Mapping Issue (Multiple to Single)

Hi,
We have an HR->XI->JMS scenario and the idoc to be managed contain all trips in the same Idoc HRTRPR01. However, we want to send only one trip per idoc.
My question is, how can I within XI, when receiving all trips, perform a selection of all idoc segment's record that belongs to a trip and send it on the same idoc structure, but only one trip per idoc.
Example:
IDOC RECEIVED:
Segment_A:
  trip_1 - header
  trip_2 - header
  trip_3 - header
Segment_B:
  trip_1 - line 1
  trip_1 - line 2
  trip_2 - line 1
  trip_3 - line 1
FINAL IDOC:
Message_01
   Segment_A:
     trip_1 - header
   Segment_B:
     trip_1 - line 1
     trip_1 - line 2
Message_02
   Segment_A:
     trip_2 - header
   Segment_B:
     trip_2 - line 1
I hope I've been clear enough.
Can you guys give me some tips how can I perform it?
Thanks in advance,
Luis

Hi Please see if this is of some use:
<b>Source Structure:</b>
......<IDOC> Occurance (1..1)
.........<Segment_A> Occurance (1..1)
............<TRIP> Occurance (1..unbounded)
...............<Header> Occurance (1..1)
.........<Segment_B> Occurance (1..1)
............<TRIP>Occurance (1..unbounded)
...............<Line>Occurance (1..unbounded)
<b>Target Structure</b>
......<IDOC> Occurance (1..1)
.........<Segment_A> Occurance (1..1)
............<Header> Occurance (1..1)
.........<Segment_B> Occurance (1..1)
............<Line>Occurance (1..unbounded)
<b>Mapping:</b>
<b>Note:</b>
  While doing mapping go to Message Tab chnage the Target Message occurance to (0..unbounded). This will give you extra Message and Messagea1 nodes in the Mapping(Design tab).
<b>Rules:</b>
<TRIP>(of Segment_A with context as IDOC) --><IDOC>
<Header>(NO CONTEXT CHANGE)--><Header>
<Line>(NO CONTEXT CHANGE)--><Line>
<b>Offline Test Data(Duirng mapping):</b>
<b>Input:</b>
<?xml version="1.0" encoding="UTF-8"?>
<Messages>
   <Message1>
      <IDOC>
         <Segment_A>
            <TRIP>
               <Header>trip1_H</Header>
            </TRIP>
            <TRIP>
               <Header>trip2_H</Header>
            </TRIP>
         </Segment_A>
         <Segment_B>
            <TRIP1>
               <Line>tirp1_L1</Line>
               <Line>tirp1_L2</Line>
            </TRIP1>
            <TRIP1>
               <Line>tirp2_L</Line>
            </TRIP1>
         </Segment_B>
      </IDOC>
   </Message1>
</Messages>
<b>Output:</b>
<?xml version="1.0" encoding="UTF-8"?>
<Messages>
   <Message1>
      <IDOC>
         <Segment_A>
            <Header>trip1_H</Header>
         </Segment_A>
         <Segment_B>
            <Line>tirp1_L1</Line>
            <Line>tirp1_L2</Line>
         </Segment_B>
      </IDOC>
      <IDOC>
         <Segment_A>
            <Header>trip2_H</Header>
         </Segment_A>
         <Segment_B>
            <Line>tirp2_L</Line>
         </Segment_B>
      </IDOC>
   </Message1>
</Messages>
<b>Example Realtime testdata:</b>
<?xml version="1.0" encoding="UTF-8"?>
      <IDOC>
         <Segment_A>
            <TRIP>
               <Header>trip1_H</Header>
            </TRIP>
            <TRIP>
               <Header>trip2_H</Header>
            </TRIP>
         </Segment_A>
         <Segment_B>
            <TRIP1>
               <Line>tirp1_L1</Line>
               <Line>tirp1_L2</Line>
            </TRIP1>
            <TRIP1>
               <Line>tirp2_L</Line>
            </TRIP1>
         </Segment_B>
      </IDOC>
<b>Note:</b>
During Interface Mapping in design tab you have to change the occurane of the target interface to (0..Unbounded)
During Interface Determination in Integration Directory, you have to choose Extended(radio button) if you are in SP 14. If you are less than sp14 you have to choose the BPM to collect the multiple messages coming out of Mapping and then send each message one after another using a Block(for-each).
Regards,
KNS Kumar.

Similar Messages

  • OSB Xquery mapping from multiple to single by separating its value(s).

    Hi,
    I have one requirement in OSB, can some one explain the implementation for this:
    I have one element which is of type unbound. I need to map this element to a single element and to append all the element values by separating each element value with a ';' before that I need to check whether this element(s) are present in the request then need to appened all these element values to a single element and at the end of this element need to append default values.
    Scenario:
    <student>
    <name>asd</name>
    <address>
    <street>street1</street>
    <street>street2</street>
    <street>street3</street>
    ||
    ||
    </address>
    to be mapped it to:
    <student>
    <field name="NAME">asd</field>
    <field name="ADDRESS">street1;street2;street3;default1;default2;default3</field>
    </student>
    Here need to check if street names are present in the request xml, if yes ned to assign it to ADDRESS as mentioned above whether street names present or not need to append the default values at the end to the ADDRESS field like
    <field name="ADDRESS">default1;default2;default3</field>
    Thanks in advance.

    Hi,
    Here's a query that should answer part of the question :
    <student>
      for $i in doc("doc.xml")/student/*
      return
       <field name="{upper-case(name($i))}">
        if ($i/*) then string-join($i/*, ";")
        else $i/text()
       </field>
    </student>It deals with all possible children of the student node. If a child has descendants, then their values are aggregated like you require, else just the child value is used.
    Additional question : where do the default values come from? Do we just have to "paste" the string "default1;default2;default3" as a whole?
    HTH.

  • Import Map file failes with single/Multiple Occurance

    Hi All,
    Using a file I mapped the source and target structures.. The source file has one multiple occurance node . so I used look up option in source table and mapped with target fields...saved the map..
    When I used the following XML file .. I used the same map created befoe... I see the Remote System fields are not failed to map to target structure.. How can I get rid of this issue....
    <Product>
    --<Name>Rajeev</Name>
    --<REMOTE_SYSTEM>
    <Z_MDM_REMOTE_SYSTEM>
           <Z_MDM_SYSTEM_NAME>Panaroma AW Customer ID</Z_MDM_SYSTEM_NAME>
         <Z_MDM_VALUE>600013</Z_MDM_VALUE>
         <Z_MDM_VALUE1>600011</Z_MDM_VALUE1>
         <Z_MDM_VALUE2>600012</Z_MDM_VALUE2>
    </Z_MDM_REMOTE_SYSTEM>
    --<REMOTE_SYSTEM>
    </Product>
    Using above I saved the map.. Its fine.. I am able to import data in to MDM..
    When the file has multiple values of remote system as shown below then field are unmapped... vice versa is also the same..
    <Product>
    --<Name>Rajeev</Name>
    --<REMOTE_SYSTEM>
    <Z_MDM_REMOTE_SYSTEM>
           <Z_MDM_SYSTEM_NAME>Panaroma AW Customer ID</Z_MDM_SYSTEM_NAME>
         <Z_MDM_VALUE>600013</Z_MDM_VALUE>
         <Z_MDM_VALUE1>600011</Z_MDM_VALUE1>
         <Z_MDM_VALUE2>600012</Z_MDM_VALUE2>
    </Z_MDM_REMOTE_SYSTEM>
    <Z_MDM_REMOTE_SYSTEM>
           <Z_MDM_SYSTEM_NAME>Panaroma AW Customer ID</Z_MDM_SYSTEM_NAME>
         <Z_MDM_VALUE>600013</Z_MDM_VALUE>
         <Z_MDM_VALUE1>600011</Z_MDM_VALUE1>
         <Z_MDM_VALUE2>600012</Z_MDM_VALUE2>
    </Z_MDM_REMOTE_SYSTEM>
    --<REMOTE_SYSTEM>
    </Product>
    Do I need to create a seperate map for multiple iteration and single occurance..OR missing some thing? Please advice..
    Thanks
    Rajeev

    HI Ravi,
    May be I took the wrong example..
    I am not talking about remote systems... I am talking about XML source file.. If the XML source file consist of single occurance of any qualifier table then those qualifier table fields are not mapping.. IF I used the base file as multiple occurance Qualifier table....
    In the same way if I use base file as single occurance of Qualifer table .. Qualifier Fields are not getting mapped if the source file is single occurance..
    Suppose :If I use the base file as this and save the map.. I am able to import files whcih are single occurance of EMAIL...
    Fields are not getting mapped if the EMAIL occurnace is multiple.....
    <Product>
    --<Name>Rajeev</Name>
    --<EMAIL>
    <Z_MDM_EMAIL>
    <ID>ABC_yahocom</ID>
    <TYPE>TEMP</TYPE>
    </Z_MDM_EMAIL>
    --</EMAIL>
    </Product>
    In the same way: If I use the following XMl as base and create a map and save it.. Able to import files which had email occurance multiple.. Unable to import data and the fields are not mapped ......
    <Product>
    --<Name>Rajeev</Name>
    --<EMAIL>
    <Z_MDM_EMAIL>
    <Z_MDM_EMAIL>
    <ID>ABC_yahocom</ID>
    <TYPE>TEMP</TYPE>
    </Z_MDM_EMAIL>
    <Z_MDM_EMAIL>
    <ID>CDE_yahocom</ID>
    <TYPE>TEMP</TYPE>
    </Z_MDM_EMAIL>
    --</EMAIL>
    </Product>
    Please advise.. Thanks Rajeev.

