Logon methods in user mapping

Hi friends,
In user mapping we use any of the three logon methods which are nothing but authentication methods.can anybody please explain what are these methods?
with regards
sireesha

Hi sireesha,
SAPLOGONTICKET method - used if the portal user and R/3 user ( any system ) are the same. If they are different also using user mapping the connection can be estableshed. But no need to specify the password.
UIDPWD method - Here we specify the userid and password. used if the portal user and R/3 user are different.
Regards
Arun

Similar Messages

Question about Logon ticket with user mapping at BI-JAVA environment

We're implementing BI 7.0 including BI Java and SAP EP for end user
access.
I have two question about SSO method when we're using BI Java.
I know we can simply configure SSO logon ticket with BI-Java(EP
included) and BI-ABAP through BI template installer and we already
succeeded in that case.
But the problem is we want to change it to user mapping SSO method for
some our internal reason.
After we configure user mapping SSO, we've got SSO failed error when we
call BI-Java stuff like BEx Web Application iView.
After many testing implemented, we found SSO Logon ticket with user
mapping (using SAP reference system). It seems working now.
But our question is "Is it no problem when we use SSO logon ticket with
user mapping?" Is there any restriction or issue?
One more question is we can ONLY use user base mapping when reference
system used. How can we assign BI-ABAP users to EP Group?

Using an SAP Reference system is allright. But if the reason u r going for this is because of different usernames in EP and BI, why dont you go for user mapping.
Anyways, on restriction of reference syetms is that you can have ONLY ONE reference system defined in portal. In you case you can only have the BI system defined.
Hope this helps!!

Problem about SSO using logon ticket with user mapping

Hi everyone ,
I had done SSO with Portal , BW and R/3 system.
I use logon ticket with user mapping .
When user name is same in Portal as in R/3 system, or user name is same in Portal as in BW , user can access R/3 transactions and BW report without logon.
There are some Portal users name which are different with R/3 user and BW user. And I done the user mapping for these user.
But some user mapping works fine,but most of them can't work,means that most of them need to enter mapped user ID and password.
What's the reason?
When SSO using logon ticket with user mapping, the Portal user which is different with R/3 user and BW user, can they access R/3 transaction iview and BW report iview without logon?

Hi Chen,
What you have done is correct. But the problem lies here.
Since you are using the same system object for accessing the iview, where the ticket method is set to SAPLOGONTICKET in the user Management property of the system object.
To avoid this create another system object like the previous one but set the logon method to UIDPW and select admin, user from the drop down box. Also create a system alias for this system.
Now create another iview like the previous one but link this iview to the new system. Now do the user mapping for the users which are different in portal compared with R/3. Now you should be able to login without any problems.
Another important point is login to portal with Fully qualified domain name. In the ITS property of the system object also give the FQDN.
Hope this helps
Regards
Arun

SSO and User Mapping at same time

Hi,
Can we use SSO and User mapping at same time between Portal and SAP Backend system?
For some of the users the user id is different in both end.
After implementing the SSO... Will it affect the existing user mapping? and the system alias created for that?
If not, Can we use both SSO and user Mapping same time?
Thanks,
VB

Hi VB,
In this case I suggest you create 2 systems one you might have created for users who are having common user ids in portal & at the backend system.
For the users whose ids are defeering you can create reference system and in user managemant property of that system
Authentication Ticket Type - Select -SAP Logon TicketSAP Assertion Ticket
Logon Method - UWPW
User Mapping Fields - {100,200,300}Client;Language
where 100,200,300 are the clients of the backend system.
Assign this system in the ivews.
Thanks,
Vishal

