Is SSO Mandatory for ESS with ECC5.0?

Is single sign on MAndatory for implementing ESS with SP16 ECC5.0 and mysap ERP2004 package . Becuase am not finding any options to map users for systems?
inputs highly appreciated.

HI Sameer,
SSO is mandatory for ESS to enable the backend connection for the logged on user only.
For JCO destination type metadata,a generic user maybe be used by providing the userid and password.But for the JCo destination type Application,we have to enable SSO, so that user specific data may be retrieved.
For SSO, the method used is SAP Logon tickets and the same method would be used for user managemnt for the systems created in EP.
Achim, have you tried using User mapping for ESS?
I tried by setting User Management for JCo Destination Type Application ,to User Mapping and did the user mapping in EP for the systems,but i got the error "RFC_ERROR_LOGON_FAILURE"-system is unable to interpret the SSO ticket received.
So,i thought the only option is using SAP Logon tickets for this scenario.
In the SAP help also,it is mentioned to set up SSO using SAP Logon tickets, not using User Mapping.
Thanks,
Regards,
Siddhartha

Similar Messages

Travel for ESS with WD ABAP

Good morning.
I am implementing Travel for ESS. We implement the business function FIN_TRAVEL_1 for work with Webdynpro ABAP.
We are implementing ESS for a country not deliverd by SAP.
We copy the folder of ESS/MSS, for modify the role of Employee Self-Service and add more iview/page/ to this role customer.
I have two doubts:
1) Have that change the PCD in the SPRO for each resource?
2.) I am in process of designing the ESS Homepage framework for Travel and Expenses.We are onto ECC6.0 with Enh Pack4.
In SPRO, we have got new resource links which are for Webdynpro ABAP.
For Example for resource EMPLOYEE_TRAVEL_ALLMYTRIPS_SRV_12,the properties are
Description : Travel & Expense: All My Trips and Expenses
Object name : FITV_POWL_TRIPS
URL Parameter : SAP_FITV_EXIT_OP=CallAreaPage
All other properties are empty like URL of Resource Object and URL of PCD Page.
The Question is:
Not is necessary use this properties URL of Resource Object and URL of PCD Page.??
Service========================================== Resource===================================
EMPLOYEE_TRAVEL_ALLMYTRIPS_12================     EMPLOYEE_TRAVEL_ALLMYTRIPS_SRV_12
EMPLOYEE_TRAVEL_MYPROFILE_12=================     EMPLOYEE_TRAVEL_PROFILE_SRV_12
EMPLOYEE_TRAVEL_REQUEST_12===================     EMPLOYEE_TRAVEL_REQUEST_SRV_12
EMPLOYEE_TRAVEL_REQUEST_DELETE_12     =========== EMPLOYEE_TRAVEL_REQUEST_DELETE_SRV_12
EMPLOYEE_TRAVEL_PLANNING_SRV_12============= EMPLOYEE_TRAVEL_PLANNING_SRV_12
EMPLOYEE_TRAVEL_ROUTING_12===================     EMPLOYEE_TRAVEL_ROUTING_SRV_12
EMPLOYEE_TRAVEL_CANCEL_SRV_12===============     EMPLOYEE_TRAVEL_CANCEL_SRV_12
EMPLOYEE_TRAVEL_EXPENSEREPORT_12============     EMPLOYEE_TRAVEL_EXPENSE_SRV_12
EMPLOYEE_TRAVEL_EXPENSEREPORT_DELETE_12=====     EMPLOYEE_TRAVEL_EXPENSE_DELETE_SRV_12
EMPLOYEE_TRAVEL_TRIPFORM_12==================     EMPLOYEE_TRAVEL_TRIPFORM_SRV_12
EMPLOYEE_TRAVEL_PERSONALIZATION_12===========     EMPLOYEE_TRAVEL_PERSONALIZATION_SRV_12
EMPLOYEE_TRAVEL_UNLOCK_PERSNO_12============ EMPLOYEE_TRAVEL_UNLOCK_PERSNO_SRV_12
EMPLOYEE_TRAVEL_ASSISTANT_12=================     EMPLOYEE_TRAVEL_ASSISTANT_SRV_12
================================================ ==========================================
Kind Regards.

