SAP Authentication - Entitlement systems

Hi Team,
We designed all the reports with one OLAP Connection, Its mapped to SAP - ECC Entitlement systems
Now, we need one more report with data level filter for specific users. So, We are planning to achieve this at BW cube level for specific users, which are created in BW system.
So, for this we need to comeup with one more OLAP Connection to the BW system and other SAP Entitlement systems for BW configurations.
Clarifications:
Is this possible to maintain the two SAP entitlement systems?
Can we maintain these two sytems default for users login?
Do we need to add one more key store? if yes, can we upload two keystores in options?
Could you please help me out from these questions?
Regards,
Krishna

Hello,
please see your answers.
1. Yes it is
2. No, only one System can be teh default. For the other the user has to type the SID and Client manually into the Login Page
3. No, you only need one Keystore. You need to import the same certificate, that you used for your first SAP System, into the second SAP System.
Regards
-Seb.

Similar Messages

Cannot add BW SAP system in CMC Authentication\Entitlement System

Hi,
I've re-installed Edge XI 3.1 SP3, Explorer/Polestar SP2 and finally SAP Integration Kit SP3 on Windows 2008 & SQL Server 2008 after a consultant came onsite to do this 4 months ago. I wanted the practice and its a pilot installation only.
I cannot seem to add my SAP BW Dev system to the Entitlement system from within the CMC - Authentication - SAP section however. I 've got the .dll's in the right places, I've tried uninstalling and reinstalling the Integration Kit. restarting the Tomcat server, etc to no avail. I've also had a read of Ingo's blog and am sure I've followed all his steps correctly.
Can this only be a case of not following the installation correctly or am I missing something else? Any help appreciated please.
Thanks.

Hi,
I've had success in getting the Entitlement System connected.
Basically on top of completely uninstalling everything SAP and BO related, renaming folders to .OLD and rebooting, then installing Edge and SAP GUI....I then followed these steps before installing Integration Kit:
To install InfoView automatically, you must install and configure SAP Java Connector components:
To do this, copy librfc32.dll and librfc32u.dll, to the appropriate folder.
u2022 On 32-bit Windows: %windir%\system32
u2022 On 64-bit Windows: %windir%\sysWOW64
Copy sapjcorfc.dll to <BusinessObjects install directory ..\win32_x86.
Then copy sapjco.jar to the application serveru2019s shared library folder. For example, on a 64-bit Windows system with Tomcat 5.5, copy sapjco.jar to H:\Program Files (x86)\Business Objects\Tomcat55\shared\lib
N.B. Had to create folder shared\lib in H:\Program Files (x86)\Business Objects\Tomcat55.
Rebooted.
This is similar to and in addition to Ingo's steps, however he does refer to the Integration Install guide, which is where the above is mostly taken from.
I could then UPDATE the new BW Dev system from the CMC and then see all available roles.
Thanks for your prompt advice and support Ingo.

Can we add new logical system in Entitlement tab in SAP Authentication.

Hi ,
We already Installed and configured sap integration kit and every thing works fine. My question is as of now we connected our sap BW Dev system to BOBJ but we would like to connect to BW Prod System to same BOBJ System. What are the steps we need to follow to do this.
Can we just add the new logical system in entitlement tab of sap authentication in BOBJ 3.1? and import the roles and login to BOBJ USING THE Newly added SYSTEM Credentials. Thanks in Advance.
Thanks,
SK.