Issue with user mapping and SAP reference system

Hello Gurus,
I have this strange system behaviour when preparing my system for single sign-on using user mapping.
Case 1.
In the user management property category, I have the following defined.
Authentication Ticket Type - SAP Logon Ticket
Logon Method - UIDPW
User Mapping Fields -
User Mapping Type - admin, user
In the alias editor, I defined the default alias as SAP_PRD
Result= when I go to identity management to assign the reference system (the default alias - SAP_PRD)...I do not see the system alias there.
Case 2:
In the user management property category, I have the following defined
Authentication Ticket Type - SAP Logon Ticket
Logon Method - SAPLOGONTICKET
User Mapping Fields -
User Mapping Type - admin, user
In the alias editor, I defined the default alias as SAP_DEV
Result, when I go to the identity management to assign the refernce system (the default alias - SAP_DEV), I see it there.
What might be my issue? Does it mean I can't assign SAP reference if I am using UIDPW as logon method?
Please help me.

Hi Mahesh,
Thanks for the feedback. I am relatively new to EP...so please I won't mind if you can guide me on how to go about this.
This is what I did...
I chose System Administration > Permissions
In the PCD, I located my system with the alias, SAP_PRD
It opened up the permission assignment area.
Now I have these permissions set
Administrator - Full Control
Administrators - Full control
com.sap.caf.eu.gp.roles.superuser - Full control
Everyone (built in group) - Full control
Everyone (Everyone role)- Full control
super_admin_role - Owner
For all the above End User box is checked.
I can't find anyone end user group .
Once I pick UIDPW, the alias disapperars from the reference system list.
Please help.

No User Mapping Defined for the system

Hi,
I am trying to create the transcation iView ,here in this i want to run the BW transcation..
For this i have created the transaction iView with the transaction code in that iview properties i have given the system alias which i have created for the BW system..
The system which i have created for this is SAP R/3 dedicated...
when i try to see the preview for this transaction iview it is giving the Error"No user Mapping defined in the system...
i have done the user mapping also...
Plz can any one help me in this..
useful solution will be rewarded...
Thanks
Shashank
Message was edited by: shashank moharana

