Removal of Basic MII authentication screen

MII 12.1.5.7
NW EHP ce 7.1
Currently, when you log into MII using a UME user, such as Administrator, you are presented with an authentication screen that allows you to type in the username and password. Since our client requires SSO enabled url, the user should never see the basic authentication screen. The issue here is if the user is not authenticated through ABAP or LDAP, it will reroute to the basic authentication screen. This is a security risk for my client. We need to remove or replace this screen. How can this be done?

Hi,
Maybe note 1538719 could be of help.
Setting up SPNego with X.509 should allow direct access once the MII URL is typed.
Regards,
Srikishan

Similar Messages

  • Authentication Screen when accessing Web Dynpro Application

    Hi,
    We are encountering a situation wherein when we call the Web dynpro application, it asks for Authentication. The way we do is a bit tricky. We have the following set up;
    1. We access the CRM_IC ( Web Gui) in CRM and from where we try to create orders  in the backend system i.e., ECC6.0 (IS_Utilities).
    2. For creating orders we launch the FOP ( in our case it is DYNPRO) from CRM. So ECC screen is opened through ITS using SSO.
    3. In addition to this we built a web dynpro application to be called from the DYNPRO (step 2).
    4. When the Web dynpro application is accessed it asks for Login details though it has already logged into ECC using SSO.
    PROBLEM: CRM -- using ITS / SSO --> ECC --> Web dynpro ?? Authentication screen.
    Design:
    We are using WDY_EXECUTE_IN_PLACE to open the Web dynpro in SAPGUI. It is working fine when we run the Web dynpro application from SAPGUI, only the problem is when we do the above steps 1 - 4.
    Tried using the following logic as well but the same result.
    CREATE OBJECT viewer EXPORTING parent = empty_container.
    CALL METHOD viewer->enable_sapsso
    CALL METHOD viewer->DETACH_URL_IN_BROWSER
    EXPORTING url = urlc.
    cl_gui_cfw=>flush( ).
    So is it possible to over come the problem. Basically, we don't want the Authentication screen it should use SSO.
    SSO is already set up in the system.
    Any inputs will be highly appreciated.
    Thanks,
    Roopesh

    resolved!!!!
    CRM had wrong url to connect to web dynpro aplication
    Edited by: Aditya Deshpande on Mar 3, 2010 9:59 AM

  • Basic http authentication not working when consuming Web Service in BPEL.

    Hi,
    I am consuming an AXIS Web Service from BPEL 10.1.3. The Web Service uses basic http
    authentication so we need a way to get username and password into the http
    header. In the Oracle BPEL Process Manager Administrator's Guide 10g
    (10.1.3.1.0) section 1.3.4.1 HTTP Basic Authentication (10.1.2.0.2) is stated
    that this can be done using the properties httpUsername and httpPassword. I
    have set the 2 for the partner link in bpel.xml but username and password does
    not get in to the http header. Has anybody got an idea?
    Regards Pete

    I'm having the same sorts of problems with 10.1.3.1.0. I've got a deployed BPEL suitcase that's trying to hit a BASIC AUTH-secured web service running on a WebLogic 8.1 server. I've set up my partner link according to the documentation, and the BPEL console Descriptor tab even shows the parameters correctly:
    partnerLinkBindings      
    client      
         wsdlLocation      awardService.wsdl
    spsAwardSubmitPartnerLink      
         basicHeaders      credentials
         basicUsername      ko1
         basicPassword      xxxxx
         wsdlLocation      IAwardDraftServiceRef1.wsdl
    However, when I funnel the resultant call to the endpoint specified in IAwardDraftServiceRef1.wsdl, none of the fields I would expect show up in the HTTP header:
    POST /pd2WebServices/service/IAwardDraftService HTTP/1.1
    Host: vm-orcl-app-srv:4444
    Connection: Keep-Alive, TE
    TE: trailers, deflate, gzip, compress
    User-Agent: Oracle HTTPClient Version 10h
    SOAPAction: ""
    Accept-Encoding: gzip, x-gzip, compress, x-compress
    Content-type: text/xml; charset=UTF-8
    Content-length: 3800
    <?xml version="1.0" encoding="UTF-8"?>
    <env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"><env:Body><IAwardDraftSubmitNew xmlns="http://www.caci.com/pd2/pub">
    <IAwardDraft>
    <accessController/>
    <agreementEndDate/>
    Is there some other configuration piece I'm missing?? I've tried the other variation using httpBasicHeaders, with the same results. I even noted that the "Oracle® BPEL Process Manager Administrator's Guide" says that "Starting with Oracle BPEL Process Manager release 10.1.3, all partner link properties are automatically propagated into the HTTP header." I've tried putting "extra" parms in the partner link bindings, but they don't show up either.
    What am I missing??
    Thanks,
    Mike

