SSO not working for a custom WDA application that runs in the Portal

I have a Portal system (Java stack, NW04s) that has an iView of type webDynpro ABAP. The custom Web Dynpro ABAP application resides on another system (ABAP stack, running ECC6). We have configured the trust relationship between the Portal and the ECC system as per
http://help.sap.com/saphelp_nw04s/helpdata/en/61/42897de269cf44b35f9395978cc9cb/content.htm
We know this is working since we are able to run ESS. However, for the custom WebDynpro ABAP application, when calling it for the first time, a logon screen shows up. How can we get rid of it? what are we missing to have SSO work for the custom WebDynpro application?

Please check this link:
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/d35bb690-0201-0010-988a-d669c8530518
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.highlightedcontent?documenturi=%2fhelp%2fsdn_help_nw04s%2fsaphelp_nw04s%2fhelpdata%2fen%2f5e%2f6c85c3edf942f39349a1e337434d29%2fcontent.htm
Hope it helps.
Regards,
Mona

Similar Messages

  • I have an hardware issue with my iphone 5 64gb. its lock button in not working. for a fact i know that it can be replaced but my question is this that do they require the bill or anything to replace or they only require the phone in usa

    i have an hardware issue with my iphone 5 64gb. its lock button in not working. for a fact i know that it can be replaced but my question is this that do they require the bill or anything to replace or they only require the phone in usa

    Warranty and support is only valid in the country of origin.  The only exception being the EU where a device bought in any EU country can get warranty or service in any EU country.
    Warranty is determined by device (serial number), no documentation required.
    Apple does not repair devices, they replace them.  For that reason, ensure the device is backed up and any pictures take with the device are copied off the device prior to going in for service.

  • I work in a High School and I am looking for a new library system that runs on the mac and is not windows based, can anyone recommend anything?

    I work in a High School and I am looking for a new library system that runs on the mac and is not windows based, can anyone recommend anything?

    That's a very broad question and difficult to answer without knowing more about you requirements.
    Try starting on this page Category review: library management software for the Mac |Part I  and part II  to get a starting point.
    regards

  • [svn] 3921: Fix for - @inheritDoc tag not working for get/ set overrides when you only override the setter of a base class

    Revision: 3921
    Author: [email protected]
    Date: 2008-10-28 06:23:00 -0700 (Tue, 28 Oct 2008)
    Log Message:
    Fix for - @inheritDoc tag not working for get/set overrides when you only override the setter of a base class
    QE Notes: Baselines for framework test will need to be updated.
    Doc Notes: None
    Reviewer: Paul
    Bugs: SDK-17304
    tests: checkintests
    Ticket Links:
    http://bugs.adobe.com/jira/browse/SDK-17304
    Modified Paths:
    flex/sdk/trunk/modules/compiler/src/java/flex2/compiler/asdoc/ASDocExtension.java
    flex/sdk/trunk/modules/compiler/src/java/flex2/compiler/asdoc/ClassTable.java

    Revision: 3921
    Author: [email protected]
    Date: 2008-10-28 06:23:00 -0700 (Tue, 28 Oct 2008)
    Log Message:
    Fix for - @inheritDoc tag not working for get/set overrides when you only override the setter of a base class
    QE Notes: Baselines for framework test will need to be updated.
    Doc Notes: None
    Reviewer: Paul
    Bugs: SDK-17304
    tests: checkintests
    Ticket Links:
    http://bugs.adobe.com/jira/browse/SDK-17304
    Modified Paths:
    flex/sdk/trunk/modules/compiler/src/java/flex2/compiler/asdoc/ASDocExtension.java
    flex/sdk/trunk/modules/compiler/src/java/flex2/compiler/asdoc/ClassTable.java

  • Can I create a custom SCSM task that runs on the server?

    I'm new to SCSM (got roped in as the developer/Powershell guy). I see instructions for adding a custom task to SCSM, which I know generally run from the user's console, under their security context. I also found a reference to "runtime tasks" which
    run from the server. Is there a way for me to make a custom task that runs from the server?  
    If it helps, I'll be creating a task that implements the Poweshell script found
    here that converts an incident to a service request. I'd much rather the conversion take place on the server so that we don't need to deploy the SMlets Powershell module (and another dependency) on each user's workstation. 
    Thanks!