Hi Shashank
the follwoing is total soln for connect EP AND BW and for ITS as well as SSO
Creating BW system in Portal
From the portal top-level navigation, choose System Administration -> System Configuration -> System Landscape
Navigate to Portal Content -> Your SAP Ssytem Folder i.e SAP BW
Right-click on the SAP BW folder, then choose New -> System
Select SAP system using dedicated application server
from System Template
Make the following entries for the BW system you want to connect to the Enterprise Portal
System Name -
SAP_BW
System ID -
Any ting u want like SAP_BW or SID of BW
System ID Prefix -
com.mycompany
Master Language -
English
Description -
NEXT -> Summary, review the options you selected for the new page.To make changes, choose Back to return to the appropriate screen. Then choose Next till you reach the Summary page, review, and choose Finish
Choose Open the object for editing and choose OK
The Property Editor iView will open
Select Connector in the Property Category dropdown
Enter the fields below according to your SAP system
Application Host -
IP Address of BW system or Host name ( FQDN required for SSO )
SAP Client --- BW system client
SAP System ID -
SID of BW
Server Port -
3200 default for system number 00
SAP System Number -
00 or ur instance number
System Type -
SAP_BW
NOW,
Select User Management from the Property Category dropdown list
Enter the fields below
Logon Method -
 UIDPW
User Mapping Type --- Admin,user
Note -: IF u want to use SSO for BW system first selct above and test it with BW system if it's ok than change to following
Logon Method -
 SAPLOGONTICKET
User Mapping Type --- Admin,user
choose SAVE.
Select System Aliases in the Edit dropdown list. This opens the System Alias Editor
In Alias, enter SAP_BW. Choose the Add button
Choose Save to save your changes and close the page
Connect With ITS
For BW
In Property Catalog, use the dropdown to select ITS.
Set your SAP system properties according to Following
ITS Description -
Description
ITS Host Name -
Host name : Port for BW system
If u want to use SSO use FQDN instead of host name
ITS Path -
/scripts/wgate
ITS Protocol -
http
Save your settings.
u can check its for BW by following
Find a port for BW using IIS manager
Administrator tools -> Internet Service Manager - >
extend the HOST
Find the site created for BW system same like SID of BW system -> right click -> Properties
TCP Port -- this is used for ur BW system
in IE http://host_for_its:Port_for_bw/scripts/wgate/webgui/!
WAS for BW System
Select Web Application Server (WAS) in the Property Category dropdown list
WAS Description -
BW WAS
WAS Host Name -
Host name : Port for BW system
use FQDN for SSO
WAS Path -
/SAP/BW/Bex
WAS Protocol -
http
Save ur entry.
User Management For BW and EP
Befor u start if u don't use SAP Secu lib during installation
change the following
system Administration -> System configuration -> Um configuration -> Direct editing
find out follwoing
ume.usermapping.unsecure=False
change to
ume.usermapping.unsecure=TRUE
Save and restart portal server
ther are so many option available for DATA source u have required doc for using that
if u have any query for that msg me back
Mapping Users in the Portal
if u want to use UIDPW than user must be map to BW system
go by following
User Administration -> User Mapping
select the user u want to map by serch or entering a name
Choose the Alias for your backend system, for example SAP_BW
Enter the user id and password for BW user
save ur changes.
SSO configuration
make sure ur Portal ITS and BW WAS system belong to Same
domain.
i.e
portal.mycompany.com
its.mycompany.com
bw.mycompany.com
if not, u can do by creating a alias into host file for corresponding system
for SSO follwoing parameter must be set in profile parameter using RZ10 in BW system
login/accept_sso2_ticket -
1
login/create_sso2_ticket -
1
login/ticket_expiration_time --- desired value default 60
now download the portal certificate form follwoing
System administration -> System configuration -> Keystore
Administration
donload verify.der file save it it's like verify.der.zip
extract it than u can get verify.der
now in BW system using trans. STRUSTSSO2
in the certificate section choose import certificate
choose the file tab enter the path of the portal's verify.der file
set the file format to DER coded
in the trust manager choose ADD to PSE and Choose
ADD to ACL
in the dialog box enter the portal system's id (SID) and client
by default portla system ID is the common name (CN) and client is 000
save ur entry and restart the BW server
this are the basci configuration if u have any query related to it msg me back
regards,
kaushal

User Mapping not fully Available Error

Hi
while connecting from EP to Sap R/3
created folder in System Administration and System object as Dedicated
system name: sapsystem - next - finish
selected propety category :Connector
AppHost : 101.110.110.105
Remote Host : 3
SAP Client : 800
SAP SYstem name : global
SAP SYstem ID : 00
SAP Server Port : 3200
System TYpe : SAP_R3
SAVE
Property Category : usermanagement
logon method - UIDPW
user mapping type - admin,user
SAVE
System alias as (sys1)
User Administration - UserMapping- search
Administrator in Users - start - edit-
System alias - sys1
user - sapuser i.e( R/3 server)
password - xyzabc
SAVE
then raising error Portal Runtime error
User Mapping not fully Available
with Exception id
Regards
Rakesh

Hi,
First you must import sap crptographic toolkit from help.sap.com, following link: http://help.sap.com/saphelp_nw2004s/helpdata/en/04/d246215f1d4f588d1d9c49391acb01/frameset.htm
Here be careful to follow all the steps, have a look at the link and the subt topic deploying crptographic toolkit.
Onec you have done that, restart the portal and related services.
Now it is possible that you might face other new probles or exceptions.
In that case you might need to update your jce files etc.
Please refer to the sap note: 796540
in that case

Error while creating the user mapping

hi friends i was gettig this error while editing the logon data in user mapping.
An exception occurred while processing a request for :
iView : pcd:portal_content/administrator/super_admin/super_admin_role/com.sap.portal.user_administration/com.sap.portal.user_mapping/com.sap.portal.userMappingAdmin/com.sap.portal.userMappingAdmin
Component Name : com.sap.portal.usermanagement.admin.UserMappingAdmin
User Mapping not fully available..
Exception id: 12:54_19/02/07_0002_9709050
See the details for the exception ID in the log file

