SAP SSO using CUA for Transport Express implementation

I am implementing Transport Express application as part of a larger project on a Dual Track environment. The business want TE to be integrated into the SSO landscape. This is where I am having difficulties. I need advice from anyone having implemented BTI's Transport Express into SAP requiring SSO with CUA as part of the business landscape? Our Domain Controller is Solution Manager. The TE settings in SolMan allow for a Web UI email notification, this contains a hyperlink to a user Dashboard. The expectation with SSO is that clicking on the hyperlink will automatically connect us to the Web UI Dashboard. Currently this does not work. Any suggestions?
I have also been given three options to concider; 1. Our Portal manages ABAP and Java SSO, 2. SPNego is for ABAP systems, 3. A system to system config might work.

Hi,
Now SPNego is working on ABAP stack as well as Java stack.
If you want to use this solution, the following videos may help.
Single Sign-On with Kerberos
Best regards,
Shuai

Similar Messages

Problem in configuring SSO using SAML for applications hosted on diff m/c

Hi Techies,
I am stuck in a weird problem for past month or so without any resolution. Not much help by googling. So I hope i get the answer from the mouth of the horses -
I am trying to use SSO using the sample application appA and appB as stated in the tutorial of SSO by BEA.
I am summarizing the problem below -
Steps followed for Configuring SSO using SAML
1. Created 2 domains on 2 seperate machines namely domainA and domainB
2. Source appliction is deployed on domainA and the target application is deployed on domaninB
The steps mentioned in the following tutorial has been followed-
http://dev2dev.bea.com/pub/a/2006/12/sso-with-saml.html
3. As mentioned in the tutorial the certificate is generated using keytool utility. The same certificate is copied
to WEBLOGIC_HOME/server/lib of destination machine.
4. The certificate was successfully registered on desitnation or host 2 but while activating the configuration
changes(SSL client Ientity Alias and SSL Client Identity Pass Phrase) for Federation services the following error
is thrown -
" SAMLBeanUpdateListener: SAMLKeyManager.prepareUpdate() failed with exception:
weblogic.descriptor.BeanUpdateRejectedException: SAML key Manage failed to validate key (SSL Client) configuration
in the FederationServicesMBean, key alias: testalias "
The interesting bit of the problem is that the same configuration works on 2 domains created on same machine. The
problem only occurs when domains are created on seperate machines.
Alterative to the problem: when the certificate is generated seperately for domainB and copied to
WEBLOGIC_HOME/server/lib, it works. However, the certificate generated in domainA should have been copied.
Note: I am using Weblogic portal 9.2.1
Any quick replies will be much appreciated. Thanks.
Edited by saurabh.agrawal at 02/06/2008 2:01 PM

Hi François,
You are right about the use of the NameID format. But the issue here is/was that OIF at SP is integrated with OAM, and the authenticated user at OIF-SP and OAM will be the Anonymous user rather than the user who was identified at the IdP even though the remaining attributes sent are for the IdP user. I think these attributes can be used by with OAM for authorization using custom authorization plug-ins but haven't tried that one out.
As for the attribute sharing profile, it's this one - http://www.oasis-open.org/committees/download.php/18058/sstc-saml-x509-authn-attrib-profile-cd-02.pdf, although for the life of me, I cannot remember why I suggested this in the first place!
-Vinod

How to get SAP to use SSL for Content repository?

I have defined a content repository in OAC0. I would like SAP and the end user to use SSL when talking to the repository. I have obtained a certificate for the repository, so that I can manually trference the repository via https... but in OAC0 when I press the Test Connection button I get "Connection Error:No SSLsupport available". Do I have to import the content repository certificate into STRUST or something?

