Sample Custom SSO not working for external userid mapped in userprofile in 11.1.1.8

Hi,
WebCenter sites v: 11gR1 (11.1.1.8)
I am in the process of validating Custom SSO Behaviour. I am facing hurdles. I have mentioned below the steps I preformed.
1. Deployed customizable-sso-11.1.1.8.0 .jar in cas/WEB-INF/lib
2. Copied SampleLoginform.jsp file to cas/fatwire
3. Copied the customSampleSSObeans.xml configuration file into cas/WEB-INF/spring-configuration folder.
4. Modified the following bean
        <bean id="customUserConfiguration" class="com.fatwire.wem.sso.cas.sample.SampleConfiguration"
                p:casLoginUrl="http://xyz.com:7001/cas/login"
                p:resolverUrl="http://xyz.com:7001/cs/custom/customCsResolver.jsp"
                p:resolverCredential-ref="resolverCredential"
                p:traceFlag="false"
                p:sampleDomain="mydomain"
                p:sampleFormUrl="http://xyz.com:7001/cas/fatwire/SampleLoginForm.jsp"
                />
  Note: p:resolverCredential - I found it new in this bean, as it is not referenced anywhere in the WCS documentation. This resolverCredentail is actually another bean configured in customResolverCredentail.xml under spring-configuration folder. Also, I am not sure if p:sampleDomain has to be modified to suit the environment. Currently I have retained the default value of "mydomain".
<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework.org/schema/beans"
        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:p="http://www.springframework.org/schema/p"
        xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-2.0.xsd">
        <description>
                This defines the SitesCS username/password credentials needed for identity resolution
        </description>
        <bean id="resolverCredential" class="com.fatwire.security.common.SecurityCredential">
                <property name="username" value="fwadmin" />
                <property name="password" value="xceladmin" />
                </bean>
</beans>
The default value mentioned for property name username and password were "@username@" and "@password@" respectively. I changed them to fwadmin/xceladmin as in the file above.
5. In WCS Admin UI, I added a user atribute "samplesso" and assigned unique value for couple of users
6. Restarted CAS.
7. On accessin wcs url, I am now redirected to custom sample login page(SampleLoginform.jsp)
    Following are the form fields: username, password, domain, external userid
8. It works fine, if I submit wcs credentails for username,password and default domain (mydomain) and I am taken to the WCS Admin UI
9. But if I submit domain(mydomain) and mapped user(unique value in sep 5) against userid, I get an error page. Following is the error
org.springframework.webflow.engine.ActionExecutionException: Exception thrown executing [AnnotatedAction@5f82e73 targetAction = com.fatwire.wem.sso.cas.web.CustomLoginViewAction@68b18314, attributes = map[[empty]]] in state 'viewLoginForm' of flow 'login-webflow' -- action execution attributes were 'map[[empty]]'; nested exception is java.lang.SecurityException: java.lang.NullPointerException
What is the cause and fix for the problem. Am I supposed to perform any other step?
Is there anything specific to p:resolverUrl="http://xyz.com:7001/cs/custom/customCsResolver.jsp" ? I did not do any deployment corresponding to this, as there was no such step mentioned in documentation.
Thanks

I just recently implemnted this for my current client.
http://xyz.com:7001/cs/custom/customCsResolver.jsp
The context "cs" here is important. For my current client, we installed 11G with context "cm". So for us the the resolver URL is:
http://xyz.com:7001/cm/custom/customCsResolver.jsp  and when we login into FatWire we use:
http://xyz.com:7001/cm/login.
If you look in your Sites application folder you should see <Sites App/Context>/custom/customcsResolver.jsp. In the Jsk it's located at:
C:\Oracle\WebCenter\Sites\11gR1\App_Server\apache-tomcat-6.0.32\webapps\cs\custom\customCsResolver.jsp
Regards,
Robert Jackson

