OiD). I have Enterprise User Security (EUS) up and running with OiD, global roles created in the database, enterprise roles defined in EUS with global role assignments, and enterprise roles assigned to OiD users. The enterprise users are able to successfully login to the database, and I can see the appropriate global role assignments when I query the session_roles view.
I tried using the same application context package, logon trigger, and security policy function with the enterprise users that I had used with the database users. Unfortunately, I found that the application context attributes are not being set correctly. As you can see from the code above, the applicaiton context package was referencing the dba_role_privs view. Apparently, although this view is populated for database users, it is not populated for enterprise users.
I tried changing the application context package to use invoker's rights and to query the session_roles view instead of the dba_role_privs view. Although this package sets the attributes correctly when called manually, it does not work when called from the logon trigger. That was an oops on my part, as I didn't realize initially that a PL/SQL procedure cannot be called with invoker's rights from a trigger.
So, I am now wondering, is there another view that I could use in code called from a logon trigger to access the roles assigned to the enterprise user ? If not, is there a better way for me to approach this problem? From a maintenance standpoint, I like the idea of controlling site access from the LDAP directory service via role assignments. But, I am open to other ideas as well.
Thank you!

Hello,
We have an Oracle 11g database with a table containing data from multiple sites (a SiteID field identifies the site for a record). Since application users can have access to different subsets of sites, we would like to use Oracle's Virtual Private Database feature to enforce row-level security on the table.
I did a successful proof-of-concept with database users. I created a role for each site (example: USER_SITE_A, USER_SITE_B, ...), and then assigned the appropriate site roles to each database user. I then created a package (run via a logon trigger) which set application context attributes for each site. If the current database user has been assigned a role for a given site, then the corresponding attribute named "SITE_PRIVILEGE_SiteID" is set to 'Y'... otherwise, it is set to 'N'. Here is the code which worked to set application context attributes for database users:
-- For each record in my RoleSitePrivileges table, set
--   an attribute named 'SITE_PRIVILEGE_<SiteID>'.
--   If the current user has been assigned a role matching
--   the value in the 'RoleName' field, set the corresponding
--   attribute to 'Y'... otherwise, set it to 'N'.
FOR iPrivRec IN (SELECT RoleName, SiteID
                   FROM RoleSitePrivileges
                   ORDER BY SiteID)
   LOOP
      SELECT COUNT(*)
        INTO roleExists
        FROM dba_role_privs
        WHERE granted_role = UPPER(iPrivRec.RoleName)
          AND grantee = USER;
      IF roleExists > 0 THEN
         DBMS_SESSION.set_context(
                     namespace   => 'my_ctx',
                     attribute   => 'SITE_PRIVILEGE_' || iPrivRec.SiteID,
                     value       => 'Y');
      ELSE
         DBMS_SESSION.set_context(
                     namespace   => 'my_ctx',
                     attribute   => 'SITE_PRIVILEGE_' || iPrivRec.SiteID,
                     value       => 'N');
      END IF;
   END LOOP;To finish things off, I created a security policy function for the table which returns the following:
RETURN 'SiteID IN (SELECT TO_NUMBER(SUBSTR(attribute, 15))
                     FROM session_context
                     WHERE attribute LIKE ''SITE_PRIVILEGE_%''
                        AND value = ''Y'')';This setup worked great for database users. I am now working to do a comparable proof-of-concept for enterprise users created in Oracle Internet Directory (OiD). I have Enterprise User Security (EUS) up and running with OiD, global roles created in the database, enterprise roles defined in EUS with global role assignments, and enterprise roles assigned to OiD users. The enterprise users are able to successfully login to the database, and I can see the appropriate global role assignments when I query the session_roles view.
I tried using the same application context package, logon trigger, and security policy function with the enterprise users that I had used with the database users. Unfortunately, I found that the application context attributes are not being set correctly. As you can see from the code above, the applicaiton context package was referencing the dba_role_privs view. Apparently, although this view is populated for database users, it is not populated for enterprise users.
I tried changing the application context package to use invoker's rights and to query the session_roles view instead of the dba_role_privs view. Although this package sets the attributes correctly when called manually, it does not work when called from the logon trigger. That was an oops on my part, as I didn't realize initially that a PL/SQL procedure cannot be called with invoker's rights from a trigger.
So, I am now wondering, is there another view that I could use in code called from a logon trigger to access the roles assigned to the enterprise user ? If not, is there a better way for me to approach this problem? From a maintenance standpoint, I like the idea of controlling site access from the LDAP directory service via role assignments. But, I am open to other ideas as well.
Thank you!

How to secure BSP applications for external users on the internet?

I posted this question under Enterprise Portal forum but got no response. I am hoping some of you experts in this area can help.
We have developed BSP applications and set them up as iViews in Enterprise Portal 6. Our portal implementation will be used by external users.
We have security concerns that the access to the BSPs allows external users direct access to the R/3 system. We were told that we should use ITS application instead of BSP application for external users.
Do any of you have any insight into how we could work around the security problem with BSP applications, or BSP applications in EP6? Your help will be greatly appreciated.