Good Afteernoon.
But the system not display the services in the page of area.
We copy the folder in the portal of Employee Self Service.
Kind Regards.

SSO - Authentication for Calendar withe MS Exchange

Hi,
I have configured the calendar iView (com.sap.netweaver.coll.appl.ui.gw.MeetingWith) to work with IIS and CDO (MS Exchange) with user mapping.
Do you know the different steps to use it in SSO authentication mode ? What are the modifications needed to IIS and the Portal to ensure that it works ?
Regards
Jean-Marc

Hi,
Not sure what versions of Portal, IIS and Exchange you are using, so some of this may vary.
To avoid user mapping to Exchange, an option is to use the SSO2KerbMap ISAPI filter.
I suggest you look at these SAP Support (OSS) Notes:
922040 - Single Sign-On for Exchange Transport
736644 - Mandatory Steps for MS Exchange Integration
735639 - SSO22KerbMap Known issues
712902 - Single Sign-On for Outlook Web Access iView in SAP EP
For example, here is the text from note 922040:
Symptom
To enable Single Sign-On (SSO) for Exchange transport.
Reason and Prerequisites
1. The SSO for Exchange Transport will work if and only if, the IIS (MSX-A Components), and the Microsoft Exchange server are in the same machine. For reasons please refer to MSDN document http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnasp/html/msdn_aspmess.asp (search for "IIS and Exchange Colocated")
2. The Microsoft Exchange server should be running on a Windows Server 2003.
3. The SAP Enterprise Portal server and Microsoft Exchange server should be in same domain or trusted domains.
4. The SAP Enterprise Portal userID and Exchange alias should be same.
5. The URL used to access Portal server should specify fully qualified name of the portal server.
Solution
The SSO can be achieved for Intranet scenarios, by installing the SSO22KerbMap Module, an ISAPI filter, on the web site running the MSX-A components. For installation and other information about this filter, please refer to the SAP note 735639.
There are also some notes... but you should get to them from the above notes.
Hope it helps,
Cheers, Phil G.

ESS with ERP2005 (without a Portal)

Hi,
in the moment we are using ESS with SAP Enterprise (4.7).
Now we are planning the Upgrade to ERP2005.
We have several customers who has outsourced their HR Processes to us. We maintain their ESS on our SAP Servers.
If we change to ERP2005 the problem is, that our customers have their own Portal which is often no SAP portal. The Portal is a very strategic IT part of our customers, so we have no access to the Portal. On the other hand our customers has no HR know-how to maintain the ESS om their own.
We heard about the internal ESS. May be this could be the solution in our situation. Where can we get more information about the internal ESS. Who has tested this software already.
Best regards
Thomas

Hi,
the internal ESS is nothing else than an EP 7.0 "in disguise". It is a regular java stack, portal 7.0 and the BP for ESS and MSS just in one install on the same machine than HCM.
It is of no difference if you are using a regular external Portal Scenario or an internal ESS.
Generally speaking, SAP will push the Portal. It is now more or less mandatory for ESS/MSS and BW - SRM will follow with the next release. Web Dynpro will be essential part of the GUI-Strategy and WD without portal makes not a lot of sense.
So, customers with a different portal will need to pursuit a "Dual Portal" strategy in future, because there will be no WD integration int other portals. SAP stated very clearly in internal discussions that customers with a different portal strategy will have serious integration problems.
What I recommend is using EP for integration of SAP and use KM with federated portals for "syndication", i.e. for content integration of other portals.
When you are a provider of services, that would be a good point to start as a service offering

Custom Reports for ESS/MSS ? with PNP??

I am trying to create a custom report for ESS, and am unsure if I can use the PNP logical database in this code. I am concerned that if the associate does not have access to see those infoytpes in production, then they would not be able to see their own data from those infotypes in ESS.
Can anyone offer their opinion? Thank you!!!!