  • Mapping issue: from unbound node to two single fields

    Hello,
    I have a source message with a node that is 0... unbounded.
    The node contains a field named "component_name" with occurence  1..1.
    The target message contains only two single fields (component1, component2) and the task is to provide the first two occurences to these fields.
    node occ.1
       component <modul beta>      ->    component1
    node occ.2
       component <modul omega>      ->    component2
    We can expect to have any case like these:
    node is 0   -> no components provided
    node is 1  -> one component provided  (usual case) , so second field will be empty
    node is 2 -> two components provided
    node is > 2 -> need to pick the first two components to provide them to the target fields.
    Does anybody here have an idea how to solve this mapping issue?
    Your ideas are really welcome!
    Best regards
    Dirk

    Stefan's solution is very good, alternatively, if you are sure that you will always have at least two items you can do
    source -> copyValue[0]-> target
    source -> copyValue[1]-> target
    please note: if you don't have at least two items in your source the copyValue function will throw an exception

  • Integrated weblogic server Issue with Host name mapped to multiple IPs

    I am running very simple ADF application from Jdev 11g (11.1.1.3.0).
    Compilation was successful but weblogic server facing problem while starting.
    It is showing HostAName is mapped with Multiple IP Addresses.
    Please provide solution to fix the issue....
    log is,
    * To start WebLogic Server, use a username and *
    * password assigned to an admin-level user. For *
    * server administration, use the WebLogic Server *
    * console at http:\\hostname:port\console *
    starting weblogic with Java version:
    java version "1.6.0_18"
    Java(TM) SE Runtime Environment (build 1.6.0_18-b07)
    Java HotSpot(TM) Client VM (build 16.0-b13, mixed mode)
    Starting WLS with line:
    C:\Oracle\MIDDLE~1\JDK160~1\bin\java -client -Xms256m -Xmx512m -XX:CompileThreshold=8000 -XX:PermSize=128m -XX:MaxPermSize=512m -Dweblogic.Name=DefaultServer -Djava.security.policy=C:\Oracle\MIDDLE~1\WLSERV~1.3\server\lib\weblogic.policy -Djavax.net.ssl.trustStore=C:\Oracle\Middleware\wlserver_10.3\server\lib\DemoTrust.jks -Dweblogic.nodemanager.ServiceEnabled=true -Xverify:none -da -Dplatform.home=C:\Oracle\MIDDLE~1\WLSERV~1.3 -Dwls.home=C:\Oracle\MIDDLE~1\WLSERV~1.3\server -Dweblogic.home=C:\Oracle\MIDDLE~1\WLSERV~1.3\server -Djps.app.credential.overwrite.allowed=true -Ddomain.home=C:\Users\Raja\AppData\Roaming\JDEVEL~1\SYSTEM~1.60\DEFAUL~1 -Dcommon.components.home=C:\Oracle\MIDDLE~1\ORACLE~1 -Djrf.version=11.1.1 -Dorg.apache.commons.logging.Log=org.apache.commons.logging.impl.Jdk14Logger -Djrockit.optfile=C:\Oracle\MIDDLE~1\ORACLE~1\modules\oracle.jrf_11.1.1\jrocket_optfile.txt -Doracle.domain.config.dir=C:\Users\Raja\AppData\Roaming\JDEVEL~1\SYSTEM~1.60\DEFAUL~1\config\FMWCON~1 -Doracle.server.config.dir=C:\Users\Raja\AppData\Roaming\JDEVEL~1\SYSTEM~1.60\DEFAUL~1\config\FMWCON~1\servers\DefaultServer -Doracle.security.jps.config=C:\Users\Raja\AppData\Roaming\JDEVEL~1\SYSTEM~1.60\DEFAUL~1\config\fmwconfig\jps-config.xml -Djava.protocol.handler.pkgs=oracle.mds.net.protocol -Digf.arisidbeans.carmlloc=C:\Users\Raja\AppData\Roaming\JDEVEL~1\SYSTEM~1.60\DEFAUL~1\config\FMWCON~1\carml -Digf.arisidstack.home=C:\Users\Raja\AppData\Roaming\JDEVEL~1\SYSTEM~1.60\DEFAUL~1\config\FMWCON~1\arisidprovider -Dweblogic.alternateTypesDirectory=C:\Oracle\MIDDLE~1\ORACLE~1\modules\oracle.ossoiap_11.1.1,C:\Oracle\MIDDLE~1\ORACLE~1\modules\oracle.oamprovider_11.1.1 -Dweblogic.jdbc.remoteEnabled=false -Dwsm.repository.path=C:\Users\Raja\AppData\Roaming\JDEVEL~1\SYSTEM~1.60\DEFAUL~1\oracle\store\gmds -Dweblogic.management.discover=true -Dwlw.iterativeDev= -Dwlw.testConsole= -Dwlw.logErrorsToConsole= -Dweblogic.ext.dirs=C:\Oracle\MIDDLE~1\patch_wls1033\profiles\default\sysext_manifest_classpath;C:\Oracle\MIDDLE~1\patch_jdev1111\profiles\default\sysext_manifest_classpath weblogic.Server
    <Dec 23, 2010 11:49:42 AM EST> <Info> <WebLogicServer> <BEA-000377> <Starting WebLogic Server with Java HotSpot(TM) Client VM Version 16.0-b13 from Sun Microsystems Inc.>
    <Dec 23, 2010 11:49:44 AM EST> <Info> <Management> <BEA-141107> <Version: WebLogic Server 10.3.3.0 Fri Apr 9 00:05:28 PDT 2010 1321401 >
    <Dec 23, 2010 11:49:46 AM EST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING>
    <Dec 23, 2010 11:49:46 AM EST> <Info> <WorkManager> <BEA-002900> <Initializing self-tuning thread pool>
    <Dec 23, 2010 11:49:46 AM EST> <Notice> <LoggingService> <BEA-320400> <The log file C:\Users\Raja\AppData\Roaming\JDeveloper\system11.1.1.3.37.56.60\DefaultDomain\servers\DefaultServer\logs\DefaultServer.log will be rotated. Reopen the log file if tailing has stopped. This can happen on some platforms like Windows.>
    <Dec 23, 2010 11:49:46 AM EST> <Notice> <LoggingService> <BEA-320401> <The log file has been rotated to C:\Users\Raja\AppData\Roaming\JDeveloper\system11.1.1.3.37.56.60\DefaultDomain\servers\DefaultServer\logs\DefaultServer.log00001. Log messages will continue to be logged in C:\Users\Raja\AppData\Roaming\JDeveloper\system11.1.1.3.37.56.60\DefaultDomain\servers\DefaultServer\logs\DefaultServer.log.>
    <Dec 23, 2010 11:49:46 AM EST> <Notice> <Log Management> <BEA-170019> <The server log file C:\Users\Raja\AppData\Roaming\JDeveloper\system11.1.1.3.37.56.60\DefaultDomain\servers\DefaultServer\logs\DefaultServer.log is opened. All server side log events will be written to this file.>
    <Dec 23, 2010 11:49:57 AM EST> <Notice> <Security> <BEA-090082> <Security initializing using security realm myrealm.>
    <Dec 23, 2010 11:50:14 AM EST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STANDBY>
    <Dec 23, 2010 11:50:14 AM EST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING>
    <Dec 23, 2010 11:50:28 AM EST> <Notice> <LoggingService> <BEA-320400> <The log file C:\Users\Raja\AppData\Roaming\JDeveloper\system11.1.1.3.37.56.60\DefaultDomain\servers\DefaultServer\logs\DefaultDomain.log will be rotated. Reopen the log file if tailing has stopped. This can happen on some platforms like Windows.>
    <Dec 23, 2010 11:50:28 AM EST> <Notice> <LoggingService> <BEA-320401> <The log file has been rotated to C:\Users\Raja\AppData\Roaming\JDeveloper\system11.1.1.3.37.56.60\DefaultDomain\servers\DefaultServer\logs\DefaultDomain.log00001. Log messages will continue to be logged in C:\Users\Raja\AppData\Roaming\JDeveloper\system11.1.1.3.37.56.60\DefaultDomain\servers\DefaultServer\logs\DefaultDomain.log.>
    <Dec 23, 2010 11:50:28 AM EST> <Notice> <Log Management> <BEA-170027> <The Server has established connection with the Domain level Diagnostic Service successfully.>
    <Dec 23, 2010 11:50:31 AM EST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to ADMIN>
    <Dec 23, 2010 11:50:32 AM EST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RESUMING>
    <Dec 23, 2010 11:50:32 AM EST> <Notice> <Server> <BEA-002613> <Channel "Default[7]" is now listening on 0:0:0:0:0:0:0:1:7101 for protocols iiop, t3, ldap, snmp, http.>
    <Dec 23, 2010 11:50:32 AM EST> <Notice> <Server> <BEA-002613> <Channel "Default[4]" is now listening on fe80:0:0:0:114b:ab6a:23b1:b44c:7101 for protocols iiop, t3, ldap, snmp, http.>
    <Dec 23, 2010 11:50:32 AM EST> <Notice> <Server> <BEA-002613> <Channel "Default[6]" is now listening on 127.0.0.1:7101 for protocols iiop, t3, ldap, snmp, http.>
    <Dec 23, 2010 11:50:32 AM EST> <Notice> <Server> <BEA-002613> <Channel "Default[1]" is now listening on 192.168.10.103:7101 for protocols iiop, t3, ldap, snmp, http.>
    <Dec 23, 2010 11:50:32 AM EST> <Notice> <Server> <BEA-002613> <Channel "Default[3]" is now listening on fe80:0:0:0:c48:60a:9d0d:7cda:7101 for protocols iiop, t3, ldap, snmp, http.>
    <Dec 23, 2010 11:50:32 AM EST> <Notice> <Server> <BEA-002613> <Channel "Default[2]" is now listening on fe80:0:0:0:0:5efe:c0a8:a67:7101 for protocols iiop, t3, ldap, snmp, http.>
    <Dec 23, 2010 11:50:32 AM EST> <Notice> <Server> <BEA-002613> <Channel "Default[5]" is now listening on fe80:0:0:0:95ca:d058:6a51:53e8:7101 for protocols iiop, t3, ldap, snmp, http.>
    <Dec 23, 2010 11:50:32 AM EST> <Warning> <Server> <BEA-002611> <Hostname "Raja-PC", maps to multiple IP addresses: 192.168.10.103, fe80:0:0:0:114b:ab6a:23b1:b44c%12, fe80:0:0:0:c48:60a:9d0d:7cda%13, 2001:0:4137:9e76:c48:60a:9d0d:7cda>
    <Dec 23, 2010 11:50:32 AM EST> <Notice> <Server> <BEA-002613> <Channel "Default" is now listening on 2001:0:4137:9e76:c48:60a:9d0d:7cda:7101 for protocols iiop, t3, ldap, snmp, http.>
    <Dec 23, 2010 11:50:32 AM EST> <Notice> <WebLogicServer> <BEA-000331> <Started WebLogic Admin Server "DefaultServer" for domain "DefaultDomain" running in Development Mode>
    <Dec 23, 2010 11:50:32 AM EST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RUNNING>
    <Dec 23, 2010 11:50:32 AM EST> <Notice> <WebLogicServer> <BEA-000360> <Server started in RUNNING mode>
    <Logger><error> ServletContainerAdapter manager not initialized correctly.
    Edited by: user1158476 on Dec 23, 2010 3:05 PM

    Thanks for reply...
    If you look at the last line of log there is some error message:
    <Logger><error> ServletContainerAdapter manager not initialized correctly.
    after this no further logs and web page not open in Browser.