Similar Messages

  • Out of office replies in Exchange 2013 not working for external recipients

    Hi,
    Few days ago a couple of company workers went to vacation. They set up OOF automatic replies in OWA 2013. However automatic replies are not working for external recipients (outside of company). Internal users (company users) receive OOF notification.
    I'm using smart host in sender connector configuration (SMTP server of internet provider) to deliver emails. Any clues about this problem ? Please find below part of the transaction log. For testing purposes i set up administrator account
    to be on vacation.
    HARED... SMTP    
    [email protected]           
    {[email protected]}             Automatic reply: vacation test
    RECEIVE  SMTP    
    [email protected]           
    {[email protected]}             Automatic reply: vacation test
    DROP     ROUTING 
    [email protected]           
    {[email protected]}             Automatic reply: vacation test
    AGENT... AGENT    [email protected]           
    {[email protected]}             Automatic reply: vacation test
    HARED... SMTP    
    [email protected]           
    {[email protected]}             Automatic reply: vacation test
    RECEIVE  SMTP    
    [email protected]           
    {[email protected]}             Automatic reply: vacation test
    AGENT... AGENT    [email protected]           
    {[email protected]}             Automatic reply: vacation test
    TRANSFER ROUTING  [email protected]           
    {[email protected]}             Automatic reply: vacation test
    FAIL     SMTP    
    [email protected]           
    {[email protected]}             Automatic reply: vacation test

    Hi Informus,
    Please check if it is allowed in AllowedOOFType of the Remote Domain *
    In Exchange 2013, the only way to see or change the current configuration for automatic replying and forwarding to the Internet is via the Exchange Management Shell (EMS) with PowerShell commands.
    To get the currently configured Remote Domains, use:
    Get-RemoteDomain
    Name                           DomainName                                  
    AllowedOOFType
    Default                        *                                           
    External
    Get-RemoteDomain Default | fl AllowedOOFType, AutoReplyEnabled, AutoForwardEnabled
    AllowedOOFType     : External
    AutoReplyEnabled   : False
    AutoForwardEnabled : False
    To change the settings, use the Set-RemoteDomain command.
    Enable automatic replies
    Set-RemoteDomain -AutoReplyEnabled $true
    Enable automatic forwards
    Set-RemoteDomain –AutoForwardEnabled $true
    Enable OOF for Outlook 2003 and previous (for Exchange 2007 and 2010 support)
    Set-RemoteDomain –AllowedOOFType $ExternalLegacy
    To change all these properties at once, you can use:
    Set-RemoteDomain Default -AutoReplyEnabled $true –AutoForwardEnabled $true –AllowedOOFType $ExternalLegacy
    Note:
    Valid settings for the AllowedOOFType property are:
    External
    This is the default and only allows for the new style OOF messages as introduced in Outlook 2007.
    ExternalLegacy
    This settings allows for both the new style and old style OOF messages and needs to be set if you want to enable external OOF support for Outlook 2003 as well.
    None
    This setting doesn’t allow for the use of OOF messages at all (both internal and external).
    InternalLegacy
    This setting only allows for internal OOF messages to be sent for all Outlook versions.
    Regards,
    Satyajit
    Please “Vote As Helpful”
    if you find my contribution useful or “Mark As Answer” if it does answer your question. That will encourage me - and others - to take time out to help you.

  • Out of Office replies not working for external emails - Exchange 2010, Outlook 2010

    Hello.
    We have two Exchange 2010 mailbox servers and a third for client access. There are two mailbox databases replicated to both servers as a DAG. There is also one 2003 legacy server that is awaiting decommissioning that is basically just heating the server
    room - all the mailboxes have been migrated.
    We have recently noticed that out of office replies are no longer working for external recipients, but are being sent for internal users.
    I have checked under "Organisation configuration" - "hub transport" - "Remote domains" and made sure that is set to "Allow external out-of-office messages and legacy out-of-office messages"
    Looking at the message tracking logs it appears that the out of office reply isn't generated for external users - we do have an external mail filter that inbound and outbound messages are relayed through but that isn't blocking anything.
    This was working until recently, and I can't see any errors in the logs that look related. All three servers have been rebooted just in case.
    Any suggestions where to look next?