Hi Subash,
This would be the case.As the J2EE version with ECC6.0 is 7.0 and we need to apply the BP to both ECC and EP.
Try to think , how do you balance EP6.0 with 6.40 J2EE engine <-> ECC6.0 with 7.0 J2ee engine? will get the answer!
Regards,
Surya

Persona Data & Family Member Data Country screen with Middle Name for ESS

Friends,
I am using country version 99 and working on new Implementation of ESS on ECC6.0.
Can any body help me with the following for ESS:
1. Which Personal Data Country screen has got Middle name field?
2. Which Family Member/Dependent Data Country screen has got Middle name field?
Thanks for your help.
Preethi

I think MOLGA 10 and/or 26 should do.
Yash

Help with S_SERVICES configuration for ESS WebDynpro

In the authorization instructions for ESS MyERP2004, it is stated to add required services to the S_SERVICES. Many of the application components in the content administrator have a path longer than the field length to add these services.
Here is the example:
The service names must follow the naming convention <vendor>/<dc>/<Application>. Example: sap.com/ess~us/Per_Address_US
Has anyone completed this? I would appreciate some tips in completing this task successfully.

>What is the theoretical startup settings for sql services
Manual. The cluster will start them.
>How can we trace why Sql Server stopped ?
Look in the SQL Server Log.
David
David http://blogs.msdn.com/b/dbrowne/

IMG Customizations For ESS In ECC 6.0

Hi Gurus,
I'm stuck with some IMG customization issues. I can see the Overview page and each area group pages for diff applications. Like Employee Search, Personal Information etc. But whenever i'm clicking on the links it is openning up a blank screen.
Please give me some example how to configure the server in IMG like its path, port etc? Apart from this any examples for service creations for each application.
According to SAP help material i also cant find any place to put the System ID in the iviews like Who Is Who, Change Own data!
Please help me out! If any one can share any document it will be great.
Thanks
Anirban

