Security Zones and KM

Is there a way to link KM with security zones? How that can be done and is there a White Paper in this topic? If not how about securing accessing KM using URL?
Kais Barakat

Hello,
Securing KM folders and docuemnts we know how to secure using Permissions.
We are interested to understand the usage of Security Zones to secure standard SAP contents such as KM or User Admin iView/page or any other admin type iView/Page.
We appriciate if you have a white paper or any documentations to clearify these topics, or please provide contact info to contact you. You can e-mail documents to [email protected]

Similar Messages

GPO Security Zones and Content Ratings "Modify Settings" buttons are disabled

Task: Trying to modify a GPO so that specific users who logon to Remote Desktop Servers will have a lower Internet security level for Internet Explorer.
We have two Windows Server 2008 Domain Controllers, when I access the GPO using the Group Policy Management Console and Editor on either of the two Domain Controllers, then navigate to User Configuration > Policies > Windows Settings > Internet Explorer
Maintenance > Security > Security Zones and Content Ratings, the available "Modify Settings" buttons are both disabled.
I've read through several forum posts relating to this and the closest solution mentioned was to turn off IE ESC for Administrators on both Domain Controllers. I've done this and it nothing has changed as a result. Is there a way enable the "Modify Settings"
buttons, or is there another way to achieve the task mentioned at the top of this post?

Hi,
We need to import these settings before we modify them.
To import security zones and privacy settings from our computer using IEM:
Click
Import the current security zones and privacy settings
To import content ratings from our computer:
Click
Import the current Content Ratings settings
Regarding how to configure Security Zones and Content Ratings, the following article can be referred to for more information.
Configure Security Zones and Content Ratings
http://technet.microsoft.com/en-us/library/cc772410.aspx
Best regards,
Frank Shen

Security Zones and portalapp.xml

On the page http://help.sap.com/saphelp_nw04/helpdata/en/25/85de55a94c4b5fa7a2d74e8ed201b0/content.htm
it says that the settings (security zone, permission) in the portalapp.xml defines who can access this application.
Then it says that PRT checks the users iView-permission and then optionally the security zone permission, depending on the setting of the parameter -Dcom.sap.nw.sz=true in the J2EE.
Question:
When this parameter is disabled (default), are the security zones just not checked when accessing an application throug an iView or also when they are accessed through direct URL?

Hi Manuel,
I just checked it against our SP12 installation, with the same component, which has the same settings as yours:
> it can be run by any authenticated user
This at least does not hold for our portal installation. Each access with the given URL, called by an authenticated user which does not have one of the admin roles set within the security zones, ends with:
Access denied (Object: com.sap.portal.system/security/sap.com/NetWeaver.Portal/high_safety/com.sap.portal.runtime.system.console/components/ClusterAdminConsole)
The application permissions do not play a role here, these are for the iView wizards, which applications are to be chosen.
So, double check the user you are testing with; maybe the version is buggy?
> In the Security-Zone-Permissions
> ara:/security/sap.com/NetWeaver.Portal/high_safety/com.sap.portal.runtime.system.console
Under components/ClusterAdminConsole the same settings are to be found? (I expect it, but just to be sure.)
Hope it helps
Detlev

Muse + BC, adding a sign up form in a secure zone, and a individual my account secured page

Hello,
I having a lot of trouble in the following task I need to do in Adobe Muse and integrate in Business Catalyst.
1) I need to create a contact form page (with username and login)
2) I need that this contact form integrates with BC to store my subscribers infos
3) Then, I need to create a login and username page that when my client logs in, the info that he previously filled in appears to him (as a My Account page).
4) Of course, this My account page must a in a secure zone area, but each client should have his own personal My account page.
Is this possible? I think it is. (Muse Theme site is an example)
Thanks you for the help!!
Carlos

Hi Carlos
Answering the questions :
1) Publish the site to BC and then create a form on BC end , assign to a secure zone ( which you will have to create ).
2) You can register users in your site using same form.
3) Use login form in page where user can login , landing page for secure zone can be made as web app page. Web app needs to be created for customer accounts and in layout you can use different tags to show cases information which user has submitted etc.
4) Web app is the way out.
http://helpx.adobe.com/business-catalyst/partner/add-secure-area-your-site.html
http://www.bcgurus.com/tutorials/how-to-use-business-catalyst-web-apps
http://helpx.adobe.com/business-catalyst/partner/web-apps-module-create-custom.html
Thanks,
Sanjit

Single form for secure zone registration and web app submission?