    Hello,
    You can capture a trace log to diagnostic
    the OOF issue:
    a. Start ExTRA by clicking Run on the Start menu and then entering the following command-line:
    Extra.exe
    b. On the “Welcome to the Exchange Troubleshooting Assistant” page click Select a task. 
    c. On the “Troubleshooting Task Selection Screen” page click Trace Control. 
    d. Click OK to the following prompt alerting you about possible performance problems running a trace:
    This server does not have the module needed for interpreting traces.
    Proceed only if this is being done under the direct supervision of a qualified Exchange support engineer.
    e. On the “Configure Trace File” page configure the following options:
    f. After configuring the options in step e, click Set manual trace tags. 
    g. On the “Set Trace Tags Manually” page configure the following settings: 
    Check the following trace tags: InfoWorker.Assistants.OOF, all.
    Note: Please expand all filter options, make sure that we did not check any filter options here. And run the trace again.
    h. Click Start Tracing at the bottom of the page.
    i.  Please reproduce this issue for 3-5 times. After reproduced this issue, stop the tracing and collect the ExchangeDebugTraces.etl
    Thanks,
    Simon

  • SSO not working for a custom WDA application that runs in the Portal

    I have a Portal system (Java stack, NW04s) that has an iView of type webDynpro ABAP. The custom Web Dynpro ABAP application resides on another system (ABAP stack, running ECC6). We have configured the trust relationship between the Portal and the ECC system as per
    http://help.sap.com/saphelp_nw04s/helpdata/en/61/42897de269cf44b35f9395978cc9cb/content.htm
    We know this is working since we are able to run ESS. However, for the custom WebDynpro ABAP application, when calling it for the first time, a logon screen shows up. How can we get rid of it? what are we missing to have SSO work for the custom WebDynpro application?

    Please check this link:
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/d35bb690-0201-0010-988a-d669c8530518
    https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.highlightedcontent?documenturi=%2fhelp%2fsdn_help_nw04s%2fsaphelp_nw04s%2fhelpdata%2fen%2f5e%2f6c85c3edf942f39349a1e337434d29%2fcontent.htm
    Hope it helps.
    Regards,
    Mona

  • SSO not working for BW reports as iview in Portal

    Hi,
    I have setup SSO for netweaver portal 7.0 and BI 7.0 as backend system.
    I have used SAPLOGONTICKET for SSO.
    1. Now if I create iView for some transaction , its working fine. UserID and password is not asked and i'm getting into BW sytem.
    2. But if I create an iView for BW report type 3.x and pull a report from BI system, it is showing a login screen to me. now I have to give clientno, userID and password to get into the system.
    Can please some help me in this issue.
    is there some specific configuration I need to make..?
    Thanks in Advance.
    Regards,
    Saurabh

    Hi Kiran,
    Thanks for your reply.
    My problem is now solved. Actually transaction iViews use connectors to connect to the backend system, where as BW reports iviews use WAS to connect to the backend system.
    while accessing the portal i was not giving the fully qualified name in URL.
    while accessing the portal correct way is to use the URL is :
    http://hostname.domain:port/irj/portal ...I was missing the domain portion.
    Use the fully qualified name so that both EP and backend systems comes in same domain.
    Regards
    Saurabh

  • CAS SSO not working for VPN Group

    Hello,
    I am trying to get SSO working for a CAS/CAM in a inband virtual gateway for VPN users coming in off a ASA5520. There are two VPN groups each with its own group policy and tunnel group. One group uses a Windows IAS Radius Server and the other a token based RADIUS RSA device.
    Users use the AnyConnect client to connect to the ASA where they are dumped into a vlan. SSO works for the group that uses the Winodws radius server. On the CAS the Cisco VPN Auth server has the Unauthenticated Group as the default group, and then I use mapping rules (Framed_IP_Address) to get the different vpn groups into the right roles. This works for the one group, but since SSO is not working on the second group the CAS never gets the chance to assign them into the correct role.
    The only thing I got is this from the ASA:
    AAA Marking RADIUS server billybob in aaa-server group cas_accounting as ACTIVE
    AAA Marking RADIUS server billybob in aaa-server group cas_accounting as FAILED
    I am so close but cant call this done yet....

