Unable to use SSO with universe connection on top of SAP BW query

Hi,
We're creating a universe on top of a SAP BW query by using universe designer.
We logon to universe designer by using SAP credential.
When creating the connection, we set the option "Use Single Sign On when refreshing reports at view time" in order to logon to BW server. But when clicking next, an error arises:
"DBD: Unable to connect to SAP BW server Incomplete logon data"
The strange thing on this is that there is one laptop which is able to set up this kind of connection, while all other workstations are not able to set it because they recieve that error (we all work against the same BO server). So this looks like an installation issue.
We reinstalled SAP Integration Solutions on those workstations, but problem is still the same.
I found thread: Universe Connection Authentication on SAP BW which talks about the same issue, but solution involves uninstalling Xcelsius. But we do need Xcelsius!
Any suggestions?
Thanks,
David.

>
Ingo Hilgefort wrote:
> Hi,
>
> - how did you enter the SAP credentials when logging on ?
username/password with sap authentication
>
> - are you using a application server or a message server for the connection ?
Application server
>
> - SAP GUI is installed ?
SAP GUI 710 patch 11
>
> - SAP Integration Kit is installed ? is it a full keycode or a temp keycode ?
SAP Integration Solutions with temp keycode
>
>
> thanks
> Ingo

Similar Messages

  • Error when refreshing WEBI report with Universe Connection Type "SSO"

    Hi Experts:
    We are trying to refresh the Webi report in Infoview with Universe Connection set as "Use Single Sign On when refreshing the report at view time", so that we can leverage SAP OLAP authorization variable from Bex Query which the Universe is built on.
    However got the error of "incomplete logon data" after all the configurations done following below blogs:
    SNC Part 1
    /people/ingo.hilgefort/blog/2009/07/03/businessobjects-enterprise-and-client-side-snc-part-1-of-2
    SNC Part 2
    /people/ingo.hilgefort/blog/2009/07/03/businessobjects-enterprise-and-client-side-snc-part-2-of-2
    We already have Win AD SSO to SAP setup, and in BO CMC, Win AD user is mapped to SAP user ID.
    The SNC settings are:
    - AD Account: service.test.bobj (all lower-letters)
    - 32-bit gsslib on the BO server, and 64 bit on the BW server side.
    - SNC0: p:service.test.bobj at DOMAIN
    - SU01 --> BO_Service ; SNC: p:service.test.bobj at DOMAIN
    - Entitlement system tab --> username: BO_Service
    SNC Name: p:service.test.bobj at DOMAIN
    - SNC settings tab:
    SNC Lib: c:\winnt\gsskrb5.dll
    Mutual Authentication settings: p:SAPServiceBP0 at DOMAIN
    In CMC, the role can be imported if "RFC activated" option unchecked in SNC0.
    I found a few threads on the same topic, but they are all not answered:
    SNC Client side configuration error
    SNC Configuration Error: Incomplete logon Data
    Can you please provide details of the solution if you have impleted a same scenario successsfully, or any thoughts to help the investigation?
    Thanks in advance!
    Regards,
    Jonathan