Customize Icons for the Homepage Framework
Christopher Solomon
Business Card
Posted on Mar. 01, 2007 01:07 PM in Business Solutions, Enterprise Portal (EP), Web Dynpro
Subscribe
Print
Permalink
    Although there is excellent material around and even step-by-step guides for configuring and customizing the Homepage Framework (*see the document "XSS Homepage Framework for Employee Self-Service" by Sibylle Borhauerm-Product Manager, SAP AG), I have found nothing available that provides information about customizing the actual icons/images that are used within the framework. Therefore, I took the DIY (do-it-yourself) approach and decided to put together a document of my own to hopefully help others. The following is an explanation about how to customize and/or add new icons for the Homepage Framework. This is based on my experience with ECC5.0, but a similar approach should work for ECC6.0.
Background
    The Homepage Framework is a new feature as of ECC5.0 (mySAP ERP 2004 for those that want to be thoroughly confused.haha). It is basically a means to build very informative, aesthetically consistent web pages solely through configuration in the IMG (no web coding needed!). It allows you to organize information in a more user-friendly manner. For example, prior to this, ESS services were typically listed as links on a menu on the left of the browser window (like the detailed navigation area of the portal). The user would click the fairly non-descript link and be taken to a web application that contained even less helpful information or description and was more techy in appearance. This was not very friendly or intuitive to end users who may not have much familiarity with computers at all. Often times, I would have to build static web pages for clients that would serve to provide help information to the user about what the actual ESS links would do and so forth and to serve as a jumping off point. With the Homepage Framework, you can configure (againno coding!) a jumping off page that summarizes all the areas you offer in ESS (called the Area Group page in the Homepage Framework), and then configure more detailed information pages for each area as well (called Area pages in the Homepage Framework).
ESS Area Group Page
ESS Area Page for Benefits and Pay
Where is my Framework?
    With any framework, as the name implies, there is a fairly rigid layout. This insures consistency amongst the pages. For the Homepage Framework, each area is assigned an icon. The icon should visually convey the idea of the area. For example, for an area for Working Time, you might use a clock icon. The icons assigned to each Area appear on the Area Group page as well as the respective Area page. By default, there are only a small number of out of the box icons that are provided. I took the time to document the default images and their corresponding resource name in a spreadsheet. An image of this appears below:
Default Icons
The big question (and one I see asked over and over) is "where does all this stuff live?". This is one of the misconceptions and/or hurdles to overcome in understanding the newer ESS/MSS SAP offerings. With ECC5.0 and higher, most people incorrectly assume that by installing/deploying the ESS/MSS business package(s) that they suddenly have all of ESS/MSS available to them. Wrong. It's an easy mistake to make because "that's how it's always been before". The actual deployment of the overall solutions for ECC and onward requires two pieces. You still deploy the business package, but the business package only covers the portal objects. All you are doing is loading in the out-of-the-box iViews, worksets, pages ,roles, etc. Now what will your iViews talk too? The second part is the actual ESS/MSS/XSS services, ie. the applications that "do stuff". At the moment, these are Java Webdynpros and are part of the "Java XSS Components" installation. These components can be installed on any WAS/NWAS, but typically they are deployed on the same server as the Enterprise Portal...just more Java web applications running on the Java engine (again, they could be deployed to an entirely separate WAS/NWAS but we won't get into that). Part of the Java components installation is the Homepage Framework WebDynpro and the accompanying icon images as resource files. The images are not in the Business Package, and they are not not in the backend SAP system. Both are common misconceptions.
Make it your own!
    So now that we know what we are working with and where everything is, how do we change it? First, let me offer this advice. I would not modify and existing icon (replace clock.gif with a different image named clock.gif. I always create my own custom images. In that way, if all else fails, we still have the SAP delivered content. Better safe, than sorry! as my grandfather, an explosives specialist, used to always say. With my word of warning offered, onward we go now. Let's do this through an example. Say for instance, we want to change the icon used for "Working Time" in ESS. The default icon and Area page might appear as:
Working Time Area Page
If we look in configuration, we find that the icon used is actually assigned to two resources:
     EMPLOYEE_WORKTIME_PIC
     MSS_HCM_AREA_ATTENDANCE_PIC
Since we are changing the ESS one, its configuration appears as:
Default Configuration of Resource
Now, lets say we have our own image:
myCompany_clock.gif
First, we can change configuration of the resource to now use (look for) our custom image:
Customized Configuration of Resource
Now, we must actually put the image in the location where the Homepage Framework can find it. As I said before and want to make clear once more, the images are not in the Business Package. They are deployed as part of the Java XSS components. Therefore, we must place our custom image out in the same physical directory that the other resources were deployed to during the installation of the XSS Java components. Using our example, let's look at the "clock" image. I could go into detail telling you where and how this is found, but I prefer to show you the simple way. In your browser, navigate to the Working Time Area page as shown above. If you right-click on the default icon and then select Save Picture As from the context menu, a window will pop-up showing you the name of the image file as calendar_clock.gif (we also know the file name from the configuration of the resource shown above). Now that you know the actual name, you can simple do a View Source on the page and then search for the occurrence of calendar_clock.gif . Doing this, we see that it is deployed and linked to the path as follows:
    ../../../resources/sap.com/pcui_gp~xssutils/Components/com.sap.xss.ser.xssmenu.vc.areagroup.VcXssMenuAreaGroup/calendar_clock.gif
Therefore, we simply need to move/copy our own myCompany_clock.gif into the path:
    ../../../resources/sap.com/pcui_gp~xssutils/Components/com.sap.xss.ser.xssmenu.vc.areagroup.VcXssMenuAreaGroup/
This may require additional help if you do not know where (what server) the Java components were installed on or you do not have direct access to those directories. With the file copied over and our configuration changes to the backend resource to use our custom image, our Working Time Area page now displays using our custom icon:
Cusotmized Working Time Area Page
Gotchas!
    These are a few things to be aware of if you have problems seeing your custom changes (these apply to any changes to the Homepage Framework configuration):
     Make sure you have copied your configuration to the correct client that is in use. Typically, you will configure in one client and then test in another. You can use transaction SCC1 to copy client-to-client transports, if you have access to that function. The Homepage Framework config is client-dependent.
     If you do not see changes in the portal immediately, it is typically due to the cache not being refreshed. You can do this via the System Administration - >Support area of the portal for the PCD content. You can also set a parament to clear the buffer directly on the iView for the Area and Area Group iViews but this is not suggested for performance reasons.

SSO Authentication for more than one application in Application Express

Hello,
I recently got a single application working with SSO integration for Application Express 2.2.
Now I would like to create multiple applications within the same workspace, which all use SSO authentication. I tried both copying the working one from the other application and creating a new SSO authentication scheme from scratch into the new aplication.
I cant seem to make the new application work with SSO authentication. Do I have to go through all of the same steps I went through to get it working with the first application?
Thanks
-sean

Ok, my bad.
After shutting down my web browser and reopening it, the SSO integration now works for both the old and new applications. Not sure what was cached, but it was bypassing the sso check.

