Treasury capability in ECC6 and the portal
Is the Treasury and Risk management product delivered as a standard part of ECC6 or is it an add on component. I have been searching and cannot find the answer to this question. Also, is there a portal business package for treasury available.
Regards,
Paul Richardson
In ECC 6 it is delivered as part of mySAP licence. There is no additional charge.
Similar Messages
-
Extended notifications and the portal
Hi All,
I'm using extended notification ( SWNADMIN ) to send the workitems in SRM/ECC to MS outlook . The background jobs SWNSEL etc are run in the respective systems . Emails produced have links to logon to the respective systems and display/execute the workitem but I want the users to login via the portal . Is that possible ?
Regardshi,
then i would suggest, before the link opens the corresponding appl, pop up for the userid , create specific portal roles lik manager,hradmin etc, so that the workitems are executed.
But one thing i would like to mention is : extended notification is mainly useful for those who do not access portal often.
hope this helps.
Regards,
Saujanya -
Weird case involving NTLM, Windows XP and the portal
I have a very peculiar case here for a few users.
The users have in common that they are all using windows xp (and just migrated), though most other person (even ones using windows XP do not have the problem).
We have implemented SSO to the portal, and done this using IIS on the portal servers. In front of that we are using IBM edge loadbalancers.
From a troubled user perspective, when the he opens the browser against the portal, he gets the portal logon page with a message saying user authentication failed.
I've found out what happens behind the scene and why the portal fails, but I can't explain it thoroughly.
The user's browser reaches the portal.company.com address. IIS requests NTLM login and after a few packets, the browser sends the user's userprincipalname ([email protected]) via the NTLM login (i've documented this in the network traces from ethereal). That the browser sends the userprincipalname is the core of the problems, all other user's send the SAMaccountname. The portal reads the NTLM information and parses the userinformation (here the userprincipalname) However, we have configured our portal to use the SAMaccountname when authentication against AD, and therefore the login fails.
If I use an DNS alias for the portal.company.com addresse, say aliasportal.company.com (actually portal.company.com is an alias for aliasportal.company.com, but don't let that confuse you), the same client that sent userprincipalname earlier, now sends the SAMaccountname and therefore gets SSO (and goes through the loadbalancer). And if I try to access one of the portal servers directly (without going through the load balancer), it also sends SAMaccountname. So basically, there has to be something with the address portal.company.com that makes the user's browser to send the userprincipalname.
Also, this problem is not tied to the user's profile, because if he uses another pc, it works like a charm.
<b>If you have any idea at all what could have caused this, please do contribute.. No answers are stupid (in this case). I am especially looking for details to what causes IE to send userprincipalnames, and what causes it to send SAMaccountname.</b>
Network sniffing(some minor changes to hide information):
This is the NTLM packet which "wrongly" contains the userprincipalname.
No. Time Source Destination Protocol Info
17 0.107258 xxxxx xxxxxx HTTP GET /irj/servlet/prt/portal/prtroot/com.sap.portal.navigation.portallauncher.default HTTP/1.1, NTLMSSP_AUTH
Frame 17 (792 bytes on wire, 792 bytes captured)
Ethernet II, Src: 00:11:43:7d:52:94, Dst: 00:d0:05:04:8f:fc
Internet Protocol, Src Addr: xxxxxxxxx , Dst Addr: xxxxxxx
Transmission Control Protocol, Src Port: 2201 (2201), Dst Port: http (80), Seq: 403, Ack: 741, Len: 738
Hypertext Transfer Protocol
GET /irj/servlet/prt/portal/prtroot/com.sap.portal.navigation.portallauncher.default HTTP/1.1\r\n
Accept: /\r\n
Accept-Language: da\r\n
Accept-Encoding: gzip, deflate\r\n
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)\r\n
Host: portal.company.com\r\n
Connection: Keep-Alive\r\n
Authorization: NTLM TlRMTVNTUAADAAAAGAAYAHoAAACkAKQAkgAAAAAAAABIAAAAIAAgAEgAAAASABIAaAAAAAAAAAA2AQAABYKIogUBKAoAAAAPZABqAHcAbABAAHMAdABhAHQAbwBpAGwALgBjAG8AbQBQAEMALQAzADkAMwA3ADEANAAjkf2i0gE5YfLWa6LaFWq/QOJVBMBK+X/0eZk41NRM7wDew37l6/jmAQE
NTLMSSP
NTLMSSP identifier: NTLMSSP
NTLM Message Type: NTLMSSP_AUTH (0x00000003)
Lan Manager Response: 2391FDA2D2013961F2D66BA2DA156ABF40E25504C04AF97F
NTLM Response: F4799938D4D44CEF00DEC37EE5EBF8E60101000000000000...