  • I was trying to move my photos from the iPhoto library to an external hard drive.  I now have a desktop display of thousands of cascading photos.  How do I remove them from my desktop screen?

    I was trying to move my photos from the iPhoto library to an external hard drive.  I now have a desktop display of thousands of cascading photos.  How do I remove them from my desktop screen?

    Strangely enough we can not see you so it really helps if you share with use exactly what you have, exactly what you did and details about the problem
    what version of iPhoto and of the OS? What exact steps did you do? where are you seeing these "thousands of cascading photos" now and using what software and what exactly did you want to accomplish
    The correct way to move your iphoto library to an external drive is to verify the drive is formatted Mac OS extended (journal) and then drag the iphotl library intact as a single entity to is
    The correct way to move some or all of your photos is to select them in iphoto and export 9file menu ==> export  --  https://discussions.apple.com/docs/DOC-4921 ) to the external drive
    LN

  • When i plugged my ipod into the computer it started to make buzzing and screeching noises. It became hot so i removed it and then the screen froze while it continued to make these noises. I have never had anything like this happen.

    When i plugged my ipod into the computer it started to make buzzing and screeching noises. It became hot so i removed it and then the screen froze while it continued to make these noises. I have never had anything like this happen. (never gotten it wet or had it exposed to extreme temperatures) It is also unresponsive to any buttons on the ipod and it didn't show up when i plugged it into my computer. What do I do? Also if it is unfixable could i get a free one from apple?

    Hey briannagrace96,
    Welcome to Apple Support Communities! I'd check out the following article, it looks like it applies to your situation:
    iPod: Appears in Windows but not in iTunes
    http://support.apple.com/kb/ts1363
    You'll want to go through the following troubleshooting steps, and for more detail on each step follow the link to the article above:
    Try the iPod troubleshooting assistant:
    If you have not already done so, try the steps in the iPod Troubleshooting Assistant (choose your iPod model from the list).
    If the issue remains after following your iPod's troubleshooting assistant, follow the steps below to continue troubleshooting your issue.
    Restart the iPod Service
    Restart the Apple Mobile Device Service
    Empty your Temp directory and restart
    Verify that the Apple Mobile Device USB Driver is installed
    Change your iPod's drive letter
    Remove and reinstall iTunes
    Disable conflicting System Services and Startup Items
    Update, Reconfigure, Disable, or Remove Security Software
    Deleting damaged or incorrect registry keys
    Take care,
    David

  • How can I remove exportpdf window from my screen?

    how can I remove exportpdf window from my screen? It clutters things up and is very annoying
    Ed

    I accessed it via reader, thinking it was a free part of Reader, but don’t have a use for it, and now I cannot get it off the screen where it takes up the right-hand 2 inches of my screen as clutter.
    Any ideas?
    Ed
    <removed by admin>

  • Embedding basic http authentication credentials in JNLP file

    I want to embed basic http authentication credentials in the JNLP file.
    Basically, I want the jars to be behind basic http authentication in order to distribute the application only to authorized users (I understand this is not strong security, but it's fine for my purposes) who are all on Windows, and once the java app is initially installed, I never want to have to enter the http login credentials again.
    So I set up the http authentication and in the jnlp file I have:
    <jnlp
         spec="1.5*"
    codebase="http://username:[email protected]"
         href="program.jnlp">
    This doesn't seem to phase the JWS authenticator. So on the first launch from the desktop shortcut I put the credentials in manually and select "save this password in my password list". It seems like I'm in the clear as the next time I launch the application from a desktop shortcut I am not asked for any credentials, but every time the Windows machine is restarted, I get the JWS authenticator again...the password is no longer saved.
    Is there a way to embed the username/password in the JNLP file to get past the JWS authenticator without having to retype the username and password every time the machine is restarted? Or to permanently save the password in the JWS authenticator password list? Or any other way to set it up where once the application is initially installed, the http authentication credentials never have to be manually entered again?
    Thanks!