Backend R/3 connectivity for ESS MSS from portal

Hi,
We are currently in development cycle for ESS/MSS based on portal EP 6.0 SP16 and ERP 2004 in backend. We are trying to find out how the ESS/MSS business package on portal works with backend ESS functionality in ERP 2004. It is more of a connectivity question. We want to know if we expose our portal to internet so that users can login to ESS/MSS from internet, do we need to put backend ERP (ECC 5.0) system also in DMZ? Do we need to open ports between portal and R/3 so that ESS/MSS can work? Or the communication happens using JCO connections and we need not to expose R/3 system.
Also one more specific question? If someone knows how ESS/MSS talks to backend system. At SAP application layer level or database level? I am asking this question to check if I need to open a port to talk to database or I can very well keep 2-3 SAP application server in DMZ and work.
PK

You need to look at the specific business package. For example, ESS for mySAP ERP 2004 says that the technology is Java / Web dynpro, which says that the Java engine uses RFCc to get the data from the backend.
Othe businesss packages may use ITS, which then needs another connection from the user to the ITS server.
Cheers

How to create sso login for webcenter application

Hi,
i have created a webcenter portal application with a login page.i have to create a sso login for that application .
can anyone suggest me how to do?

Hi.
Do you have OAM as SSO?.
The best way is to create a loginProxy page which proxies the user and password entered to OAM Login process (or the other SSO system).
This post of JayJay will help you: http://jjzheng.blogspot.com/2013/10/non-programmatic-authentication-using.html
Regards.

Creating NWDI track for ESS/MSS

Hi,
I am trying to implement ESS/MSS (600 SP7). For customization I need to import the package on the track in CMS. Import of JEE, JTECHS, BUILDT and PCUIG were successful. When i tried importing ESS and MSS, import is failing. Check-In of both the components are successful but while importing the component under Development tab, its failing. Import of MSS in DTR is successful but CMS is failing.
Below is the log for ESS:
Info:Starting Step Repository-import at 2007-04-10 12:46:13.0591 +5:00
Info:Component:sap.com/SAP_ESS
Info:Version :MAIN_ERP05PAT_C.20070314050106
Info:1. PR is of type TCSSoftwareComponent
Info:propagatable is known in repository, it is not necessary to write the workspacecontent to the DTR
Fatal Exception:com.sap.cms.tcs.interfaces.exceptions.TCSCommunicationException: communication error: VcmFailure received: Internal Server Error [(pre||post)-condition failed: Internal Server Error]:communication error: VcmFailure received: Internal Server Error [(pre||post)-condition failed: Internal Server Error]
com.sap.cms.tcs.interfaces.exceptions.TCSCommunicationException: communication error: VcmFailure received: Internal Server Error [(pre||post)-condition failed: Internal Server Error]
     at com.sap.cms.tcs.client.DTRCommunicator.integrateChangelist(DTRCommunicator.java:393)
     at com.sap.cms.tcs.core.RepositoryImportTask.processRepositoryImport(RepositoryImportTask.java:335)
     at com.sap.cms.tcs.core.RepositoryImportTask.process(RepositoryImportTask.java:578)
     at com.sap.cms.tcs.process.ProcessStep.processStep(ProcessStep.java:77)
     at com.sap.cms.tcs.process.ProcessStarter.process(ProcessStarter.java:197)
     at com.sap.cms.tcs.core.TCSManager.importPropagationRequests(TCSManager.java:376)
     at com.sap.cms.pcs.transport.importazione.ImportManager.importazione(ImportManager.java:227)
     at com.sap.cms.pcs.transport.importazione.ImportQueueHandler.execImport(ImportQueueHandler.java:634)
     at com.sap.cms.pcs.transport.importazione.ImportQueueHandler.startImport(ImportQueueHandler.java:103)
     at com.sap.cms.pcs.transport.proxy.CmsTransportProxyBean.startImport(CmsTransportProxyBean.java:584)
     at com.sap.cms.pcs.transport.proxy.CmsTransportProxyBean.startImport(CmsTransportProxyBean.java:560)
     at com.sap.cms.pcs.transport.proxy.LocalCmsTransportProxyLocalObjectImpl0_0.startImport(LocalCmsTransportProxyLocalObjectImpl0_0.java:1252)
     at com.sap.cms.ui.wl.Custom1.importQueue(Custom1.java:1198)
     at com.sap.cms.ui.wl.wdp.InternalCustom1.importQueue(InternalCustom1.java:2215)
     at com.sap.cms.ui.wl.Worklist.onActionImportQueue(Worklist.java:881)
     at com.sap.cms.ui.wl.wdp.InternalWorklist.wdInvokeEventHandler(InternalWorklist.java:2390)
     at com.sap.tc.webdynpro.progmodel.generation.DelegatingView.invokeEventHandler(DelegatingView.java:87)
     at com.sap.tc.webdynpro.progmodel.controller.Action.fire(Action.java:67)
     at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.doHandleActionEvent(WindowPhaseModel.java:420)
     at com.sap.tc.webdynpro.clientserver.window.WindowPhaseModel.processRequest(WindowPhaseModel.java:132)
     at com.sap.tc.webdynpro.clientserver.window.WebDynproWindow.processRequest(WebDynproWindow.java:335)
     at com.sap.tc.webdynpro.clientserver.cal.AbstractClient.executeTasks(AbstractClient.java:143)
     at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doProcessing(ApplicationSession.java:299)
     at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessingStandalone(ClientSession.java:752)
     at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessing(ClientSession.java:705)
     at com.sap.tc.webdynpro.clientserver.session.ClientSession.doProcessing(ClientSession.java:261)
     at com.sap.tc.webdynpro.clientserver.session.RequestManager.doProcessing(RequestManager.java:154)
     at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doContent(DispatcherServlet.java:62)
     at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doPost(DispatcherServlet.java:53)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:387)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:365)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:944)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:266)
     at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
     at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:160)
     at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
     at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
     at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
     at java.security.AccessController.doPrivileged(AccessController.java:207)
     at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:100)
     at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:170)
Info:Step Repository-import ended with result 'fatal error' ,stopping execution at 2007-04-10 12:47:49.0198 +5:00
Regards,
Piyush.
ps: points will be awarded to all helpful answers. )