Hi Ingo,
Thanks for the information.
Are there any specific steps you need to follow when you are adding one more system to sap authentication. can you please give the steps we need to follow to setup this in right way. Thanks in advance.
Is there any thing we need to configure on sap side other than sap logon ticket parametre. If you can please provide the steps it will be great. Thankyou very much In advance.
Thanks,
SK.
Edited by: Vallabhaneni SK on Jul 14, 2009 8:53 AM

Error adding entitlment system entry in the sap authentication

Hi people,
I could not add entry in the sap authentication. Every time I try to add entry nothing happens. I press button "New", page is reloaded and in the end I do not see anything in the list "Logical system name".
There are several strings in the CMS trace log:
2010/06/04 10:10:19.562|>>| | | 7940|6572|{|||||||||||||||IInfoStore_Impl::queryEx3
2010/06/04 10:10:19.562|>=| | | 7940|6572|{|||||||||||||||CInfoStoreSubsystem::Query
2010/06/04 10:10:19.562|>=| | | 7940|6572| |||||||||||||||CInfoStoreSubsystem::Query:[UID=12;USID=33837] : (proc=false,chk=true,srv=false)
.\InfoStore.cpp:2942: TraceLog message 30613
2010/06/04 10:10:19.562|>=|E|X| 7940|6572|}|||||||||||||||CInfoStoreSubsystem::Query: 0
.\osca_i_impl.cpp:612: TraceLog message 30614
But I can connect to the same R/3 server via Crystal Reports.
It seems that BOBJ can not add records into the Oracle database.
My installation: Win 2k3 x64, Oracle 10.2.0.1, BOBJ ENT XI 3.1 SP3, Integration Kit SAP SP3, sapjco-ntintel-2.1.9.zip

Thank you, John Mrozek.
Thank you, Ingo Hilgefort.
It seems very strange to press "Update" button for adding new entry.
The problem has been resolved

Cannot enter to SAP Entitlement System.

I cannot enter to SAP Entitlement System.
I installed BOBJ XI 3.1 SP2 and SAP Integration Kit XI 3.1 SP2 in Windows 2003 64bits
Now when I try to enter in CMC u2013 Authentication u2013 SAP, It does not open anything, and it did not allow me to see Entitlement System for SAP. When I try to open the other Authetications, they open inmediatly.
I have installed SAP JCo Release 2.1.8.
What can I do?
Regards,
Paulina
Edited by: Paulina Villacis on Aug 19, 2009 12:56 AM

Hi Ingo
It was yesterday, I can not enter to SAP Authentication, this link did not work, the other links open the applications without problem. I did click and clikc with the mouse and this link do not open anything.
But now I have another problem, last night restarted all machine, and now I have this error, when I am trying to enter CMC
Error: Server solar:6400 not found or server may be down (FWM 01003) null
I have verified CCM and it is working. two days ago I solved this problem. I deleted #SQL_7C4_0.MYD file from C:\WINDOWS\Temp
Later CMC works very well, but now I did the same but it does not work.
The error in Event Viewer is
Node Name: solar]
[User Name: SYSTEM]
[Error null] Server Intelligence Agent has lost its connection to the CMS cluster but will continue to attempt to reconnect. Please verify that the CMSs in your cluster are running.
Regards,
Paulina

SAP authentication and SSO into BI4 with multiple SAP systems

We have already setup SAP authentication and SSO between ECC6 and BI4, e.g. to run CR 2011 reports with data based on ECC infosets, or BEx (operational BI on ECC). ECC is the main point of entry for users, so ECC user accounts and role imports are used in BI4.
Now if we add BW to this, with Crystal or WebI or Analysis OLAP sourcing data from BW, can we still leverage detailed authorizations in BW on the corresponding BW user - with user accounts and role imports in BI4 still being ECC-based?

Hi,
Let's say the trust relationship is setup between those systems. Then the simple example is to use Enterprise authentication in BI4, and assertion tickets are issued when making requests to ECC or BW. I assume LDAP/AD authentication would work as well.
>> You also have to setup trust between the BI 4 and ECC & between BI4 and BW. Thats part of the setup for the SSO Token Service.
But does this scenario rule out SAP authentication or not? I was hoping that I can still logon to BI4 with an ECC-issued logon ticket, and then BI4 would nevertheless issue assertion tickets for my BW alias.
>> And that is still possible. Setup the SSO Token Service, setup the aliases for the users. then you could logon with ECC credentials and run a BW report because the token service would then generate the token towards the BW system.
ingo