Hi Ken,
please have a look at the SAP note [712330|https://service.sap.com/sap/support/notes/712330].
Best regards,
Klaus

Using TreeMap for a RedBlackTree implementation

I have been browsing the forum regarding the use of a TreeMap to represent a RedBlackTree. I have become somewhat confused however, as many people state that use of a treeMap is not aproriate to represent a tree data structure. Can anyone clarify reasons for this?
I would have thought the class would be perfect for implementing a Red Black tree as it removes the requirement to perform rotations in order to balance the tree. Any thoughts?
John

I think the reason people might say it isn't suitable is that it was designed as an implementation of Map, rather than Tree, so although its internal structure is that of a Tree, it's not that easy to get at the tree structure.
RObin

SAP IDM : Using regex for password

Hi experts,
I need your help about regex.
We are trying to use this to be sure that password set in Web inteface by users are correct according to the company policies :
- The first character cannot be a number
- The three first characters cannot be the same
We finally found the following expression to test what we want (reponse is "true" when one of the policies is ok) :
(.)(1)|(d)
But IDM never accept any password with that expression.
So my questions are :
1) Does IDM need a special regex language or is it the same than PERL language for example?
2) Does anybody know how to use regex in our policies case?
Thanks a lot for your response.
Regards.
Jérémy.

Thanks a lot for your answers.
Actually, i am already doing my test on another attribut which is not encrypted. but yeah its a good point to know about the encryption.
I also tried to use evaluators on internet and my expression looks good if i want to catch cases that i dont want in my password...
as a reminder : (.)(\1)|(\d)
So if i write :
"1password" >> result : true
"password" >> result : false
"pppassword" >> result : true
"password01" >> result : false
"passwooord" >> result : false
but finally if i put that expression in the field "regex" of my attribut, IDM never let me save my new password because it's not a "correct value".
So im disapointed because i don't how to solve it in IDM but i feel like i found the good expression...
Any another idea?
Regards
Jeremy

