Publishing sap portal with ess applications on portal.

Hi all
We are using EP 7.0 sp 13 (it is cluster environ ment) . Back end is ecc 6.0 sp 13 and bi 7.0 it . We are using employee self service and Manager Self service business packages , some bi reports , some transaction iviews on the portal.
Now we are planning to publish the portal to internet .
1. Which is the best option as a reverse proxy ? ( IIS, Apache , Web dispatcher)
2. What should be server configuration for reverse proxy server?
3.Should be the reverse proxy in same domain as portal?
4. Any restrictions / pre requisites for publishing the portal on internet?
Any views?
Thanking you.
Rajendra.

This is not a trivial question! Companies spend quite a bit of time and money doing exactly what you are asking for. Good luck...

Similar Messages

Forefront Unified Access Gateway (UAG) and SAP portal

Hi Guys
Do you have experience or knowledge about the integration of UAG as a reverse proxy for SAP Netweaver portal 7.0?
We are trying a setup where the SAP NW portal uses SPNEGO/kerberos authentication (and it is working), but when accessing the SAP NW portal through UAG we get a "HTTP basic authentication" prompt, while SPNEGO login module fails. UAG can be configured to use kerberos contrained delegation, but it does not work for us.
Anyone who have setup UAG - SAP NW portal integration ? Did you succed with any SSO: Which authentication mechanism' did you configure in UAG and i J2EE?
Best regards
Tom Bo

Hi Tom,
I work as a consultant for various customers who seek my companies expertise in Microsoft Forefront security. I published SAP Portal 7.0 for my customers and was able to provide seamless single sign with UAG.
We configured NTLM authentication in UAG. We then configured SPNEGO and enabled fall back to Basic Authentication on SAP. This should work but you may need to write some authentication modification scripts if you are getting username/password errors.
In addition, we did strong 2-factor authentication with RSA for one customer. Some of our customers also ask about enabling endpoint detection to do things like, If you dont have an updated antivirus, then you the user cannot download any documents from SAP.
Thanks!
Dennis Lee
Celestix Networks
Edited by: Dennis Lee CLX on Mar 17, 2010 10:06 PM

TIME on ESS/MSS with the SAP Portal, release ERP2005 ECC6.

Hello,
I need to implement TIME (Leave request) on ESS/MSS with the SAP Portal, release ERP2005 ECC6.
Any informations about the customizing for a proof of concept would be appreciated.
All the back-end (R/3) as allready been customized.
Thanks for your responses.
Olivier

Hello,
If you already have all the templates and such configured then its easy. We don't have ESS and only one MSS scenario. However we support the web environment via BSP HAP_DOCUMENT. You can include our list pages in an Iview and assign that to the ESS or MSS scenario in the portal.
They also run stand alone, so you can test it as well without configuring the portal.
See also <a href="/people/sap.user72/blog/2007/02/20/objective-setting-appraisals-the-web-environment bloggy</a> on OSA and the web Environment, especially the last part will be of interest for you.
Regards and Groetjes,
Maurice

Do we need to install SAP Portal for implementation of ESS & MSS

Hi All,
We are implementing SAP (ECC 6.0) for one of our client, Due to some contractual limitations, we do not want to implement SAP portal though it is a part of standard delivery, I want to know that is it absolutely necessary to install and implement SAP portal for implementation of ESS & MSS.
What i know and understand is that with the new architecture ESS & MSS can be deployed and accessed as a stand alone application on an internet browser by (Web dynpro client) without any need of enterprise portal. While ESS & MSS application can be hosted on Web application server.
Please validate my understanding if it is correct, Also does the new Web dynpro based client support all the functionality and authorization related issues for ESS & MSS ??
Regards
Amit Ajmera

Hi Amit,
Yes, you can run ESS/MSS as WebDynpro application without having to deploy on Portal. However, the look and feel and user accessibility is much better when deployed as Portal page. For WebDynpro, you will still need to publish the individual URL link to application somewhere...
Another point is that on portal you can deploy standard Business package specific to ESS and MSS which contains lots of readymade iviews/page/roles etc so it can reduce your development cost dramatically.
But, at the end it all depends on your individual requirement and project scope.
Cheers !!
Satya.
PS: Points always encourage me to reply...:-)

