Portal with CUA userbase

Hi,
Our Scenario:
We are using portal with CUA userbase.
But, now we want to use the portal for a Non-CUA system users ( this system is not part of CUA)
How can I set up the portal authentication ? Can I setup two user bases ?
Please advice

Are you talking about the same portal or different portal systems ?
If you are talking about the same portal, the only option I see is to add the other users to the CUA. If you are talking about a two portal installations, there is no problem, except that for SSO, the users have to have the same name in both installations.
Regards,
Patrick

Similar Messages

Creating users in enterprise portals with CUA as userbase

Hi All,
we are using CUA system for maintaining the users and we want this users to be used in enterprise portals. So while installing WebAs itself, we specified the connection details to this CUA system. then we installed portal and we were able to view the users of CUA in portal.
now i am creating a user from portal, create user option in UserManagement. but i just get an error like, could not create a user.
i checked out in system administration->umconfiguration-> sap system. all the details that we specified during the webas installation appear there by default.
so could you please let me know what the problem could be
thank you

Raj,
I know that your problem was solved, but I've come across following SAP link. Hope, it helps other ppl..
TITLE: Requirements for Service User Used to Connect to SAP Systems
http://help.sap.com/saphelp_ep60sp2/helpdata/en/8f/67d27676ace84080964d4c4223bb3c/content.htm
Thanks,
Pritesh.

Integration of SAP Portal with Shibboleth based CUA?

We are running SAP Portal NetWeaver EhP1 on LINUX RH-EL 5 with ORACLE 10.2.0.4. We are interested in integrating authentication to the SAP Portal with our web single sign-on system, which is based on Internet2's Shibboleth software. We would like to use our Shibboleth CUA to authenticate users and give them access to our SAP Enterprise Portal as well as to the SAP ABAP systems.
Has anyone done something similar and if so, what were the results or limitations encountered?
What is the underlying web server / product on which the Portal is based? Specifically, is it Apache httpd? If so, which version?
Can it support the use of third party Apache modules, e.g. the Shibboleth Service Provider (SP) Apache module for authentication?
If not, is it possible to run the portal fronted by Apache httpd? (Note that the Shibboleth SP software requires the use of Apache httpd on Linux servers.)
Can the portal be configured to honor the REMOTE_USER setting passed by the web server/container for authentication, instead of requiring a username/password to be entered?
If the portal cannot support the use of the Shibboleth Service Provider software for authentication, what are the other possible configuration options for authentication (besides username/password)?
What support, if any, is there for SAML-based authentication?
Will the portal interoperate with a Shibboleth Identity Provider (IdP)? Can you point us at documentation for this?
Thank-you,
Deb Nugent

Hi,
interesting questions. Portal is running on top of Netweaver platform (Java stack). Hence no Apache web server. I doubt that it supports any Apache modules. You can use Apache as reversed proxy in front of SAP portal. Check note 480520 with attached configuration guide. I don't know answer for your question regarding REMOTE_USER setting.
SAP portal supports all standard [authentication methods|http://help.sap.com/saphelp_nw70/helpdata/en/8a/cb136e68592f478266d19bb2b89766/frameset.htm] supported by Netweaver. Probably the only possible way is to use [SAML|http://help.sap.com/saphelp_nw70/helpdata/en/94/695b3ebd564644e10000000a114084/frameset.htm]. [Here|http://www.ibm.com/developerworks/tivoli/library/t-cssosap/index.html] is a how-to guide how to set up SSO based on SAML between Tivoli and Netweaver applicaiton server.
Also search on net. I found links to interesting presentations (e.g. [this one|http://www.switch.ch/aai/support/presentations/ws-sap-2010/ETHZ_AAI_SAP_SAML_Artifact.pdf]).
Cheers

Connect Enterprise Portal to CUA?