Domain name: NULL
User name: [email protected]
Host name: PC-393714
Session Key: Empty
Flags: 0xa2888205
\r\n
And this is the packet against the dns alias which works
No. Time Source Destination Protocol Info
17 0.103528 xxxxx xxxxx HTTP GET /irj/servlet/prt/portal/prtroot/com.sap.portal.navigation.portallauncher.default HTTP/1.1, NTLMSSP_AUTH
Frame 17 (788 bytes on wire, 788 bytes captured)
Ethernet II, Src: 00:11:43:7d:52:94, Dst: 00:d0:05:04:8f:fc
Internet Protocol, Src Addr: xxxx, Dst Addr: xxxx
Transmission Control Protocol, Src Port: 1825 (1825), Dst Port: http (80), Seq: 403, Ack: 741, Len: 734
Hypertext Transfer Protocol
GET /irj/servlet/prt/portal/prtroot/com.sap.portal.navigation.portallauncher.default HTTP/1.1\r\n
Accept: /\r\n
Accept-Language: da\r\n
Accept-Encoding: gzip, deflate\r\n
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322)\r\n
Host: aliasportal.company.com\r\n
Connection: Keep-Alive\r\n
Authorization: NTLM TlRMTVNTUAADAAAAGAAYAHgAAACkAKQAkAAAABYAFgBIAAAACAAIAF4AAAASABIAZgAAAAAAAAA0AQAABYKIogUBKAoAAAAPUwBUAEEAVABPAEkATAAtAE4ARQBUAEQASgBXAEwAUABDAC0AMwA5ADMANwAxADQAyhO3U1uCz0jn55samc+TUJmnyefvp0tXQN0VMytYEG3YDADHwRicxwEBAAA
NTLMSSP
NTLMSSP identifier: NTLMSSP
NTLM Message Type: NTLMSSP_AUTH (0x00000003)
Lan Manager Response: CA13B7535B82CF48E7E79B1A99CF935099A7C9E7EFA74B57
NTLM Response: 40DD15332B58106DD80C00C7C1189CC70101000000000000...
Domain name: COMPANY-NET
User name: DAPA
Host name: PC-393714
Session Key: Empty
Flags: 0xa2888205
\r\n
I'll be truely impressed if anyone solves this one!Hi Dagfinn,
There are a few things I would check in the Internet explorer settings on the client, namely :
-The security zones (which addresses are in Intranet, Trusted sites, etc.)
-Check in the security settings if automatic logon with current username is enabled.
-Look if "Enable integrated Windows authentication" is enabled in the advanced settings.
Are you using Kerberos authentication? There's a long article on Microsoft's website about troubleshooting Kerberos errors which might give a few clues :
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/tkerberr.mspx -
Are there any versions of the portal that have native support for communications to Web Services? Is it going to be eventually possible to dynamically discover channels via a discovery method like UDDI?
Currently no, in the next release we have preliminary support for web services and there might be web services provider but eventually no time frame yet we do plan to support UDDI ..
-
Hi - has anyone used IVR in conjunction with the Portal (and does it work with Adobe Forms as well)?
Thanks!
