SAP R/3 HR USer Personalization
Hi,
We have implemented the SAP EP 6.0 SP2. We are using a few standard SAP IACs like training center, trainings attended, Whos who and the rest of them are all
custom developed BSPs.
THe portal is connected to the production SAP HR R/3 server in the backend, and is live at the moment.
Our client has a corporate policy for the R/3 passowrd initialization after every 30 days as per their security audit policy, but this is causing problems to our EP users as once every 30 days the EP starts
prompting them the WAS 6.20 Authentication interface screen asking for their R/3 user id and password, as the start up screen of our EP on log on is a custom built BSP which shows the employees' personal information. The employee doesnt get any information that his passowrd
has expired, but goes on trying to enter the R/3 passowrd and user id many times and the system eventually locks the R/3 user id.
The password expiry policy cannot be changed as this applied to all R/3 user country wide. The other glitch is that only about 10% of the ESS users are actual R/3 WIN GUI users, so we're faced with a grave problem
of not having a SAP standard interface that can be provided to the users automatically whenever they log on to the portal and their R/3password should be prompted for change as and when it expires.
The portal userid and SAP R/3 Userid are not same. The Portal userid is PXXXXXX and sap userid is HRXXXXXX.
Is there any SAP Standard functionality that can be provided via EP
interface to the users to ease their issues.
Hello!
There is no SAP standard functionality that can be used as far as I know. You can use SAP standard provided functions to check password expiration date and to change password's via a custom implementation. We had the same issue with one of our customers where we had to synchronize password's between LDAP and R/3. Harald
Similar Messages
-
End User Personalization - Mandatory field does not make it mandatory
I am on GRC 5.3 SP8 and when I set "Company" as "Mandatory" under "End User Personalization", it does not put an "*" next to Company or force the user to fill in the Company field.
How can I make sure that the user enters "Company" when doing a "Create Request form"? I want to make sure a red "*" is next to the field so that they update it. Right now I have a default value in there but I want to make sure they think about what goes in this field.
When I create a custom field and use "end user personalization", the red "*" shows up and an error occurs if they don't fill in the field, but the predefined fields don't work the same way.
Thanks,
PeggyGRC Experts, please correct me if I'm wrong but from my understanding, the Request Screen in the MyWork tab is for Approvers/Admins/Security i.e. those with UME permissions of some kind. This is not the Request Screen for end users. We actually customize our UME roles to elimate the ability to use this Request Screen. We want all of our security requests to be done in the End User Request Screen.
Unlike the MyWork Request Screen, the End User Request Screen is customizable under configuration-->End User Personalization. As you've noticed, here you can customize what fields you see on the End User Request Screen, what fields are defaulted, etc. For example, for our company, we do not want end users picking and choosing roles. Our end users are not knowledgable on our roles so we save that step for a stage in which Security Admins choose roles for users based on what they asked for in the Request Reason.
Another advantage of using the End User Request Screen is that end users can create requests without having UME permissions; they need only to be authenticated against whatever system you have chosen to authenticate them against (for example, SAP) Configuration-->Authentication. As long as they exist in that system, they can create a request.
Every company is different. For us, we don't like that the MyWork Request Screen is not customizable and requires UME permissions to even access it. So we have essentially taken it away through security (based on the Security Guide provided by SAP). -
I recently tried to install PhotoShop CS4 on a Vista machine. I could not get it to activate, found out from Adobe that it was a bad serial number. So, I uninstalled it, and tried to reinstall my good old standby - Creative Suite 1.0. This has worked for YEARS!
Now, I get the error "could not complete your request because of missing or invalid user personalization information" when I try to launch PhotoShop 8.0. All other applications of the Creative Suite are working. There is no serial number posting in the window of PhotoShop when I launch it.
I am sure it is something in the registry. I have uninstalled and reinstalled 3 times with no success.
Can anyone help?
Thank you,
JenniferYou need to run the CS4 clean script to remove traces of the installation.
http://www.adobe.com/support/contact/cs4clean.html -
CUP 5.3: Missing End User Personalization and others
Upgraded from 5.2 to 5.3 SP06. I'm expecting to see End User Personalization, User Review, and Change Long submenus in the Configuration tab, but they are missing. I've imported the SP06 XML files for CUP, and configured the system to no avail. I've opened up a support message, but was hoping that someone else has experienced this.
Hi William
Have you done all the steps related with POST upgrade steps in the installation document?
also have you uploaded AE_init_append_data_CC.xml ? -
If there is no accounting document; SAP should not allow users to print
Dear Gurus,
Is there a standard way that,
--if there is no accounting document; SAP should not allow users to print invoice?
How can I do it?