  • Multiple Goods Issue documents for single delivery?

    Hi
    I am getting multiple goods issue documents for single delivery.
    In a order there are 3 line items, and one delivery is created and 3 goods issue documents.
    What is the probable reasons for this.
    The requirement is for one order with n items there should be one delivery document and one goods issue document.
    Inputs requested.

    Since you havent put the issue in details, I have listed my guessses.
    This may be happening due to mainly these three reasons. Please answer them and get back to me.
    1) The three Good issue may be happeneing due to split delivery active for the item. If yes then correction should be in the Material master.
    2) the availability check scheduled is set in that way. If yes please configure the availability and transfer of requirement.
    3) Scheduling of the goods throught that particular shipping point. If yes then please conficgure the shipping tab in Logistic Execution.
    Please let me know if the problem persists and award points if solved.
    Thanks
    Adi

  • Mapping issue with context again

    I again need help with a mapping issue. I don’t know how to handle the contexts to get this working in the xi graphical mapping tool.  I have previously logged a question regarding this structure but the requirements have now changed. 
    I have a source document that has multiple delivery line items and for each delivery line item, there are multiple handling units. Each handling unit contains the line number of the delivery line item it belongs to. This structure has been simplified below.
    <b><u>Source Sample</u></b>
    <DOCUMENT>
    <DELIVERY_LINEITEM>
    <LINENUMBER>10</LINENUMBER>
    <MATERIAL>mat 1</MATERIAL>
    </DELIVERY_LINEITEM >
    <DELIVERY_LINEITEM >
    <LINENUMBER>20</LINENUMBER>
    <MATERIAL>mat 2</MATERIAL>
    </DELIVERY_LINEITEM >
    <HANDLING_UNITS>
    <HU_LABEL>123</HU_LABEL>
    <HU_ITEM>
    <LINENUMBER>10</LINENUMBER>
    </HU_ITEM>
    </HANDLING_UNITS>
    <HANDLING_UNITS>
    <HU_LABEL>456</HU_LABEL>
    <HU_ITEM>
    <LINENUMBER>10</LINENUMBER>
    </HU_ITEM>
    </HANDLING_UNITS>
    <HANDLING_UNITS>
    <HU_LABEL>789</HU_LABEL>
    <HU_ITEM>
    <LINENUMBER>20</LINENUMBER>
    </HU_ITEM>
    </HANDLING_UNITS>
    </DOCUMENT>
    <u><b>Source Structure</b></u>
    DOCUMENT 1..1
    DELIVERY_LINEITEM 1..unbounded
    LINENUMBER 1..1
    MATERIAL 1..1
    HANDLING_UNITS 1..unbounded
    HU_LABEL 1..1
    HU_ITEM 1..1
    LINENUMBER 1..1
    In the target structure, I need to output each handling unit along with the corresponding DELIVERY_LINEITEM material.  Target structure has been simplified below:
    <u><b>Target Sample</b></u>
    <DOCUMENT>
    <ROW>
    <PACKAGING>
    <HU_LABEL>123</HU_LABEL>
    </PACKAGING>
    <PACKAGING_ITEM>
    <LINENUMBER>10</LINENUMBER>
    <MATERIAL>mat 1</MATERIAL>
    </PACKAGING_ITEM>
    </ROW>
    <ROW>
    <PACKAGING>
    <HU_LABEL>456</HU_LABEL>
    </PACKAGING>
    <PACKAGING_ITEM>
    <LINENUMBER>10</LINENUMBER>
    <MATERIAL>mat 1</MATERIAL>
    </PACKAGING_ITEM>
    </ROW>
    <ROW>
    <PACKAGING>
    <HU_LABEL>789</HU_LABEL>
    </PACKAGING>
    <PACKAGING_ITEM>
    <LINENUMBER>20</LINENUMBER>
    <MATERIAL>mat 2</MATERIAL>
    </PACKAGING_ITEM>
    </ROW>
    </DOCUMENT>
    <u><b>Target Structure</b></u>
    DOCUMENT 1..1
    ROW 1..unbounded    
    PACKAGING 1...1
    HU_LABEL 1..1
    PACKAGING_ITEM 1..1
    LINENUMBER 1..1
    MATERIAL 1..1
    Note, 1 ROW in the target structure = 1 HANDLING_UNITS from the source structure.
    Can anyone help me to achieve this? I do not know how to map the relevant DELIVERY_LINEITEM\MATERIAL from the source structure to the target structure.

    JM,
    Please find the solution. Reply back if it helps or not
    http://www.flickr.com/photo_zoom.gne?id=1045178998&size=o
    http://www.flickr.com/photo_zoom.gne?id=1045179010&size=o
    http://www.flickr.com/photo_zoom.gne?id=1045179022&size=o
    Results :http://www.flickr.com/photo_zoom.gne?id=1045179134&size=o
    <b>Code used:</b>
    for(int j=0;j<Handling_Linenum.length;j++)
    for(int k=0;k<Delivery_Linenum.length;k++)
    if(Handling_Linenum[j].equals(Delivery_Linenum[k]))
    result.addValue(""Material[k]"");
    result.addContextChange();
    Best regards,
    raj.

  • Issue creating a single PDF from MS Word on Mac

    Using Trial Version of Acrobat XI for Mac.  I am having issue creating a single PDF from MS Word on Mac.  Acrobat is creating multiple files splitting up randomly.  Are there any settings to select for ending up with just one PDF fil

    Sabian,
    As I mentioned before, I have used the following methods, each resulting the same, split up PDF file.
    File>Save As - Selected PDF from under the Format dropdown menu.
    File>Print>PDF - used Save As PDF
    File>Print>PDF - used Save As Adobe PDF
    With this information, I think I have tried all that you have asked me to do.  Please let me know if I could reach out to a technical consultant or someone else who can help.  Thank you.

  • Mapping of multiple segments of  Idoc HRMD_A06 to flat file

    Hi Experts,
               I am doing an Idoc to file scenario. Idoc i am using is HRMD_A06, which is having around 38 segments, contains the hiring action details of multilpe employees (Infotypes 0000,0001,0002,0003,0302,1001).
              When i have send the idoc , I am getting the file in the destination path, but having only one line which is having the the details of first employee.
              As the segments are repeating my mapping is not proper. Can anyone please help me with some details for mapping Idoc to file, when the segments repeats in a single idoc.
             Please also give me the details regarding the destination message interface.

    Hi
    Please go through below link,
    /people/prateek.shah/blog/2005/06/08/introduction-to-idoc-xi-file-scenario-and-complete-walk-through-for-starters
    /people/prateek.shah/blog/2005/06/08/introduction-to-idoc-xi-file-scenario-and-complete-walk-through-for-starters
    Its very simple to do some changes in your existing mapping and some occurance changes.
    Verify that if your file message structure has 0..Unbounded Occurance.
    Use 0..Unbounded and map accordingly to target structure with 0...unbounded..
    and test with sample xml in message mapping with multiple idocs data and see whther u get multiple records in target
    Also if you need each sengment on new line with FCC then refer below links
    /people/arpit.seth/blog/2005/06/02/file-receiver-with-content-conversion
    Edited by: Swarup Sawant on Jan 24, 2008 10:09 AM
    Edited by: Swarup Sawant on Jan 24, 2008 10:09 AM

  • Best Practive - One mapping reading multiple source files

    I want to develop a solution for one single mapping reading multiple similar source files that are stored on different directories on my OWB server. I want to be able to determine on runtime of my mapping from what location to load the source file from.
    Example:
    Mapping: Load_test_data
    source file 1: c:\input\loc1\test.dat
    source file 1: c:\input\loc2\test.dat
    When I run the mapping I would like to use an input parameter specifying the location loc1 or loc2. I would also like to use this input parameter in my mapping to populate one column in my target table with the value of this input parameter. This design would make it possible to dynamically load source files from different directories and also being able to see after loading where the data came from.
    Questions:
    - Is there a way to create such a design
    - If not, what alternative would be appropriate.
    Thanks in advance for the feedback

    Thanks for the feedback. Unfortunately I do not use workflow together with my OWB.
    I now indeed specified the file name and file location in the configuration of my mapping. However I am not able to change then upon executing the mapping. Data file name and file location are empty and greyed out when I execute my mapping. It always takes the values I specified in the configuration of my mapping
    What I would like to do is specify the location upon runtime when I execute my mapping, but I don't know if this is possible. In addition I'd also want to use the data file location as an input parameter for one of the columns I populated in my target table.
    Then in the end I would be able to use one mapping and read multiple sources files from different locations and also be able to check in the end where the data was loaded from.
    Hope you can give me some more feedback on how to set this up in OWB.
    Many Thanks!
    data file name parameter to ma

  • Item master Item mapping with multiple vendors

    Hi Experts,
    I need your help, I have one item like 'TV' in item master and need to enter multiple prices make wise samsung,sony,lg like.
    How can I maintain this in SAP B1 2005B.
    One Item mapping with multiple vendors with price...
    Thanks,