    I'm new to SCSM (got roped in as the developer/Powershell guy). I see instructions for adding a custom task to SCSM, which I know generally run from the user's console, under their security context. I also found a reference to "runtime tasks" which
    run from the server. Is there a way for me to make a custom task that runs from the server?  
    If it helps, I'll be creating a task that implements the Poweshell script found here that converts an incident to a service request. I'd much rather the conversion take place on the server so that we don't need to deploy the SMlets Powershell module (and
    another dependency) on each user's workstation. 
    Thanks!
    Not sure what capabilities you have, but would something like this be useful?
    http://scsmlab.com/2013/12/09/how-to-create-a-custom-scsm-console-task-by-using-some-c-and-xml-magic/

  • SSO not working for BW reports as iview in Portal

    Hi,
    I have setup SSO for netweaver portal 7.0 and BI 7.0 as backend system.
    I have used SAPLOGONTICKET for SSO.
    1. Now if I create iView for some transaction , its working fine. UserID and password is not asked and i'm getting into BW sytem.
    2. But if I create an iView for BW report type 3.x and pull a report from BI system, it is showing a login screen to me. now I have to give clientno, userID and password to get into the system.
    Can please some help me in this issue.
    is there some specific configuration I need to make..?
    Thanks in Advance.
    Regards,
    Saurabh

    Hi Kiran,
    Thanks for your reply.
    My problem is now solved. Actually transaction iViews use connectors to connect to the backend system, where as BW reports iviews use WAS to connect to the backend system.
    while accessing the portal i was not giving the fully qualified name in URL.
    while accessing the portal correct way is to use the URL is :
    http://hostname.domain:port/irj/portal ...I was missing the domain portion.
    Use the fully qualified name so that both EP and backend systems comes in same domain.
    Regards
    Saurabh

  • Table Maintenance(SM30) not working for a custom View..

    Hi,
    I have the below case which is not working at the moment.
    we have standard table T024 and the requirement is to update the table directly in production. To update the standard table i have created a custom maintenance view on this table and created a table maintenance generator for custom view.
    In maintenace status tab of view i have maintened below information:
    Access                                                 read, change, delete and insert
    Delivery class                                       A
    Data Browser/Table View Maint.         Display/ Maintenance allowed
    The table maintenace generator has been also created but when trying to modify it is giving below message
    "Client 210 has status 'not modifiable"
    We have two clients in dev server 200 -for development
                                                            210 - for development testing
    In development it is working but in development testing client and in quality it is not working.
    Can you please help me as to why we are getting the above message?
    Best Regards,
    Rajesh

    Hi Rajesh,
    That is coming because of the Table Maintainance Generator Settings. You have to chose no, or user, recording routine then system will not generate any request and you can update the data. This is actually a BASIS settings in SCC4, so that for customizing tables system should not generate any request.
    Thanks & Regards,
    Faheem.

  • CAS SSO not working for VPN Group

    Hello,
    I am trying to get SSO working for a CAS/CAM in a inband virtual gateway for VPN users coming in off a ASA5520. There are two VPN groups each with its own group policy and tunnel group. One group uses a Windows IAS Radius Server and the other a token based RADIUS RSA device.
    Users use the AnyConnect client to connect to the ASA where they are dumped into a vlan. SSO works for the group that uses the Winodws radius server. On the CAS the Cisco VPN Auth server has the Unauthenticated Group as the default group, and then I use mapping rules (Framed_IP_Address) to get the different vpn groups into the right roles. This works for the one group, but since SSO is not working on the second group the CAS never gets the chance to assign them into the correct role.
    The only thing I got is this from the ASA:
    AAA Marking RADIUS server billybob in aaa-server group cas_accounting as ACTIVE
    AAA Marking RADIUS server billybob in aaa-server group cas_accounting as FAILED
    I am so close but cant call this done yet....

    Hey Faisel,
    Thanks for the question.
    This is the stange thing. For days Group A (Windows Radius Server) was working and Group B (RSA Radius Server)  would not work. Then for some reason I had to reboot the CAS and BOOM...Group B started working and Group A STOPPED working.
    So on the ASA I now get these:
    AAA Marking RADIUS server cas2-hvn-3515 in aaa-server group cas_accounting2 as ACTIVE
    AAA Marking RADIUS server cas2-hvn-3515 in aaa-server group cas_accounting2 as FAILED
    Where cas_accounting2 is the AAA server group for Group A
    On the ASA I can see that the FW sends a packet to the cas:
    "send pkt cas2-hvn-3515/1813"
    but the FW never gets an answer back from the CAS for Group A whereas with Group B I can see the response from the CAS.
    "rad_vrfy() : response message verified"
    What can I look for in the CAS logs to see where the problem is. I will try and setup a packet capture on the CAS and debug it too.