Hi
Is it possible to setup a form where a user can simultaneously register for a secure zone and submit a web app entry? The knowledge base / tutorials describe a two step process (web form for secure zone registration and web app input form for web app submission), but I would like users to be able to do both with a single form
Thanks in advance for any suggestions
mls

In order to have a customer create a web app item they must be logged into the secure zone already. I've seen some instructions on how to let users submit web app items outside a secure zone but that requires creating a dummy anonymous user and logging them into the secure zone via javascript. You could use this method and once it's submitted you'll have to manually attach the web app item to the correct user in the BC Admin. That might not work for you but you can read more about that at http://forums.adobe.com/docs/DOC-1784
You can't use the above solution with the current user's username and password because those tags are only available when the user is logged into a secure zone already. If your signup form needs to be filled out first, the user isn't logged in.
Your best bet is to have the public signup form redirect the user after submission to an "Add item" form you have created. Maks sure that form is in a secure zone so when they add the item it is attached to their account.
If you don't want to redirect them to a secure zone and want it more seamless you could try to use some javascript/ajax to submit the form via javascript and after the form is submitted, use the javascript code in the above to log them in (be careful to use the https://yoursite.worldsecuresystems.com url if you are passing username and password info gathered from your form to log them in via javascript/ajax). Once they are logged in via the javascript you can use more ajax to fetch a page's HTML that resides in a secure zone. This HTML returned from the javascript can be your "add web app item" form and since they were logged in via javascript (securely, right?) this HTML should contain the right information. Insert this returned HTML into your form container that held the original signup form and they can continue to add a web app item without having to log in.
This is theory and might work but you'll have to start experimenting with it via javascript. I haven't actually tried to do this so hopefully some other community members who might have tried this can weigh in here as well.
Good luck!

Why do I get these messages "logged in but not to a specific secure zone"

Could anyone please explain why this messge would appear on the dashboard
'username' logged in but not to a specific secure zone
instead of
'username' logged in to Member Only Area secure zone
On this website, customers can only log on to a secure zone, and there is only one secure zone.
Thanks

Hi Mario,
Thank you for your response.
There are only two places users could log in, and none have ZoneID=-1
I tested both options with one of my own (non admin account) login, and none produced the above message.
action="/ZoneProcess.aspx?ZoneID=51&OID=5459507&OTYPE=1"
action="/ZoneProcess.aspx?ZoneID=51&OID=5459507&OTYPE=1"
both ZoneID's are the same
What is weird though, only one specific user account is generating that message.
At this stage the user has not complained about not being able to access his/her data yet.
My only concern was that this could be a possible security risk.
Thanks

Best practice for secure zone various access

I am setting up a new site with a secure zone.
There will be a secure zone. Once logged in, users will have access to search and browse medical articles/resources
This is how an example may go:
The admin user signs up Doctor XYZ to the secure zone.
The Doctor XYZ is a heart specialist, so he only gets access to web app items that are classified as "heart".
However, he may also be given access to other items, eg: "lung" items.
Or, even all items. It will vary from user to user.
Is there any way to separate areas within the secure zone and give access to those separate areas (without having to give access to individual items - which will be a pain because there will be hundreds of records; and also without having the user log out and log into another secure area)

my only issue with this is that I have no idea how to open up File Sharing to ONLY allow users who are connecting from the VPN
Simple - don't expose your server to the outside world.
As long as you're running on a NAT network behind some firewall or router that's filtering traffic, no external traffic can get to your server unless you setup port forwarding - this is the method used to run, say, a public web server where you tell the router/firewall to allow incoming traffic on port 80 to get to your server.
If you don't setup any port forwarding, no external traffic can get in.
There are additional steps you can take - such as running the software firewall built into Mac OS X to tell it to only accept network connections from the local network, but that's not necessary in most cases.
And 2. The best way to ensure secure AND encrypted file sharing via the server...
VPN should take care of most of your concerns - at least as far as the file server is concerned. I'd be more worried about what happens to the files once they leave the network - for example have you ensured that the remote user's local system is sufficiently secured so that no one can get the documents off his machine once they're downloaded?