Hi Bharath
How r u? Hope fine.
I have specified the version above. I am using (ESS 600 SP 7 [P11] & MSS 600 SP 7 [P4]).
Is there anything i can do to resolve the issue in JDBC etc? Whats this AFAIK?
Can u suggest something, a work around, to solve this issue?
Regards,
Piyush.
ps: u can directly mail to my ID, will grant u points for helpful answers. )

How to integrate a SSO based in cookie with ADF Security

At work they asked me to integrate a existing SSO based in cookie with the new ADF + Jdeveloper 11g + WLS. After google for days and read a lot of blogs and official documentation I've made a custom LoginModule. I made it very simple, it's just an "if" inside the login() function with the username, if the username is "john" I put to the Subject some Principals. My steps are:
1- Create a new app based on "Fusion application" template.
2- Make a new ADF Taskflow with only one view inside (the entry point of the taskflow). The jspx only contains a welcome message.
3- Run the ADF Security wizard, all the steps with the default option, I don't change anything.
4- Put some users and some roles in jazn-data.xml, and maping them to an application role. Then I grant permissions to the application role to view the previous task flow.
At this point everything is ok. I run the taskflow and a basic login popup prompts me to write my username and password. Now I try to remove everything useless for me, like idstore, credentials, anonymous, etc. I only want a LoginModule that get the HttpRequest and passes it to an already done class that returns a true/false depending if the cookie is correct or not but, as I said before, my LoginModule is so simple now and even didn't try to do something more complicated than an if. The steps I try are:
in jps-config.xml
5- Remove idstore.xml and credentials.
6- (loginmodule tab) Make a new login module, and put here my class. The class is in the ViewController project and JDeveloper find it navigating through the heriarchy, so I have visibility. I put REQUIRE flag, add all roles and debug mode.
7- In the security context unmark the idstore.loginmodule and mark myLoginModule. Also delete the anonymous security context.
All that I got until now is a 500 error (Internal server error - Authorization Exception). Sometimes (the close i've ever been to do something correct) the browser ask me for user/password but then only recognizes the users that already are in WLS (idstore from previous tests), but NOT the "john" user that is inside my custom LoginModule. Even more, if I run the WLS from JDeveloper 11g in debug mode, the runtime never stops at breakpoints inside my custom login module. It seems that my LoginModule isn't deployed or I made some error maping the roles.
So, my questions are:
- I'm in the good way? If I want an authentication based in cookie/httprequest I have to do a custom LoginModule? My goal is to do a re-usable code, and re-use the code that my co-workers have done. They have a class that with only the HttpRequest determines if a user is logged or not.
- If I'm in the good way... how can I put my custom LoginModule in the WLS? I tried to search something in the Administration Panel (localhost:7101/console) but I did'nt find nothing.
- In case I'd got the custom LoginModule working fine in WLS... how can I get a HttpRequest from a LoginModule and avoid the username/password dialog? I've to make a filter and pass it to the my LoginModule? If it's correct... how?
I don't post my code because is so simple, it's based on DBTableLoginModule but without all the database access code.
Thanks to all!
P.D.: If this message isn't in the correct forum, I'm sorry. Feel free to move it.
P.D.2: Sorry about my english, I'm spanish. I know i've to practise a lot :)