Integration of OrgPublisher with SAP Portal

Hi,
I have an issue of integrating an organizational chart published by OrgPublisher in html-format into the SAP Portal using SAP HR Interface for Organizational Charting (HR-OCI) 6.0 (SAP ERP2005 and EP 7.0).
I start with configuration of URL iviews for several organizational charts displaying different organizational levels. Charts are published by OrgPublisher in html-format.
Then I would like to use HR-OCI with its Organizational Chart Launcher to launch the relevant URL iView with a relevant organizational chart depending on selected organizational unit (context-sensitive display). I tried this with SAP-provided Organizational Chart Tester iView and it works fine.
According to the SAP HR-OCI configuration guide the Organizational Chart Launcher uses a set of URL parameters that are passed to the receiving application displaying the chart.
My issue is how I can pass those parameters to the relevant OrgPublisher organizational charts published as html-files in order to obtain context-sensitive chart selection.
Best regards,
Beata

Hello Beata,
We have SAP ERP 6.0 . For some reason we don't see the new function module. Do you the reason . Pl help
Thanks,
Prasad

SAP Portal Custom Themes to change ESS/MSS UI Look and feel , possible ?

Hi,
I have a requirement where the look and feel of the UI controls of the ESS/MSS applications have to be different - Jazzy
I know XSS homepage framework is for the customisation of Areas, Sub Areas. What I am more interested is only the look and feel UI of ESS/MSS applications.
If I change the standard theme of portal using Theme Editor and create a new custom theme with different back ground colors, fonts, sizes for all the UI controls,.Will the customised Theme apply on the standard ESS / MSS screens ? Also my doubt is we are using EHP3 and I am not sure how many are Webdynpro java based or webdynpro Abap based.
Will the theme apply to both WDA and WDJ application UI controls?
Any inputs in this regard will be of great help. thanks in advance.
Regards,
Sreeram

Hello,
Check :
[Overview on changing the Portal look and feel.|https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/d077fa17-7fbf-2a10-d983-fb12decf63c7]
FYI :- Search for wiki on : Stylesheet for WDA without integrating in SAP Portal
Cheers,
Remi

SSO to J2EE application from SAP Portal

Hi
I am trying to do SSO from SAP Portal to a J2EE engine which runs on SAP Web AS.
Here are my queries
1. When I deploy a J2EE application on Web AS , I dont get any login screen. How can I make sure that if a user wants to access this J2EE application he should get a login screen and provide his login credentials first, only then would he be able to access the J2EE application.
2.When I am done with Part 1. If a user tries to access this J2EE application from the Portal (asuming the user Id's in Portal and J2EE application are same and both are in the same domain) , I should not get any login screen and should be able to view the J2EE application.
3.I want to use SAP Logon tickets generated by the Portal to enable SSO.
I have done all the necessary configurations in the J2EE server.
1. Imported the Portal's verify.der certificate.
2. Adjusted the login modules stack for the application accordingly.
Can anyone please help me out with this or throw some light.
Please help.
Thanks in advance,
Vivek
PS - Points will be definitely rewarded

Hi Vivek,
Let me give you the solution for both questions differently.
<b>Ques 1. When I deploy a J2EE application on Web AS , I dont get any login screen. How can I make sure that if a user wants to access this J2EE application he should get a login screen and provide his login credentials first, only then would he be able to access the J2EE application.</b>
<b>Ans:</b> For doing this in the code of your J2EE application you have to write a if statement which will check if the user ID is coming from the backend or not. If yes then you display that logon page else you just pass that username which is coming from backend and displ;ay the page accordingly.
<b>Ques 2.When I am done with Part 1. If a user tries to access this J2EE application from the Portal (asuming the user Id's in Portal and J2EE application are same and both are in the same domain) , I should not get any login screen and should be able to view the J2EE application.</b>
<b>Ans:</b> Yes, this is what I am explaining you. Even I had also made same kind of J2EE application in which if the user is coming from the backend then he/she will look the J2EE screen else if the username is not coming then he will se the Login screen. Exactly same as what are looking for.
<b>3.I want to use SAP Logon tickets generated by the Portal to enable SSO.</b>
<b>Ans:</b> I have used User Mapping instead of SAP Logon ticket. Well that is also the option for SSO but personally I think User Mapping is easy and better way for implementing SSO.
I dont know whether this will help you or not. Please let me know. I can definately help if you want to implement SSO using User Maping.
Regards
Pravesh
PS: Please dont forget to reward points.

