SSO Client: Profile selection dialog

Hi guys,
after installing the SSO client for the first time, we have intermittently noticed a profile selection dialog popping up when a user tries to connect to an SNC-enabled SAP system using SAP GUI. The dialog asks the user to select a profile (in our case we have two SLS profiles). The selection is then remembered from that point going forward, same as if the user would make the selection in the client directly (via right-click).
The question is what exactly triggers that dialog from appearing since we have not been able to reproduce it - even if no profile is selected as "use for secure login".
Is there a registry key maybe that we're missing? We played around with allowFavorite, but that didn't help.
Thanks
Michael

Hi Valerie,
I read SAP Note 2067284 and I understand the problem and fix (I think). My customer is on the latest version however we do not see the mentioned pop-up at all but we would like to see it at least once (after a fresh install):
Each time the user connects to a server, the user is prompted by a pop-up window to select a certificate/profile. The selected certificate/profile is not remembered after a successful login and the user will be prompted again, when he tries to connect to the same server.
So the part in bold above is what we're interested in, but it does not show at all, not even once.
Makes sense?
Thanks
Michael

Similar Messages

Printer selection dialog on client

I have to fire a print out from a jsp page.
I am using java.awt.PrinterJob, Printable and Book classes for the print.
When I call the PrinterJob.printDialog(), the Printer Proerties selection box
is popped on the server.
Is there any way I can pop up the printer selection dialog box on the client machine?
Thanks

You won't be able to use a java class to open anything on your client.
Your java program runs on a server and builds HTML for the client browser. You can either do as Zetor suggested and put print functionality in an applet, or include javascript in the HTML page you build that will do your printing.

Printer selection dialog on client by servlet

I have to fire a print out from a jsp page.
I am using java.awt.PrinterJob, Printable and Book classes for the print.
When I call the PrinterJob.printDialog(), the Printer Proerties selection box
is popped on the server.
Is there any way I can pop up the printer selection dialog box on the client machine?
Thanks

Servlets is executed in the server, for that reason it appears to you the window of impression in the server, and not in the client.
In order to print in the client I suggest one to you of these 2 solutions:
First solution: When the user wants to print something, he creates a new window of the browser with a page HTML that contains what you want to print and to print it from there with javascript. Something complicated if it is not known like doing it. See the javascript code window.print();
Second solution: To use the program Crystal Reports. The quality is excellent, but it is necessary to buy it.
greetings.

Could not see Diemensions and its Members in Member Selection Dialog.