SteveHi Stephanie,
In the portal the system object pointing to the new cluster instance needs to point at the virtual node which will always be available. So instead of an alias you use the virtual name of the clustered instance. Also in the configuration parameters remember to use UNC paths (ex. "
virtualservernode\sapmnt\SID\SYS\profile" instead of "C:\usr\sap\SID\SYS\profile".) We have a problem due to this in my company at the moment because it wasnt installed using virtual nodes and UNC paths, but using physical hardware nodes/names, and non UNC paths. So if the cluster fails over, it will be alive, but users would not be able to log on anymore because their links (favourites etc) points to the physcal node 1 of the cluster, and the system object in the portal points to the old node 1. Its easy enough to change the portal system object, but parameters are wrong in the profile too, which is a bigger issue. So please be aware about functionality in the cluster operation, and make sure to implement it after best practise methods so that you can avoid these issues.
Another way of controlling this would be to use a Web Dispatcher in front of your portal so if you should encounter problems you only have 1 place to correct paths etc. So the users would have 1 link to the portal, and you could change whats behind the Web Dispatcher without any user interruption - they still just have the pointer for the Web Dispatcher - as a single point of entrance to the portal. This is a solution I will implement myself Q1 of next year, because I had issues with old saved favourites when I changed our portal environment to run https/ssl. everyone still had the old link for http - and you cant blame the users really, I use favourites a lot myself So I want a single point of entry for the portal environment, nomatter whats behind.
I hope everything will be ok in your project.
Kind Regards,
Soren
Edited by: Soeren Friis Pedersen on Dec 23, 2010 7:37 AM -
Hello Fellow Experts...
Can someone provide a pros-cons as to running ICSS thru the portal. I've got a client looking to replace a web based crm system and they are trying to avoid the portal if possible...We'd like them to go with the portal...
Look forward to your repliesHello,
from my understanding, the customer portal can give access to e-selling (ISA), e-service (ICSS), e-analytics and some user administration tools.
I don't think you can give access to a PCUI screen over the Internet to your customer. PCUI screens are generated on the CRM WAS which is not accessible from the Internet.
Hope it will help.
Regards,
Maxime -
Hello,
I hope this is the right forum for this question. Our Portal is up and running fine however we are having problems with our DMZ and need to replace it. Can anyone tell me what if any configuration will need to be done with the new DMZ.
Thanks in advance
StephanieHi Stephanie,
In the portal the system object pointing to the new cluster instance needs to point at the virtual node which will always be available. So instead of an alias you use the virtual name of the clustered instance. Also in the configuration parameters remember to use UNC paths (ex. "
virtualservernode\sapmnt\SID\SYS\profile" instead of "C:\usr\sap\SID\SYS\profile".) We have a problem due to this in my company at the moment because it wasnt installed using virtual nodes and UNC paths, but using physical hardware nodes/names, and non UNC paths. So if the cluster fails over, it will be alive, but users would not be able to log on anymore because their links (favourites etc) points to the physcal node 1 of the cluster, and the system object in the portal points to the old node 1. Its easy enough to change the portal system object, but parameters are wrong in the profile too, which is a bigger issue. So please be aware about functionality in the cluster operation, and make sure to implement it after best practise methods so that you can avoid these issues.
Another way of controlling this would be to use a Web Dispatcher in front of your portal so if you should encounter problems you only have 1 place to correct paths etc. So the users would have 1 link to the portal, and you could change whats behind the Web Dispatcher without any user interruption - they still just have the pointer for the Web Dispatcher - as a single point of entrance to the portal. This is a solution I will implement myself Q1 of next year, because I had issues with old saved favourites when I changed our portal environment to run https/ssl. everyone still had the old link for http - and you cant blame the users really, I use favourites a lot myself So I want a single point of entry for the portal environment, nomatter whats behind.
I hope everything will be ok in your project.