SSO for portal ESS applications

Hi all,
We have implemented ESS in Portal.
But we need to access the ESS modules outside the portal .. i.e,
We need to access ESS applications from a .net portal..
goal is to acheive SSO from a .net portal to SAP Portal..
How to Acheive this. any approches/ best practices??
Points for useful answers..
Hari

Hi,
can you take a look at this thread: Re: SSO from SharePoint CMS to SAP EP that is connected to CUA
The idea would be to "force" the users to log on to the portal (so that they have a SAPLogonTicket), redirect the users to your .Net application and from there they can access ESS scenarios (since they do have a SAPLogonTicket now).
Regards,
Holger.

Multiple versions of the same Web Dynpro application on the same SAP Portal

I have a single application (local development) and deploy directly to a SAP Portal(NW 7.0) from NWDS Version: 7.0.15
No problems there, works like a charm.
But I want to have multiple versions of the same application on one portal. Eg. ill build a version 1.0 for test and deploy this. Then continue to work on version 1.1 deploying this directly on the portal. The two versions should now co-existing under different names and/or packages.
Please help.

Hi Kim,
May be you can try this and see if this works for you. I am not 100% sure if it will work for you, but worth a try I guess. Create a Test WebDynpro project and try the following steps on this project. If they work out correctly and serve the purpose for you only then try them on your actual Web Dynpro project.
1. Create a test Web Dynpro project say "TestWDProject" with Component say "Comp1" and the default views and windows etc.
Also create some working application our of this component and Windows using the Context.
2. Right click the "Comp1" and select Copy.
3. Right click 'Components" node in the project structure and select "Paste"
4.This step will try to paste the copy of Comp1 as a new Component.
5. You can change the Name and Package of the Component.
6.Similarly you'll get the prompts for views,windows etc.
7.Once you have copied everything, Just check if everything looks good.
8.Now you can create a new Application using this new component and the Component Interface View and Deploy it.
9.Test whether the Application created out of this copy works same as the original component.
You can also try to create another Web Dynpro project and paste the Comp1 in the Components node of that new project and perform the same steps.
Again, try with these Test Projects and see if this serves your purpose before applying the steps on actual projects.
Regards,
Ajay

SAP Portal Network - WebDynpro iView and SAP Application iView sharing

Hello All,
I've read about the restrictions in SAP Portal supporting the WSRP standard for application sharing. Mainly WebDynpro iViews and SAP application iViews sharing is not supported. That is in the case of a SAP Portal as producer and Non-SAPPortal as consumer.
I'm interested in a WebDynpro iViews and SAP application iViews sharing in a only-SAP Portals Network, where SAP Portals act as producer and consumer.
I've heard about the Remote Role Assignment and Remote Content Copy that are used in such case. I would like to ask if anyone knows if these can help overcome the restriction in sharing WebDynpro iViews and SAP application iViews that is present with WSRP? And if the advantage of WSPR, that is the application execution and rendering on the producer side, and as follows decreasing of bandwidth usage, is remaining in the case of the Remote Role Assignment and Remote Content Copy.
Thanks,
Mladen

Hi Manish,
for sharing content between SAP and non-SAP Portals, your case, refer to
http://help.sap.com/saphelp_nw2004s/helpdata/en/43/23fb36cad10d23e10000000a1553f7/frameset.htm
All the possibilities and restrictions of WSPR in the case of SAP EP are explaind there.
For sharing content between only SAP Portals refer to my other thread:
Portal Network - Content Sharing
Hope it helps you!
Mladen