Hi friends,
I have an issue while trying to retrieve cube's data through a Member Selection Dialog using Application Builder.NET 9.2 APIs.
I could able to sign on and could able to select the cube but the Dimensions and its members are shown empty. Iam developing this applicaiton on VisualStudio 2003 with Application Builder 9.2 and EDS 9.2. I could see the cube's data in Member Seletion Dialog when trying through a Spreadsheet client(exel sheet) but cannot see in MemberSelection Dialog in ApplnBuilder.NET application.Iam trying to populate the data into ListBox and DropDownList controls through respective adapters using HABNET 9.2 APIs. It would be great help if some one through light on the issue.
Below is the log for Analytic High Availability Serverices.
Fri Feb 05 17:46:22 IST 2010 - Service using TCP/IP
Request: sign on (from user cssToken session number 0)
Fri Feb 05 17:46:22 IST 2010 - Service using TCP/IP
Request: get domain store object names (from user demoadmin session number 0)
Fri Feb 05 17:46:22 IST 2010 - Service using TCP/IP
Request: connect to analytic service (from user demoadmin session number 0)
Fri Feb 05 17:46:22 IST 2010 - Service using TCP/IP
Request: list analytic services applications (from user demoadmin session number 0)
Fri Feb 05 17:46:22 IST 2010 - Service using TCP/IP
Request: list cubes (from user demoadmin session number 0)
Fri Feb 05 17:46:22 IST 2010 - Service using TCP/IP
Request: list cubes (from user demoadmin session number 0)
Fri Feb 05 17:46:22 IST 2010 - Service using TCP/IP
Request: list cubes (from user demoadmin session number 0)
Fri Feb 05 17:46:22 IST 2010 - Service using TCP/IP
Request: disconnect from analytic service (from user demoadmin session number 0)
Fri Feb 05 17:46:22 IST 2010 - Service using TCP/IP
Request: sign off (from user demoadmin session number 0)
Fri Feb 05 17:47:35 IST 2010 - Service using TCP/IP
Request: sign on (from user cssToken session number 0)
Fri Feb 05 17:47:35 IST 2010 - Service using TCP/IP
Request: open cube view (from user demoadmin session number 0)
Opening cube view on demodrive/Demo/Basic , demoadmin...
Fri Feb 05 17:47:35 IST 2010 - Service using TCP/IP
Request: get domain store object properties (from user demoadmin session number 0)
Fri Feb 05 17:47:35 IST 2010 - Service using TCP/IP
Request: connect to analytic service (from user demoadmin session number 0)
Fri Feb 05 17:47:35 IST 2010 - Service using TCP/IP
Request: set active application/cube (from user demoadmin session number 0)
Fri Feb 05 17:47:35 IST 2010 - Service using TCP/IP
Request: get cube view properties (from user demoadmin session number 0)
Fri Feb 05 17:47:35 IST 2010 - Service using TCP/IP
Request: set cube view properties (from user demoadmin session number 0)
Fri Feb 05 17:47:35 IST 2010 - Service using TCP/IP
Request: clear active application/cube (from user demoadmin session number 0)
Fri Feb 05 17:47:35 IST 2010 - Service using TCP/IP
Request: disconnect from analytic service (from user demoadmin session number 0)
Fri Feb 05 17:47:35 IST 2010 - Service using TCP/IP
Request: close cube view (from user demoadmin session number 0)
Fri Feb 05 17:47:35 IST 2010 - Service using TCP/IP
Request: sign off (from user demoadmin session number 0)
Fri Feb 05 17:56:26 IST 2010 - Service using TCP/IP
Request: open cube view (from user demoadmin session number 0)
Opening cube view on demodrive/DMDemo/Basic , demoadmin...
Fri Feb 05 17:56:28 IST 2010 - Service using TCP/IP
Request: get domain store object properties (from user demoadmin session number 0)
Fri Feb 05 17:56:28 IST 2010 - Service using TCP/IP
Request: connect to analytic service (from user demoadmin session number 0)
Fri Feb 05 17:56:28 IST 2010 - Service using TCP/IP
Request: set active application/cube (from user demoadmin session number 0)
Fri Feb 05 17:56:28 IST 2010 - Service using TCP/IP
Request: get cube view properties (from user demoadmin session number 0)
Fri Feb 05 17:56:28 IST 2010 - Service using TCP/IP
Request: set cube view properties (from user demoadmin session number 0)
Fri Feb 05 17:56:28 IST 2010 - Service using TCP/IP
Request: clear active application/cube (from user demoadmin session number 0)
Fri Feb 05 17:56:28 IST 2010 - Service using TCP/IP
Request: disconnect from analytic service (from user demoadmin session number 0)
Fri Feb 05 17:56:28 IST 2010 - Service using TCP/IP
Request: close cube view (from user demoadmin session number 0)
Fri Feb 05 17:56:28 IST 2010 - Service using TCP/IP
Request: sign off (from user demoadmin session number 0)
Fri Feb 05 17:56:28 IST 2010 - Service using TCP/IP
Request: sign on (from user cssToken session number 0)
Fri Feb 05 17:56:28 IST 2010 - Service using TCP/IP
Request: get domain store object properties (from user demoadmin session number 0)
Fri Feb 05 17:56:28 IST 2010 - Service using TCP/IP
Request: connect to analytic service (from user demoadmin session number 0)
Fri Feb 05 17:56:28 IST 2010 - Service using TCP/IP
Request: set active application/cube (from user demoadmin session number 0)
Fri Feb 05 17:56:28 IST 2010 - Service using TCP/IP
Request: get analytic services application Information (from user demoadmin session number 0)
Fri Feb 05 17:56:28 IST 2010 - Service using TCP/IP
Request: get analytic services application state (from user demoadmin session number 0)
Fri Feb 05 17:56:28 IST 2010 - Service using TCP/IP
Request: get cube state (from user demoadmin session number 0)
Fri Feb 05 17:56:28 IST 2010 - Service using TCP/IP
Request: get cube note (from user demoadmin session number 0)
Fri Feb 05 17:56:28 IST 2010 - Service using TCP/IP
Request: get alias (from user demoadmin session number 0)
Fri Feb 05 17:56:28 IST 2010 - Service using TCP/IP
Request: list aliases (from user demoadmin session number 0)
Fri Feb 05 17:56:28 IST 2010 - Service using TCP/IP
Request: get cube information (from user demoadmin session number 0)
Fri Feb 05 17:56:28 IST 2010 - Service using TCP/IP
Request: open cube outline (from user demoadmin session number 0)
Opening outline on demodrive/DMDemo/Basic for user demoadmin...
Fri Feb 05 17:56:29 IST 2010 - Service using TCP/IP
Request: get child member names (from user demoadmin session number 0)
Error in processing request:
null
Fri Feb 05 17:56:29 IST 2010 - Service using TCP/IP
Request: close cube outline (from user demoadmin session number 0)
Fri Feb 05 17:56:29 IST 2010 - Service using TCP/IP
Request: clear active application/cube (from user demoadmin session number 0)
Fri Feb 05 17:56:29 IST 2010 - Service using TCP/IP
Request: clear active application/cube (from user demoadmin session number 0)
Fri Feb 05 17:56:29 IST 2010 - Service using TCP/IP
Request: disconnect from analytic service (from user demoadmin session number 0)
Fri Feb 05 17:56:29 IST 2010 - Service using TCP/IP
Request: sign off (from user demoadmin session number 0)

