Manual login to Non Default DB with SSO enabled

Hi,
I logged the following through SAP Support, but was advised that Single Sign-On was functionining as designed. The issue is that the non-default database does not have a manual login page, whereas the default database does. This is an issue for us, because we have two completely separate database, and cannot allow a User with a Windows AD account to login manually without disabling his Windows AD access altogether.
Refer to SAP Message detail below:
Please advise how we can login users manually to SSM when accessing
the "non default" SSM Database when they have Single Sign-On access.
We have 3 Users that generally will access the system using Single Sign-On, but will occasionally have to enter information using a generic
User ("Initiator").
We have a path that we can use for manual login to the default
Database, however this appears to only work for the Default Database:
http://ssmdev:50000/strategy/login/start.jsp
This will only work for the Default Database (set as pw database in
Java System Properties).
The following path to the non-default Database (EPM Database) results
in automatic login for the user:
http://ssmdev:50000/strategy/pilotworks/start.jsp?PilotWorksDB=EPM
Is there a path we can use to provide the manual login page for
the "Non Default Database"
Steps for Reconstruction
As above, login by the Users does not allow manual login to the Non
Default Database, EPM.

Hi Scott,
Sorry, I missunderstood your initial question and the documentation I referenced is not updated appropriately. You have to change the connection string to <server-name>.database.secure.windows.net when you enable the security/auditing features.
Documentation for this can be found
here
Thanks,
Jan

Similar Messages

Can no longer set non-default device with QT 7

In Quicktime 6, I could choose a specific device to play through. I use this feature to play iTunes through a second soundcard and out to my stereo. I leave my default device set to the system soundcard where I have just headphones hooked up. This way no system beeps or sounds come through the stereo.
Now with Quicktime 7, I can no longer do this. Can anyone suggest a workaround? Why on earth would Apple remove this feature that was working before?

Is there an answer to this dilemma yet? I run an htpc with multiple sound cards, and I definitely need to get this working. I hate to have to go back down to a previous version, if that is possible. Thanks.

Restore from non default location with rman

Hi,
How can I restore a couple of archive logs from a location which is not the default backuplocation to a directory which is not the original location?
So far I've come to this:
SET ARCHIVELOG DESTINATION TO 'D:\temp\';
RESTORE ARCHIVELOG FROM SEQUENCE 1 UNTIL SEQUENCE 100;
But how do I tell RMAN that the backup where it has to look is located?
Roeland

You should first catalog the archive logs so RMAN knows where they are. You can catalog them with:
RMAN> catalog start with 'D:\temp';

Can we use direct planning URL with SSO enabled in 11.1.2.2.300?

Hi,
Oracle is saying you have to use workspace to accesss planning app. We are able to go directly to planning in our current prod environment (11.1.2.0).
But where in 11.1.2.2, we can not use directl planning URL (https://www.ppbebi-dw.army.mil/HyperionPlanning/LogOn.jsp). When you click on this URL, it prompt me to select my login credentials. Once you select your login credentials, it opens planning login page again with my userid and asking password screen.
Oracle saying that they are not supporting using planning by direct URL.
Can you please let us know is there any workaround to use dirrect planning URL instead going thru workspace.
Can I attach screenshots to this thread? I don't know how to attach, please let me know if I can attach.
Thanks
Poorna

Hello,
OUD uses its own embedded database engine, based on Oracle Berkeley DB Java Edition (Oracle Berkeley DB)
It does not rely on any additional external DB.
Sylvain
Please mark this response as correct or helpful when appropriate to make it easier for others to find it

Orcladmin can no longer access Collaboration Suite pages with SSO enabled

I can no longer use the orcladmin account to access Collaboration Suite pages when SSO is enabled. I have the plug-ins listed in OID and have set the one property to exclude orcladmin (and other admin level accounts) from being authenticated using the external authentication connector with ADS. And yet despite that orcladmin still can't authenticate. I can see in the OC4J log that the authentication in IE is falling back to NTLM authentication but is still failing. What the heck am I missing?