    Hi everybody,
    I manage to do almost all (I suppose), but I need last help.
    Through SM59 I created the HTTP Destination needed; then, I implemented the code given by SAP here:
    http://help.sap.com/saphelp_47x200/helpdata/en/2d/64d053e74911d6b2e400508b6b8a93/content.htm
    I ran the program, and it gives me the error: "Binder not found for soapAction = null.
    I suppose that I should give the link to the soapAction, but I don't know where in the code.
    Have you any idea?
    Thanks and Regards,
    Francesco

  • Removing the Adobe Captivate loading screen

    Hi,
    Is it possible to remove the Adobe Captivate loading screen on exported .swf files?
    Or if not to remove the loading screen create my own?
    Any help would be appreciated, as a total newbie to captivate!
    Thanks

    Hi there
    Sure is!
    Depending on your version of Captivate things may be worded slightly differently. But here is for version 4:
    Click Edit > Preferences...
    Click the Project node and the Start and End node.
    To turn it off, clear the check mark for the check box labeled Preloader.
    To choose a different preloader, click the ellipsis icon and choose one.
    Hope this helps... Rick
    Click here for Adobe Authorized Captivate and RoboHelp HTML Training
    Click here for the SorcerStone Blog
    Click here for RoboHelp and Captivate eBooks

  • How to remove items from iPad home screen?

    How to remove items from iPad home screen?

    Press and hold any of the apps and after a couple of seconds or so they should start to shake. Then press the 'x' in the left corner to delete the ones that you don't want, and when you've finished deleting press the home button so as to stop the shaking. If you don't get the 'x' on any of the apps that you've downloaded (you can't delete built-in apps) then check that Settings > General > Restrictions > Deleting Apps isn't set 'off'

  • Internationalizing Basic HTTP authentication browser dialog for UserID

    Is it possible to have multibyte user ID for Basic HTTP authentication? Based on RFC2617 user ID has to be *Text, which basically is ASCII. But I thought maybe someone has a workaround for this limitation. Our entire web app is internationalized, we use UTF-8 as encoding for JPS pages and request processing, and that all works fine, but there is one area where we use Basic HTTP authentication, and so far I was not able to find a way to internatianalize that. Once the resource is reqested, we process request in the servlet and if the user is not authenticated we send authentication challenge response to the browser. Response encoding is set to UTF-8. After user enters the credentials, I process those in the same servlet , again using UTF-8. Of course when I tried to input the japanese ( multibyte)userID, the authentication is failing. I think the browser is corrupting DBCS data once it Base64 encodes it... Does anyone have ideas whether it is possible to internationalize this at all?

    You'll probably need your own ServletFilter to process the authentication header, since servers will mostly decode headers in the locale encoding, regardless of any charset in the Content-type header of the request. Getting browsers to use UTF-8 encoding before base64 might be a bit tricky though.
    It is probably better to use form based login. The procedure for getting UTF-8 encoded form parameters is a well understood FAQ for this forum.

  • Basic access authentication

    Hello,
    I'm trying to use a webview to display a web site using Basic access authentication.
    I've downloaded the samples.
    With SwingInterop_browser.jnlp a popup ask the username/password and everything is working fine
    With SwingInterop.jar i get an 401 - Unauthorized
    There is probably an arg to pass to the java -jar command...
    Any idea?
    Thanks in advance
    Edited by: 977177 on 16 déc. 2012 13:16

    We are further forward and have come up with the following approach. We are publishing the output to an an unprotected area. The basic authentication can then be applied to the Tomcat Server as required.
    Read the RoboColum(n).