BOE SAP Entitlement System Error

Hi All,
I have installed BOE EDGE XI 3.0 and SAP integration kit and SAP JCO connector.
I am trying to configure SSO as per the blog below:
BusinessObjects and SAP - Configure SAP Authentication
When I try to access the SAP System from the Authentication area I get the error. I have deployed the JCO file (sapjco.jar) to the directory
C:Program FilesBusiness ObjectsTomcat55commonlib
and the dll to C:windowssystem32.
Any suggestions will be really appreciated.
Thanks!
-Deepu
HTTP Status 404 - /SAP/jsp/auth/sapsec_logsys.faces
type Status report
message /SAP/jsp/auth/sapsec_logsys.faces
description The requested resource (/SAP/jsp/auth/sapsec_logsys.faces) is not available.

I have the same issue when using mini-BOE.
The baisc reason should be Integration kit is not installed properly, which lead to the missing of certain file.
404 error means missing file.
JCO sapjcorfc.dll and sapjco.jar should be copid to the right position before install integration kit.
During integration kit, we should choose custom, then select install all featuers, which definitly include the missing file.
Fincally the issue was solved.

Getting error in SAP Authentication configuration for BO Edge 3.1 SP3

Hi,
I have installed BusinessObject Edge Series 3.1 SP3 and BusinessObject XI 3.1 SAP SP3 on Windows 2008 server.
I am trying to configure SAP Authentication between BO and BI server. In CMC i have provided all the details under Entitlement System and click on update, After that when i click on Role Import tab I am getting "Name or password is incorrect". However, I checked user name and password is correct by login with same user and password to BI server.
I have downloaded sapjco.jar and sapjcorfc.dll and placed it at required locations and also done the transport in BI system as given with Integration Kit
I checked document "SAP BusinessObjects XI 3.1 SP3 Integration for SAP Solutions u2013 Supported Platforms" and found that SAP GUI 720 is not supported with SAP BusinessObjects XI 3.1 SP3.
Supported SAP GUI are:
SAP 640 GUI, patch level 25
SAP 710 GUI patch level 6 (1)
But I dont found those SAP GUI's on Service market place.
Please suggest me how to resolve this issue.
Thanks and regards,
Rehan Manzoor

HI,
did you check if the SAP credentials entered on the Entitlement System page have the necessary authorizations to read the roles ?
You can see the details in the Installation Guide.
regards
Ingo Hilgefort

Error while configuring SAP authentication in CMC

Hi,
I am trying to set up SAP authentication in CMC to a SAPBI system to which I am able to connect successfully in Designer and Voyager. I have the SAP Integration KIT also installed.
As a first step I created Entitlement and then filled up the options tab ( Have checked the option Automatically Import Users).
But when I click on Role Import Tab, I get the following error.
com/sap/mw/jco/JCO$Function
Is it because I need to install SAP JCo? Please suggest.
If I need install SAP JCo is it freely available? Which version has to be installed?
Any suggestions will surely help.
Thanks in advance,
Suma

Same issue here.
Business Objects Enterprise 3.0 is installed on a dedicated machine. I have followed the documented installation procedure, step by step, but I am still facing two issues:
#1. SAP Authentication does not work. When trying to log into InfoView using SAP Authentication, I get the following error:
Account information not recognized:
CSecSAPR3Binding::XRFCCnxBroker::BorrowConnection() failed. See following log entries for details.
Failed while trying to log on to SAP system.
The following RFC error was returned: [Group, Key, Message]:
[103, "RFC_ERROR_LOGON_FAILURE", "Name or password is incorrect (repeat logon)"].
The entitlement system has therefore been disabled in memory.
This may be because the SAP system is unavailable or because the credentials are invalid.
The entitlement system has to be re-enabled before it can be used again.
#2. BOE is unable to import the SAP roles (from CMC SAP Authentication configuration). The application throws the following error:
An error has occurred:
com/sap/mw/jco/JCO$Function
I am using JCo v 2.1.8. sapjco.jar was extracted to C:\Program Files\Business Objects\Tomcat55\common\lib and sapjcorfc.dll was extracted to C:\Program Files\Business Objects\BusinessObjects Enterprise 12.0\win32_x86. librfc32.dll was installed in a prior step by the SAP Front End, and the file exists in C:\Windows\system32.
Any other ideas?
Edited by: Eric Axelrod on Feb 3, 2009 11:24 PM