Error in stored procedure while using dbms_datapump for transportable

Hi,
I'm facing following issue:
SQL> select * from v$version;
BANNER
Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bi
PL/SQL Release 10.2.0.4.0 - Production
CORE 10.2.0.4.0 Production
TNS for Solaris: Version 10.2.0.4.0 - Production
NLSRTL Version 10.2.0.4.0 - Production
====================================================================================
I'm trying to do transportable tablespace through stored procedure with help of DBMS_DATAPUMP, Following is the code :
==================================================================================
create or replace
procedure sp_tts_export(v_tbs_name varchar2) as
idx NUMBER; -- Loop index
JobHandle NUMBER; -- Data Pump job handle
PctComplete NUMBER; -- Percentage of job complete
JobState VARCHAR2(30); -- To keep track of job state
LogEntry ku$_LogEntry; -- For WIP and error messages
JobStatus ku$_JobStatus; -- The job status from get_status
Status ku$_Status; -- The status object returned by get_status
     dts           varchar2(140):=to_char(sysdate,'YYYYMMDDHH24MISS');
     exp_dump_file varchar2(500):=v_tbs_name||'_tts_export_'||dts||'.dmp';
     exp_log_file varchar2(500):=v_tbs_name||'_tts_export_'||dts||'.log';
     exp_job_name varchar2(500):=v_tbs_name||'_tts_export_'||dts;
     dp_dir varchar2(500):='DATA_PUMP_DIR';
     log_file UTL_FILE.FILE_TYPE;
     log_filename varchar2(500):=exp_job_name||'_main'||'.log';
     err_log_file UTL_FILE.FILE_TYPE;
     v_db_name varchar2(1000);
     v_username varchar2(30);
     t_dir_name VARCHAR2(4000);
t_file_name VARCHAR2(4000);
t_sep_pos NUMBER;
     t_dir varchar2(30):='temp_0123456789';
     v_sqlerrm varchar2(4000);
stmt varchar2(4000);
     FUNCTION get_file(filename VARCHAR2, dir VARCHAR2 := 'TEMP')
RETURN VARCHAR2 IS
contents VARCHAR2(32767);
file BFILE := BFILENAME(dir, filename);
BEGIN
          DBMS_LOB.FILEOPEN(file, DBMS_LOB.FILE_READONLY);
          contents := UTL_RAW.CAST_TO_VARCHAR2(
DBMS_LOB.SUBSTR(file));
          DBMS_LOB.CLOSE(file);
          RETURN contents;
     END;
begin
--execute immediate ('drop tablespace test including contents and datafiles');
--execute immediate ('create tablespace test datafile ''/home/smishr02/test.dbf'' size 10m');
--execute immediate ('create table prestg.test_table (a number) tablespace test');
--execute immediate ('insert into prestg.test_table values (1)');
--commit;
--execute immediate ('alter tablespace test read only');
--dbms_output.put_line('11111111111111111111');
dbms_output.put_line(log_filename||'>>>>>>>>>>>>>>>>>>>>>>>>>>>'|| dp_dir);
log_file:=UTL_FILE.FOPEN (dp_dir, log_filename, 'w');
UTL_FILE.PUT_LINE(log_file,'#####################################################################');
UTL_FILE.PUT_LINE(log_file,'REPORT: GENERATED ON ' || SYSDATE);
UTL_FILE.PUT_LINE(log_file,'#####################################################################');
select global_name,user into v_db_name,v_username from global_name;
UTL_FILE.PUT_LINE(log_file,'Database:'||v_db_name);
UTL_FILE.PUT_LINE(log_file,'user running the job:'||v_username);
UTL_FILE.PUT_LINE(log_file,'for tablespace:'||v_tbs_name);
UTL_FILE.NEW_LINE (log_file);
stmt:='ALTER TABLESPACE '||v_tbs_name || ' read only';
dbms_output.put_line('11111111111111111111'||stmt);
execute immediate (stmt);
UTL_FILE.PUT_LINE(log_file,' '||v_tbs_name || ' altered to read only mode.');
UTL_FILE.NEW_LINE (log_file);
UTL_FILE.PUT_LINE(log_file,'#####################################################################');
UTL_FILE.NEW_LINE (log_file);
UTL_FILE.PUT_LINE(log_file,' Initiating the Datapump engine for TTS export..............');
UTL_FILE.NEW_LINE (log_file);
dbms_output.put_line('11111111111111111111');
JobHandle :=
DBMS_DATAPUMP.OPEN(
operation => 'EXPORT'
*,job_mode => 'TRANSPORTABLE'*
*,remote_link => NULL*
*,job_name => NULL*
--,job_name => exp_job_name
--        ,version => 'LATEST'
UTL_FILE.PUT_LINE(log_file,'Done');
UTL_FILE.NEW_LINE (log_file);
UTL_FILE.PUT_LINE(log_file,' Allocating dumpfile................');
DBMS_DATAPUMP.ADD_FILE(
handle => JobHandle
,filename => exp_dump_file
,directory => dp_dir
,filetype => DBMS_DATAPUMP.KU$_FILE_TYPE_DUMP_FILE
-- ,filesize => '100M'
UTL_FILE.PUT_LINE(log_file,'Done');
UTL_FILE.NEW_LINE (log_file);
UTL_FILE.PUT_LINE(log_file,' Allocating logfile................');
DBMS_DATAPUMP.ADD_FILE(
handle => JobHandle
,filename => exp_log_file