    Hey Faisel,
    Thanks for the question.
    This is the stange thing. For days Group A (Windows Radius Server) was working and Group B (RSA Radius Server)  would not work. Then for some reason I had to reboot the CAS and BOOM...Group B started working and Group A STOPPED working.
    So on the ASA I now get these:
    AAA Marking RADIUS server cas2-hvn-3515 in aaa-server group cas_accounting2 as ACTIVE
    AAA Marking RADIUS server cas2-hvn-3515 in aaa-server group cas_accounting2 as FAILED
    Where cas_accounting2 is the AAA server group for Group A
    On the ASA I can see that the FW sends a packet to the cas:
    "send pkt cas2-hvn-3515/1813"
    but the FW never gets an answer back from the CAS for Group A whereas with Group B I can see the response from the CAS.
    "rad_vrfy() : response message verified"
    What can I look for in the CAS logs to see where the problem is. I will try and setup a packet capture on the CAS and debug it too.

  • GPS Location does not work for external devices

    It has been posted before, but I'll post again in case anyone has found a solution.
    I am using an external device (XGPS150) to provide GPS to my Ipod Touch 4G. It worked great with iOS 5. It does not work reliably with iOS 6. I have to turn off and then turn on location services, and occasionally reboot the iPod to make it work. I have tried using iOS 6, 6.01, and 6.1 Beta 3, and the problem is present in all version. I wish Apple would fix the problem.

    These previous discussions may shed some light on the problem.
    TS1702 magellan External gps not...: Apple Support Communities
    after updating to iOS 6 gps signals are...: Apple Support Communities

  • SSO UIDPW not working for external Popup Window but works with SAPLOGONTICK

    Dear Experts,
    I have an issue with SSO user mapping (UIDPW), but the same scenario is working with SAPLOGONTICKET.
    Some list gets displayed in the Web Dynpro ABAP iView which has the hyperlinks where on click on the hyper link it opens a external popup window (another Web Dynpro Application) and display the summary some data.
    This scenario works when I set the logon method to SAPLOGONTICKET, but when I set it as UIDPW it won't work when a new window opens on click on the hyperlink from Web Dynpro iView as stated above. It asks to login to R/3 system.
    Can anyone please let me know what could be the reason it fails in External Popup window scenario when logon method as UIDPW.
    Thanks
    Murthy

    Hi Murthy,
    You can use application integrator iView to integrate your ABAP application into the portal and you'll be able to pass the variables <MappedUser>, <MappedPassword>, etc. assuming you know about the security risks in passing mapped info.
    http://help.sap.com/erp2005_ehp_05/helpdata/en/36/5e3842134bad04e10000000a1550b0/frameset.htm
    Still, your ABAPers might need to handle the passed in variables in the first ABAP application and pass them onto the second one.  Again, without knowing how you navigate between the 2 apps and other details about your system landscape, versions, etc. this remains as a guess.  If you search SDN, you'll find many different solutions then you can choose one which is most suitable for your situation.
    Regards,
    Dao

  • Group by collapsed not working for external content type

    Hi,
    I've got a list that displays data from external content type and I need it to be grouped by a column and have it collapsed by default.
    The problem I have is that on a page by itself everything works fine. But when I add the list on a page with other web parts rendering the list as collapsed doesn't work as expected.
    It will render the group headers correctly and everything is collapsed. But when I expand one of the groups ALL items are shown under that group, even the ones that belong to some other group. I then expand another group and it also shows ALL items. But when
    I set the default to expanded each group header only has the items that belong to it, even if I collapse it and then expand again.
    As I said, having the groups collapsed works fine if the listview is by itself on a web part page, but as soon as I add another web part (doesn't matter what type) it stops working.
    Is this a bug or might there be something I'm doing wrong?