Swipe between pages stopped working for me as well completely out of the blue. I haven't installed anything / updated anything lately, and it just stopped working about an hour ago.
My issue isn't with Mission Control, it's with my browsers:
In Safari, if I try to swipe to go back a page, it freezes the entire page. I can't scroll anywhere.
In Chrome, swiping to go back pages just doesn't work at all. But no freezing occurs

Running reports through the web with SSO enabled

Hey,
I am trying to run several reports through the web by calling a direct url, but for some reason every time I am prompted to sign into Portal because SSO is enabled. What can I do to avoid the sign in page and run the report directly?
Thanks

Hello,
Add authid=username/password in the URL where username/password is a valid account in the oid
http://www.oracle.com/webapps/online-help/reports/10.1.2/topics/htmlhelp_rwbuild_hs/rwrefex/cmdline/common/cla_authid.htm
Regards

SSO Enabling a custom application with OAM

Hi All !
Am a bit stuck on a problem and need some urgent help. Actually we are trying to launch some custom-built (J2EE/.NET) web applications from the Oracle Portal with SSO i.e. once the user logs into the portal he would not have to log-in again to the applications which would be launched from the portal home page.
We have successfully integrated the Oracle Portal with the OAM SSO, but facing some problems with SSO enabling the custom applications. Any help on what should be the ideal integration architecture and approach for SSO enabling the apps with minimum amount of modification of the application code.
The licenses are available for OID, OVD, OAM.
Thanks in advance. Any views/comments/links to useful material appreciated.
Cheers
Soumak

If your custom application uses its own database for Authentication, then you have to modify the login process for your application. i.e. you have to trust the OAM to have done the authentication and then create any custom cookie that your application might use in its landing page.
I am assuming that your custom application have some way of tracking if the user has logged in or not. You can protect the Custom application URL within OAM and once the user has logged in you can then generate your custom application cookie.
Even if you use OVD, you stil have to modify login process in your custom appliation to trust the third party to have done the authentication.
Thanks
Ram

How to find Parameter values of a non-default listener using LSNRCTL

Hi,
I have a non-default listener with name like "lsnr_abcd" in non-default port.
I am on 10.2.0.4 database version. If I want to find out parameter values (like displaymode,dynamic_registration,etc)
for a non-default listener, which command should I use?
I know that for default listener, we can do the following
1) Execute lsnctl
2) show dynamic_registration
What should I execute if I want to get this details for a listener "lsnr_abcd"
Thank You
Sarayu

After setting your current listener to non default listener like this
lsnrctl> SET CURRENT_LISTENER lsnr_abcd
You can execute the further commands without your listener name
lsnrctl>set DISPLAYMODE
Edited by: vreddy on Jul 19, 2012 6:53 AM
Edited by: vreddy on Jul 19, 2012 6:54 AM

Unable to view BI Publisher report with SSO configuration enabled

Hi All,
Can anybody let us know the configuration of the BI publisher with SSO enabled. We are unable to see any of the BI Publisher reports. without SSO configuration we have integration working perfectly fine with the OBIEE and Publisher.
We followed the configuration steps to integrate BI Publisher with Oracle SSO. The following are the steps:
1. deploy analytics.ear as a new application 'analyticsSOAP' in OAS
2. protect analyticsSOAP in mod_osso.conf file under OAS
3. change OBIEE Presentation services configuration to use analyticsSOAP/saw.dll
4. run credstore utility to encrypt password
5.restart xmlp server
6.restart http server
7.restart obiee server
8. restart obiee presentation service
Still we have issues when we try to accesses BI Publisher reports by clicking more Products -> BI Publisher or view reports directly on the OBIEE Dashboard
Thanks in advance.