Thanks everyone for replying to this message. We could never find a viable solution so we decided to re-image the computers/laptops of the handful of users with this issue. This seemed to do the trick. At this point we think that there was something interfering on the specific machines that we could not identify.
Roman

Regarrding IC Web Client Profile Assignment

Hi ,
I am learning IC web client actually, in a tutorial i came across something called IC web client profile. i created it successfully. Next they have said to assign it to the user or business partner' s position in organisation management. i don get what this is actullay. Can anybody help me in knowing how to assign the profile. ?
thanks,
selva M.
Edited by: selvakumar mohan on Apr 10, 2008 1:26 PM

hi Selva,
Once you have creted the ICWC profile you will need to assign this profile to either a BP/User or Position or Org unit.
for this go to the trasaction ppoma_crm where you can see you orgnisation setup along with the positions and BP assignements.
Now select position and go on the top to the go to field and then detailed object --.enhanced object descriton and then follow the steps as given above.
Regards
Raj

AnyConnect - Client profile

Hi all
I have a very quick question, been trying to find a solution but fail till now. The issue, is there is a default time for AcyConnect client profile to be downloaded/updated when you create a new client profile
Example: if I have already a client profile (XML), then if I create a new Client profile. When the user connects, it should be using the new client profile correct. But this was not the case. The user was using the old client profile. However the new profile was updated on the client side after 8hrs.
Ok as a workaround you could delete the xml file from the client PC, however my question is,is there is an option to enable this to be downloaded after creating the profile. I have checked everywhere with the client profile and was not be able to find any setting. If someone knows could you kindly share this please?
Thanks in advance
Lancellot

Hi Lancellot
as soon as you modify the profile on the ASA (or create a new one), all clients will download this profile as soon as they connect.
Two things to note though:
1. the new profile is only downloaded if the user logs in successfuly. So once the tunnel is established, you should see the new profile in the local profiles directory.
2. Many settings in the profile are applicable *before* the new profile is downloaded, i.e. some are applied only before a connection is initiated (e.g. start before logon), others only during the connection attempt( e.g. automatic certificate selection).
Similarly, if you add new ServerList entries to the profile then they will only be visible in the client GUI after the client downloads the new profile and disconnects.
Does this clarify the behavior you saw?
Herbert

Safari file select dialog hangs?

When attempting to upload a file, the Safari file selection dialog box opens, but I get a beachball as the dialog attempts to display every file on my Mac for some reason. The expected behavior would be for it to start in the last place I uploaded a file, but nothing is selected in the sidebar and it appears to be showing all the files on the system--no directories, but all files of all types.
I've waited over five minutes and see the list of files growing (the longest I've let it get is >15,000 items) but it never finishes. Also, I'me seeing the "select a file to see its path" notice in the bottom of the dialog. Force quitting Safari is the only solution.

This started happening to me today.
I use: Safari Version 5.1.6 (7534.56.5)
And when I get a dialog box to choose a file for upload using Safari, there is no beach ball, rather there is the circular activity icon just spins and spins. No file listing appears in list view, column view, icon or coverflow view. I cannot select a file in Safari using the popup file select dialog box.
This is after a softare update yesterday Mac OS X 10.7.4
Can't use for WordPress, Tumblr, Facebook etc.
I am able to use Transmit, my ftp client and it has no problem refreshing the file listings.