Regards,You can either use Tcode NACE for output procedure pr follow following path in SPRO:
IMG - SD - Basic Functions - Output control - Output Determination - Maintain Output Determination for Billing Documents - Maintain Output Determination Procedure
There for your output procedure used for the desired output type maintain requirement routine as 62 : Billing doc released to acctng.
This requirement is met if the billing document is complete checking the header, pricing, and all items and has already been passed to financial accounting. The requirement also checks that the document is not relevant for an invoice list. This requirement can be assigned to billing document output condition types that should only be processed when the billing document is complete and forwarded to accounting. This requirement can only be used with billing documents.
Regards
JP -
SAP Hardware sizing for "User-Based sizing".
Short Text
User-based Hardware Sizing
Long Text
Dear SAP Support,
We would like to know the SAP Hardware sizing for "User-Based sizing".
Our queries is
1. In "User-Based sizing", What we have to consider,
the number of users are calculated in the basis of
Concurrent users in the system in a given point of time
or
total number of users logged into the systems in the whole day?
We have referred the SAP document "Sizing SAP System" and the above
point are not clearly mentioned.
Regards,As the document says there are number of possible definitions for "users" in SAP context...
For understanding assume that no of users logged to the system they consume different resources / areas in the system, some login to the system whole day but they don't work whole day, some user open multiple session to work while other open multiple session but they don't exactly work on it which means (every new session consume memory/resources) like you said their are concurrent users wherein they work and consume resources (SAP WPs)
So before finalizing the sizing first compare the both reports (user based, thorhgput) and read the advantages and disadvantages for both. You can also consult with SAP / Account Manager to help you
as per SAP document there's no point in counting no of pc's, laptops to calculate no of users
Also refer:
http://www.sap.com/solutions/benchmark/index.epx -
How to check during logon if an SAP ECC6.0 (ABAP) user is in Microsoft ADS
Hello
How to check during logon if an SAP ECC6.0 (ABAP) user is in Microsoft Active Directory Services.
I would like to prevent logon to ABAP system for users not present in Microsoft Active Directory Services
Thank you in advanceHave you looked at setting the SNC functionality for lookups against AD? Here's a link that might be helpful: [Secure Network Communications |http://help.sap.com/saphelp_nw70ehp1/helpdata/en/e6/56f466e99a11d1a5b00000e835363f/frameset.htm]
[Configuring SNC on AS ABAP |http://help.sap.com/saphelp_nw70ehp1/helpdata/en/e6/56f466e99a11d1a5b00000e835363f/frameset.htm]
Hope that is helpful.
J. Haynes -
How to make defalt value true for user personalization
Hi,
Specific column has default value for User personalization is false,How can i make it true.
Please suggestHi ,
when user personalise a page , it shows a default level,site level,organization level,responsibility level value for a columns property.
Default level is not overriden by user only other three site level,organization level,responsibility level are overriden.
User personalization property of a country code column has a false value at default level
1.How can i change it to true at default level.
2. If default level will remain as false for User personlisation property and if i change a property value to true at other level.Will it make any personalization enable,As i have already tried Second option, I am not getting a value back. -
User Personalization page in Portal
Hi ,
Can anyone let me know what is the need of keeping the
field of 'Security Policy' in the user personalization page.
What is the relevance of this field.
Best Regards
SidHi Sid,
the security policy can be used to seperate different user types...
You have the standard user which can be used to work with the portal normally.
With the technical user it is only possible to make connection to the portal via connectors, you can't work with the portal UI then...
Inside of the personalization the filed is shown as the screen is the same WebDynpro element as the one you use to change the user - but with write rights for the end user on certain fields only.
Hth,
Michael -
I don't have
com.sap.ip.me.api.logging
and
com.sap.ip.me.api.user
packages in me2lib.jar (and none of the jars in the lib folder of the SAPMobileEngine folder).
Any ideas as to where these are ?I don't think you can use ME2.1 Client with MI2.5 Server. At least they have different login protocol, and maybe different synchronization protocol as well.
The library MEg.jar, that I have inspected for the missing libraries, is a part of MI25 SP09. I heartily advise you to migrate your application to MI.
Cheers,
Todor -
Enable user personalization via code
Hi,
I'm currently developing a set of automated configurations for the portal using CTC template, during these configurations I'm required to enable/disable the WD user personalization option, this can be done manually via the nwa.
can you help me with suggesting how it can be done manually?
Thanks,
Meir.Use userManager.enable method
eg userManager um=Platform.getService(userManager.class);
um.enable(usrlogin,true);
or um.enable(usrkey,false);
note: first argument should be ArraList. if you pass user login then the second arg is true else false in case of user key.
--nayan -
When setting up SAP early watch - is the customers S user number required, or can the SAP Partner's s user number be utilised?
use the Customers SUserId in EWA
-
SAP R/3 Mass User Master Record Update
I am currently involved in a project to update specific fields of the User Master Record for all applicable records from an external source.