configure one more virtual path which is unprotected from site minder. we had similar issue for Marketing and resolved by this virtual path.
ref:
http://vaandun-analytics.blogspot.com/2009/11/obi-publisher-with-empty-obi-catalog.html
Thanks
Sarathi

SSO enablement

Hi,
I have a BSP application. It is a non portal environment. I have set the login/accept_sso2_ticket and
login/create_sso2_ticket parameters to 1. However it still shows me the login screen and not automatically logging in by SSO.
Can anybody help me what else needs to be done ? Is there any other system setting that needs to be done. Who can be contacted in this regard ?
Ciao
Gansu

Gansu,
you said...
"I have a BSP application. It is a non portal environment. I have set the login/accept_sso2_ticket and
login/create_sso2_ticket parameters to 1. However it still shows me the login screen and not automatically logging in by SSO."
In the Portal, when we setup SSO to an SAP system we not only set the parameters in the profile as you described:
login/accept_sso2_ticket
login/create_sso2_ticket
but we also import the verify.der certificate from the Portal and make sure that a valid PSE certificate is maintained.
In the Portal environment SSO (with SAP Logon tickets) to SAP works by you first of being logged onto the Portal and authenticated and you having the same Username in the SAP system as you have in the portal.
You said you have a BSP application in a non-portal environment, this suggests to me that you will have to examine how the authentication works in your non-portal environment and see if there is a way of performing Usermapping of Username and Password by System to your WAS system to execute the BSP or if there is a way of exporting a trusted logontoken from your non-portal environment to the WAS environment.
SSL and x509 certificates is something else, but configuring SSL on your WAS is described in some very nice documents available on SAP Market Place.
It is an interesting topic for me because although we have the EP, the BSP's I am developing will be accessed by people logged into a different vendor's Portal environment - and I am sure at some stage the requirement is going to come my way to get the BSP's to open via the non-SAP Portal with SSO.
Milan.

EBusiness Suite User Management Provision - SSO Enabled

Hello,
I am having a hard time provisioning to ebusiness suite 12; it is SSO enabled with OID as the LDAP Repository.
I am able to
1.provision userid testuser1 to OID.
2.provision userid oimuser1 to ebusiness (I have not enabled SSO in the connector configuration at this point)
When I try to provision user oimuser1 to OID, it says a duplicate entry already exists.
Unabled to call fnd_ldap_wrapper.create_user due to the following reason:
ORA-20001: Unabled to call fnd_ldap_wrapper.create_user due to the following reason:
A user with the given username already exists. Please choose a different username.. (USER_NAME=OIMTEST2). (USER_NAME=OIMTEST2).
ORA-06512: at "APPS.APP_EXCEPTION", line 72
ORA-06512: at "APPS.FND_USER_PKG", line 1038
ORA-06512: at "APPS.FND_USER_PKG", line 1196
ORA-06512: at "APPS.FND_USER_PKG", line 1315
ORA-06512: at line 1
I also tried connector config with SSO Enabled parameters.
SSO Enabled - Yes
SSO IT Resource - OID IT Resource (resource name of OID)
SSO Identifier - orclGUID
SSO Login Attribute - uid
While provisioning the user to ebiz (sso enabled) - I provided the SSO Userid, same as idm user id, it gave me error it does not exist.
And if I leave the field blank- it gives me error stating Input field is blank.
Can someone please guide me through it?
Thanks & Regards,
KJJ1983

Issue is resolved.
Was some connector configuration issue.
Thanks,
KJJ

Need to be able to use both SSO and manual login to the WAS

Hi,
we are currently on NW7 SP20 (SPS18) but we are still using 3.x queries and web applications extensively. We have SSO enabled on all systems and that works fine. However, this does not give us the possibility to test for example roles by logging on as a test user. How can we keep SSO but also allow us to log on as a different user to the WAS when running queries or web templates.
Typical test scenario:
1) Open WAS3.x or Query Designer 3.x and log on as a test user
2) Close all browser windows
3) Execute web template or query in browser
4) At this point SSO takes over and logs the tester on as him/herself. What we would like here is to have the option of either logging on manually /by for example clicking a log on button) or using SSO (say by not clikcing the login button within 5 seconds or clikcing a SSO button). How can we get this to work?
Kind regards
Kenneth Eriksen