    Dear Aarti,
    I would recommend to have multiple items for the different brands you are selling.
    For example, you can call the item code Samsung, Sony etc and all of these item can be added to an item group called TV.
    Then you can assign a price to the items in the price lists.
    Alternatevely, if you need to have one single item called TV and different prices according to the brand, create a number of price lists called Sony, Sumsung etc and then if you know which customers buy a particular brand you can connect the price list to the customer under
    Business partner master data - Payment Terms - Price list.
    Please, if these 2 options are not helpful let us know the exact scenario and business reason behind your request.
    Kind Regards,
    Marcella Rivi
    SAP Business One Forums Team

  • Context with counter mapping issue

    I need help with a mapping issue.
    I have a source document that has multiple line items which in turn contains multiple item texts.  This structure has been simplified below.
    Source Sample
    <DOCUMENT>
    ---<LINEITEM>
    <ITEMFIELD>itemfield</ITEMFIELD>
    <ITEMTEXTS>
    <TEXT>text 1</TEXT>
    </ITEMTEXTS>
    <ITEMTEXTS>
    <TEXT>text 2</TEXT>
    </ITEMTEXTS>
    ---</LINEITEM>
    </DOCUMENT>
    Source Structure
    DOCUMENT 1..1
    LINEITEM 0..unbounded
    ITEMFIELD  0..1
    ITEMTEXTS 0..unbounded
    In the target structure, I need to output each line item with a counter to represent the line item number.  Also, I need to output each item text with the line item number it corresponds to:
    Target Sample
    <DOCUMENT>
    ---<LINEITEM>
    <ITEMNUMBER>1</ITEMNUMBER>
    <ITEMFIELD>itemfield</ITEMFIELD>
    ---</LINEITEM>
    ---<ITEMTEXTS>
    <ITEMNUMBER>1</ITEMNUMBER>
    <TEXT>text 1</TEXT>
    ---</ITEMTEXTS>
    ---<ITEMTEXTS>
    <ITEMNUMBER>1</ITEMNUMBER>
    <TEXT>text 2</TEXT>
    ---</ITEMTEXTS>
    </DOCUMENT>
    Target Structure
    DOCUMENT 1..1
    LINEITEM 0..unbounded
    ITEMNUMBER 1...1
    ITEMFIELD 0..1
    ITEMTEXTS 0..unbounded
    ITEMNUMBER 1..1
    TEXT 1..1
    I do not know how to match the ITEMNUMBER in the ITEMTEXTS target structure with the corresponding LINEITEM target structure.  Can anyone help me with this?
    Regards,
    JM

    James,
    I've tried both 1.2 release and 2.0 (v20091121-r5847) but received the same result - empty Map.
    Moreover, for both versions the following string was absent in deployed XML file:
    +<direct-key-field table="PARAM_SESS" name="PARAM_NAME" xsi:type="column"/>+
    Therefore, on application initialization I have got an exception: org.eclipse.persistence.exceptions.DescriptorException with message This descriptor contains a mapping with a DirectMapMapping and no key field set.
    So I was forced to add the line manually.
    This seems buggy to me...
    Regards,
    Alexey

  • Localhost maps to multiple ips

    I am having an odd issue. This occurs when I launch the 10.2 Weblogoic application server on my local machine. The application server listens for http requests. During start up it issues a warning that <Hostname “localhost” maps to multiple IP addresses: 192.168.0.4, 127.0.0.1> . When I try to access the console that is running on this application server. I cannot access them using the protocol “http://localhost:7051/....” . I should be able to access these web pages via localhost. Localhost is mapped to 127.0.0.1 in the hosts file ( also the address ::1 is mapped to localhost).
    When I access the console on the application server using http://192.168.0.4:7051/. . . or http://127.0.0.1:7051/... the web pages come up ok. This is an annoying workaround since localhost should be the default.
    I am trying to find out how to “unmap” the mapping to the 192.168.0.4 address in hopes that this will enable me to use localhost again. As a point of interest when I ping localhost it resolves to my computer name “Roger-PC”. When I run net view \\localhost I get:
    C:\Users\Roger>net view \\localhost
    Shared resources at \\localhost
    Share name Type Used as Comment
    DropBox Disk
    Public Disk
    Users Disk
    WCProInbox Disk
    The command completed successfully.
    When I run netstat I get two IP/ports mapped
    Roger@Roger-PC ~
    $ netstat -an | grep 7051
    TCP 127.0.0.1:7051 0.0.0.0:0 LISTENING
    TCP 192.168.0.4:7051 0.0.0.0:0 LISTENING
    I am sure it is some Windows Vista setting. I have tried looking at the firewall and internet connects and Microsoft website but with no avail. Can you help with this.

    what is the listen address set for the admin server? If the server instance must be accessible as localhost, leave the listen address blank. If you have specified the ipaddress or DNS, then possibly localhost requests would fail.

  • Multiple and single sign on

    Hi Experts,
    Could you please give info on Multiple and single sign on directory settings ?
    Regards
    Sara