Use of Entitlement system

Hi
When we are configuring SAP Authentication, we create an Entitlement System in BOBJ Server. While creating this Entitlement System we need to supply the username and password. What is the specific use of this usename and password?
Why is that we need to pass the username and password. When this username and password will be used?
Thanks,
Gopi

Hi Ingo and Ricky,
Thanks for the reply.
My concern was regarding the permissions. Is The username and password that we use in entitlement system used for getting the data from BW system or its only useful to import the roles and users into BOBJ system?
Also can a user access a webi report which is created in BOBJ system based on the SAP BW if the user only exists in Bobj system and doesn't exist in SAP BW System?
Say If he can execute the webi report and access the data from SAP BW system without the user actually being in the SAP BW System then what are the credentials that it uses to get the data from SAP BW System?
thanks,
Gopi

Issue While Importing Roles in SAp Authentication

Hi Experts,
I have installed BO XI 3.1 SAP Integration Kit.
While Configuring SAP Authentication in CMC i have enetered all the details of SAP system under entitlement system.
Howevere when i click on Role Import tab , i am not able to see any roles avilable.
I see an error messge over there - Name or password is incorrect (repeat logon)
Howevere i am using the correct username and password.
Thanks
Edited by: Ashwani Sharma on Jul 9, 2009 11:18 AM

Hi, Thanks for reply -
I am connecting to BI 7.0 system.
Before entering username in CMC its working fine with BI 7.0 system and with frontends also.
When i will enter that username and password in CMC and click on Import Roles , Suddenly it shows me error message that -
Name or password is incorrect (repeat logon)
And also that user id got locked in SAP System.
I have tried this with alomost 10 ids..... and same result with all...

Entitlement Systems Logical System Name

Environment:
- BusinessObjects Edge Series BI 3.1 (standard packge)
- Business Objects XI Integration for SAP Solutions
- Windows Server 2003 x64
I am trying to configure a Logical System Name in the Entitlement Systems of the BusinessObjects Central Management Console.
Our BI 7.01 system uses a different naming convention for the logical system name (not the standard <SID>CLNT<client#>
(i.e. BWQCLNT300). We use BWQ300. How would I override the default configuration (put in a different logical system name) in CMC - SAP Authentication?
Please advise. Thank you in advance.
Francis

Ingo,
That is correct. It generated the logical system name automatically for me.
But our BW system have a logical system name of BWQ300 (not BWQCLNT300).
How would I override this ?
Thank you very much for your reply.
Francis

Configure SAP authentication for BusinessObjects

Hi,
I am configuring SAP authentication for BusinessObjects. I created a user account for BusinessObjects Enterprise on SAP with Authorization object, field, Value as "BusinessObjects XI Integration for SAP Solution Installation Guide". After add an SAP entitlement system to BusinessObjects Enterprise, I checked that an entitlement system. It show "User CRYSTAL has no RFC authorization for function group SYST." with CRYSTAL is user of SAP.
Please, help me!!!
Thanks
Duypm

Hi,
My CRYSTAL_ENTITLEMENT Role as below:
CRYSTAL_ENTITLEMENT
|
|--Manually     Cross-application Authorization Objects
|     |_Manually      Authoriaztion Check for RFC Access
|       |_ Manually      Authorization Check for RFC Access
|       |______Activity                    All activities
|       |______Name of RFC to be protected          *
|       |______Type of RFC objects to protected      All value
|
__Manually     Basic: Administration
__Manually     Authorization for file acccess
___Manually      Authorization for file access
__Activity                     Read, Write
__Physical file name               *
__Program Name with Search Help     *
__Manually      User Master Maintenace: User Groups
__manually      User Master Maintenance: User Groups
             |___Activity                Change, Display
             |___User group in user master main     *
I login CRYSTAL user directly on your SAP BW server using SAPGUI. It is ok.I don't get any error messages there.
My SAP entitlement system to BOE as below:
System is: PTS
Client: 100
Application
    Application server: sap-vpmn (with sap-vpmn is hostname BO server)
   System number : 00 (this is value of central instance number)
   Username: crystal
   Password : pythis
Thanks & Regards
Duypm