Actually, we want both...
Most of the time, SSO is desired, but when testing role changes etc we need to be able to log on with a test user.
The desired scenario:
When you try to run a web report/query and have not logged on, the system should offer you two options:
1) Manual log on
2) Single sign on
If you wait for a specified time (say 3 seconds) without selecting an option then SSO is used automatically (to avoid having to select SSO every time you need it).
If you click manual log on then you should be prompted for a username/password and be logged on as the specified user.
Can this be done at all?
Kind regards
/Kenneth

How to choose input language in system NetWeaver with SSO manually?

Dear All,
How to choose input language in system NetWeaver with SSO to the user manually? If a user is created only in one client.
Thank you.
Best Regards
Vitalii.

If your question is when he logins through Portal/Java side, how to change language
I have faced this kind of an issue in GRC, on the Java side when you create a user language setting rectangle box will be in
make sure to fill it in , another possibility if the configuration are done correctly,
you can browse for the language you need for the user to login from the "Loginpage" if the languages are supported
To make is simple:
Set that user to have a particular lanaguage in UME, or allow the user to have the language box browsable you will need both Basis and Portal teams help on this from the perspective of install(languages) and views
Regards

Apple tv 2 - root password has been changed to non default. I need to access apple tv 2. how do i get access with a forgotten password

apple tv 2 - root password has been changed to non default. I need to access apple tv 2. how do i get access with a forgotten password

Welcome to the Apple Community.
It depends on which password you are referring to, but generally speaking you can always restore the Apple TV.

Configuring IPIB with non-default partition key

Hello
I want to put IB HCA port into non-default partition to create separate network on my IB fabric. On IB switch (Voltaire ISR9096) I created network with non-default partition key 0x7ffe and add HCA port to this partition.
But this IB-VPPA was displayed as unconfigured on Solaris host
ib::3BA0001004181,ffff,ipib    IB-VPPA      connected    configured   ok
ib::3BA0001004182,fffe,ipib    IB-VPPA      connected    unconfigured unknown
ib::3BA0001004182,ffff,ipib    IB-VPPA      connected    configured   okConfiguration of new VPPA with cfgadm was unsuccessful:
# cfgadm -c configure ib::3BA0001004182,fffe,ipib
Configure the device: /devices/ib:fabric::3BA0001004182,fffe,ipib
This operation will suspend activity on the IB device
Continue (yes/no)? yes
cfgadm: Hardware specific failure: configure operation failed ap_id: /devices/ib:fabric::3BA0001004182,fffe,ipibI unconfigured VPPA with default partition key (0xffff) on HCA port 0x3BA0001004182 and issued cfgadm for VPPA with pkey 0xfffe again - the same effect.
I tried this on Solaris 10 8/07 and OpenSolaris b72 with the same result - no success ;)
Is it possible to configure VPPA with non-default pkey on Solaris ?
Is it possible to configure more than 1 IPIB VPPA on single HCA port ?
How to perform these configurations ?
Thanks in advance.
Regards,
Denis

hi
I was able to setup the listener to serve both databases using netmgr, thanks. Apparently I was trying to use the wrong tool for this previously.
Now i'm able to access the EM Database Control and it seems to be working fine though i get the following error message
Logged in As SYS
Error
java.lang.Exception: Number of responses does not match queries
Database Instance: devel.foo.bar
Now, i'd like to be able to use EM for administering two separate databases (running on the same host). Do i need to migrate the database control somehow to grid control? How do i do that?
What about security? I'd like to use SSL and limit connections to selected clients only.
regards,
aspa

Manual login to Non Default DB with SSO enabled

Similar Messages

Maybe you are looking for