    hi sara,
    have a look on this also. u can get better idea on sign on's
    this is a very deep document.............
    reward me points if its usefull.................dont forget
    Single Sign-On in SharePoint Portal Server 2003
    This is a sample chapter from the Microsoft SharePoint Products and Technologies Resource Kit. You can obtain the complete resource kit (ISBN 0-7356-1881-X), which includes a companion CD-ROM, from Microsoft Press.
    Single sign-on is a new feature in Microsoft Office SharePoint Portal Server 2003 that provides storage and mapping of credentials such as account names and passwords so that the portal site–based applications can retrieve information from the third-party applications and back-end systems, for example, Enterprise Resource Planning (ERP) and Customer Relations Management (CRM) systems. The single sign-on functionality is implemented by the Microsoft Single Sign-On (SSOSrv) service. SSOSrv is a credential storage service that allows the saving and retrieval of credentials. The use of single sign-on functionality stops users from having to authenticate themselves more than once when the portal site–based applications need to obtain information from other business applications and systems.
    In a single sign-on environment, these back-end applications and systems are referred to as enterprise applications. To enable customers to interact with an enterprise application directly from the portal site, SharePoint Portal Server 2003 stores and maps assigned credentials within an enterprise application definition. By using application definitions, you can automate, and secure the sign-on process to the corresponding enterprise applications from a portal site–based application.
    The single sign-on functionality enables scenarios where multiple Web Parts access different enterprise applications, which each use a different type of authentication. Each Web Part can automatically sign on to its enterprise application without prompting the user to provide credentials each time. There are endless uses of single sign-on functionality within an enterprise environment. For example, let’s consider two different scenarios—a human resources intranet site and a business intelligence site, as follows:
    •     A standard human resources (HR) portal site or page might include several Web Parts that display employee information from a back-end employee management system. This employee data is stored in a dedicated HR database system, frequently based on SAP or PeopleSoft. These HR databases do not support Microsoft Windows IDs, might not run on Windows-based operating systems and, in fact, might include proprietary logon protocols. The Web Parts on the portal site should retrieve the individual employee data without prompting for a separate logon. In this example, the individual employee does not have a separate logon to the HR system, but uses a group account that provides generic read access to the database. In other words, the employee does not know the user name and password required to log on to the system he or she is accessing.
    •     An executive might use a portal site to provide a dynamic, aggregated view of relevant business information. This data is stored in two places: Siebel stores the customer relationship information, and SAP tracks accounts and payments. To see an integrated view, the portal must log on to and access both back-end systems. Prompting the user for additional passwords is an unacceptable user experience. In this example, the executive does not need to know the user names and the passwords required for logon to the back-end systems. In addition, multiple Web Parts are used to ensure this integration. By default, each Web Part separately authenticates the user to the appropriate back-end system.
    As these examples show, by using single sign-on you can centralize information from multiple back-end applications through a single portal that uses application definitions. In addition, SharePoint Portal Server 2003 provides a programming interface for developers to use and extend this feature.
    Single Sign-On Architecture
    For each enterprise application that SharePoint Portal Server connects to, there is a corresponding enterprise application definition configured by an administrator. This application definition is used by a Web Part to integrate with the enterprise application within a portal site. The application definition controls how credentials for a particular business application are stored and mapped. The code within the Web Part uses the application definition to retrieve credentials that are then used to integrate with an enterprise application. This process is transparent to the portal site users.
    There are two primary types of enterprise application definitions used with the SSOSrv service, as follows:
    Individual enterprise application definitions.
    •     In this scenario, individual users know and can manage their own credentials stored within the enterprise application definition.
    Group enterprise application definitions.
    •     In this scenario, the individual user does not know his or her credentials stored within the enterprise application definition, but is associated with a managed group account.
    The single sign-on administrator, rather than the individual user, chooses the account type when configuring the enterprise application definition.
    The SSOSrv service stores encrypted credentials in a Microsoft SQL Server database. When you set up the single sign-on on the job server, you specify two settings for the single sign-on database: the name of the computer running SQL Server where the credentials store will be located, and the name of the database that will become the credentials store for your Web farm. These settings are stored in the SharePoint Portal Server configuration database.
    All credentials in the credentials store are encrypted using the single sign-on encryption key. When you configure single sign-on for the first time, the encryption key is created automatically. You can regenerate the key if required and re-encrypt the credentials store; for example, you might have a policy to change the key after a certain amount of time.
    How Single Sign-On Works
    When individual enterprise definition is used, on the first access to the Web Part that integrates with the enterprise application, if a user’s credentials have not been stored in the single sign-on database, the user is redirected to the logon form that prompts the user for appropriate credentials for the enterprise application. The number, the order, and the names of the fields in the logon form are configured by the administrator within the application definition; the logon form is generated automatically based on these configuration settings. The developer needs to write the code within the Web Part to check whether the credentials exist in the database, and to redirect the user to the logon form if necessary. The user-supplied credentials are then stored in the credentials store and mapped to the Windows account that is this user’s account for SharePoint Portal Server. Then, the user is redirected back to the original Web Part. The code in the Web Part then submits the credentials from the credentials store to the application in the way that is relevant to this application, and retrieves the necessary information that is then presented to the user within the Web Part. This process is shown in Figure 26-1. The steps are as follows:
         1.     A user accesses the Web Part that integrates with the enterprise application for the first time. The Web Part code checks whether the user credentials for the required application are stored in the single sign-on database. If they are stored, the process continues from step 6 in this list.
         2.     If there are no credentials stored for this user for the required application, the user’s browser is redirected to the logon form for this application.
         3.     The user supplies credentials for the application.
         4.     The supplied credentials are mapped to the user’s Windows account and stored in the single sign-on database.
         5.     User is redirected to the original Web Part.
         6.     The Web Part retrieves the credentials from the single sign-on database.
         7.     The Web Part submits the credentials to the enterprise application and retrieves the necessary information.
         8.     The Web Part is displayed to the user.
    On subsequent access, when the user requests the Web Part, to get the necessary data from the enterprise application the credentials are retrieved from the single sign-on database. The process is transparent to the user. (See Figure 26-1.)
    Figure 26-1. Accessing an enterprise application using single sign-on
    When group enterprise definition is used, the account mapping is configured by the administrator. The administrator specifies the credentials for accessing the enterprise applications that are valid for all members of a Windows group. If the user who accesses the Web Part belongs to the mapped Windows group, the access credentials are already stored in the single sign-on credentials store. The code in the Web Part retrieves the credentials, submits them to the enterprise application, and retrieves the necessary information. The Web Part is then displayed to the requesting user. In this scenario, the whole process is transparent to the user. The user is not aware of any authentication information required for the enterprise application; it is only known to the administrator.
    Security Recommendations Regarding the Topology of the Server Farm
    When using the single sign-on service, you can help enhance security by distributing your resources in the server farm. Specifically, the configuration of the front-end Web server, the job server, and the computer storing the single sign-on database can affect security.
    Less secure configuration.
    •     Everything is deployed on one server. This configuration is less secure because the front-end Web server, the single sign-on database stored in SQL Server, and the encryption key are on the same computer. This configuration is not recommended.
    More secure configuration.
    •     Two-computer configuration where one computer is the front-end Web server. The second computer is the job server containing the single sign-on database stored in SQL Server and the encryption key.
    Recommended configuration for better security.
    •     Configuration of three or more computers in which the front-end Web server, the job server containing the encryption key, and the server containing the single sign-on database stored in SQL Server are different computers.
    If you are using single sign-on in a shared services scenario, the user credentials stored in the parent server farm are available to the administrators of all child server farms. It is recommended that you run applications using single sign-on on the parent portal site only and use an iFrame in the application for child portal sites. You should disable the single sign-on service on child server farms. We will discuss how to disable the SSOSrv service later in this chapter.
    Configuring Single Sign-On
    To configure single sign-on for the first time, you must complete the following tasks:
         1.     Determine and set up necessary Windows accounts.
         2.     Enable the single sign-on service on the job server.
         3.     Configure the single sign-on settings.
         4.     Create a new application definition.
         5.     Provide account information for the application definition.
         6.     Enable the single sign-on service on the front-end servers.
    Step 1: Set Up Single Sign-On Accounts
    The SSOSrv service uses the following four types of accounts:
    •     Configuration account for single sign-on
    •     Single sign-on administrator account
    •     Single sign-on service account
    •     Enterprise application manager account
    Before configuring single sign-on, you must determine and, where necessary, create and set up these accounts.
    Configuration Account for Single Sign-On
    Configuration Account for single sign-on is the Windows account that will be used to configure the SSO. When setting up single sign-on, you use this account to log on to the job server. This account must meet the following requirements:
    •     Be a member of the local Administrators group on the job server.
    •     Be a member of the local Administrators group on the computer running SQL Server that stores the single sign-on database.
    •     Be either the same as the single sign-on administrator account, or be a member of the group account that is the single sign-on administrator account. (The single sign-on administrator account is discussed in the next section.)
    Single Sign-On Administrator Account
    The single sign-on administrator account can be either the Windows Global group or the individual user account, and it will be used to set up and manage the single sign-on service. This account cannot be a local domain group account or a distribution list.
    Make sure that the following requirements are met for the single sign-on administrator account:
    •     The single sign-on service account must be this user or a member of this group.
    •     The configuration account for single sign-on must be this user or a member of this group.
    We will specify this account as the single sign-on administrator account in step 3, “Configure the Single Sign-On Settings on the Job Server.” After it has been configured, this user account or members of this group account will have full access to the single sign-on administration pages and will be able to make configuration and application definition changes.
    Single Sign-On Service Account
    The single sign-on service account is the user account that will run as the single sign-on service. Make sure the following requirements are met:
    •     The single sign-on service account must be the same as the single sign-on administrator account or a member of the group account that is the single sign-on administrator account.
    •     The single sign-on service account must be a member of the local group STS_WPG on all servers running SharePoint Portal Server 2003 in the server farm.
    To make the user a member of STS_WPG, do the following:
         1.     On the taskbar, click Start, point to Administrative Tools, and then click Computer Management.
         2.     In the console tree, under the System Tools node, expand the Local Users and Groups node.
         3.     Click Groups.
         4.     Double-click STS_WPG.
         5.     In the STS_WPG Properties dialog box, click Add.
         6.     Add the user.
    The single sign-on service account must be a member of the local group SPS_WPG on all servers running SharePoint Portal Server in the server farm.
    To make the user a member of SPS_WPG, do the following:
         1.     On the taskbar, click Start, point to Administrative Tools, and then click Computer Management.
         2.     In the console tree, under the System Tools node, expand the Local Users and Groups node.
         3.     Click Groups.
         4.     Double-click SPS_WPG.
         5.     In the SPS_WPG Properties dialog box, click Add.
         6.     Add the user.
    The single sign-on service account must be a member of the public database role on the SharePoint Portal Server configuration database.
       On a single server deployment, if the single sign-on service runs under an account that is a member of the local Administrators group, you do not need to ensure that the user has the public right on the configuration database. However, for security reasons it is recommended that you do not run the service under an account that is a member of the local Administrators group.
    To assign rights on the configuration database, do the following:
         1.     On the SQL Server computer, open SQL Server Enterprise Manager.
         2.     Expand the Microsoft SQL Servers node.
         3.     Expand the SQL Server Group node.
         4.     Expand the (local) (Windows NT) node.
         5.     Expand the Security node.
         6.     Click Logins, and then do one of the following:
    7.          •     If the logon name does not exist, right-click Logins, click New Login, and then in the Name box, type the account for the user in the format DOMAIN\user_name.
    8.          •     If the logon name already exists, right-click the logon name, and then click Properties.
         7.     Click the Database Access tab.
         8.     In the Specify which databases can be accessed by this login section, select the check box for the configuration database.
         9.     In the Database roles for database_name section, select the public check box.
         10.     Click OK.
         11.     Close SQL Server Enterprise Manager.
    The single sign-on service account must be a member of the Server Administrators server role on the SQL Server instance where the single sign-on database is located.
       On a single server deployment, if the single sign-on service runs under an account that is a member of the local Administrators group, you do not need to ensure that the user is a member of Server Administrators server role on the SQL Server instance where the single sign-on database is located. However, for security reasons, it is recommended that you do not run the service under an account that is a member of the local Administrators group.
    To make the user a member of the Server Administrator role
         1.     On the SQL Server computer, open SQL Server Enterprise Manager.
         2.     Expand the Microsoft SQL Servers node.
         3.     Expand the SQL Server Group node.
         4.     Expand the (local) (Windows NT) node.
         5.     Expand the Security node.
         6.     Click Logins, and then do one of the following:
    •          •     If the logon name does not exist, right-click Logins, click New Login, and then in the Name box, type the account for the user in the format DOMAIN\user_name.
    •          •     If the logon name already exists, right-click the logon name, and then click Properties.
         7.     Click the Server Roles tab.
         8.     Select the Server Administrators check box.
         9.     Click OK.
         10.     Close SQL Server Enterprise Manager.
    Enterprise Application Manager Account
    The enterprise application manager account can be the Windows Global group account, or individual user account, that will be used to set up and manage application definitions. This account cannot be a local domain group or a distribution list.
    You do not need to perform any configuration steps now; we will configure this account to become the enterprise application manager account in step 3, “Configure the Single Sign-On Settings on the Job Server.” However, it is useful to notice the rights that this account will have after it has been specified as the enterprise application manager account, as follows:
    •     This account or members of this group have rights to create, modify, or delete application definitions from the single sign-on administration pages.
    •     This account or members of this group do not have rights to configure single sign-on. Only members of the single sign-on administrator account can configure single sign-on.