In sense they are correct as to whether it is more secure or not would have to be a call by people who are more of an expert than myself.
But I can see there point the BSP runs directly on the system and uses the system security where as the ITS is basically just an RFC call. However for us we use a 620 server with BSP's and make RFC calls to our R/3 systems thus keeping people of the R/3 directly - however we are not opened to the Internet.
If your message is answered please remember to mark it solved so others searching in the future can find the solved ones quicker - just click on the yellow star.

Idea ? web interface + java standalone application

Hello,
I would provide a java standalone application. In parallel, I want create web interface (HTML+CSS+JS) that can write configuration files and read output files.
Can I avoid the use of tomcat server ? May be, I know nice solution like jetty : is-it difficult ?
Anyway, I'm looking for any piece of advice ..
Thanks,
From France
Edited by: phpvik on May 4, 2009 8:10 AM

What are the technical requirements? Just choose the server based on that.

SharePoint application access for external users

Hi Everyone
I hosted a SharePoint (2013) web application on port 29963 in Win 2012 VM.  In order to access it externally I add it to AAM as below.
AAM Settings
Internal URL
Zone
Public URL for Zone
http://owlag-web001:29963
Default
http://owlag-web001:29963
http://intranet.owla.co.za:84
Intranet
http://intranet.owla.co.za:84
IIS BINDINGS
Allunassigned        29963
HOSTS File
172.18.1.205:84   intranet.owla.co.za
Please can anybody check this settings and let me know if incorrect.
Regards
Prashanth
SharePoint Administrator

Hi Prashanth,
check this thread, there are some things you need to do, like make sure DNS is properly configured
https://social.technet.microsoft.com/forums/sharepoint/en-US/d106d7b1-b62d-4ec9-a7fe-521540d65bad/externalinternet-access-to-sharepoint-server-2010
http://sharepoint.stackexchange.com/questions/42738/using-sharepoint-url-without-port-number
Kind Regards,
John Naguib
Technical Consultant/Architect
MCITP, MCPD, MCTS, MCT, TOGAF 9 Foundation
Please remember to mark your question as answered if this solves your problem

Web Agent and Clip Board set up for multi user environment

Hi
Our environment is
Database: 0racle8.1.5 on Sun Solaris
Currently we are not using OAS but a portal server and Apache
Intermedia Web Agent and Clip Board are working fine.
The questions are
1. if there are multiple users (content managers) who would be adding /modifying content in the database, the how can I go about with Clip board.
2.The requirement is these people should be able to search documents on the basis of keywords. So how do we integrate Intermedia query capabilities on this clip board interface.
3. For production level how do we go about implementing.
Should we continue to have the ctxsys user and use that itself.
Thank you for any solutions

I have NO idea if these "exact problems" pertain to Macs, since I think most of these discussions are about Windows... but, some reading (not all PPro, but I put all the links I have saved, just for general information)
-see #3 http://forums.adobe.com/thread/771151
-you may NOT "map" your My Documents folder to a network drive
-you MUST give all users administrator accounts to use Premiere
-and especially Encore dual layer http://forums.adobe.com/thread/969395
-#5 Server 2008 is UNsupported http://forums.adobe.com/thread/851602
-a work around, of sorts http://forums.adobe.com/thread/957523
-and not on a "domain" http://forums.adobe.com/thread/858977
-also PreEl see #5 http://forums.adobe.com/thread/1017199
-more PreEl problem http://forums.adobe.com/thread/975117
The solution... some day... may be at this link
Adobe Anywhere http://www.adobe.com/products/adobeanywhere.html

Integrate WAD 7.0 Template into BPS Web Interface

Dear all,
We recently migrated to BW 7.01. We have an existing planning application running as a BPS Web Interface.
I now want to integrate a query output (data and chart) by using a web template designed with WAD 7.0 into the existing BPS web interface. I know how to do this with a web template designed with WAD 3.5. There is also a How-to paper available that explains it for 3.5. I'm struggling now to do the same with WAD 7.0. The syntax for the URL generation changed, that's one problem. There maybe more when actually calling the web template from the web interface(?).
I found some threads here in the forum dealing with this issue but no clear solution. Some posts even mentioned that integration of 7.0 web templates into BPS web interfaces is not possible at all. I would appreciate any information on this issue.
Thanks in advance!
Regards,
Ulrich Meier

Hello Ulrich,
the 7.0 web templates run on your BI Java server which has a different host name (and port) than you BW ABAP server which run the BPS web interface. The servers are different in Dev/QA/Prod so you need to generate the URL dynamically.
One way is to hardcode it in JavaScript. Something like: if CurrentDomain = ABAPDevDomain. Domain = JavaDevDomain. if CurrentDomain = ABAPQADomain. Domain = JavaQADomain. etc
A fancy alternative would be to put the Java domain and port into an exit variable which you could include in the BPS web interface (in a hidden DIV tag for example). Fill the exit variable using function RSWR_GET_DEPLOY_PORTAL_INFO. Then your JavaScript can pick up this value to generate the proper URL for the web template.
Regards,
Marc
SAP Techology RIG
PS: Posting JavaScript directly is limited for security reasons (certain JS keywords are not allowed). You can put your JS into a text file and attach it to your posting.