Hello everyone - hope you can clear something up for me. I have searched online, in forums and my documentation but cannot find an answer.
Is it possible to connect EP 6.0 to CUA in the same manner one would connect child systems to the central system? I have seen conflicting info suggesting it is possible I believe for roles. I have also seen screenshots of a portal with a CUA tab under either System Adminnistration or User Administration.
I have a DEV and PRD CUA and each are connected to DEV and PRD LDAP servers. I would like to connect my DEV and PRD portals to each CUA. Is this possible? Is this functionality built-in to the portal?
When the users are created in LDAP they are automatically created in the portal as well. We run the LDAP synch job to populate CUA with the new users. Between eCATTS and CRMD_UI_ROLE_ASSIGN there is little work to assign roles in the ABAP systems (CRM 2007). However, I have to then manually assign the newly created portal users their roles/groups.
systems:
CRM 2007
EP 6.0
IBM TIvoli LDAP
If you have any ideas or knowledge on this subject I would appreciate it!
Thanks,
Todd

> Any idea of how to actually connect the portal to CUA? For the life of me I cannot figure it out!
Nope, sorry. I think the trick is to connect the portal to a backend system in such a way that assigning roles in the backend automatically assigns roles in the portal. You can imagine that back end system being part of a CUA. I've seen it working but I am not within reach of that system now.
Maybe someone else can chip in.
Otherwise, have a look in the forum.

Portal with a URL using a Web browser in java stack

Dear all,
I can access the portal with our URL using a Web browser from your client machines .
i got the following option :
SAP Library
SAP Library contains the complete documentation for SAP Web Application Server.
Web Services Navigator
Web Services Navigator is a tool that gives you a short overview of a specific Web service based on its WSDL, and enables you to test your Web service by creating and sending a client request to the real end point.
System Information
System information provides administrators with an overview of the system configuration and its state. It shows all of the system's instances and processes, their current state and important parameters (such as ports) that may be required for support cases, as well as the versions of the components installed.
UDDI Client
The UDDI client provides query and publishing functions for different Web service entities (tModels, business services) to any UDDI compliant registry.
User Management
The user management administration console provides administrators with the functions they need to manage users, groups, roles, and user-related data in the User Management Engine (UME). Users without administrator permissions can use it to change their user profile.
Web Dynpro
Web Dynpro is a User Interface technology available within the SAP NetWeaver Developer Studio.
Various Web Dynpro tools provide administrators and application developers with performance measurement and application administration capabilities. The Web Dynpro runtime is already deployed.
SAP NetWeaver Administrator
A tool for administration and monitoring, offering a central entry point to the whole SAP NetWeaver system landscape. The SAP NetWeaver Administrator can be used in a central scenario where it is capable of operating an entire system landscape containing ABAP and Java systems as the application platform of SAP NetWeaver.
J2EE Engine Examples
This section contains several J2EE application examples that run on the J2EE Engine. The examples show some of the functions of both Java and the J2EE Engine. They can be easily deployed and tested by simply clicking on a button. The full source code of the examples is also available.
when i click System Information:
it ask user name () J2EE_ADMINand password (Installtion master password) ,after entered , i got below error .
You are not authorized to view the requested resource.
Details: No details available
Kindly suggest .

Hello
It means what it sais, your J2EE_ADMIN user doesn't have enough authorization.
Chech if the appropriate authorization is assigned in your abap stack which belongs to the java stack you logon to:
Role SAP_J2EE_ADMIN should be assigned to user J2EE_ADMIN.
Kind regards
Tom
Edited by: Tom Cenens on Dec 17, 2010 2:55 PM

Multiple Portals with OAM

Hello All,
Is it possible to register multiple Portals to single OAM instance for authentication? If so is there a document available somewhere? I could only find OBE integrating single Portal with OAM.
Thanks in advance!