Hi Frank,
Thanks a lot for your answer. Just one more easy question: what I need to do is a custom Authentication Module (which will read the cookie)? If only you can point me to the correct chapter of the WLS documentation I'll be very pleased.
In future releases of JDeveloper will be easier to do this kind of things related to security?
Riveck

Error Message FMBAS202 Year of cash effectivity mandatory for budget cat 9G

Hi all,
I activated BCS and use update profile 000350 (Separate PB/CB budget lines; standard), we tried to post simple FI posting and the error come up
==============================================================
Year of cash effectivity mandatory for budget category 9G
Message no. FMBAS202
Diagnosis
The FM update profile does not support the year of cash effectivity for commitment/actual values (posting ledger 9B). However, the year of cash effectivity is mandatory in BCS budgeting for budget category 9G and FM area 0100: the minimum value in this case is 2009.
System Response
Processing of the commitment/actual data record stops.
Procedure
Deactivate the year of cash effectivity for the corresponding budget category 9G and FM area 0100 in the IMG activity Choose Budget Category.
===============================================================
So I click the link and it goes to Define Budget Category screen where we assign budget category (9G) and time horizon (1) to a FM area, but not mention of deactivating year of cash activity.
My question is:
1. Where is the button to deactivate the year of cash effectivity?
2. What's the difference between budget category 9B and 9G? Both are Commitment Budget.
3. I dont remember assigning budget category 9B to an FM area. Where is the setting?
Thanks

Hi,
When you go to IMG - Public Sector Management - Funds Management Government - Budget Control System (BCS) - BCS Budgeting - Basic Settings - Definition of Budget Data - Choose Budget Category, what's the settings for 'Time horizon' field? It should be blank for 9G(commitment), if you don't work with cash effectivity.
9B is posting ledger, while 9G is budget ledger. You don't have to assign 9A/9B to FM area.
Regards,
Eli

Creation Of Track For ESS/MSS

Hi,
Could anybody send me the steps in brief or any document which gives step by step procude exactly what needs to be done in NWDI to create a track for ESS/MSS.
I have gone thru some of the sdn posts but i didnt get exactly what steps need to be done....like apart from importing predefined SCA's.
Please help me out...
Regards
Sireesha.

Hi Sreesha,
Process: Creating Track for ESS/MSS Application.
1) open the NWDI URL.
2)click on "Change Management Service" link and login.
3)After logging you will be in "Transport Studio" link. Shift to "Landscape Configurator" link click on that, there you will see tract related page.
4)In the middle of the page there are differnet options(buttons) like Change,New,Save,Save As,e.t.c..
5)Click on New button then you will get new track related fields. After giving required details bottom of that there are some more options(buttons) like ADD Sc,Delete,e.t.c.., clcik on ADD Sc and add the SCs related to ESS/MSS and click on SAVE button which is present on top of window.
6)With these steps required track will be created...
Any queries revert back.....
Regards,
Anil.

Is SSO Mandatory for ESS with ECC5.0?

Similar Messages

Maybe you are looking for