  • To know application that run in the pc

    Hi, in from M�xico,
    my question is know applicattion that run in my pc, exist some class special? or if somebody know a tutorial where say mention something?.
    Sorry my bad english.
    Thanks :D

    sorry Paul for late answering here....
    I went thro the link u sent, check files & directories thro Command Prompt & find isqlplus is existing. But the problem still exist.
    Is there any other port nos. which may be used for isqlplus ?
    I tried to find out from the link, but cant find any other except Port No. 80.
    Now????

  • Sample Custom SSO not working for external userid mapped in userprofile in 11.1.1.8

    Hi,
    WebCenter sites v: 11gR1 (11.1.1.8)
    I am in the process of validating Custom SSO Behaviour. I am facing hurdles. I have mentioned below the steps I preformed.
    1. Deployed customizable-sso-11.1.1.8.0 .jar in cas/WEB-INF/lib
    2. Copied SampleLoginform.jsp file to cas/fatwire
    3. Copied the customSampleSSObeans.xml configuration file into cas/WEB-INF/spring-configuration folder.
    4. Modified the following bean
            <bean id="customUserConfiguration" class="com.fatwire.wem.sso.cas.sample.SampleConfiguration"
                    p:casLoginUrl="http://xyz.com:7001/cas/login"
                    p:resolverUrl="http://xyz.com:7001/cs/custom/customCsResolver.jsp"
                    p:resolverCredential-ref="resolverCredential"
                    p:traceFlag="false"
                    p:sampleDomain="mydomain"
                    p:sampleFormUrl="http://xyz.com:7001/cas/fatwire/SampleLoginForm.jsp"
                    />
      Note: p:resolverCredential - I found it new in this bean, as it is not referenced anywhere in the WCS documentation. This resolverCredentail is actually another bean configured in customResolverCredentail.xml under spring-configuration folder. Also, I am not sure if p:sampleDomain has to be modified to suit the environment. Currently I have retained the default value of "mydomain".
    <?xml version="1.0" encoding="UTF-8"?>
    <beans xmlns="http://www.springframework.org/schema/beans"
            xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:p="http://www.springframework.org/schema/p"
            xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-2.0.xsd">
            <description>
                    This defines the SitesCS username/password credentials needed for identity resolution
            </description>
            <bean id="resolverCredential" class="com.fatwire.security.common.SecurityCredential">
                    <property name="username" value="fwadmin" />
                    <property name="password" value="xceladmin" />
                    </bean>
    </beans>
    The default value mentioned for property name username and password were "@username@" and "@password@" respectively. I changed them to fwadmin/xceladmin as in the file above.
    5. In WCS Admin UI, I added a user atribute "samplesso" and assigned unique value for couple of users
    6. Restarted CAS.
    7. On accessin wcs url, I am now redirected to custom sample login page(SampleLoginform.jsp)
        Following are the form fields: username, password, domain, external userid
    8. It works fine, if I submit wcs credentails for username,password and default domain (mydomain) and I am taken to the WCS Admin UI
    9. But if I submit domain(mydomain) and mapped user(unique value in sep 5) against userid, I get an error page. Following is the error
    org.springframework.webflow.engine.ActionExecutionException: Exception thrown executing [AnnotatedAction@5f82e73 targetAction = com.fatwire.wem.sso.cas.web.CustomLoginViewAction@68b18314, attributes = map[[empty]]] in state 'viewLoginForm' of flow 'login-webflow' -- action execution attributes were 'map[[empty]]'; nested exception is java.lang.SecurityException: java.lang.NullPointerException
    What is the cause and fix for the problem. Am I supposed to perform any other step?
    Is there anything specific to p:resolverUrl="http://xyz.com:7001/cs/custom/customCsResolver.jsp" ? I did not do any deployment corresponding to this, as there was no such step mentioned in documentation.
    Thanks

    I just recently implemnted this for my current client.
    http://xyz.com:7001/cs/custom/customCsResolver.jsp
    The context "cs" here is important. For my current client, we installed 11G with context "cm". So for us the the resolver URL is:
    http://xyz.com:7001/cm/custom/customCsResolver.jsp  and when we login into FatWire we use:
    http://xyz.com:7001/cm/login.
    If you look in your Sites application folder you should see <Sites App/Context>/custom/customcsResolver.jsp. In the Jsk it's located at:
    C:\Oracle\WebCenter\Sites\11gR1\App_Server\apache-tomcat-6.0.32\webapps\cs\custom\customCsResolver.jsp
    Regards,
    Robert Jackson