,directory => dp_dir
,filetype => DBMS_DATAPUMP.KU$_FILE_TYPE_LOG_FILE
UTL_FILE.PUT_LINE(log_file,'Done');
UTL_FILE.NEW_LINE (log_file);
UTL_FILE.PUT_LINE(log_file,' Setting attributes................');
DBMS_DATAPUMP.set_parameter(handle => JobHandle,
name=>'TTS_FULL_CHECK',
value=>1);
DBMS_DATAPUMP.METADATA_FILTER(
handle => JobHandle
,NAME => 'TABLESPACE_EXPR'
,VALUE => 'IN ('''||v_tbs_name||''')'
-- ,object_type => 'TABLE'
UTL_FILE.PUT_LINE(log_file,'Done');
UTL_FILE.NEW_LINE (log_file);
UTL_FILE.PUT_LINE(log_file,' Now starting datapump job................');
DBMS_DATAPUMP.START_JOB(JobHandle);
UTL_FILE.PUT_LINE(log_file,'Done');
UTL_FILE.NEW_LINE (log_file);
UTL_FILE.PUT_LINE(log_file,' Monitoring the job................');
--------------Monitor the job
PctComplete := 0;
JobState := 'UNDEFINED';
WHILE(JobState != 'COMPLETED') and (JobState != 'STOPPED')
LOOP
DBMS_DATAPUMP.GET_STATUS(
handle => JobHandle
,mask => 15 -- DBMS_DATAPUMP.ku$_status_job_error + DBMS_DATAPUMP.ku$_status_job_status + DBMS_DATAPUMP.ku$_status_wip
,timeout => NULL
,job_state => JobState
,status => Status
JobStatus := Status.job_status;
-- Whenever the PctComplete value has changed, display it
IF JobStatus.percent_done != PctComplete THEN
DBMS_OUTPUT.PUT_LINE('*** Job percent done = ' || TO_CHAR(JobStatus.percent_done));
PctComplete := JobStatus.percent_done;
END IF;
-- Whenever a work-in progress message or error message arises, display it
IF (BITAND(Status.mask,DBMS_DATAPUMP.ku$_status_wip) != 0) THEN
LogEntry := Status.wip;
ELSE
IF (BITAND(Status.mask,DBMS_DATAPUMP.ku$_status_job_error) != 0) THEN
LogEntry := Status.error;
ELSE
LogEntry := NULL;
END IF;
END IF;
IF LogEntry IS NOT NULL THEN
idx := LogEntry.FIRST;
WHILE idx IS NOT NULL
LOOP
DBMS_OUTPUT.PUT_LINE(LogEntry(idx).LogText);
idx := LogEntry.NEXT(idx);
END LOOP;
END IF;
END LOOP;
     --copy the datafiles to data dump dir
     UTL_FILE.PUT_LINE(log_file,'Done');
UTL_FILE.NEW_LINE (log_file);
UTL_FILE.PUT_LINE(log_file,' Copying datafiles to dump directory................');
-- grant select on dba_directories to prestg;
declare
cnt number;
begin
select count(*) into cnt from dba_directories
where directory_name=upper(t_dir);
if cnt=1 then
execute immediate('DROP DIRECTORY '||t_dir);
end if;
end;
     FOR rec in (select file_name from sys.dba_data_files where tablespace_name=v_tbs_name)
     LOOP
     t_sep_pos:=instr(rec.file_name,'/',-1);
t_dir_name:=substr(rec.file_name,1,t_sep_pos-1);
t_file_name:=substr(rec.file_name,t_sep_pos+1,length(rec.file_name));
dbms_output.put_line(t_dir_name|| ' ' || t_dir);
dbms_output.put_line(t_file_name);
     execute immediate('CREATE DIRECTORY '||t_dir||' AS '''||t_dir_name||'''');
     UTL_FILE.PUT_LINE(log_file,' Copying '||rec.file_name||'................');
     utl_file.fcopy(t_dir, t_file_name, dp_dir, t_file_name);
     UTL_FILE.PUT(log_file,'Done');
     execute immediate('DROP DIRECTORY '||t_dir);
     END LOOP;
UTL_FILE.NEW_LINE (log_file);
UTL_FILE.PUT_LINE(log_file,' Altering tablespace to read write................');
     execute immediate ('ALTER TABLESPACE '||v_tbs_name || ' read write');
UTL_FILE.PUT(log_file,' Done');
     err_log_file:=utl_file.fopen(dp_dir, exp_log_file, 'r');
     UTL_FILE.NEW_LINE (log_file);
UTL_FILE.PUT_LINE(log_file,' content of export logfile................');
     loop
begin
     utl_file.get_line(err_log_file,v_sqlerrm);
     if v_sqlerrm is null then
     exit;
     end if;
     UTL_FILE.PUT_LINE(log_file,v_sqlerrm);
EXCEPTION
WHEN NO_DATA_FOUND THEN
EXIT;
END;
     end loop;
          utl_file.fclose(err_log_file);
utl_file.fclose(log_file);
END;
I'm getting following error when DBMS_DATAPUMP.OPEN is called in procedure:
SQL> exec sp_tts_export('TEST');
BEGIN sp_tts_export('TEST'); END;
ERROR at line 1:
ORA-31626: job does not exist
ORA-06512: at "SYS.DBMS_SYS_ERROR", line 79
ORA-06512: at "SYS.DBMS_DATAPUMP", line 938
ORA-06512: at "SYS.DBMS_DATAPUMP", line 4566
ORA-06512: at "PRESTG.SP_TTS_EXPORT", line 78
ORA-06512: at line 1
==============================================================================================
This procedure is part of user ABC. I'm getting the above when I'm running this under ABC schema. However I have tested the same procedure under sys schema. When I'm creating same procedure in SYS schema it is running fine. I am clueless on this. Pls help
Thanks
Shailesh
Edited by: shaileshM on Jul 28, 2010 11:15 AM