Assigning AnyConnect Client Profiles based on the machine?

I have an ASA running 8.2.x code with AnyConnect 2.4.x.I have both Radius and LDAP (AD) AAA available.
If a user connects from a company owned laptop, I want to push down AnyConnect client ProfileA (with scripts to map drives etc...) and network ACL's set A.
If a user connects from any other computer, I want to push down AnyConnect client ProfileB (no scripts etc...) and network ACL's set B.
What I would like to do is CSD to do a machine certificate check (for presence of a cert from my private CA) and to assign a EndPoint Policy attribute (Managed on successful check or Unmanaged on failure). I can then use DAP to tailor the ACL's that get set.
It seems like the only way to handle AnyConnect client profiles is with Group-Policy. Using LDAP I can assign a user to a Group-Policy, but I have no way of determining is they are coming in from a company laptop or not when assigning the Group-Policy. DAP can not assign an AnyConnect client profile.
If at all possible, I do not users to have to pick a conenction profile or use different URL's.
Is there anyway to accomplish this?

Hi
Did you ever resolve this issue? I am trying to assign a specific IP address based on the hostname or machine cert but the certificate matching doesn't seem to look at the machine cert.
Has anyone got any idea how I could do this?
thanks
Steve

How do I resolve: Field Selection dialog [Pick... button] in "Mark as read-only" section of Signed tab for Digital Signature field is not working

I am using Acrobat Pro X on Windows 7 Enterprise x64 to create a form. When I have a simple form with a few fields, I am able to use the "Pick..." button to select the fields I want to select, but in a more complex form (20 fields with 3 Signature fields) The Field Selection dialog does not work. I can make the selections, but they are not saved. Removing fields does not resolve issue. IF I start with a blank form and add a few fields, the dialog will work, but after adding more, it quits working. Reader XI is also installed.

And that is why many responders use only the custom JavaScript calculation option.
The UI for the select fields and simplified field nations are only a way to pass field names to a JavaScript function that performs the actual calculation. Sometimes these functions call other functions and pass the parameters can lead to errors in the attempted code.
I would start to learn code JavaScript for Acrobat.
The pick field dialog is for performing calculations involving sums, products, averages, minimum, and maximum. I am not sure how that would work with a digital signature. Once a signature is applied the form fields could be locked.

Anyconnect Client profile files deleted after client upgrade

L.S.
I am running anyconnect version 3.1.02040 on a Windows 7 64-bit machine with UAC turned on.
The ASA I am connecting to is a 5510 running ASA OS 8.4.5
The problem I have is the following:
We are using machine certificate authentication combined with RADIUS user authentication.
The machine certificates are stored in the Machine/Personal container in the local machine.
By default, the anyconnect client does not have the rights to access this certificate store when run by the user in non-elevated mode.
We do not want to have the user run the client as administrator (in elevated mode) all the time.
Therefor we have made an Anyconnect Client profile that sets the Certificate Store Override parameter to true and attached it to the group policy.
With this XML in place (in the C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client\Profile folder)
the users can connect to the ASA and authenticate using the certificate without the need for elevated rights. This is all working perfectly.
The anyconnect client and XML file are distributed to the clients using a software distribution system (Microsoft SCCM).
The problem happens when I update the Anyconnect package on the ASA. I recently updated the package to release 3.1.03103. This is what happens:
The user can connect using the 3.1.02040 client (certicate authentication works without elevation, since the XML Anyconnect Client Profile is present)
The Anyconnect software updates itself to the new version during the connection, pushed from the ASA.
The VPN is established.
However, the XML file that is associated with the group policy is deleted during the upgrade process and not placed back in the Profile folder on the client after the upgrade.
This means the user cannot connect without using elevated rights the next time he wants to connect.
If he uses elevated rights after the upgrade, the XML is pushed back from the ASA normally, allowing the user to connect without elevation again any subsequent times.
Is there any way to push the XML profile to the client from the ASA after the upgrade of the Anyconnect software?