  • Evaluate is not working for my custom function

    Hello everyone ,
    I have a function , here's the code
    CREATE OR REPLACE FUNCTION FU_BUSCA_RECD_PRDC_OBIEE(NIVEL   VARCHAR,
                                                        NM_AGPM VARCHAR) RETURN NUMBER AS
      V_RECD_PRDC NUMBER(10);
    BEGIN
      IF NIVEL <> 'nivel1' THEN
        SELECT RECD_PRDC
          INTO V_RECD_PRDC
          FROM AGPM
         WHERE DC = NM_AGPM;
      ELSE
        SELECT RECD_PRDC INTO V_RECD_PRDC FROM RECD_PRDC;
      END IF;
      RETURN V_RECD_PRDC;
    END;
    So I want to use this :
    Evaluate('FU_BUSCA_RECD_PRDC_OBIEE(%1,%2)' ,"Agrupamento de Fluxo (Hierarquia)"."Cód. do Agrupamento de Fluxo","Agrupamento de Fluxo (Hierarquia)"."Agrupamento de Fluxo")
    I put it on a column but when I go to Results on Answer I get this error message:
    HY000. Código: 10058. [NQODBC] [SQL_STATE: HY000] [nQSError: 10058] Erro geral. [nQSError: 43113] Mensagem retornada de OBIS. [nQSError: 43119] Falha na Consulta: [nQSError: 17001] Código de erro Oracle: 904, mensagem: ORA-00904: "FU_BUSCA_RECD_PRDC_OBIEE": invalid identifier at OCI call OCIStmtExecute. [nQSError: 17010] Falha de preparação da instrução SQL. (HY000)
    Sorry the message isn't in english , but i don't have access to the settings to change it.
    When I try to use evaluate with some native db function , for instance :
    Evaluate('TO_DATE(%1,%2)' AS CHAR ,'20130326','YYYYMMDD')
    It works
    Does anyone know what's wrong ?

    do i have to do anything after the grant?
    i run the grant script , logged off from answer than logged in . is there any other step im missing?

  • Keyshield SSO not working for Vibe 4.0

    Hi All,
    Using keyshield from a long time ago (version 5.4 Build 2014-09-30 16:46:30).
    I was using it with previous version of Vibe and Filr (by installing the java servlet).
    Now Keyshield is included in Vibe 4.0 and Filr 1.2.
    With Filr, everything is fine. With Vibe 4.0, it doesn't work.
    Keyshield configuration parameters are the same in both products and are accepted as Valid by the administration page in both products also.
    But, even with a keyshield client in green state, it works fine with Filr but it doesn't work with Vibe 4.0.
    I try to find tracks in the logs but i've got nothing (logs, catalina.out, etc ...).
    Did somebody test keyshield ? Is there a special way to try to debug it ?
    Many thanks in advance

    worked! :)

  • Why would my iTunes password not work for my iCloud password if I am using the same account?

    I recently redownloaded "find my friends" to my iPhone, and tried to log in and couldn't. Now I use my iTunes account with the iCloud also, and I can't access my iCloud account either. My password has never changed for either services, my account ID was not changed or misspelled, and I shouldn't have any other accounts either. Silly me decided that I should to log out of my iCloud and log back in but it won't accept my password. Am I missing something some where along the way? I can still download apps with the password but why can't I log in to my iCloud account anymore? Can I have different passwords with the same account? If so how do I change one with out changing the other also?

    As long as you can't spell I wouldn't worry about it.

  • Text tool in photoshop CS5 will not work.  I get a message that something prevented the text engine from initializing.

    When I try to use the text tool (photoshop CS5) I get a message that  says something prevented text engine form being initialized.  How can I get the text tool to work?

    Try this forum:
    Photoshop General Discussion

  • Incoming Email not working for one web app, but IS working for others in same farm.