Privileges acquired via ROLE do NOT apply within named PL/SQL procedures.
Explicit GRANT is required to resolve this issue.

Badi:BADI_SD_SALES(SAP says it is for internal use): But i was implemented

Hi Experts,
Badi:BADI_SD_SALES(SAP says it is for internal use): But i was implemented this badi. It is legal or not.
I was implemented badi: BADI_SD_SALES . But it is for SAP internal use.
For implementing this i was changed the field u2018internalu2019 in Standard table: SXS_ATTR.
I removed the X in that field.
All these things done for Creating Return order with reference to invoice. The client requirement is to was external number range instead of internal number rangees.
For this thing I was implement the method t u2018TRANSACTION_INITu2019. I passed the
Our external number in that vbak-vbeln..
It works correctly in development. I am not yet tested in quality and production.
This way is correct one or not. When I removed the u2018Xu2019(Internal use) in field:
SXS_ATTR. In future it gives any other problems or it is legally correct or not.
Helpful answers definitely rewarded.
Regards
Pratap.M

Hello Pratap
Labelling this BAdI as "Internal Use only" SAP can do whatever they want with this BAdI - they may even remove it !!!
Thus, your development relies on something very unreliable.
Perhaps SAP releases this BAdI for general use in the future - or not.
Therefore, I would recommend to use the enhancement framework instead if already available in your SAP system.
Final remark: If you set your implementation of this internal BAdI productive and the customer runs into trouble later on when SAP changes or deletes this BAdI with support packages YOU are liable - and not SAP.
Regards
Uwe

Windows SDK for Facial Expression Detection!

Hi,
I am new to Windows SDK, and working on a project that requires to detect facial expressions (mainly sad, happy). I found about Windows SDK, but not sure whether this will suits to my requirements.
Can I use it for Facial Expression Detection?
Thanks,
Dhaneshwar
Dhaneshwar

In the Kinect for Windows SDK 1.5 coupled with the Kinect for Windows Developer Toolkit 1.5.2, you can do basic face tracking (121 points are tracked). There is no facial expression detection included, but a good starting place for writing your own
would be to look at the Animation Unit Coefficients returned by face tracking. Once you have a face frame (see the FaceTrackingBasics-WPF sample for how to get face frames), you can find the AU Coefficients as follows:
// Assume frame variable contains a FaceTrackFrame.
EnumIndexableCollection<AnimationUnit, float> faceAUs =
frame.GetAnimationUnitCoefficients();
for (int index = 0; index < faceAUs.Count; ++index)
Debug.WriteLine(string.Format("{0}: {1} = {2}", index,
(AnimationUnit)index, faceAUs[index]));
which generates the following info in the debugger output window (your numbers will vary, of course):
0: LipRaiser = -0.0482193
1: JawLower = 0.2953424
2: LipStretcher = -0.587648
3: BrowLower = 0.05249858
4: LipCornerDepressor = 0.2725175
5: BrowRaiser = -0.2865464
Using these values, along with relative positions of selected points around the mouth and eye areas, it may be possible to detect facial expression patterns. Hope this helps.