Kind Regards,
Soren
Edited by: Soeren Friis Pedersen on Dec 23, 2010 7:37 AM -
The User portlet and the Portal User Profile portlet
Im trying to create a sub administrator home page on version
309, however the 'create user' portlet has been split into
a 'create user' and a 'update user profile' portlet (as seen on
the new default portal30 homepage).
However the only portlet that seems to be available in the
portlet list is 'update user profile' portlet.
So how do I add the create user portlet to my homepage?I found the wwsec_api and wwsso_api_user_admin packages. I now know I can build my own user profile screen and use these APIs to add, update, and remove users.
However, do I need to use the wwsec_person$ table, or can I create my own? Or can I add additional fields to the wwsec_person$ table? I have 7 additional pieces of information that need to be captured. I could just use some of the database fields in the table that we don't currently have use for, but then the name of the field will not accurately represent the contents of the data (i.e. store our "Organization" data in the "Department" field, our "DSN Phone Number" in the "Work Phone Number" field, etc.) and it would make for difficult maintenance.
Can anyone offer suggestions as to how they implemented a customized User Profile, easily? -
MDM Record Check out and Check in from the Portal
Hi everybody,
I'm trying to figure out what is the standard way to trigger the Check out and Check in from the Portal.
How do I need to configure the MDM workflows and the Portal, so the standard Item Details iView would automatically check out the record when the Edit button is pressed.
Do I need to configure Guided Procedures or UWL on the Portal or can I avoid that?
Thanks for your help in advance,
BorisHi Boris,
When we connect MDM to a front end system like Portal,the portal will replicate all teh functionalities of the backend sytem from the front end as in this case in EP.
But when we maintain Master data form the MDM Data Manager we get a lot of options in the context menu ,when we right click a record in the record pane.
All of these cannot be made available on the portal,but however the feature of Checkout can be made possible if you try to update the record through a MDM workflow.
As in MDM workflow you have to option of Checking ou the record at the beginning of the Uddate and then checking in back at the completion of the record update.
For this you can use the MDM workflows and integrate it through EP using UWL.
Kindly refer some additional docs which will guide you in the configuration of the same:
Re: MDM workflow with UWL
Re: Need to Integrate Universal Worklist in SAP Master Data Management.
Re: MDM Portal configurations.
Hope It Helped
Thanks & Regards
Simona Pinto -
Error while login to the portal
Hi All,
When I try to login to the portal as a user who dont have Super administrator role and have only "Everyone" role are getting the following error.
Error occurred while trying to access desktop: "portal_content/every_user/general/com.sap.portal.defaultDesktop". The object does not exist or you are not authorized to access it. If this problem persists, contact your system administrator.
Log Off
I followed the steps which are given in the other threads as a solution but still facing the problem.
In my main rules we have given condition like If user = * then use the general default desktop and in the default desktop permissions that Everyone role has read permission . Even then the problem is not solving.
Can anybody help plzzzzz........
Thanks in advance.I'm not sure what you mean by "content admin" vs "system admin". Content admin is used mostly to navigate to the portal content studio where you can work with PCD objects and set permissions. You will not see all PCD objects here, so things like rules etc won't be visible.
System admin is a role. It has many functions, including the system landscape editor, where you can work with systems, and the portal dispay area, where you can work with display items, such as rules.
There is also a permission editor where you should be able to set permissions on any object.
So, what do you mean by asking if you should use content admin or syetm admin? -
Page cannot be displayed message ONLY on the content area of the portal
Hi All,
I am using Netweaver Portal 7.0 and the portal works fine if logged in as an end user. But when I'm logged in as Administrator and whenever I try to create a portal object (iview or pages etc), I get a page cannot be displayed message ONLY on the content area of the portal. It is happening quite frequently, any clue what is wrong here?
Thanks for your help
-MikeHi
This could sometimes happen because of multiple users working on the same content .