  • Basic HTTP Authentication

    Hi everyone,
    I'm trying to make a portal/gateway environment where a user can be automatically logged in other applications using Basic HTTP Authentication.
    To do this I have enabled the Basic HTTP Authentication in the psconsole (under Secure Remote Access > default > Core).
    I have also added a couple of LDAP attributes in the Portal LDAP: sunPortalGatewayWWWAuthorization.
    Are these the only two steps needed? Or am I forgetting something?
    Could someone tell me how the values in the sunPortalGatewayWWWAuthorization can be formed? I am currently using someone else's code, which used to work on a Portal Server 6 environment. I'm not sure if I understand well how those Basic Authentication values are formed.
    Thanks a lot!
    Sten

    Thank you Yvan, for your reply.
    I have looked at the Access Manager in the old environment, and did not see any SSO functionality being enabled.
    The old environment does not have a psconsole, so I was not able to check the settings over there.
    What bothers me, is that I do not know what kind of values should be stored in the sunPortalGatewayWWWAuthorization attribute. A basic http authentication string would look like this: Authorization: Basic QWxhZGRpbjpvcGVuIHNlc2FtZQ==
    (This would be a Base64 encoding of Aladdin:open sesame).
    But in the Portal LDAP it seems that everything is encoded in Base64. As far as I understand the code is doing the following:
    - Make-up string: "+hostname+|Authorization: Basic +username+:+password+"
    - additionally, it looks like the whole string is being encrypted too, using a PBEWithMD5andDES algorithm
    Is this a requirement for the Gateway? Or is this for some kind of security reason? And is this correct?
    Thanks,
    Sten

  • DB Authentication Screen

    Hi,
    I am hoping some one can help me on this.
    I have 2 reports running on the same server, I have customized DB auth file for 1st Report but when I run the 2nd Report I still get the customized Screen.
    How can I get two different DB Authentication Screens for 2 diff reports on the same server?.
    Thanks
    Amit.

    Hi,
    Am not sure why this is happening for only one DB. In general, rwservlet stores a client-side cookie (called Userid cookie) to store DB connection information, so that users do not need to re-authenticate themselves again with the same database. I would recommend that you go through "Securing Oracle Reports" whitepaper (page 11), and see what may be causing this in your environment, eg, maybe some environment setting, or browser setting that is peculiar to reports being run against this DB:
    http://otn.oracle.com/products/reports/htdocs/search.html?cat=SEC&col=WIP&submit=Search
    Navneet.

  • Safari 5.1 HTML5 HTTP basic access authentication issue video does not load

    I have a .m4v video referenced in a page with the HTML5 video tag in a folder which is in a password protected folder housed on iPage.
    Safari 5.0.5 plays the video fine.  Safari 5.1 fails to load/play the video in the protected folder.  If I move the video to a not protected folder, Safari 5.1 plays it fine.
    This is on iPage.  Back on MobileMe all is fine with 5.1.
    I think this is a HTTP basic access authentication issue with 5.1.
    Anyone have similar issue? Work around?

    Yes, I can also confirm this behaviour. This is in Safari 5.1.1, but I also see the exact same thing in WebKit nightlies.

  • How to remove paint from my macbook screen

    Hi My roommate was doing some painting and my MacBook was on the coffee table and now I have flecks of paint on my screen. What is the safest way to remove it without damaging the screen?

    Try Goof-Off or Methyl Ethyl Keytone (MEK) both which dissolve water based paint (latex wall paints) and evaporate very quickly, however when it dries if it's on the screen again then it will dry there. So you need to wipe off with clean areas of a cloth quickly to transfer the paint to the cloth and not back onto the screen.
    Since both are extremely powerful solvents, it's highly advised to test using a cotton swab on a lower corner someplace small and allow to dry, hold at a angle to see if it will damage the screen.
    If it's small tiny flecks like spots, you may use a plastic credit card or plastic paint scraper and lightly pass over the screen and chip them off.
    Oil based paints are a different matter, I'm assuming here the walls were painted to get that sort of splatter on the screen.

Maybe you are looking for