Missing Entry in Security Zones

Hi all,
Im trying to build a User how "only" has access to the PAR-Uploader in the Portal (System Administration --> Support --> Support Desk --> ("Portal Anywhere" Admin Tools" -->) Administration Console.
My idea for a solution was to create a role with a delta-linked iView to the source iView (Portal Content --> Content provided by SAP --> Admin Interfaces --> Admin iView Templates --> Support Desk). After asigning the new role to my new User and logging in to the Portal, i can see the "overview" mask (System Administration --> Support --> Support Desk), but by calling the "Portal Runtime" (to upload the PAR) I will get an Execption.
In the NWA I found two:
Exception ID:07:46_20/03/09_0033_4057750
[EXCEPTION]
com.sapportals.portal.prt.runtime.PortalRuntimeException: Access is denied: com.sap.portal.support.desk.default - user: Deployment, Tester
     at com.sapportals.portal.prt.deployment.DeploymentManager.checkPermissions(DeploymentManager.java:2005)
     at com.sapportals.portal.prt.core.broker.PortalComponentContextItem.refresh(PortalComponentContextItem.java:251)
     at com.sapportals.portal.prt.core.broker.PortalComponentContextItem.getContext(PortalComponentContextItem.java:316)
     at com.sapportals.portal.prt.component.PortalComponentRequest.getComponentContext(PortalComponentRequest.java:387)
     at com.sapportals.portal.prt.connection.PortalRequest.getRootContext(PortalRequest.java:488)
     at com.sapportals.portal.prt.core.PortalRequestManager.runRequestCycle(PortalRequestManager.java:607)
     at com.sapportals.portal.prt.connection.ServletConnection.handleRequest(ServletConnection.java:240)
     at com.sapportals.portal.prt.dispatcher.Dispatcher$doService.run(Dispatcher.java:524)
     at java.security.AccessController.doPrivileged(Native Method)
     at com.sapportals.portal.prt.dispatcher.Dispatcher.service(Dispatcher.java:407)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.sap.engine.services.servlets_jsp.server.servlet.InvokerServlet.service(InvokerServlet.java:156)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
     at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
     at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
     at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
     at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
     at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
     at java.security.AccessController.doPrivileged(Native Method)
     at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:102)
     at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:172)
Caused by: com.sapportals.portal.pcd.gl.PermissionControlException: Access denied (Object(s): com.sap.portal.system/security/sap.com/NetWeaver.Portal/high_safety/com.sap.portal.support.desk/components/default)
     at com.sapportals.portal.pcd.gl.PcdFilterContext.filterLookup(PcdFilterContext.java:422)
     at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1248)
     at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1254)
     at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1254)
     at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1254)
     at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1254)
     at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1254)
     at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1254)
     at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1254)
     at com.sapportals.portal.pcd.gl.PcdProxyContext.proxyLookupLink(PcdProxyContext.java:1353)
     at com.sapportals.portal.pcd.gl.PcdProxyContext.proxyLookup(PcdProxyContext.java:1300)
     at com.sapportals.portal.pcd.gl.PcdProxyContext.lookup(PcdProxyContext.java:1067)
     at com.sapportals.portal.pcd.gl.PcdGlContext.lookup(PcdGlContext.java:68)
     at com.sapportals.portal.pcd.gl.PcdURLContext.lookup(PcdURLContext.java:238)
     at javax.naming.InitialContext.lookup(InitialContext.java:347)
     at com.sapportals.portal.prt.deployment.DeploymentManager.checkPermissions(DeploymentManager.java:2000)
     ... 26 more
and
07:46_20/03/09_0033_4057750
[EXCEPTION]
com.sapportals.portal.pcd.gl.PermissionControlException: Access denied (Object(s): com.sap.portal.system/security/sap.com/NetWeaver.Portal/high_safety/com.sap.portal.support.desk/components/default)
     at com.sapportals.portal.pcd.gl.PcdFilterContext.filterLookup(PcdFilterContext.java:422)
     at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1248)
     at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1254)
     at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1254)
     at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1254)
     at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1254)
     at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1254)
     at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1254)
     at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1254)
     at com.sapportals.portal.pcd.gl.PcdProxyContext.proxyLookupLink(PcdProxyContext.java:1353)
     at com.sapportals.portal.pcd.gl.PcdProxyContext.proxyLookup(PcdProxyContext.java:1300)
     at com.sapportals.portal.pcd.gl.PcdProxyContext.lookup(PcdProxyContext.java:1067)
     at com.sapportals.portal.pcd.gl.PcdGlContext.lookup(PcdGlContext.java:68)
     at com.sapportals.portal.pcd.gl.PcdURLContext.lookup(PcdURLContext.java:238)
     at javax.naming.InitialContext.lookup(InitialContext.java:347)
     at com.sapportals.portal.prt.deployment.DeploymentManager.checkPermissions(DeploymentManager.java:2000)
     at com.sapportals.portal.prt.core.broker.PortalComponentContextItem.refresh(PortalComponentContextItem.java:251)
     at com.sapportals.portal.prt.core.broker.PortalComponentContextItem.getContext(PortalComponentContextItem.java:316)
     at com.sapportals.portal.prt.component.PortalComponentRequest.getComponentContext(PortalComponentRequest.java:387)
     at com.sapportals.portal.prt.connection.PortalRequest.getRootContext(PortalRequest.java:488)
     at com.sapportals.portal.prt.core.PortalRequestManager.runRequestCycle(PortalRequestManager.java:607)
     at com.sapportals.portal.prt.connection.ServletConnection.handleRequest(ServletConnection.java:240)
     at com.sapportals.portal.prt.dispatcher.Dispatcher$doService.run(Dispatcher.java:524)
     at java.security.AccessController.doPrivileged(Native Method)
     at com.sapportals.portal.prt.dispatcher.Dispatcher.service(Dispatcher.java:407)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.sap.engine.services.servlets_jsp.server.servlet.InvokerServlet.service(InvokerServlet.java:156)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
     at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
     at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
     at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
     at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
     at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
     at java.security.AccessController.doPrivileged(Native Method)
     at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:102)
     at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:172)
With this exeptions I'd take a look to the security zone and -as not expected- the entry "com.sap.portal.system/security/sap.com/NetWeaver.Portal/high_safety/com.sap.portal.support.desk" is missing".
And Ideas to solve my problem (allow a User to access the PAR-Uploader) or to solve the missing security zone entry?