    I have enabled incoming email in a large multi-web application farm running SharePoint 2013 SP1 and the Feb 2015/March 2015 CUs that were pushed down in Windows Updates.  It works just fine for two web applications, but it will not work for one particular
    web application. I see the email land in the /drop folder. If I remove the email address from the library in http://nonworkingapp web
    application and use it on a library in a http://working web application, then the email is processed successfully. Conversely,
    if I take an address from a library in http://working and move it to a library inhttp://nonworkingapp it
    does not work. I've tried multiple site collections on http://nonworkingapp. This rules out any SMTP issues, etc. and means
    the issue is bound to this web application. Permissions are the same between the "non-working" and "working" locations: domain users are members on the site, and the library inherits permissions from the site.  The App Pool and Timer
    Service accounts have rights to the folder and to the library.
    The error in the ULS log is the typical error processing message, but it gives no additional information even though I have enabled Verbose logging.
    The Incoming E-Mail service has completed a batch. The elapsed time was 00:00: 00.0156294. The service processed 2 message(s) in total. Errors occurred processing 2 message(s): Message ID: Message
    ID:
    Typically, you see "alias not found" or some permissions or quota issue here, but this issue is NOT the same as those. In this case NO additional information is provided in ULS.
    Edit: running stsadm.exe -o refreshdms -url http://one/failing/site fixed some similar issues where "Unknown alias" was
    reported even though the list did have an alias (see here:http://blogs.technet.com/b/vinitt/archive/2009/07/15/e-mail-enabled-list-alias-information-is-not-synchronized-between-configuration-database-and-content-database.aspx).
    This did not fix the issue for the case mentioned above.
    What could possibly be the issue preventing incoming email from working on this one web application?

    Thanks for your reply.  Incoming E-Mail was running on all 3 WFE, however I do not think this was the cause.  As noted, _other_ emails send to http://workingapp are working just fine.  I can send two emails - one to a library on http://workingapp
    and another on http://notworkingapp.  The email to http://notworkingapp will sit in the drop folder, while the one to http://workingapp will be processed correctly.  In addition, the ULS log on WFE1 indicates an attempt to process the file fails.
     So clearly, the timer job on WFE1 is running and attempting to process the file.  For kicks, I disabled the service on WFE2 and WFE3, but with no change in the behavior.
    WRT to #1, I have done this already (as noted in the original post).  I can remove an alias from http://workingapp and place it on http://nonworkingapp and it is not processed.  If I return it to http://workingapp it is processed.  In other
    words, I go into Library Settings -> Incoming Email for a working library, and copy the alias, then disable incoming email for that library.  I then go to Library Settings -> Incoming Email for a non-working library, enable incoming email, and paste
    the alias.  Once done, emails sent to the alias are not processed.  I then do the reverse, and it works again.
    On #2, I have already tried multiple libraries on http://nonworkingapp (also as noted in the original post).
    In my environment, incoming email does not work for any library on http://nonworkingapp, but does work for any library on http://workingapp.  Troubleshooting listed above has ruled out any problem with basic mail server configuration or library settings
    - the problem is bound to http://nonworkingapp
    I'm not sure what you mean by "steps to reproduce the issue".  If I knew that, I would probably be able to solve the issue.  The best I could come up with to describe the situation would be:
    Set up SP 2010 in a three-node configuration with multiple web apps
    Enable incoming email and confirm it works
    Migrate to a SP2013 SP1 farm in a three node configuration.
    Enable a new email alias for a library
    Observe that it doesn't work for one web application.
    Obviously, it's pretty unlikely that attempting that in a lab would actually have the same result.

Maybe you are looking for

  • Impossible to de-authorising Apple IDs on lost, stolen, broken computers/devices.

    This is more of a statement than a question, and to find the views of other itunes users, as I already know the official Apple stance on this. You can only have 5 devices assigned to share any one apple ID. When you want to add another you have to de

  • Iweb picture gallery commands

    When a photo is clicked on to view in gallery , words "previous" and "next" appear below the enlarged photo in grey. Above are words "back to album" and "download". I dont like the grey color of the text, it disappears into my background--the value i

  • Need aspect ratio to match still images

        I create slideshows from still images using CS6 that are then put on DVD and uploaded to vimeo.  The problem I'm having is that I wind up with letterboxing on the sides (not top/bottom) since the aspect ratio isn't correct I've looked on google a

  • Is EchoSign included in an Acrobat subscription?

    I recently purchased a subscription to Pro XI.  I have created forms, inserted them on our web site, and sent them for signatures.  I want to do more with the signatures and I understand that I need to do that through Echo Sign.  I am being told I ne

  • ECM Installation- Cannot create domains

    Hi everybody, I am facing a problem with my ECM installation process. All the Steps have been followed until the step of creating domains. When I browse to C:/Oracle/Middleware/Oracle_ECMHome1/common/bin and try to run config.cmd then for a long time