Yes, you can do that. You basically need to setup mod_osso agent in OAM.
Oracle Portal behaves exact in the same way as any mod_osso protected application. If you are able to protect a standard HTML file on the webserver's operating system, you will be able to protect your Portal as well.
Setup is not documented (yet).
Thanks,
EJ

What is the mean of using Portal with Role Based security as entry point

Hi Experts we have requirement of integration of Portal and MDM
I am completely new to the MDM. So please give me some idea , what is the meanin for following points.
1) Using the Portal with Role Based security as entry point for capacity and Routing Maintaince(These two are some modules).
2) Additionally , Portal should have capability to enter in to the MDM for future master data maintence. Feeds of data will need to be come from SAP 4.6c
Please give me the clarity of what is the meanin of second point
Regards
Vijay

Hi
It requires the entire land scape like EP server and MDM server both should be configured in SLD.
Your requirement is maintaing and updating the MDM data with Enterprise portal.We have some Business Packages to install in Portal inorder to access the functionality of MDM.
Portal gives you a secure role based functionality of MDM through Single sign on (login into the portal access any application) to their end users.
Please go through this link
http://help.sap.com/saphelp_mdmgds55/helpdata/EN/45/c8cd92dc7f4ebbe10000000a11466f/frameset.htm
You need to develope some custom applications which should be integrated into the portal to access MDM Server master data
The estimation involves as per your requirement clearly
Its depends upon the Landscape settings, Requirement complexity,Identify how many number of custom applications need to be developed
Regards
Kalyan

How to setup the portal with the uniform style for SRM + Esourcing?

how to setup the portal with the uniform style for SRM + Esourcing? We will setup SRM 7 + esoourcing + portal, but as we know esourcing screen style is not same with SRM, so how to uniform the style between this 2 diffirent software? any body have idea?

Hi,
SAP E-Sourcing 6.0 is the solution. It is same look&feel.
Regards,
Masa

Anyone running Portal with NOARCHIVELOG mode in the Oracle DB?

Although we have several high-volume SQL Server customers running their DB in simple recovery mode (no transaction logging) with success, I am trying to determine if anyone is doing the equivalent with Oracle DB.
Even if you aren't using NOARCHIVELOG mode, please let me know your thoughts on performance, especially since the perception exists that the Portal is less performant on Oracle DB than on SQL Server. If that perception has any basis in reality, there should be an even greater potential for performance gain using Oracle DB, through intelligent tuning.
The cons of NOARCHIVELOG were pointed out to me by an excellent DBA:
1. Lose the ability to do hot online physically backup, (both RMAN and Manual)
2. Lose the ability to do point in time recovery of your database (irrelevant to the Portal)
3. When something bad happens to your DB, you are guaranteed to lose some data, because you can only recover to last good backup. (This is either acceptable to the business or not. Usually it is.)
Thanks for your thoughts!

There are no dumb questions. 'Better' or 'worse' can mean different things from different angles. I won't recommend something to a customer that I saw in an article somewhere, or gained knowledge via hearsay. I have to have tried it successfully with a customer, usually though iterative tuning, testing and monitoring cycles.
With that said, I see nothing wrong with using NOARCHIVELOG mode for the portal, and am looking to find someone with experience using it with the portal; and I don't mean a portal with four communities and a scant thousand users. I am looking for something more on the scale of our mutual customer who had about 15 front end portal servers, and about 15,000 hits per hour. Who, incidentally, is happily using SQL Server in simple recovery mode, and was game to try it out in the first place.

Guest Portal with EUP Page Only

I have a use case to provide a guest portal with EUP page only. ie. user only needs to accept the agreement and they should be given internet access, without need to enter username/password or self service. Is there an easy way to achieve this on ISE 1.2?
Thanks in advance.

Hi Mark,
Yes Guest Cert will need to be external. Because Guest Users if they have a non-corporate laptop for example will not have your Internal Company Certs installed in their browser (that you loaded onto ISE), so they cannot trust your internal Cert.
If your open Firefox or IE under Options/Security View Certificates you will see a list, if its a Guest you will see well known public Certs like Geotrust, Verisign etc.
For my setup I brought a GeoTrust cert and loaded this into ISE, this way Guests will always Trust the Geostrust ISE cert like https://guest.com for example and the login will appear and be trusted.

Integration of portal with ADS

Does anybody knows how to integrate the oracle portal with Microsoft -ADS
to make single sign on , meaning as soon as the user logs on to the machine
the same authentication should carry forward to oracle portal authentication.