Hi Koti,
thanks for your reply, but the situation is that there is NO entry for the support desk.
My suggest path is (at permissions) exactly as yours:
- Security Zones
-- sap.com
--- NetWaver.Portal
high_safety
com.sap.portal.support.desk
As descriped: there is no entry like suggested - also nothing similar (for the fact, the title is not equal to the ID).
PS: We are using SPS14

Export Secure Zone Username Report

Strangely enough, I just found that while I can export a report with contacts' usernames and I can export a report with contacts and their secure zones, I can't export a report with both secure zones and each contact's username.
Can you help me work out how I could do it?
Even a thought on how to combine the two csv files with a script?
Thanks heaps,
Joshua

Hi Sidney,
I have discovered further problems now that I have added the login and password fields to the webform.
1. The webform did not update with the new fields when I went in to customise it. So I had to reset the form to original setup and lose all of the extra coding done on the form including:
a. javascript to set an expiry date for access to the secure zone
b. coding to the amount field so that it could not be changed
c. Zip to postcode and Cell to mobile phone labels
d. other fields marked as hidden
Below are screen shots to show that I added the password and login fields but they were not in the webform when I went in to edit it.
Not good.
Also, the javascript checking on the required fields for the forms are not working.
And finally, when testing the form and adding a username and password, the person was subscribed to the secure zone, but the welcome secure zone subscription email giving them the user name and password still did not trigger.
and
they were subscribed with a different username, not the one on the form.
So bottom line, webforms seem to be a bit broken at the moment. Is that the case? I have given up on doing the secure zone subscription from the forms now, and will tell the client it can't be done at the moment.
I still need to get the javascript checking working on the forms though, and remember submitting a question about that a while ago. Looks like it is still a problem.
Here is the screen showing that I added the new fields to the form and saved it.
Here is the web form editor screen - with the new fields not there!