Can't use RSA1 to transport Query

Hello Experts,
I made some coding changes to an existing query. I generated the infoset and user group to create a transport request to send to the test system. The changes works fine in the development system but they do not work in the test system. I can see the coding changes in the test system but they are not working as in development.
From my research on this forum, the suggestion is to use RSA1 for transport, but the development system is not set up to use RSA1. Is there another way I can get this transported? or better yet, what am I not doing for the changes not to work in the transport target system?
TIA,
Lyn

hi lyn,
for that what you have to do is go to RSA1, collect the query and drag in to right side, create a request for the query and make sure that you need to collect all the query elements in that request. and go to se09 and check whether all the query elements have tracked under that request and release the request.
go to test system>STMS>import the request.
thats the way to transport the objects,hope it should work.
PLZ ASSIGN POINTS if it helpful..
regards
vadlamudi

How to implement SSO to non-SAP systems using SAP logon ticket?

Hello,
We would like to implement Single Sign On between our SAP Netweaver system and a Siebel which is a non-SAP system using SAP logon tickets.
Can anyone please give me some leads on this, in particular:
1. Is there a JAVA API or an SAP plug-in that can be implemented on the Siebel machine to extract the SAP logon ticket?
2. As the other machine might seat on a complete different domain, is it possible to implement SAP logon ticket without using cookies (perhaps through the HTTP header?
3. In case you think using SAP logon tickets is not the best solution here I would be happy to hear any other suggestions you might have.
Roy

Hi,
I'm currently using SAML as well. Unfortunately the SAP J2EE cannot work as authority (identity provider) but what you can do is using an open implementation of SAML such as opensso which is an open version of SUNs Java System access manager.
There are a couple of other projects such as opensaml, apache's wss4j or shibboleth that might be interesting in this context.
I just installed opensso and got it working with SAP J2EE 7.0 using SAPs JAAS SAMLLoginModule to authenticate users within SAP J2EE.
In this scenario opensso serves as identity provider just as you need! There are a couple of Policy agents available on SUNs Download site you can use with Apache, Tomcat, JBOSS, WebSphere, Bea Web Logic etc. in order to authenticate! Otherwise you just directly authenticate against opensso. When installing opensso you can configure the type of user store you want to use! By default it uses LDAP but you can also use different types of user store using JDBC or other mechanisms. Since you have a Directory Service you could easily connect it to your existing directory.
There is also a way to map user ids directly in opensso by adding a uid mapping class. I created some documentation with lots of screenshots about using opensso with SAP J2EE. You can easily use opensso with any other system that supports SAML. In the case of SAP the usage is currently limited to SAML versions 1.0 and 1.1. Version 2.0 is not yet supported but should be in one of the following versions.
Here are some links you might want to check:
OpenSAML: https://spaces.internet2.edu/display/OpenSAML/Home
wss4j: http://ws.apache.org/wss4j/
shibboleth: http://shibboleth.internet2.edu/
opensso: https://opensso.dev.java.net/
On SDN you will find a documentation on how to connect SUN Java System Access Manager to SAP J2EE (see https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/906d9fc6-31b9-2910-1385-90edad7d7570). As I said opensso is based on the SUN Access Manager code and looks quite the same. So you can adapt this documentation in order to configure opensso or you can just ask me for the documentation.
Hope this is helpful...
Let me know if you need further assistance on this topic
Cheers