Timeout error in accessing CR 2008 with dynamic prompts from SAP Portal

Hi
We are using Business Objects XI 3.0 with Integration Kit for SAP
Solutions on Windows 2003 Server with Weblogic 10.0 server.we have
created a report (13 parameters) using Crystal Reports 2008 and
deployed on the BOE.Crystal Reports are created using opensql driver
and using tables.The prompts/parameters are created using Business
views.After deploying the report under the database configuration under
When viewing report the option selected is "Use SSO context for
database logon".
Later an iview is created on SAP Portal pointing to Crystal Report
using Business Objects iview template.The SSO is working fine and we
are able to select the parameters and when clicked ok we get an
error.we have pasted the error below when we try to view source :
<form action="../PlatformServices/service/app/error.do" method='post'>
<input type='hidden' name="errMsg" value="A timeout error has occurred"><input type='hidden' name="loc" value="en_GB">
<input type='hidden' name="pvl" value="en_GB">
<input type='hidden' name="errStack"
value="com.businessobjects.webutil.websessiontimeout.WebSessionTimeoutFilter.doFilter(WebSessionTimeoutFilter.java:142)
weblogic.servlet.internal.FilterChainImpl.doFilter
(FilterChainImpl.java:42)
weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3368)
weblogic.security.acl.internal.AuthenticatedSubject.doAs
(AuthenticatedSubject.java:321)
weblogic.security.service.SecurityManager.runAs
(Lweblogic.security.acl.internal.AuthenticatedSubject;Lweblogic.security.acl.internal.AuthenticatedSubject;Ljava.security.PrivilegedAction;)
Ljava.lang.Object;(Unknown Source)
weblogic.servlet.internal.WebAppServletContext.securedExecute
(WebAppServletContext.java:2117)
weblogic.servlet.internal.WebAppServletContext.execute
(WebAppServletContext.java:2023)
Thanks
Kamal

Hello,
1)How do I assign my user ID to the organisational unit? Please advise me step by step as I am new to SRMu2026
2) Regarding error u201CThe following error text was processed in the system SR3 : Attribute for user USER18 contains errors. Inform system admin.
The error occurred on the application server eccserver1_SR3_01 and in the work process 0 . u201C
Using transaction SM21, I have discovered multiple errors for SAP instance eccserver1_SR3_01 like BBP_PU 245 transaction canceled, HTTP/RFC session has been deleted following timeout...
3) How do I run report BBP_CHECK_CONSISTENCY? With transaction SE38? What do I choose next from the options available?
This is too technical for me right now..maybe not in the future, but at this moment, I need more guidance...
Thank you,
Iuliana

HR Renewal Self Services Integration Issue with SAP Portal

Hi,
We are Implementing HR Renewal 2.0 FP1 and the Self-Services Landing Page to be launched from within SAP Portal.
I have imported the PFCG role ZSAP_EMPLOYEE_ESS_XX_UI5_1 into portal and assigned to the user. The End User read permission is provided.
We see the landing page with all lanes coming up fine when launched from portal. But subsequently when we click on the SAPUI5 delivered applications in the MY INFO Lane like Employee Profile, Salary Statement, Leave Application etc, they open from inside the portal in a new window via the below Standard Launchpad Start URL application
/irj/portal?NavigationTarget=ROLES%3A%2F%2Fportal_content%2Fcom.sap.pct%2Fevery_user%2Fcom.sap.pct.erp.common.bp_folder%2Fcom.sap.pct.erp.common.roles%2Fcom.sap.pct.erp.common.erp_common%2Fcom.sap.pct.erp.common.lpd_start_url&RequestMethod=GET&System=SAP_HCM_PROXY&URLTemplate=<System.wap.WAS.protocol>%3A%2F%2F<System.wap.WAS.hostname><System.wap.WAS.path>%2Fsap%2Fbc%2Fui5_ui5%2Fsap%2FHRESS_PAYSLIP_G%2Findex.html%3Fsap-client%3D<System.client>%26sap-language%3DEN&PrevNavTarget=navurl%3A%2F%2F9302a2e5cab6590e376f9e6a16fffb13&NavMode=3&CurrentWindowId=WID1411300030322
and getting the below error.
Page not found. Refresh the page or try again later. If the problem persists, contact your Portal administrator for assistance
Is any other configurations missing to launch the my info individual service application via portal as NavigationTarget.
Appreciate your response.
PS: No business packages (WD ABAP based etc.,) are installed in the portal side.
Thanks,
Urmi

Hi All,
The issue got fixed after installing the portal business package, Common Parts ERP 1.61.
Thanks,
Urmi