Hi poiu720408 ,
1. You need to set up a web-url or group-alias under the group policy as web have enable the "tunnel-group-list enable" under the webvpn configuration. So once the user connect to the proper URL/alias the profile will be applied.
http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/98580-enable-group-dropdown.html
2. Yes the Anycopnnect store a "Cache " information on the PC , if you want to clan up you have to go to the anyconnect folder on C: on the PC and delete the global_preferences.xml profile.
3. This behavior is totally expected and they should disappear after a some minutes , however if you wan to force this , you can use the command "vpn-sessionsdb logoff webvpn noconfirm"
Please rate helpful post !
Hope this helps
- Randy -

"Anyconnect client profile" option missing in ASDM

Hello,
I'm in the process of setting up Anyconnect on the ASA, and have successfully updated the licensing, as well as uploaded the anyconnect pkg for web deployment. I enabled anyconnect on the outside interface and can now have the ASA push the client to the machine. Works fine. However, I want to add backup servers that the client will attempt to reach in the event the primary is down. I understand that "client profiles" can be created to customize settings like this. Problem is, when I follow the configuration guide with instructions for making client profiles at this location:
http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect30/administration/guide/ac02asaconfig.html#wp1289905
It shows that I should have an option for Anyconnect Client Profile and Anyconnect Client Settings.
I don't have either of those options in ASDM. Here's what mine shows:
I have another "SSL Client profiles" option, but it doesn't seem the same as the options above.
Can someone assist with what I need to do to get the Client Profiles option to be available so I can add backup server information to the client? Thanks!

Thanks for the response Marvin,
It shows the ASA and ASDM versions are 8.2 and 6.2 respectively.
Result of the command: "sh version"
Cisco Adaptive Security Appliance Software Version 8.2(1)
Device Manager Version 6.2(1)
Result of the command: "sh act | i Ess"
AnyConnect Essentials : Enabled
I don't have the premium license, just the Anyconnect Essentials and Mobile licenses. I would imagine essentials should have the same profile configuration options, though. If it is in fact because I'm running an older version of ASDM, do I need to update both the ASA IOS and ASDM together, or can I just upgrade ASDM on its own? Thanks again.

Selectable Dialog Panel Tab Order Reversed when Plug-In compiled with XCode 3

Hi,
I'm not sure if anyone has seen this before, but I am experiencing
a problem with the order of the panel tabs in a selectable dialog when compiling
a CS3 plug-in using the following configuration.
OSX 10.5.4
XCode 3.
ID SDK 5.0.3
The problem is evident in the sample SDK plug-in "BasicSelectableDialog"
Other than the obvious ( i.e. use XCode 2.4.1 ) is there a simple configuration fix for this??
Regards,
Mike.

Update::
Seems to be a problem with the ResourceEnabler or the call to CDialogCreator::GetOrderedPanelIDs() in the GetOrderedPanelIDs call in the dialog creator.
The list returned is always empty when compiled in XCode 3, but filled in when compiled using XCode 241.
Regards,
Mike.

Multiple Selection dialog restricted to 5 rows

Hi All,
I have defined a select options in my WebDynpro view.
When I try to enter some value using the Multiple Selection dialog (Extensions) it only shows maximum of 5 rows.
If need to enter more data, I just have to press the "insert" button and add new rows.
But is there a way to populate more than 5 rows initially.
Or is there a way to give a "Upload from clipboard" functionality when a user needs to enter more than 5 rows of selection input.
Thanks in advance for your kind help.

hi Thomas,
Thank you so much for your quick response.
But is there a way that I could at least increase the number of visible rows initially?

Unable to activate Client Profile within Client-Based Groupware Integration

Experts - Please help us!
We are trying to activate a new Client Profile wiithin Client Based Groupware Integration. We are receiving an error message that
"Multiple profiles not allowed for same role, country, language combination."
We believe we are receiving this message because there was an incomplete profile already saved in this table. We can not move forward without completing that record, however it is not editable for us.
Has anyone run into this problem before? Any ideas how we can move forward? I would appreciate any information anyone is able to provide.
Thank you!
Jami Shircel

I have one idea If you want to do this for your future records then you should create a specific transaction type meant only for GWI and assign it to groupware spro settings and that transaction type should not be used from SAP CRM WebUI. In this way all the appointment/task created in Outlook have that special TType and can be differentiated from others. Will that be of any use ?
Rgds,
Shobhit

Using Crystal Report for VS2010 with target Framework 4 Client Profile

I´m need know if is possible use the Crystal Reports for VS 2010 with the framework 4 client Profile. Exists some posibility?
I need use the WPF Crystal Report Viewer, and the export/print mechanism.
Regards

Hi Null,
No it is not, CR requires the full client in all framework versions.
Thank you
Don

SSO Client: Profile selection dialog

Similar Messages

Maybe you are looking for