For the mass change i was thinking along the lines of CATT, BDC/ABAP or Table Changes. Obviously table changes was out first because of the dangers of causing inconsistencies among the SAP standard tables. CATT i think is not really made for this purpose but could probably do the job, and BDC or ABAP is probably the right way to go.
Any suggestions/comments?
Thankshello Ashley,
All 3 options are good.
I personally use CATT for this purpose however it depends on what your trying to update. SU10 is another option but its drawback is that you can use only 1 value at a time. In CATT however you can use different values for different users. Also time involved in creating CATT tool is very less.
Obviously you have options like BDC/LSMW and ABAP also with you.
Regards.
Ruchit. -
Data security (Data from SAP BW) for AD users
Hi All,
I have a scenario.
BO env : Business Objects 3.1 Sp3
Sap Integration kit Sp3
My target is to implement AD SSO & also provide data security for data from SAP BW. Currently there are no roles & authorization defined in the sap System. My plan was
Step 1:- Implement AD SSO in Business Objects
Step 2: Map the AD users in SAP system
Step 3:- Crate roles in SAP System
Step 4:- Assign the users roles
Steps 5:- (Not sure) :- Map the users (Now in SAP) to BO & then aliases them with the users from AD.
Pleas let me know if this would be correct approach... if not please suggest.... I am kind of new to SAP BO integration with experience in BO adminStep 1: Setup Windows AD SSO on your BOBJ server
Step 2: Import Windows AD groups in BO
Step 2- Setup Server-side SNC between BO and your SAP system
Step 3:- Create roles in SAP System and import them in BO
Step 4:- Assign SAP users the created roles
Step 5: - In the CMC create SAP aliases for your Windows AD accounts
Step 6: - Setup your reports and/or universe connections to use SSO.
For more information on server side SNC check the installation guide of the integration Kit.
Regards,
Stratos -
Display attachments in SAP work list (at user decision) from portal.
Hi Experts,
How can we get the uploaded attachment form portal to SAP UWl .
We have requirement like user wants to upload the travel expenses related documents (.PDF,.Txt or .doc files) in portal that attachments needs to available in approver inbox as link at user decision level.
We have done the binding part and we are getting the attachment from first level to next level but unable to get the attachments uploaded in portal.
I found one link but itu2019s not working.
How to store Multiple Attachments in Workflow.
SAP_WAPI_GET_ATTACHMENTS by using this function module I am getting only OBJECT_ID SOFM
DESCRIPT Office Document
SHORTTEXT Office Document
Please help....good Rewards for useful answers ....
Edited by: RameshG on Jan 12, 2011 7:04 PMDear Ramesh,
Need your help!
While creating travel expense request from Enterprise Portal, travelers create few attachments [pdf/doc/xms/txt] and then save the travel expense reports.
A workflow then gets triggered and this travel expense report reached the SAP Inboxes of the checkers [in the finance department].
The issue here is that these checkers do not have access to enterprise portal and they expect to see the attachments [that the traveler has created via the portal] via corresponding work items in their SAP Inboxes u2013 which currently is not happening!
I checked the trip transaction that got created [in the backend / in SAP] and found the u2018attachment listu2019 menu option in GOS being disabled [may be because there is not even one attachment that has come to the backend!]
What needs to be done so that the attachments can even be viewed from the backend / from SAP Inbox? Does this involve coding?
Please suggest!
Br,
Hari
Maybe you are looking for
-
Visual Studio keeps adding SharePoint features when opening a solution
Hello everybody. I'm facing a rather naughty problem. In a Windows 2012 environment (hosted inside an Azure virtual machine), with SharePoint installed, I created a VS SharePoint on-premise solution. I added a feature, and started adding lists, libr
-
Local web server not being recognized
I setup a web server on my LAN specifically so both a PC and a Mac could use HTTP protocol and store and retrieve files. The servername is called UBUNTU. On any PC in the house I can type http://ubuntu/ and the directory listing appears. The Mac can
-
How to add Help in a Form?
I want to add help in my forms application. Is it possible to add customized help in a form under Help Menu ? Can anybody 'help' me in this regard :) It will be a great favour !
-
White screen when i try to LOGIN my Macbook Pro 13´´7i
I only have acess to guest user on my macbook Pro 13´´ i7 because when i press star button show me page of users that is suppost to choose to start login but after that just shows me white screen with apple LOGO . what can i do ?
-
Email to requisitioner after PO saved, GR, MIRO
Hi, Business requirement is that a requisitioner should trigger a email after PO is saved, PO release, Goods Received, and Invoice Verification. At every stage requisitioner should get mail to his/her external email id or in the sap inbox, in R/3. wi