    Hi,
    As this issue is submitted via internal pipeline without external URL can be provided, we will keep focus on it to see if there any update.
    If there is an urgent requirement, I would suggest you call MS Customer Support Services for quick replies:
    http://support.microsoft.com/
    Best regards,
    Patrick
    Patrick Liang
    TechNet Community Support

  • Customer exit not working for variable

    hi ,  i have created the variable with customer exit,options for variable are optional and ready for input checked.when in debugging mode the value in exit i_vnam is having value of the variable but in the second time it dont have.so i cannot go the code after user inputs data. please solve.

    Hi vijay pilli,
    Custome exit means  by writing code you have to populate the value by specifying a value directly or from the user input.
    for example :
    when ever user runs the report he need to see only for that current year sales revenue.So, for this create a variable for 0calyear > customer exit> clear the ready for input>
    here based on sy-datum we will get the current year.
    when variable
    l_s_range-low = Sy-datum+0(4).
    l_s_range-sign = I.
    L_S_RANGE-OPT = EQ
    Append L_S_RANGE TO E_T_RANGE.
    Regards
    Sree

  • Keyshield SSO not working for Vibe 4.0

    Hi All,
    Using keyshield from a long time ago (version 5.4 Build 2014-09-30 16:46:30).
    I was using it with previous version of Vibe and Filr (by installing the java servlet).
    Now Keyshield is included in Vibe 4.0 and Filr 1.2.
    With Filr, everything is fine. With Vibe 4.0, it doesn't work.
    Keyshield configuration parameters are the same in both products and are accepted as Valid by the administration page in both products also.
    But, even with a keyshield client in green state, it works fine with Filr but it doesn't work with Vibe 4.0.
    I try to find tracks in the logs but i've got nothing (logs, catalina.out, etc ...).
    Did somebody test keyshield ? Is there a special way to try to debug it ?
    Many thanks in advance

    worked! :)

  • OC4J JSP Debugging not working for all the jsps

    Hi,
    Initially I was not able to debug jsps using Eclipse and OC4J. The jsp debugging started working once I made the below changes:
    1) global-web-application.xml is modified
    Changed the attribute development="true" in orion-web-app
    Added the below init param for the JspServlet
    <init-param>
    <param-name>debug</param-name>
    <param-value>class</param-value>
    </init-param>
    If the jsps are present in a sub directory under the webcontent none of the breakpoints are working. I am still be able to view the jsp pages on the browser.
    Tools: Oracle 10g Application Server Standalone version(10.1.3.5.0), JDK5, Windows XP, Eclipse Indigo
    Project Structure:
    Test (Eclipse Dynamic Web Project)
    -WebContent
    Sample.jsp ( Breakpoints are working)
    -subF (Folder)
    SubSample.jsp (Breakpoints are not working)
    -WEB-INF
    web.xml
    Debugging worked for http://localhost:8888/Test/Sample.jsp
    Debugging not working for http://localhost:8888/Test/subF/SubSample.jsp
    Any help is highly appreciated.
    Regards
    Danny

    This tells there is not enough main memory (not disk space) for the program to run.
    - You can look the dump in ST22, it will have suggestions on increasing the ROLLAREA??, you can forward that to Basis.
    - Most likely you will not have any more memory to assign so the above may not be feasible. Try to rework your query so it works with less data.

  • Custom Pakage is not working for me.

    I was dropping photos just fine into the custom package a few minutes ago, and printed a few photos.  I imported new photos from my external drive, and when I try to print it does not work in custom. No dropping photos into the boxes, and I cannot drag and move around the boxes. I need help! I don't know what happened that it stopped working. hmm now that I think about it.. the first photos i printed were from a new sony A6000.  The ones i'm trying to print now, print fine in single photos, but they are from an older camera, could that be the reason the custom tab completely is not touchable?..  Okay no.. I just tried to custom package photos from new camera again and its not working for the new photos too..@
    Thanks, in advance..