Does anybody knows how to integrate the oracle portal with Microsoft -ADS
to make single sign on , meaning as soon as the user logs on to the machine
the same authentication should carry forward to oracle portal authentication.

Central maintenance of info with CUA

Dear all,
We are planning to implement CUA in our landscape. I guess, we can maintain initial passwords and lock status of users centrally with CUA.
Could we also maintain centrally the definiton of authorization profiles and completely definiton of user roles? and the information of "which user is allowed to logon to what client" with CUA?
Which of the above informations can be maintained centrally using CUA?
Your help will be appreciated. Thanks in advance.

Hi
I guess, we can maintain initial passwords and lock status of users centrally with CUA - correct
Could we also maintain centrally the definiton of authorization profiles and completely definiton of user roles - you can centrally maintain the allocation of roles and profiles.
and the information of "which user is allowed to logon to what client" with CUA - Yes. You maintain user to role mapping centrally and that also means you can control the systems and clients which they log into
You can also centrally distribute Parameter ID's (though that is not without it's "features" - nothing that can't be easily fixed), User Data, Printers, User Groups (same "features as PID's").
CUA does a job which is quite narrow, you may want to look at Netweaver IdM which can do some of what CUA does but is a proper IdM tool. Could be overkill for what you want but could also be the basis of a strategic solution for managing SAP accounts. Both have their place.

UME synch with CUA

What are any issue with UME synch with ABAP CUA? If I have one CUA should I point all of my UMEs (Java instances to a single ABAP instance).
Does anyone have any experience with CUA and java? What architecture issues should I be aware of>
Thanks
Mikie

Theoretically you can do this for ABAP UME users, but there is a big "gotcha":
Java systems don't have the same client concept as an ABAP system, and what is behind the ABAP role mapping on the Java side is not known to the ABAP system and may even differ.
The consequence is that if you point multiple Java UME's to one ABAP CUA system's client dependent user store... then assigning a role to the user will assign it in all Java systems, depending on what is mapped behind it.
Using a <SID> naming conventions for Java systems within the ABAP roles is not scalable and there are many standard roles anyway.
A consideration I have heard of was to use a multiple of ABAP clients, one for each Java system, but that might not be scalable as a solution either unless you are sure you will only have limited number of Java landscapes and systems.
Instead of trying to support such a workaround yourself, you will be better off looking into an IdM. See the thread at the top of the forum page about Identity Management (IdM).
Cheers,
Julius

Portal with LDAP

Dear all,
System details: ECC 5.0, EP 6.0 SP17, ESS
1.I have already installed Portal with abap option. But now the requirement is to get authentication for portal ess users by LDAP, how to do it without installation or should i install it again.
2.LDAP server is rehat open server. sap schema is created in ldap. what steps should i have to do in ldap server?
3.Do i need to activate ldap (manually) in abap system also?
4.How these portal users will be mapped to employee id
if they are authenticated in portal because i think in transaction HRUSER it gives the user list which are stored in abap system, or the user id,s must be created in both abap and ldap.
Can anyone give me the solution.
Imran Hasware
[email protected]

Hi,
The contents under "Configuring UME to Use an LDAP Server as Data Source" in the flwg link may be helpful,
http://help.sap.com/saphelp_nw04/helpdata/en/cc/cdd93f130f9115e10000000a155106/frameset.htm
Also go thru,
Authenticating R/3 users using LDAP
Regards
Srinivasan T

Do not use Portal with SRM 7 ?

Hi experts
We use SRM 7.0 with SAP Entreprise Portal. We are in Support Package 5, we want to not use any more the Portal with SRM 7.
How to be able to not use Portal and only use SRM web client?
Thank you.
Regards,
Peggy.

Hi ,
Try to check this link hope it will be use full .
http://forums.sdn.sap.com/thread.jspa?threadID=2122248&messageID=11016445#11016445
Thanks & Regards
Pradeep Kumar Dondeti

Portal with CUA userbase

Similar Messages

Maybe you are looking for