How to implement for sap system use HADR

hi expert ，
       i am a newbie to sap basis， we have a requirement that do HA for our sap using HADR，i want know if there are some good sulotion for my scenario。
   our scenaro is we have two window 2008 sever host，one host has a sap system and we want the sap db2 database as a primary，and the other host also has a same the system which is restore from the previous sap system which we implement by system copy using database restore not migration。i want know as our secanrio could i achive SAP application HA by HADR，if we donu2018t have HA software like MSCS。whether we must manual monitor the primary sap   when it stop because any issue like hardware failed and then manual start the other sap system in the other host？
our two sap system have different sap profile beacause the hostname are different.
our aim is when one of our host can't use we can immediate start the other sap system in the other host, the less the change the better the solution .
is it possible?
thanx very much,
best regards.

hi paul ,
    thanx for your information，i have already read the inforamtion about sg247363 once-over and SAMP。 but unfortunately we have a different situation，we only have two windows servers and must installed windows server 2008 OS because some reasons。we also don't have have other host to install sap。as this situation，how could we implement HA beacuse we also don't have shared disk。the window server are isolation。
i also read some pdf which download from sdn ， in the book the HA is implemneted as the sap application has a separate host and has two host for DB2 database using HADR，the HA is rely the cluster software 。in this situation the sap application also need HA to avoid single point failure。
    as the limited i have said above， is it possible to do HA by MSCS ，can any body tell me if the MSCS is free to install in OS windows 2008？ if we can't use it free，have any other solution？in the worst ， we must manual monitor the application and when a sap application or database can't work ，we want to restart the other sap which in the other host，we need the database synchronization between two database which using HADR。is it possible ？if it do， whether there are some additional setup for sap application because the two sap application have different sap profile name（a sap is a system copy from the other by database restore）。
    any reply will be appreciated。

"Case use" technique for SAP implementation?

Hello all,
has anyone used "case use" technique for SAP implementation? I mean for standard process, not only developing.
Any recommendation about it?
Thanks in advance and best regards,
Adolfo

It would be helpful to go through the help document of ASAP Methodology.
The following information may clarify some doubts/requirements you have.
Generating the Project IMG through ASAP:
After you have set the project scope, the next step is to generate the Project IMG. From the Business Process Master List (BPML), you can directly access the IMG activities relevant for configuring each process.
BPML: The Business Process Master List, along with the Business Blueprint, is a key result of the second phase of the Roadmap. Microsoft Excel tables contain the SAP scenarios, process groups, and processes that have been set in scope in the SAP Reference Structure, and are crucial for configuring your SAP System. In Realization, the third phase of the Roadmap, the BPML provides the basis for monitoring and steering test activities and for configuring your SAP System. It contains the titles of the structure items, and displays the status, the owner, links to documentation and links to the SAP System. Amongst other things, the BPML allows you to:
1) Set your baseline and final scope. These are used for baseline and final configuration.
2) Access the Project IMG and specific IMG activities assigned to structure items.
3) Access integration test plans, which help you carry out all required integration tests.
The Prerequisite is you have set the project scope.
Process Flow to use the Business Blueprint as a basis for configuring your SAP System:
1) Set the project scope.
2) Generate the Project IMG.
3) Generate the BPML.
4) From a specific processes in the BPML, you can go to the relevant IMG activities and make Customizing settings.

"Case use" technique for SAP ERP implementation?