    I am not sure exactly what is going on, there, but when you drag-and-drop a photo you have to click-drag on the thumbnail, not the surrounding gray border area.
    The reasons you’re guessing why things aren’t working don’t seem like they’d be reasons to me.

  • IPhone 6 External Mic not working for Siri/Dictation

    I am finding that the external mic on my iPhone 6 works for phone calls and voice memos, but does not work for Siri/Dictation.  When I plug in the earbuds, they work for everything (including Siri/Dictation).
    Was chatting to Apple support who had me reset all settings.  I thought that worked, but realized that after a reset, Siri is off and I was talking to "Voice control" (which works).  When I turned Siri back on, it does not work.
    I have two questions for the community to see if you can help:
    1- I have been assuming this must be a software problem since the mic does work for non-Siri access.  But is that true?  Is there a hardware component that Siri depends on which could be faulty here?
    2- If it is software, what action should I try to address it?  I have done a reset all settings already and that did not help.
    Doug

    Hi, everyone.  I talked to Apple Genius at Apple Store last week, she said it should be a software issue and I needed to reset my iphone 6 plus as a new device and I can not use the backup restore from my iCloud, it was because the microphone bug or glitch can be in the backup also. Ok, followed her advice, erased all contents and set my iphone as a new device , the microphone worked for an hour, but went bad again.  I used "voice memo" app from Apple to test the microphone. It is the best tool since it doesn't involve any provider's network and it doesn't need another person's phone to listen and test.  If you can hear your voice recording clearly, then the mic works.  I tested it 3-4 times a day for a few days now, half of the time the mic doesn't work.  So, set as a new device isn't working. The issue is intermittent and it comes and goes as it likes, so very annoying. I carry my Apple EarPods with me in these past few days ust in case I need to make important phone calls.  Will need to go back to Apple Genius this weekend for sure.  Will give update after the weekend.

  • SSO is not working for SAPGUI for HTML

    Hi Experts,
    We have configured SSO between EP and ECC.SSO is working fine for SAPGUI for windows.But it is not working for SAPGUI for HTML.
    Workflow iViews are getting error.
    "SWITCH to HTTPS does not occur."
    The domain names are different for EP and ECC.
    Please let me know ,is there any settings need to check.
    Regards,
    Bala.

    Hi
    The point here is that your Portal server is on a different domain, so you have to configure the logon ticket issuer (portal) to generate logon ticket for multiple domains.
    http://help.sap.com/saphelp_nw04s/helpdata/en/a0/88a340fa432b54e10000000a1550b0/frameset.htm
    Best regards
    Johann

Maybe you are looking for

  • Macbook Pro hard disk has gone

    I got the spinning beachball on my MacBook Pro 15" Intel Core2 unibody 2009 OS X 10.6 and then crash. I zapped PRAM and did Disk Utiliy from Install disk but no hard disk to be seen. I took out HD and put it in external USB drive, it works perfectly

  • Web app directory structure

    Is there some standard directory structure when building J2EE web application that consists for example JSP pages, servlets, EJB components, pictures etc.

  • Hello i lost my itunes library how do i recover it thank you

    hello i lost my itunes library on my mac how do i recover it thank you

  • Why does the cursor skip a line every time I start a new contact?

    I just got my first iPhone, and I love many things about it, but I'm pretty frustrated about other things. One frustrating thing is that if I go to save a number as a contact, it brings up the new contact page, and EVERY time I click on the first nam

  • Inconsistencies E-mailing Results

    Hello, all: I'm exploring the eLearning capabilities of Captivate 3.0, and I'm having trouble with reporting. I'm trying to simply e-mail the quiz results and interactions to myself either in the body of the message or as an attachment. I've found th