    •     Rights that this user or members of this group have are automatically contained in the single sign-on administrator account.
    Step 2: Enable the Single Sign-On Service on the Job Server
    To enable the SSOSrv service, do the following on the job server:
         1.     On the taskbar, click Start, point to Administrative Tools, and then click Services.
         2.     On the Services management console, double-click Microsoft Single Sign-on Service.
         3.     Click the Logon tab.
         4.     Under Log on as, click This account.
         5.     In the This account box, type an account name that you determined as a single sign-on service account in the previous step.
         6.     In the Password and Confirm password boxes, type the password.
         7.     Click Apply.
         8.     Click the General tab.
         9.     In the Startup type list, click Automatic.
         10.     In the Service status section, if the service status does not display Started, click Start.
         11.     Click OK.
    Step 3: Configure the Single Sign-On Settings on the Job Server
    To configure the single sign-on settings, you must be logged on as the configuration account on the job server. As we discussed earlier in step 1, “Set Up Single Sign-On Accounts,” this account must be a member of the local Administrators group on the job server, and must also be a member of the group account that you specify as the single sign-on administrator account.
    You cannot configure single sign-on remotely. To configure single sign-on, go to the computer running as the job server, log on as the configuration account, and then do the following:
         1.     On the SharePoint Portal Server Central Administration for server_name page, in the Component Configuration section, click Manage settings for single sign-on.
    Alternatively, click Start, point to All Programs, point to SharePoint Portal Server, and then click SharePoint Portal Server Single Sign-On Administration.
         2.     On the Manage Settings for Single Sign-On for server_name page, in the Server Settings section, click Manage server settings.
         3.     On the Manage Server Settings for Single Sign-On page, in the Single Sign-On Settings section, in the Account name box, type the name of the single sign-on administrator account that you determined in step 1, “Set Up Single Sign-On Accounts.” The format of the account is DOMAIN\group_name or DOMAIN\user_name.
         4.     In the Enterprise Application Definition Settings section, in the Account name box, type the name of the enterprise application manager account that you determined in step 1, “Set Up Single Sign-On Accounts.” The format of the account is DOMAIN\group_name or DOMAIN\user_name.
         5.     In the Database Settings section, do the following:
    6.          1.     In the Server name box, type the name of the database server on which you want to store the settings and account information for single sign-on.
    2.          2.     In the Database name box, type the name of the single sign-on database.
    If the database does not exist, it is created.
         6.     In the Time Out Settings section, do the following:
    7.          1.     In the Ticket time out (in minutes) box, type the number of minutes to wait before allowing a ticket, or access token, to time out.
    2.          2.     In the Delete audit log records older than (in days) box, type the number of days to hold records in the audit log before deleting.
         7.     Click OK.
         8.     If a message box appears stating that you have reconfigured single sign-on, click OK.
       The audit log is overwritten after the number of days you specify. Because the log contains a record of any illicit operations or logon attempts, it is recommended that you maintain backup copies of the logs. The logs reside in the single sign-on database in the SSO_Audit table. This table is automatically backed up when you back up the database.
    Step 4: Create an Application Definition
    To create an application definition, you need to be logged on as a member of single sign-on administrator account or as an enterprise application definition manager account. To create an application definition, do the following:
         1.     On the SharePoint Portal Server Central Administration for server_name page, in the Component Configuration section, click Manage settings for single sign-on.
    Alternatively, click Start, point to All Programs, point to SharePoint Portal Server, and then click SharePoint Portal Server Single Sign-On Administration.
         2.     On the Manage Settings for Single Sign-On for server_name page, in the Enterprise Application Definition Settings section, click Manage settings for enterprise application definitions.
         3.     On the Manage Enterprise Application Definitions page, click New Item.
         4.     On the Create Enterprise Application Definition page, in the Application and Contact Information section, do the following:
    5.          1.     In the Display name box, type a display name for this application definition.
    When administrator changes the settings for the application definition at a later stage, the application definition is listed using its display name.
    The display name is what the user sees on the logon form when entering credentials on the first access.
       If you enter a long name with no spaces in it for the display name, the entire name might not be displayed.
    2.          2.     In the Application name box, type an application name for the application definition. The application name is used by developers.
       If you enter a long name with no spaces in it for the application definition name, the entire name might not be displayed.
    3.          3.     In the Contact e-mail address box, type an e-mail address for users to contact for this application.
         5.     In the Account Type section, do one of the following:
    6.          •     If you want all users to log on by using a single account, select Group.
    Users do not need to enter any credentials with this option.
    7.          •     If you want users to log on by using their own account information, select Individual.
    Each user will have to provide credentials when accessing the Web Part for the first time.
       If you specify a group account as the account type, so that all users log on by using a single account, ensure that you have the appropriate number of client licenses for the application that you are accessing.
         6.     In the Logon Account Information section, select one or more fields to map to the required logon information in the necessary order for this enterprise application. The number and the order of the fields are defined by the enterprise application logon requirements. For each field, do the following:
    7.          1.     Type a display name for each field as a reminder of the required information. For an individual user application definition, the display name is what the users see on the logon form when entering their credentials for the enterprise application. For a group application definition, the display name of the field is what the administrator sees when entering the mapped group account credentials for the enterprise application.
    2.          2.     If the field contains sensitive information, such as a password, click Yes for Mask so that the information is not displayed within this field when it is being filled in or viewed.
    For example, for access to Oracle, you might enter the following:
    Field 1 = Oracle user name
    Field 2 = Oracle user password (select Yes for the Mask option)
    Field 3 = Oracle database name
    If you need to access the SAP application, for SAP credentials you might enter the following:
    Field 1 = SAP user name
    Field 2 = SAP password (select Yes for the Mask option)
    Field 3 = SAP system number
    Field 4 = SAP client number
    Field 5 = language
         7.     Click OK.
    Step 5: Provide Account Information for an Application Definition
    After you have created the application definition, for group application definition you have to specify the logon account credentials. For individual application definitions, you can specify credentials for the users or, alternatively, the users may enter their credentials in the logon form on the first access.
    To specify the logon account information for the application definition, do the following:
         1.     On the SharePoint Portal Server Central Administration for server_name page, in the Component Configuration section, click Manage settings for single sign-on.
    Alternatively, click Start, point to All Programs, point to SharePoint Portal Server, and then click SharePoint Portal Server Single Sign-On Administration.
         2.     On the Manage Settings for Single Sign-On for server_name page, in the Enterprise Application Definition Settings section, click Manage account information for enterprise application definitions.
         3.     On the Manage Account Information for an Enterprise Application Definition page, in the Account Information section, do the following:
    4.          1.     In the Enterprise Application Definition list, select the name of the application definition. If you created the application definition to use an individual account, the User account name box is displayed on the page. If you created the application definition to use a group account, the Group account name box is displayed.
    2.          2.     In the User account name or Group account name box, type the account name that will be mapped to the application credentials.
    3.          3.     Click OK.
         4.     On the Provide application_definition_display_name Account Information page, in the Logon Information section, enter the credentials to be used for the logon to the enterprise application. The number, the order and the names of the fields displayed follow configuration in the Logon Account Information section of the application definition.
    Step 6: Enable the Single Sign-On Service on the Front-End Web Servers
    After you have configured the single sign-on settings on the job server, you need to enable the single sign-on service of the front-end Web servers. To enable the single sign-on service on each front-end Web server, follow the instructions given earlier in step 2, “Enable the Single Sign-On Service on the Job Server.”
    Managing Single Sign-On
    After you have configured the single sign-on for the first time, you are likely to need to perform administration tasks at a later stage, including the following:
    •     Creating and deleting the application definitions
    •     Managing account credentials mapped within the application definitions
    •     Regenerating, backing up, and restoring the encryption key
    •     Enabling auditing of the encryption key
    •     Disabling the SSOSrv service
    In this section, we will discuss the single sign-on administration tasks. If you need to change your single sign-on configuration, make sure you consider the following:
    •     The single sign-on configuration and encryption key management tasks cannot be done remotely. To configure single sign-on or manage the encryption key, go to the computer running as the job server and specify the settings locally.
    •     If you change the job server to another server, you must reconfigure single sign-on. After changing the job server, you must delete the entire registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ssosrv\Config on the old job server.
    •     If you reconfigure single sign-on and you want to change the account that you specified for managing the single sign-on service (the single sign-on administrator account), the user who reconfigures the single sign-on and the single sign-on service account must be a member of both the current single sign-on administrator account that manages the service and the new account that you want to specify.
    Editing an Application Definition
    You can edit the display name, the e-mail contact, and the logon fields for an enterprise application definition. You cannot edit the application definition name or change the account type.
    To edit an application definition, do the following:
         1.     On the SharePoint Portal Server Central Administration for server_name page, in the Component Configuration section, click Configure the Single Sign-on component and manage enterprise application definitions for portals.
    Alternatively, click Start, point to All Programs, point to SharePoint Portal Server, and then click SharePoint Portal Server Single Sign-On Administration.
         2.     On the Manage Settings for Single Sign-On for server_name page, in the Application Settings section, click Manage settings for enterprise application definitions.
         3.     On the Manage Enterprise Application Definitions page, rest the pointer on the display name for the application definition, and then click the arrow that appears.
         4.     On the menu that appears, click Edit.
         5.     On the Edit Enterprise Application Definition page, in the Application and Contact Information section, you can edit the display name and the e-mail contact.
         6.     In the Display Name box, type a display name for this application definition. The display name is what the user sees.
         7.     In the E-mail Contact box, type an e-mail address for users to contact for this application.
         8.     In the Account Information section, select one or more fields to map to the required logon information for this application definition.
         9.     Type a display name for each field as a reminder of the required information. The display names for the fields will appear on the logon page for the application.
         10.     To ensure that sensitive information, such as a password, is not displayed when viewing account information, click Yes for Mask?
         11.     Click OK.
    Deleting an Application Definition
    When you delete an application definition, it is removed from the single sign-on database. In addition, all credentials associated with the application definition are removed. To delete an application definition, do the following:
         1.     On the SharePoint Portal Server Central Administration for server_name page, in the Component Configuration section, click Configure the Single Sign-on component and manage enterprise application definitions for portals.
    Alternatively, click Start, point to All Programs, point to SharePoint Portal Server, and then click SharePoint Portal Server Single Sign-On Administration.
    2.          2.     On the Manage Settings for Single Sign-On for server_name page, in the Application Settings section, click Manage settings for enterprise application definitions.
    3.          3.     On the Manage Enterprise Application Definitions page, rest the pointer on the display name for the application definition, and then click the arrow that appears.
    4.          4.     On the menu that appears, click Delete.
    5.          5.     On the confirmation message box, click OK.
    Managing Account Information for an Application Definition
    You can update or delete individual account information for a single application definition, or you can remove an account from all application definitions.
    For group application definitions, you can update the account information, but you cannot remove the Windows account from a group application definition because there is a one-to-one correspondence between a group application definition and the account. If necessary, you can delete the group application definition.
    To manage account information for an application definition, do the following:
         1.     On the SharePoint Portal Server Central Administration for server_name page, in the Component Configuration section, click Manage settings for single sign-on.
    Alternatively, click Start, point to All Programs, point to SharePoint Portal Server, and then click SharePoint Portal Server Single Sign-On Administration.
         2.     On the Manage Settings for Single Sign-On for server_name page, in the Enterprise Application Definition Settings section, click Manage account information for enterprise application definitions.
         3.     On the Manage Account Information for an Enterprise Application Definition page, in the Account Information section, do the following:
    4.          1.     In the Enterprise Application Definition list, select the name of the application definition.
    2.          2.     If you created the application definition to use an individual account, the User account name box appears. If you created the application definition to use a group account, the Group account name box appears. In the User account name or Group account name box, type the account name to modify.
         4.     In the Enterprise Application Definition section, you can perform one of the three operations: update the account information for the application corresponding to this application definition, delete the stored credentials for this account for this application, and delete the stored credentials for this account from all application definitions.
       For individual application definitions, all three options are available. For group application definitions only the update option is available; both delete options are grayed out.
    To update the account information for this application, do the following:
         1.     Click Update account information.
         2.     Click OK.
         3.     On the Provide application_definition_display_name Account Information page, in the Logon Information section, enter the credentials to be used for the logon to the enterprise application. The number, the order, and the names of the fields displayed follow configuration in the Logon Account Information section of the application definition.
         4.     Click OK.
    To delete the stored credentials for this user account from this application definition, do the following:
    5.          1.     Click Delete stored credentials for this account from this enterprise application definition.
    2.          2.     Click OK.
    3.          3.     To delete the user credentials, click OK on the confirmation message box.
    To remove this user account credentials from all application definitions, do the following:
    4.          1.     Click Delete stored credentials for this account from all enterprise application definitions.
    2.          2.     Click OK.
    3.          3.     To delete the user credentials from all application definitions, click OK on the confirmation message box.
    Creating the Encryption Key
    The encryption key is used as part of the encryption process for credentials used with single sign-on. The key helps to decrypt encrypted credentials stored in the single sign-on database. The first time you configure single sign-on and enterprise application definitions on the Manage Server Settings for Single Sign-On page, the encryption key is created automatically. You can regenerate the key if the previous credentials are compromised or if you have a policy to change the key after a certain number of days.