Hello all,
has anyone used "case use" technique for SAP implementation? I mean for standard process, not only developing.
Any recommendation about it?
Thanks in advance and best regards,
Adolfo

It would be helpful to go through the help document of ASAP Methodology.
The following information may clarify some doubts/requirements you have.
Generating the Project IMG through ASAP:
After you have set the project scope, the next step is to generate the Project IMG. From the Business Process Master List (BPML), you can directly access the IMG activities relevant for configuring each process.
BPML: The Business Process Master List, along with the Business Blueprint, is a key result of the second phase of the Roadmap. Microsoft Excel tables contain the SAP scenarios, process groups, and processes that have been set in scope in the SAP Reference Structure, and are crucial for configuring your SAP System. In Realization, the third phase of the Roadmap, the BPML provides the basis for monitoring and steering test activities and for configuring your SAP System. It contains the titles of the structure items, and displays the status, the owner, links to documentation and links to the SAP System. Amongst other things, the BPML allows you to:
1) Set your baseline and final scope. These are used for baseline and final configuration.
2) Access the Project IMG and specific IMG activities assigned to structure items.
3) Access integration test plans, which help you carry out all required integration tests.
The Prerequisite is you have set the project scope.
Process Flow to use the Business Blueprint as a basis for configuring your SAP System:
1) Set the project scope.
2) Generate the Project IMG.
3) Generate the BPML.
4) From a specific processes in the BPML, you can go to the relevant IMG activities and make Customizing settings.

SSO using Kerberos with SAP Logon Tickets

Hi,
I am creating a Repository Manager for the Portal Knowledge Management System and I want to use SSO to a backend IIS application and I have a few questions here.
I have a three tiered architecture.
A. The presentation tier (SAP Portal which has my Repository Manager implementation)
B. ASP.NET web service data layer.
C. Backend document management system which runs on IIS.
I have installed the ISAPI filter on my ASP.NET application server and have enabled this HOST account for delegation in MSAD 2003. Server B will use Kerberos constrained delegation to access Server C, which is an IIS backend server.
My question is how do I pass an SAP Logon Ticket to an ASP.NET web service request from my Repository Manager implementation? Basically how do I just make an HTTP request to an ASP.NET application from some portal iView or WebDynPro code and pass along the SAP Logon Ticket in the request so it can be interpreted by the ISAPI filter on the IIS server. Does anyone have any sample code or an application here that does this?
Thanks,
Scott

Hi Scott
Did you managed to find out anything regarding how to pass SAP Logon ticket to ASP.NET Webservice. Can you share it with me?
regards
ram

How to use Analysis for Exel in SSO ?

Hello,
For the moment we have only few users which use Analysis for Excel because they have to enter their login & password.
We'd like to install Analysis for Excel for a larger population.
Do you know how to implement SSO in Analysis for Excel (as in BO Web) ?
Thank you in advance
Regards,
Nicolas

Hello Nicolas,
Use the following steps :
Step 1
Locate the File “global.properties”
Drive:\SAP BusinessObjects\Tomcat6\webapps\BOE\WEB-INF\config\custom
The following values should be present:
vintela.enabled=true
idm.realm=Domain Name (u can get the name from C:\Windows\Krb5.ini)
idm.princ=SPN User
idm.allowUnsecured=true
idm.allowNTLM=false
idm.logger.name=simple
idm.logger.props=error-log.properties
Step 2:
Locate the file “web.xml”
D:\SAP BusinessObjects\Tomcat6\webapps\dswsbobje\WEB-INF
Uncomment the Kerberos Proxy Filter and the Kerberos Filter sections to enable Kerberos SSO for Windows Active Directory (secWinAD) authentication. The following options must be specified (the rest are optional)
idm.realm = SPN user (the same as the default_realm specified in the Krb5.ini file)
idm.princ = SPN User (the same as specified for idm.princ in the global.properties)
idm.keytab = (the same as specified for idm.keytab in the global.properties )
Please note, if you are using the hardcoded password set in Tomcat's Java Options do not make any changes to the keytab lines in the web.xml
Step 3:
Backup and edit Drive:\Tomcat6\webapps\dswsbobje\WEB-INF\classes\dsws.properties by setting kerberos.sso to 'true' Restart Tomcat
KR,
MD

SAP SSO using CUA for Transport Express implementation

Similar Messages

Maybe you are looking for