SAP Portal Integration with InfoView

Hi Experts,
I have successfully configured SAP Portal Integration with InfoView using the following steps provided by Ingo:
- set the system that you want to be authenticated against as the DEFAULT system in the options of the SAP authentication.
- go to the webapps folder of your app server and navigate to the InfOView folder
For the Java version of InfoView (Windows environment) you need to edit the file web.xml, which is located (assuming Tomcat as application server) in the directory \Program Files\Business Objects\Tomcat55\webapps\InfoViewApp\WEB-INF for the actual deployment.
In addition you can make the change to the file in the folder <INSTALLDIR>\BusinessObjects Enterprise12.0\warfiles\WebApps\InfoViewApp\WEB-INF. The files in the second locations are being used when you redeploy the web applications with a tool like wdeploy. You need to change the following values
authentication.default = secSAPR3
siteminder.enabled = False
sso.enabled = True
Then I have created URLiView to InfoView login page, when the user click on the link, BOBJ will use the DEFAULT system to authenticate user.
However, there is a new requirement for users who exist in another SAP system to SSO into InfoView too. My question is whether we can specify in URLiView url or other configuration to select which SAP System to authenticate user on?
I would like to create Role A and Role B in Portal and each will display different URLiView that will authenticate user against different SAP System if possible.
Appreciate your advise.
Regards,
Medy

Hi Ingo,
Thank you for your reply.
We are trying to create an URLiView to the logon page of InfoView: http://<BOBJ Server>/InfoViewApp/logon.jsp that will bring the user to InfoView home if SSO passed instead of OpenDocument URL.
I have tried to add URL parameters to the URLiView (http://<BOBJ Server>//InfoViewApp/logon.jsp?SAP_SYSID=DCD&SAP_CLIENT=200), but InfoView is still using the default system in CMC to authenticate user.
Please advise.
Best Regards,
Medy
Edited by: Medy henry on Apr 29, 2010 4:00 AM

Help with Apache Reverse Proxy configuration with SAP Portal and SAP Webgui

Dear Experts,
I have an issue configuring Apache to work with SAP Portal and ERP webgui. Accessing Portal through Reverse Proxy is working fine. But the problem arises when we try to open an iView ERP webgui transaction page from Portal with the Reverse Proxy. Have anyone implemented similar requirements and could advice on the configuration required on the Apache side? Thank you

hi,
pls check the below links for reference:
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/24396589-0a01-0010-3c8c-ab2e3acf6fe2
searchsap.techtarget.com/searchSAP/downloads/chapter-december.pdf
1)Learn to implement the reverse proxy filter and portal gateway in SAP Enterprise Portal 6.0 on Web Application Server 6.40.
https:/.../irj/sdn/nw-portalandcollaboration?rid=/webcontent/uuid/006efe7b-1b73-2910-c4ae-f45aa408da5b
.2 )Configuring the Portal for Your Reverse Proxy Filter Solution . ... This document describes the reverse proxy filter mechanism in SAP Enterprise ...
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/32ad9b90-0201-0010-3c8a-c900cd685f8f
3)have full reverse proxy functionality. Possibly. filter. requests. Internet ... Reverse proxy (optionally with authentication etc.) ...
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/c066c390-0201-0010-3cba-cd42dfbcc8be
Note:please reward points if solution found helpfull
Regards
Chandrakanth.k

Consume an existing WebService over an SAP Portal Application

Hi all,
I would like to consume an existing Web service, which has been implemented under AXIS 4 1 and deployed to a tomcat 4.1 installation.
I've developed an SAP Portal application with NWDS (Dynpage-Structure), which has to call this web service. For this, I've generated a standalone proxy client over WSDL of this WebServie under WebServiceWizard of NWDS and called it from my Portal Application, without success :(. But when i call it (proxy) from a standalone java client (Class with main-Method), it function.
Can anybody help me, for calling this WebService
Regards
Ahmet Büyükyilmaz

Hi Ahmet,
open a browser on your portal server (or try telnet) to check if you can access your axis server. Seems like you have some firewall or routing probs.
Just enter your web service uri in address bar of the browser to see if you can get a connection. If you do not have a browser, try:
'telnet <axis-server-name> 80'
from command line. Does anybody listen?
Is your web service designed to be used by anybody? Or do you have some kind of authorization issues?
HTH,
Carsten

Publishing sap portal with ess applications on portal.

Similar Messages

Maybe you are looking for