    When you create an encryption key, you can choose to re-encrypt the existing credentials with the new key. When you re-encrypt the SSOSrv service credential store, events are logged in the Microsoft Windows Server 2003 application event log. Once re-encryption is initiated, you can monitor the application event log to verify that the credential store has been re-encrypted. Event ID 1032 is recorded in the application event log when re-encryption is started. Event ID 1033 is recorded in the application event log when re-encryption has ended. If there are any failures during re-encryption, an event is recorded in the log.
    If the job server is restarted or SSOSrv is stopped on the job server during the re-encryption process, you should look in the event log for errors. If the event log reports an error, you must restart the re-encryption process from the Manage Encryption Key page.
       If the re-encryption process is preempted in any way, it will have to be re-run. If the re-encryption process is preempted, it reverts back to its original state
    The re-encryption process is a long-running operation. It is recommended that you change or restore the encryption key during non-peak periods.
    During the re-encryption process, Write operations such as updating credentials and changing application definitions are not allowed. Read operations such as retrieving credentials continue to work as normal.
       To re-encrypt the existing credentials, the single sign-on service account must be a member of the Server Administrators server role on the SQL Server instance where the single sign-on database is located. For other requirements for single sign-on service account, refer to the section “Single Sign-On Service Account” earlier in this chapter.
    You cannot create the encryption key remotely. To re-generate the encryption key, go to the computer running as the job server, log on as the single sign-on administrator account, and do the following:
         1.     On the SharePoint Portal Server Central Administration for server_name page, in the Component Configuration section, click Manage settings for single sign-on.
    Alternatively, click Start, point to All Programs, point to SharePoint Portal Server, and then click SharePoint Portal Server Single Sign-On Administration.
         2.     On the Manage Settings for Single Sign-On for server_name page, in the Server Settings section, click Manage encryption key.
         3.     On the Manage Encryption Key page, in the Encryption Key Creation section, click Create Encryption Key.
         4.     On the Create Encryption Key page, to re-encrypt the credentials for the single sign-on database, select the Re-encrypt all credentials by using the new encryption key check box, and then click OK.
       If you do not re-encrypt the existing credentials with the new encryption key, users must retype their credentials for individual application definitions, and administrators for group application definitions must retype group credentials.
    Backing Up the Encryption Key
    After creating the encryption key, you should back it up. You must back up the key to a 3.5-inch floppy disk. You should lock up the backup disk for the encryption key in a safe place.
       Because the encryption key is the key that decrypts the encrypted credentials stored in the single sign-on database, the backup copy of the key should not be stored with the backup copy of the database. If a user obtains a copy of both the database and the key, the credentials stored in the database could be compromised.
    You cannot back up the encryption key remotely. To back up the encryption key, go to the computer running as the job server, log on as the single sign-on administrator account, and do the following:
         1.     On the SharePoint Portal Server Central Administration for server_name page, in the Component Configuration section, click Manage settings for single sign-on.
    Alternatively, click Start, point to All Programs, point to SharePoint Portal Server, and then click SharePoint Portal Server Single Sign-On Administration.
         2.     On the Manage Settings for Single Sign-On for server_name page, in the Server Settings section, click Manage encryption key.
         3.     Insert a 3.5-inch disk into a disk drive on the computer running as the job server.
         4.     On the Manage Encryption Key page, in the Encryption Key Backup section, in the Drive list, click the letter of the disk drive, and then click Back Up to back up the encryption key.
         5.     In the completion message box that appears, click OK.
         6.     Remove the 3.5-inch disk from the disk drive.
    Restoring the Encryption Key
    You cannot restore the encryption key remotely. To restore the encryption key, go to the computer running as the job server, log on as the single sign-on administrator account, and do the following:
         1.     On the SharePoint Portal Server Central Administration for Server server_name page, in the Component Configuration section, click Manage settings for single sign-on.
    Alternatively, click Start, point to All Programs, point to SharePoint Portal Server, and then click SharePoint Portal Server Single Sign-On Administration.
         2.     On the Manage Settings for Single Sign-On for Server server_name page, in the Server Settings section, click Manage encryption key.
         3.     Insert a 3.5-inch disk into a disk drive on the computer running as the job server.
         4.     On the Manage Encryption Key page, in the Encryption Key Restore section, in the Drive list, click the letter of the disk drive, and then click Restore to restore the encryption key.
         5.     Click OK.
    When the restore completes, the Manage Settings for Single Sign-On for Server server_name page appears.
         6.     Remove the 3.5-inch disk from the disk drive.
       Restoring the encryption key and re-encrypting the single sign-on credentials store with the restored key is a long-running process. It is recommended that you restore the encryption key during non-peak periods.
    Enabling Auditing for the Encryption Key
    You should enable auditing for the encryption key. Then, if the key is read or written to, there will be an audit trail in the security log in Microsoft Windows Server 2003 Event Viewer.
    To enable auditing for the encryption key, you need to modify the registry using regedit and then enable auditing using Group Policy Object Editor.
    To modify the registry, do the following:
    1.     On the taskbar, click Start, and then click Run.
    2.     Type regedit and then click OK.
    3.     In Registry Editor, navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ssosrv\Config.
    4.     Right-click Config, and then click Permissions.
    5.     In the Permissions for Config dialog box, click Advanced.
    6.     In the Advanced Security Settings for Config dialog box, click the Auditing tab, and then click Add.
    7.     In the Select User, Computer, or Group dialog box, in the Enter the object name to select box, type everyone.
    8.     Click OK.
    9.     In the Auditing Entry for Config dialog box, in the Failed column, select the Full Control check box, and then click OK.
    10.     Click OK, and then click OK again to close all dialog boxes.
    11.     Close Registry Editor.
    To enable auditing, do the following:
         1.     On the taskbar, click Start, and then click Run.
         2.     Type mmc and then click OK.
         3.     In the console, on the File menu, click Add/Remove Snap-in.
         4.     In the Add/Remove Snap-in dialog box, on the Standalone tab, click Add.
         5.     In the Add Standalone Snap-in dialog box, in the Available Standalone Snap-ins list, click Group Policy Object Editor, and then click Add.
         6.     In the Select Group Policy Object dialog box, ensure that Local Computer appears in the Group Policy Object box, and then click Finish.
         7.     In the Add Standalone Snap-in dialog box, click Close.
         8.     In the Add/Remove Snap-in dialog box, click OK.
         9.     Expand the following nodes:
    •     Local Computer Policy
    •     Computer Configuration
    •     Windows Settings
    •     Security Settings
    •     Local Policies
    •     Audit Policy
         10.     In the details pane, double-click Audit object access.
         11.     In the Audit object access Properties dialog box, select the Failure check box, and then click OK.
    You can verify that auditing is working by doing the following:
    12.          1.     Log off.
    2.          2.     Log on as a user who should not have access to the registry key.
    3.          3.     Try to read the registry key.
    4.          4.     Look in the security log in Windows Server 2003 Event Viewer for audit entries.
    Disabling the Single Sign-On Service
    To disable the single sign-on service on the server farm, you must disable it on each front-end Web server, on the job server, and on any server running the single sign-on service.
    If you want to delete all credentials associated with application definitions, you must delete each enterprise application definition.
    To disable the single sign-on service, do the following on each front-end Web server, job server, and any server running the single sign-on service:
         1.     On the taskbar, click Start, point to Administrative Tools, and then click Services.
         2.     On the Services management console, double-click Microsoft Single Sign-on Service.
         3.     On the General tab, in the Startup type list, click Manual.
         4.     In the Service status section, click Stop.
         5.     Click OK.
    Creating a Web Part That Uses Single Sign-On
    After you have configured the single sign-on and created the application definitions, you need to develop a Web Part that implements the single sign-on functionality and retrieves information from the corresponding back-end application programmatically.
    SharePoint Portal Server 2003 provides a programming interface for developers to use and extend the single sign-on feature. There are two namespaces provided solely for interaction with the single sign-on functionality, as well as one class in a more generic Microsoft.SharePoint.Portal namespace, as follows:
         •     The Microsoft.SharePoint.Portal.SingleSignOn namespace contains core classes that allow you to work with account credentials and application definitions in the single sign-on credentials store. These core classes and their functionality are listed in Table 26-1. The required assembly is Microsoft.SharePoint.Portal.SingleSignon, located in Microsoft.SharePoint.Portal.SingleSignon.dll.
         •     The Microsoft.SharePoint.Portal.SingleSignOn.Security namespace contains two classes that control the ability to access Single Sign-On resources programmatically from the code. These two classes and their functionality are listed in Table 26-2. The required assembly is Microsoft.SharePoint.Portal.SingleSignOn.Security, located in Microsoft.SharePoint.Portal.SingleSignOn.Security.dll.
         •     The SingleSignonLocator class in the Microsoft.SharePoint.Portal namespace allows you to locate a URL for the logon form for the SSOSrv service. It has the GetCredentialEntryUrl(strAppName, [port]) method that returns the URL for the logon form for a given application definition. The method takes two parameters: strAppName, which is a name of an application that is configured in the corresponding application definition, and the optional port number for SSL. If you do not specify the port number, and SSL is not enabled on the server, the port number will default to port 80 (that is, the port value will be omitted from the URL). If the second parameter is absent and SSL is enabled on the server, the port number is assumed to be the standard SSL port 443. However, if you require the URL returned to be formatted for SSL on a particular port, you need to specify it. For example, you would pass the specified port when the system cannot detect which SSL port to use, such as when multiple SSL port mappings exist. The required assembly for this class is Microsoft.SharePoint.Portal, located in Microsoft.SharePoint.Portal.dll.
    Table 26-1. Microsoft.SharePoint.Portal.SingleSignOn Namespace Core Classes
    Class     Description
    Application     Exposes functionality to add, get, and delete enterprise application definitions
    Credentials     Exposes functionality to manage user and group credentials and access tokens
    SSOReturnCodes     Contains all the return codes for SSOSrv service that the SingleSignonException class will throw
    SingleSignonException     Instantiates an exception from the SSOSrv ser vice with a specific error code
    Table 26-2. Microsoft.SharePoint.Portal.SingleSignOn Security Namespace Classes
    Class     Description
    SingleSignOnPermission      Allows security actions for SingleSignOnPer mission to be applied to code using declarative security.
    SingleSignOnPermissionAt tribute     Represents a custom permission that controls the ability to access Microsoft SharePoint Products and Technologies resources to manage user and group credentials and access tokens.
    For example, let’s look into a code in the Web Part that retrieves the account credentials for a back-end enterprise application from the single sign-on credentials database. The corresponding application definition is configured to use individual accounts. The code checks whether a requesting user’s credentials have already been stored in the single sign-on credential database. If not, the user is redirected to the Single Sign-On logon form to enter the required credentials for accessing the back-end application.
    The code should implement the following sequence:
         1.     Call the GetCredentials method of the Credentials class. Specify the application name for which the credentials need to be retrieved from the single sign-on database.
         2.     If the SSOSrv service cannot find credentials for the user for the enterprise application specified, the GetCredentials method throws a SingleSignonException. If the LastErrorCode property of the SingleSignonException is SSO_E_CREDS_NOT_FOUND, call the GetCredentialEntryUrl(String) method—or the GetCredentialEntryUrl(String, Int) method—of the SingleSignonLocator class to build the URL to the single sign-on logon form.
         3.     After the URL for the logon form has been retrieved, redirect the browser to this URL. The logon form is created by the SSOSrv service. It prompts the user to enter credentials for the enterprise application in a number of fields. The order, the number and the display names for these fields are configured within the application definition under Logon Account Information. For example, if the enterprise application uses user name and password for authentication, two fields will be present in the logon form. For SAP, you may need five fields. After the SSOSrv service saves the credentials, the form redirects control back to the original Web Part.
    The code in your Web Part will be similar to the following example that shows how to redirect the user to the logon form to save credentials for an enterprise application called SampleApp:
    protected override void RenderWebPart(HtmlTextWriter writer) //RenderWebPart
      string[] rgGetCredentialData = null;
      try
      //Try to get the credentials for this application.
      //Before running this code, make sure that an individual
      //application definition for application called "SampleApp"
      //has been added.
        Credentials.GetCredentials(1,"SampleAPP", ref rgGetCredentialData);
      catch (SingleSignonException ssoe)
      //This exception will be thrown if this user does not have
      //credentials for the "SampleApp" application.
        if(SSOReturnCodes.SSO_E_CREDS_NOT_FOUND == ssoe.LastErrorCode)
          //Send the user to the single sign-on logon form. 
          //The logon form will:
          //- Prompt the user for credentials for this application
          //- Save credentials for this user for this application
          //- Then redirect the user back to this Web Part
            string strSSOLogonFormUrl = SingleSignonLocator.GetCredentialEntryUrl
              ("MyIndividualApplicationID");
            writer.Write("<a href=" + strSSOLogonFormUrl +">Click here to save your
             credentials for the Enterprise Application.</a>");
            writer.WriteLine();
    After the user credentials for the enterprise application have been stored in the single sign-on database, the custom code in the Web Part should retrieve the credentials using GetCredentials method, then submit them to the enterprise application in a manner that is relevant to this application, then retrieve the necessary data from this application, and then finally render the data in the Web Part. Referring back to Figure 26-1 that shows eight steps described in the section “How Single Sign-On Works,” the preceding code corresponds to steps 1 through 5. In addition to this code, you have to implement steps 6 through 8.
    Your code for interacting with the enterprise application such as submitting credentials and retrieving information will be different depending on the type of application you are accessing. You need to consider that in an enterprise environment, where a user interacts with many systems and applications, it is likely that the environment does not maintain the user context through multiple processes, products, and computers. This user context is crucial to provide single sign-on capabilities because it is necessary to verify who initiated the original request. To overcome this problem, SharePoint Portal Server provides ability to use a Single Sign-On (SSO) ticket (not a Kerberos ticket). An SSO ticket is an encrypted access token that can be used to get the credentials that correspond to the user who made the original request. Also, in the enterprise environment you might consider using Microsoft BizTalk Server as a transformation engine for the authentication requests, as well as requests for data, between your Web Part and a format that is understood by the enterprise application.
    An example of such enterprise application integration (EAI) infrastructure is shown in Figure 26-2. In this scenario, a Web Part gets the information from a line of business (LOB) back-end application using BizTalk Server 2004. The LOB application requires authentication. In this example, we will assume that the enterprise application definition for the LOB application has already been created, and the user credentials have been stored in the SSO database.
    The authentication process shown in Figure 26-2 consists of several steps, as follows:
         1.     The Web Part calls Microsoft.SharePoint.Portal.SingleSignon.Credentials.ReserveCredentialTicket() with the user. This method reserves a credential ticket for the user and then returns an encrypted access token (SSO ticket) to the calling Web Part.
         2.     The Web Part passes the SSO ticket to the BizTalk Server 2004 native SOAP adapter by calling a Web service that runs on BizTalk Server. The SSO ticket is passed within the header of the SOAP request. When the SOAP adapter receives a request containing an SSO ticket, the ticket is stored as the SSO Ticket property in the conte