Upgrading secure zone

Hi all,
I am looking to create a free trial secure zone and let users upgrade to a paid secure zone after 2 months.
When i pre-populate the fields with their username and email (the user will be logged into their trial account to access this form), when they submit the form, does business catalyst automatically add the new secure zone to the existing account, such that the account that the current user has will be subscribed to 2 secure zones?
Also, is it possible to program it such that the system will automatically send a notification via email when the user's subscription is about to expire? Like 2 weeks in advance,,

Hi,
Most likely you are under site plan webBasic or webBasic+ which does not include Secure Zone features.
For a breakdown of features per plan please view here. -> http://helpx.adobe.com/business-catalyst/kb/detailed-plan-breakdown.html
For information on how to upgrade your Muse site you may want to visit this thread below.
- http://forums.adobe.com/message/4827272#4827272
Hope this helps!
-Sidney

Doubt About GPO - Security Zones

I have Windows Server 2008 R2 and GPOXX with settings about Security Zones and run normally.
I need create another GPOYY with settings about Security Zones different than GPOXX.
My doubt is: When I create GPOYY and my settings won't occur conflict in my GPOXX? I don't can problem in my environment production in my GPOXX.
Thanks a bunch!

Hi,
>>My doubt is: When I create GPOYY and my settings won't occur conflict in my GPOXX?
As long as the settings we configure don't conflict with each other, there won't be conflict between GPOs. If the setting in GPOYY and GPOXX conflict with each other, saying we enable a setting in the former GPO and disable the same setting in the latter
GPO, then there will be conflict and the GPO processed at last will be the winning GPO for applying the setting.
Regarding group policy precedence, the following article can be referred to for more information.
Group Policy processing and precedence
http://technet.microsoft.com/en-us/library/cc785665(v=ws.10).aspx
Best regards,
Frank Shen

Reply to Open Case inside Secure Zone via Form Instead of Email?

I also asked this on the LinkedIn group - any help appreciated!
I was wondering if anyone has done this? I heard on chat it cannot be done, but I was wondering if anyone has a workaround.
I have set up a CST system behind a secure zone for a client. They are using it for private communication, not support, so I am looking for a way to allow registered users to view their cases created via the CST in the secure zone (got that all set), but then be able to respond to an open case via a form inside the secure zone and have it append to the existing case, instead of via email.
I asked if the Case # could be appended to a URL to pre-fill a form field (mimic the format of the CST email), but I was told no go.
Any ideas? Alternative approaches? The goal is to allow people to correspond solely inside the secure zone if they want for privacy.
Thanks,
Kristen

Hi Liam,
Thanks! Yes - I have that all working inside the admin. What I was trying to do was have website visitors have the ability to reply inside the secure zone after logging in (not the CSR) so that they do not have to use email if they don't want to.
Here was an idea I had, not sure if it would work:
Here is the case list in the secure zone with a "reply" hyperlink: http://www.screencast.com/t/fZjzVLIt
Here is the reply form, with some fields already preloaded through secure zone modules. Would it be possible to build a string using tags for the subject line that would mimic the case subject line in the email so that the form submit would append to the existing case?
Here is the form: http://www.screencast.com/t/sFPObjAiYVJ
Here is the case in the system: http://www.screencast.com/t/KdhjlKuEjh
I don't know if this is specifically possible (can tags render like that?), or if you have any other ideas.
Thanks!

Secure Zone redirect failing

Hi, So i have just made the log in page for a basebase ball team. When i go Log in - http://redfernredsox.businesscatalyst.com/log-in.html ( Enter any username or password still does it)
I enter The Username and Password - then when i press log in this comes up - https://redfernredsox.worldsecuresystems.com/ZoneProcess.aspx?ZoneID=141&Referrer=http%3a% 2f%2fredfernredsox.businesscatalyst.com&OID=5558009&OTYPE=1 . I have not changed any infomation from the secure zone HTML block from the add secure zone page in BC. This alsos happens on the Rego page when they submit the form.
Thanks
Aaron

For the username that you are using to login, have you made sure that user is subscribed to your secure zone? Find the customer record associated with that username in the BC Admin area at CRM > Customers and search for that customer. When you are on their customer record, goto the Subscriptions tab and make sure they are subscribed to that secure zone.
If that's ok-- goto your secure zone settings at Site Manager > Secure Zones and choose your secure zone and click the Details tab. Make sure the page you are using for the "Landing page" is also set as a secure page. Goto the "Secured Content" tab and make sure that the page you are using as the landing page is on the right side of that list-- if it's not there you can move it from the left to the right to make it secure.