Hi Rajesh,
Navigate to User Administration---->User Mapping
Under Search, Search for your user id in users.
You will get ID, Name with Edit Link and by the side "System" Drop Down Box which contains the name of the system Aliases that u created.
Click on Edit Link, It will ask for user and password. Give the user and password for R/3 System and clicked save. After this you will get an info like, Logon Data Saved.
******Hope this helps you. Reward Points if you find this helpful.
Regards,
Eben. J

Users mapping between EP and ABAP system

Hello
I'd like to ask for some guidance in my quest
Current situation looks like this:
I've configured UME in AS Java to work with LDAP as read only data source. Then I've configured SPNego to run SSO - It works, users from MS AD can log into portal.
Now I have application in WD which authorizes via EP/AD - works fine.
And next step is users mapping between AD and ABAP backend (serving some BAPI's for WD app)
I've found a bunch of help pages starting from
http://help.sap.com/saphelp_nwce711/helpdata/en/0b/d82c4142aef623e10000000a155106/frameset.htm
But somehow it's quite complicated to achieve this mapping. I've tried to set RFC destinations logon type to user mapping but without succes.
Can anyone point me to some more clear example or give path to configure this scenario? Is there a way of configuring this with NWA or some XML file editing is required?
Any help will be appreciated.
BTW: whole environment is in version 7.11
Best regards
Maciej

There is no equivalent to SPNEGO on the ABAP side.
If your goal is to propagate the user, then possible options are:
-> Wait for SAML 2.0 or invest now in a SAML 1.0 provider.
-> Use the same kerberos ticket for the EP as what your ABAP system will accept: route = SNC and 3rd party libraries.
-> Issue SAP logon tickets for the ABAP system from the EP, and use these in your WDA.
Another option is to expose the service with saved logon data in the ICF. If the service is just a wrapper for the BAPI, then you can also consider using trusted RFC between the service and the backend, but this might not be acceptable for your service.
I have only done experimental stuff with this and some of the above is not released yet. Also consider the consequences, even if it "does work"...
Cheers,
Julius

User mapping settings

Hello All,
If Personalisation features has been configured in such a way that a user can set his own password, and that too user id and password required to a 3rd party system.
Like a user in a portal wants to login to a SAP R3 system. And he should also be in a position to give his logon credentials with a 3rd party interference.
Thanks in advance,
PKS.

Hi Sachin,
sorry, but I'm not sure if I understood your question. At least, it doesn't seem to be a question at all (grammatically).
But let me guess:
- You want to configure your portal in a way, that users can set their password by themselves
- You also want to connect to a third party system (let me guess: R/3) via portal
- You ask yourself if these two things interfere with each other.
Here's the answer: The logon to portal and the logon to R/3 are completely different things. You may configure SSO between portal and R/3 using 'SAP Logon Ticket' or 'User Mapping'. The logon mechanism to R/3 is not 'disturbed', even if the user changes his portal password.
Hope this matches your issue. If not please come back with some better english.
Carsten

How to defne user mapping for a Webservice method to acheive single sign on

I all,
I have created a Web service System using a url (containing full path of my wsdl )
Now this particular wsdl(my webservice) has an authenticate method , which takes username and password.
wanted to know is there any way that i can do user mapping for it .
i.e when i create an ivew for this web service system using authenticate method , it should pick up the username and password from the user mapping. presently the ivew itself asks for username and password ?
else can anyone tellme is there a way to do user mapping for my web service system that i have created using a wsdl url. presently it works with any junk username password, i mean the connection always succeds , may be because accessing a wsdl dosent requires any user name and password.
thanks