  • XSLT mapping issue in parent child relation

    Hi Guys,
    i have one XSLT mapping issue. Mapping scenario is from IDoc to file.
    IDoc structure is as below
    <ZLOIPRO1>
      <E1AFKOL>
         <A></A>
         <B></B>
         <E1RESBL>
             <MATNR>1</MATNR>
             <CHARG>1</CHARG>
             <ZSBL>
                 <MTART>ABC</MTART>
             </ZSB>
         </E1RESBL>
         <E1RESBL>
             <MATNR>2</MATNR>
             <CHARG>2</CHARG>
             <ZSBL>
                 <MTART>ZHA1</MTART>
             </ZSB>
         </E1RESBL>
         <E1RESBL>
             <MATNR>3</MATNR>
             <CHARG>3</CHARG>
             <ZSBL>
                 <MTART>ZHA1</MTART>
             </ZSB>
         </E1RESBL>
      </E1AFKOL>
    </ZLOIPRO1>
    As you can see 'E1RESBL' is repeatative. Now my issue is i need to select 'MATNR' and 'CHARG' from 'E1RESBL' segment when first occurance of 'ZSBL/MTART' with value 'ZHA1' appears. i.e. my output would be MATNR = 2 and CHARG = 2.
    I hope i am clear. Please let me know if any solution for this.

    Hi,
    Try this
    <xsl:if test="./ZSBL/MTART == 'ZHA1'">
    <xsl:for-each select="./E1RESBL">
      <MATNR>
       <xsl:value-of select="./MATNR"/>
      </MATNR>
      <BATCH>
       <xsl:value-of select="./CHARG"/>
      </BATCH>
    </xsl:for-each>
    </xsl:if>
    You might need to do some changes in the above.
    Thanks,
    Prakash

Maybe you are looking for

  • [OSB 10.3.1] error adding a JMS destination

    Hi all, I'm migrating my ALSB 3.0 project into OSB 10.3.1. So I've recreated the clustered domain in OSB as I did with ALSB and then ready to run my ebAdmin.cmd properties\local\admin.DVE.osb_cluster1.SYS.properties properties\local\admin.DVE.osb_clu

  • Creation of secondary indexes for table "RSBATCHCTRL_PAR" failed

    Hi , We have installed EHP1 on our BI7.0 system successfully, later we are trying to apply SPS01 for this EHP but we got the follwoing error during TBATG conversion. 2 EGT092 Conversion of table "RSBATCHCTRL_PAR" was restarted 2 EGT241 The conversion

  • Help on Playlists

    Hi, I am trying to create playlist on itunes software using songs from my ipod? I can't seem to get the songs from my ipod to a playlist on my computer. Can anyone help? Thanks much, Brian

  • "Some files that need to be updadted are currently in use."

    I have Windows Vista, and iTunes has not been working on my computer for a few months now. I was hoping this new version (7.4 the latest one) would finally be able to run. Unfortunately, when I run the installer, I get a window that says this: "Some

  • Enterprise Portal & Workflow

    hi all, there's a requirement for me in which the user(MSS) would click submit on the Portal Screen, from where the User's Organisational Unit Chief would get a mail asking for approval(say for a new Org Unit or something). on his approval, the conce