How to create a user in UME Database using web dynpro java custom application

Hi,
Can you please suggest me how to create a user in UME Database using web dynpro java custom application.
My Requirement is user can register his/her user id in SAP Portal 7.3 UME database.
Please suggest me.
Thanks and Regards,
Amit

Hi Amit,
Generated Documentation (Untitled)
This is what you're looking for, there's no real cook-book -- though Amey mentioned there might be some material on SDN, perhaps some tutorials.
You should be looking into com.sap.security.api.IUserFactory, methods newUser(String) which gives you and IUserMaint and commitUser(IUserMaint, IUserAccount) -- IUserAccount can be obtained using com.sap.security.api.IUserAccountFactory, method newUserAccount(String)
Hope it helps,
D.

BPC Web Interface

Hi,
I'm got an strong assumption and just want to validate with experts before putting this as an option to the client.
We want to access BPC input schedules and reports (developed using EVDRE function) through web interface. Users should be able to input data through web interface instead of logging into BPC for Excel.
To achieve the above requirement, we just need to publish the input schedules and reports to the content library and then we use the generated URL to access the respective input schedule/report through portal ?
Another question is: as BPC is service enabled, can we access the BPC input schedules and reports without SAP portal too?
Thanks,
Shabbar

Hi Robert,
1. When you refer to LiveWeb you are refering to the web based report of BPC?
Under the Portal Publication button in Excel EPM in version 10 there is a prompt for BI Launch pad or BPC Documents View. Documents view results in an error.
Where you successful in converting from Excel to Web in version 10?
Thanks
Eyal Feiler

How to display popup at the web interface side while checking a sh cart

Hi Experts,
I have a requirement to get the popup while checking the shopping cart..
I have implemented the badi BBP_DOC_CHECK_BADI..(Classic scenario)
In this badi , i am using one RFC FM to check the item details availability in the backend..I am getting the desired functionality. But I have a specific requirement to show popup when the items in the shopping cart are not available in the inventory that is maintained the backend R/3 system..
Can you please advise me how to write a popup in the web interface when stock is not available for a perticular item? Any HTML code available for the same?
Please advise me?
2) How to change status of an shopping cart item or else need to display some customized information for the item like 'This Item is in back order status '.
    The above situation arises when we are trying to check a shopping cart item status after ordering the shopping cart.
thank you!!

Hi Ravindranath,
Try to add a standard message like:
message e100(ZBBP_SC) into lf_dummy.
clear ls_message.
ls_message-msgty       = sy-msgty.
        ls_message-msgid         = sy-msgid.
        ls_message-msgno     = sy-msgno.
        shift ls_message-msgv1 left deleting leading '0'.
        select single text from t100 into ls_message-message
                                    where sprsl = sy-langu
                                      and arbgb = sy-msgid
                                      and msgnr = sy-msgno.
        append ls_message to et_messages.
Regards,
Marcin Gajewski

Attach documents in Manual Planning layout in Web Interface Builder

Hi All,
I have a task to attach documents to the manual planning layout that uses excel component.
I can attach the documents in Manual planning layout, But i am unable to attach documents in the same manual planning layout when this is being used in Web Interface.
Can anybody help me for the same?
Thanks and Best Regards,
Vikas Bittera.

Hi Vikas,
refer to the below post
https://forums.sdn.sap.com/click.jspa?searchID=2044175&messageID=892907

How to connect oracle application server portal to MS access DataBase

Hello,
I am facing one problem here.
Our client is having their database in MS access and they want to implement the oracle application server portal for their organization then how to connect the MS access DB to oracle Application server portal

There is a worked example of how to connect oracle to an Excel spreadsheet, which is easily modifyable to read from an Access Database.
http://asktom.oracle.com/pls/ask/f?p=4950:61:::::P61_ID:4406708207206#18830681837358
I had some concurrency problems - only one person could use the link at any one time, so I used it to load the data into oracle tables.
Tak

Load username and password for external application?

How to load username and password for external application?
For each user, we should take its Portal username and password for one specific external application. How to do that ?
Regards.

ABSOLUTLY YES !!!!
We already know the external application login information for each user and we want to by pass this user task. (Specially because the user itself doesn't know its username/password for the external appli). In fact we are trying to integrate IStore product to Portal by using this mechanism.
<BLOCKQUOTE><font size="1" face="Verdana, Arial">quote:</font><HR>Originally posted by Kamalendu Biswas ([email protected]):
If you define an external application then SSO users can populate user information by themselves.
Are you syaing that you want to populate user information automatically (bulk lodad)?<HR></BLOCKQUOTE>
null

Integration of Web Interface of a Application in portal for external users

Similar Messages

Maybe you are looking for