I all,
I have created a Web service System using a url (containing full path of my wsdl )
Now this particular wsdl(my webservice) has an authenticate method , which takes username and password.
wanted to know is there any way that i can do user mapping for it .
i.e when i create an ivew for this web service system using authenticate method , it should pick up the username and password from the user mapping. presently the ivew itself asks for username and password ?
else can anyone tellme is there a way to do user mapping for my web service system that i have created using a wsdl url. presently it works with any junk username password, i mean the connection always succeds , may be because accessing a wsdl dosent requires any user name and password.
thanks

User Mapping: Could not save logon data

Hi
I have installed EP6 NW04 SP9 on an AIX system with DB2 database and I'm trying to assign mapping data (user & password) to users through User Administration -> User Mapping option.
When I try to save it, the portal shows the message: Could not save logon data.
During the installation I imported the Cryptography toolkit with strong encription so the property ume.usermapping.unsecure is set to false.
Would it be possible somebody to help me please.
Thanks

Hi,
I have the same problem and the parameter 'ume.usermapping.unsecure' is TRUE and encryption is weak. So, in UME configuration, the portal is integrated with ADS using ADS Flat + Database.
The version portal is EP6 SP 11!
Help us, please!
Thanks

User Mapping to R/3 - admin.pwdprotection=false but still pwd field appears

 
Hello All, 
I am doing SSO using user mapping to R/3 system from Portal as the ids are different for Portal and R/3. 
I can access a transaction iview from R/3 successfully using user mapping(in SSO) but the problem is everytime a user changes his R/3 password, the mapped password is to be changed in Portal.Otherwise, unable to access transaction iview. 
1) I have changed the property ume.usermapping.admin.pwdprotection=false in configtool but still in User Admin > User mapping for system access , the password field is populated and while accessing the R/3, the password is being verified. I have seen in another system where the password field is not being asked after modifying the property to false, only id field is present. From the end user, under Personalize > User Profile > User Mapping for system, no systems are present as expected for mapping. Logon method in system is uidpw and mapping type is "Admin". 
Versions - Portal is NW7.0 SP18 and ECC is .0 EhP3. 
anybody faced the same problem? Is there a note to fix it? 
2)Also, in the User Admin > User mapping for system access , in the dropdown I can see the system aliases I have created in systems but not in System admin> sys config > Ume config > under User Mapping , I do not find any reference system. 
After first restart it was not there, after some time it has come, later it was coming as configured but invalid beside the system in braces in dropdown like abc(configured but invalid). Once I unselected, now it is no more available in dropdown. 
3) I have used diagtool to identify the problem. In the ticket, how do I see the mapped user? 
I am seeing only the following details.From the log - 
The created ticket is: 
[ [Ticket [initialized] 
Ticket Version = 0 
Ticket Codepage = (Encoding=1100) 
User = 121444 
Issuing System ID = EPD ( Portal name) 
Issuing System Client = 000 
Creation Time = 200905150649 
Valid Time = 8 h 0 min 
Signature (length=261 bytes) 
InfoUnit id=32, name=portal_user, content=portal:121444, length=16 
InfoUnit id=136, name=authscheme, content=basicauthentication, length=19 
InfoUnit id=1, length=9 
InfoUnit id=2, length=3 
InfoUnit id=3, length=3 
InfoUnit id=4, length=12 
InfoUnit id=5, length=4 
InfoUnit id=10, length=9 
]. 
Authentication stack: [ticket]. 
 