Edited by: chandana kallu on Mar 11, 2008 1:41 PM -
What is the portal root directory for uploading files
Hi
I need to upload js files to my portal server (to the home page)
Can anyone let me know where is the the folder in the server that I need to put the files and the portal will see it.
Thanks!!Hi,
Oracle Portal doesn't have a "root" directory - Oracle Portal is a combination of many other products & services.
You need to put your .js files in a Directory & tell Apache to "look" in tthat directory for the .js files. You need to use a directive offered by Apache - Alias - to achieve this. You need to tweak main the Apache Configuration File - http.conf - & specify the folder where your .js files reside. You need to modify the Configuration File using the Entrerprise Manager only.
Here's an example :-
Alias /js C:/OraMidTier/javascript
<Directory C:/OraMidTier/javascript>
Order allow,deny
Allow from all
</Directory>You can then dump all your javascript files in this folder & access it in your HTL Pages with the Virtual Path - /js - e.g.:-
<script type="text/javascript" src="/js/mySrc.js">You can get more information from the Oracle HTTP Administrator's Guide ( or, the Apache Documentation ) about the Alias DIrective.
Regards,
Sandeep -
How to deconfigure the windows configuration with the portals
There is already configuration done b/w windows and the portals but now i have to deconfigure it.
May i know the steps to do that.
Thanks in advance.Hi Shreya
Did you configure SSO between windows and portal using kerberos authentication?
If so, Can you share how to achieve that task? Do you have any documents for that?
I have already opened a thread for this.I have given that link below.
regarding SSO between windows and portal
Thanks & Regards,
Yoga -
Where will the portal activity data reside in SolMan?
Hi,
I have activated the portal activity data reporting feature in the portal and the portal activity extractors in SolMan. Now where will the portal activity data reside in SolMan?
Will the portal activity data be present in the SolMan BI (i.e infocubes such as 0SMD_ADCD, 0SMD_ADCH)?
thans and regards,
Divya.Hi
seems it stores ADC datafiles files in file system of portal, from there its fetching ad reporting data time to time
pleare read this guide [PADC_Activation_Guide.pdf|https://websmp110.sap-ag.de/~sapidb/012003146900000606822009E/PADC_Activation_Guide.pdf]
and check this [How PAR works?|http://help.sap.com/saphelp_nw04/helpdata/en/b5/c652070d474533a18a930112a4b926/content.htm]
Jansi -
Implementation guide for ESS/MSS. Urgent for ECC6 and Portal 7.
HI ALL,
i need documents on Implementation guide for ESS/MSS. Urgent for ECC6 and Portal 7.
Thanks in advance.Hi
Please go through the link in the below thread.
/message/3262434#3262434 [original link is broken]
Also try this ESS - 4.6C version to gain some knowledge:
http://help.sap.com/printdocu/core/Print46c/en/data/pdf/CAESS/ESSIAC.pdf
If this helps, pl do reward.
Thanks
Narasimha
Maybe you are looking for
-
I tried downloading the 30-day free trial and I kept getting "failed" message 49. How do I resolve this error?
-
HT1766 is ther any way to get my photos and things back if i never did back up
is there any way to get my photos games and other things back if i never had any back up as my ipad ask me to pdate space wich i did and lost every thing plus its frozen and i can not use it then when i got on to suport you asking me for £79.00 to g
-
Color newbie tmeline question...
When I send an hour long clip to Color the timeline shows a very small portion of the timeline, about two or three minutes. I don't seem to be able to zip around the timeline like I can in FCP. The interface seems to be "rigid" - kind of like the way
-
Hi, Quick question. We're in the process of migrating some of our Sybase databases to Oracle. The migration works, but the users assigned to the database don't get migrated (or captured). I'm using SQL Developer 2.1.0.63 build main 63.73. The steps I
-
Applet dosen't seem to work with IE
I designed a game on my webpage on a geocities site. I used Forte as my IDE, I written it with applet, I set up everything properly and when i run the applet from Forte it worked perfectly. When i go to my website it would have the main menus and all