Secure Zone Issue

First of all it is a kind of a nice idea and it seems to work quite well. However, if you put some apps in the secure zone, and deactive it in the open zone, you can still reactivate it in the open zone. That is you cant hide the existance of certane apps, only the date in them. Is that correct? Say you have a secret bank account with bank XYZ and you want to hide that you are using XYZ internet banking app from the open zone, or you want to hide your dating apps from your friends or family - you can't really do this with the current implementation, if I am right.  P.S: I get it, that the date will stay secure and protected, but you can not completely hide your ussage of some apps from the oppen zone. Finally, question if you have a virus or malware in the Open Zone, in theory this should not impact your secure zone? If the infected apps are deactivated?

Thanks again, huangzg, for the prompt and professional reply. I am also quite impressed and excited that you looked at my suggestions and considered to implement some of them.  Regarding the remaining open issues, I will repy in blue:
4. Error when installing apps in SZ
This should be an issue, we need more details to fix it. Please help to provide, thanks. When I tested the Vibe Z2 Pro, I was not able to install apps in the Secure Zone, via the Play Store (or any other way). When in SZ, I opened Google Play Store, I found an app, I clicked install, and the Google Playstore started installing, after it interrupted and gave me an error message, like there is a bug. I do not remember the exact error message, but I can provide it if necessary. It was only possible to install apps in the Open Zone. Some other users confirmed that this is the case. Franky, I do not think this is a problem as the Open Zone is a sort of administration zone where all the apps are installed. So I thought this is a functionality , that it is not possible to install apps in the Secure Zone. That is fine and I do think it is probably increasing the security of the SZ. However, what bothers me from user perspective, is that the google play store gives error message like as if there was a bug. Which might confuse users. Although, this is not a bug only a functionality. So I suggested, that instead of getting an error message when installing apps in playstore via the SZ, the SZ could give a message something like "All new apps have to be installed in the Open Zone". Having that said, I do not know if this is possible to implement, as the error message comes form the google play store, so I do not know if you can actually catch the play-store error message or pressing of the install button and replace it with secure zone message. It is just cosmetics. 6. It is a great secure zone but not a guest zone
Guest mode is coming in Google Android L version. Any devices upgraded to Android L will include this feature. What kind of guest mode will this be? Will it be basically a second secure zone that will be labeled guest mode? Will it only have 1 extra guest mode or several? I am not trying to push the limits, I am just being curious.  P.S. I also think a guest mode could be used as an personal user mode. I could put all the apps that I use daily in the "user mode / guesst mode" and thus the Open Zone would serve only as an admin zone for installing apps. Or think of it as a glorified app drawer. I.e. it would be possible under some conditions to use the guest mode as your own user account with just selected enabled apps. That would go a bit beyond anything that currently exists by other developers. Thus, it is just brainstorming, not a suggestion.  Above changes will be available in K920 ROW L version. I am now testing the Vibe Z2 (5.5 inch, 2 GB RAM). I did not find the secure zone there. Should I assume that the secure zone will only be available on the Vibe Z2 Pro also after the L update? Does this has to do anything with the 3GB of RAM in the Pro version? Vibe X2 and Vibe Z2 have 2GB RAM, is that too little to roll out a secure zone on those phones?

Secure Zone List?

How would I go about listing everyone that is subscribed to a secure zone?
So say there are 25 people subscribed to zone A, and I log in, and it shows me all 25 of those people. (On the website not Back-Office).

So, If I need to create teams, what is the best way to go about that? Create multiple secure zones and then have the user subscribe to one of them? If that is the case, Don't I have to create multiple secure zones, and multiple forms, but only 1 account page, where they log-in to see their account balance?

Security Zones and KM

Similar Messages

Maybe you are looking for