Does this have an entry for mapped user of target R/3 system also? 
If I am not finding the userid/pwd in ticket, how is SSO working? based on user mapping only? 
Thanks, 
Isvarya 

Thanks Anja for the quick response.
My primary objective is to use SSO with logon tickets to backend which is independent of user passwords.
regarding 1)
From the link -
http://help.sap.com/saphelp_nw70/helpdata/EN/f8/3b514ca29011d5bdeb006094191908/frameset.htm
Features
● Either users or administrators can perform user mapping.
¡ Users must always enter a password to validate their mapped user ID.
This password is not stored, but is used to confirm that the user is entering a user ID with which he or she has access to the ABAP-based system.
○ Administrators can enter a password to validate their entries.
The UME property ume.usermapping.admin.pwdprotection defines whether or not the administrator must enter a password. By default the administrator must enter one.
is also in the same lines.
But as per the SAP library link, I do not find a reference system because of problem 2 in the initial post.
Also, I have a screenshot of user admin where the password field itself is not present. If you can share your email id, I will send the scrnshot without pwd and mine with password.
2)I have seen this note. But, none of the 3 cases mentioned are applicable to me..user mapping is working just fine..Only reference system is not populated.
3) Becuase of 1, I was expecting to see mapped id alone or mapped id along with system name in logon tickets.
Thanks for the response.

Need Help in User Mapping

Hi,
I have created some R/3 transactions and assigned to end user.
When i click on some Transaction name, it prompts me for username and password.
Can i personalise this by taking the username and password automatically.
Regards,
Raju

Hi,
From User administration -> Identity Management, select the user, group, or role that you want to map to a user (who is accessing the transaction iView). Click on Modify button below to edit details. Go to tab User Mapping for System Access . Select the R/3 system from dropdown and enter R/3 username and password to which this portal user or group is to be mapped to.
Open system properties and go to User management. Give the following values for the properties.
User Mapping Type :admin, user
Logon Method : UIDPW
For more details, check these
http://help.sap.com/saphelp_nw70/helpdata/EN/b6/8b9aea8d7c11d5bdd8006094191908/frameset.htm
http://help.sap.com/saphelp_nw70/helpdata/EN/a4/76bd3b57743b09e10000000a11402f/frameset.htm
Link mentioned by John is this
https://wiki.sdn.sap.com/wiki/display/EP/HowtoConnecttoSAPR3SystemthroughEnterprisePortal7.0Usingan+iView.
Regards,
Harini S

Different ways to do User Mapping

Hello all,
Could some one tell me about the ways in which we could map the user id to SAP r3 id. We already have a reference system which will do the user mapping.
Another way is to have the LDAP save the Mapped user id along with the authentication data.
Wanted to know if there are any other ways to do such a user mapping.
Thanks ,
Meghna

Hi,
User mapping is used for Single Sign-On (SSO) to back-end systems. User mapping maps a portal user ID to the user ID of the back-end system.
Systems are represented by their default alias in various interfaces, such as the User Mapping dialog that displays during personalization. To make a system available for user mapping, you must:
● In the System Aliases Editor, define a default alias for each system that you create. For information about creating system aliases and default system aliases,
● In the System Property Editor, set the User Mapping Type property to either:
--> User: Only the end user can set user mapping
--> Admin: Only the administrator can set user mapping
-->Admin/User: Both the end user and the administrator can set user mapping
User mapping supports the following authentication methods:
● SSO using user ID and password
This method always requires user mapping. The portal ID is mapped to the user ID and password of the back-end system.
● SSO using logon tickets to ABAP-based systems
This method only requires user mapping if users have different user IDs in the SAP NetWeaver Portal and ABAP-based systems. Passwords are not mapped.
To access more than one ABAP back-end system, you can define a reference system. As long as all the ABAP back-end systems use the same user ID, the user can access all the systems by mapping their portal user ID to the user ID on the reference system.
Go through these helpful links for Setting User Mapping with Backend:-
http://help.sap.com/erp2005ehp_03/helpdata/EN/f8/3b514ca29011d5bdeb006094191908/frameset.htm_
http://help.sap.com/erp2005ehp_03/helpdata/EN/0d/fd76a0c4e0834ba1a17698d0b5553d/frameset.htm_
Hope these helps,
Reward points if helpful
Regards,
Shailesh Nagar

Logon methods in user mapping

Similar Messages

Maybe you are looking for