Different entitlement systems

Hi
I use SSO (SAP Authentication) and have two entitlement systems.
Does anyone know how we can configure a connection in Business Objects Mobile to allow access to both entitlement systems?
At the moment, a connection does not allow me to specify the client and hence users can only logon to the default entitlement system.
It would be acceptable to create two connections, provided that Ican define the target client system, in the connection.
When users logon to the the Business Objects LaunchPad via Internet explorer on a desktop, this is not an issue as the login screen has a field for both system and client.
Thanks

Hi Stephen,
More than two entitlement systems are supported on IOS Mobile BI App since 6.1 release. What is new in SAP BusinessObjects Mobile 6.1 (iOS)
The SSO to more than one entitlement systems would require you to create two different connections in the same Mobile BI App. And both has to be imported, pushed via MDM or pre-configured (if you use SDK). Note that connections that use SSO cannot be created manually.
For creating a SSO connection via import option, you can look at the parameters at Creating connections using Import Option in SAP Mobile BI. 'BOBJ_MOBILE_SSO_SAP_SYSTEM' is the parameter for your specific interest.
If you are not using SUP/SMP you should be configuring following parameters
CON.DisplayName=MY_CONNECTION
CON.BOBJ_MOBILE_URL=your Mobile Server URL with port number
CON.BOBJ_MOBILE_CMS=your CMS FQN with port number
CON.BOBJ_MOBILE_AUTH_METHOD=secSAPR3
CON.BOBJ_MOBILE_SSO_COOKIE_NAME=MYSAPSSO2
CON.BOBJ_MOBILE_SSO_FORM_URL =FORM based Custom App URL to generate MYSAPSSO2 Cookie
CON.BOBJ_MOBILE_SSO_ENABLED=true
CON.BOBJ_MOBILE_SSO_TYPE=SSO_Form
CON.BOBJ_MOBILE_SSO_SAP_SYSTEM=XYZ^100
The following blog details out how SSO can be implemented on Mobile server SAP BI Mobile Server Single Sign On Support
Hope this helps
Regards,
Ashutosh

Role Import Error In SAP Authentication

Dear Experts,
I have Installed BO XI R3.1 Integration kit for Sap Solutions.After Updating in Entitlement System,Options then while moving to Role Import i am getting error as shown below.
After Login to CMC>Authentication>SAP-->Role Import
SAP_CMINIT3 : rc=20 > Connect to SAP gateway failed Connect_PM GWHOST=biwdev, GWSERV=sapgw01, SYSNR=01 LOCATION CPIC (TCP/IP) on local host ERROR hostname 'biwdev' unknown TIME Wed Jun 08 11:03:00 2011 RELEASE 720 COMPONENT NI (network interface) VERSION 40 RC -2 MODULE nixxhl.cpp LINE 183 DETAIL NiHLGetNodeAddr: hostname cached as unknown COUNTER 110
1)Can you please tell me how to solve it?
2)Can you please give me links related to Single Sign On or documents ?

Hi,
are all transports imported in your SAP Back- End?
Can you ping your SAP Back- End from your BO Server?
With regards to SSO, you can have SSO from your SAP EP to BOBJ or from BOBJ to your SAP Back- End. Check the SAP ITK installation guide.
https://websmp203.sap-ag.de/~sapidb/011000358700000559912010E/xi31_sp3_bip_sap_inst_en.pdf
You need a S-User for Login.
Regards
-Seb.

SAP Authentication - Entitlement systems

Similar Messages

Maybe you are looking for