    Hi Ingo,
    Sorry for taking so long to reply, we are trying to set up server side trust and enable SSO; but we still couldn't success.
    What we did is:
    1. We followed installation guide chapter 6, generate certificate and PSE, etc. All looks good.
    2. Then we still have the "incomplete logon data" error when refreshing webi report after logon using Windows AD user ID.
    3. Then we trace the PFC connection, the log is as below. We checked several BO notes, e.g. 1500150, 1461247.. The part bothers us is that we even don't have URI displayed in the log when system trying to use SNC, and we couldn't get more info on this which make us very difficult to diagnosis.
    Can you please help? Thanks a lot!
    Thu Mar 31 10:54:46.857 ThreadID<1980> SAPMODULE : SAPAuthenticationService: Authentication model for SAP connectivity is SSO
    Thu Mar 31 10:54:46.857 ThreadID<1980> SAPMODULE : SAPAuthenticationService: Determining if we can connect using SNC. Calling CanAuthenticate...
    Thu Mar 31 10:54:46.919 ThreadID<1980> SAPMODULE : SAPAuthenticationService: Unable to authenticate using SNC because the URI does not meet the minimum connection requirements.
    Thu Mar 31 10:54:46.919 ThreadID<1980> SAPMODULE : SAPAuthenticationService: Determining if we can connect using SSO. Calling CanAuthenticate...
    Thu Mar 31 10:54:46.919 ThreadID<1980> SAPMODULE : SAPAuthenticationService: Authentication model for SAP connectivity is SSO
    Thu Mar 31 10:54:47.013 ThreadID<1980> SAPMODULE : SAPAuthenticationService: The SAP SSO authentication process will fail because the SAP secondary credential are not properly updated and the password is blank.
    Thu Mar 31 10:54:47.013 ThreadID<1980> SAPMODULE : SAPAuthenticationService: Trying to connect to SAP using this URI : occa:sap://;PROVIDER=sapbw_bapi,R3NAME=PB0,GROUP=BI_Group1,MSHOST=sapaupdb04,LANG=en,CLIENT=100,CATALOG="ZSPUM602",CUBE="ZSPUM602/ZSPUM602_Q50"
    Thu Mar 31 10:54:47.013 ThreadID<1980> SAPMODULE : SAPAuthenticationService: Calling m_pRfcWrapper->RfcOpenEx() ...
    Thu Mar 31 10:54:47.154 ThreadID<1980> SAPMODULE : SAPAuthenticationService: RfcOpenEx(...) returned 0
    Thu Mar 31 10:54:47.154 ThreadID<1980> SAPMODULE : SAPAuthenticationService: Call to m_pRfcWrapper->RfcOpenEx() took 0.141 seconds
    Thu Mar 31 10:54:47.154 ThreadID<1980> SAPMODULE : SAPAuthenticationService: SAPAuthenticationService::~SAPAuthenticationService

  • Using START WITH and CONNECT BY PRIOR in a report

    Hi - I am using Oracle 9i and reports 10g. Does anyone know of a reason why running my sql in TOAD will produce the correct results, but the report is dropping records? I am using start with and connect by prior to build a hierarchy of linked records. The report is dropping the "child records" and only returning records from the route level.
    Thanks you for your help.

    Hi user574499
    Could u pls share us ur Query...?
    Regards,
    Abdetu...

  • Using SSO with hotmail account

    Hi ,
       I need to create an iview which takes me directly to my mail account in hotmail . I tried doing it in the same way as it is done for the yahoo account given in HowToUseAppIntegrator_en.pdf , but it didn't work . In the browser IE it does not display the page at all giving an error "access denied" . I mozilla it though takes me the login page of hotmail but does not login . It asks for the password . I believe hotmail page is a .net page . Could someone please suggest me a solution ?
    Regards
    Deepak Singh

    See using SSO with hotmail account

  • Using 5800 with universal iTrip

    Hello,
    I have a Griffin iTrip auto universal with the standard 3.5mm jack. If I connect this directly into the 5800 I get the option of choosing from headphone, lineout,etc,etc. If I choose either headphone or lineout, i get a really high strong and excellent signal that works great with the iTrip and the volume indicator on the 5800 is at only the lowest or second lowest setting. However when I choose either of these options the 5800 tells you to use the headset microphone attachment.
    If I do use this I still get audio but have to crank it right up in order to get a strong enough signal into the iTrip.
    My question is which of these two options do you think is the best to use? Will not using the headset microphone cause damage to my lovely new phone?
    Thanks
    If my post has helped you in anyway, please press the 'kudos' button.
    Thanks

    I feel like I still don't have the full picture here, but now I understand that you have internet access with your wireless phone provider in your home country.
    This may mean that the applictions you use (email, etc) may have set their access point to your wireless company's services as a default.
    When you went abroad and connected, the phone may not have asked you for the access point and just used the default, which resulted in your account being charged for roaming internet access.  Again this may not be correct, but it's certainly a possibility.
    I feel for you - I traveled to Europe recently and what I did before going was to set all applications (Email, Real Player & Maps in particular) to use my home WiFi connection as default, turned off certain features which use packet data connections such as A-GPS, and pre-loaded maps for all the countries I was traveling to.  As a final test I used the apps and checked Packet Data usage in the logs - it took some time before I found all the access point settings to change.  Sorry got you stuck with the bill.
    BTW - the service rep's statement that you don't get charged for your home broadband usage (WiFi) on your phone because you have internet service with the wireless company seems wrong.  They should have nothing to do with one another unless you have an all-in-one provider for your home broadband and wireless company and somehow the payment plans are all linked.
    Message Edited by hgohel on 02-Jun-2009 10:11 PM
    Lumia 920, Lumia 800
    Nokia N8-00 (NAM, Product Code: 059C8T6), Symbian Belle, Type RM-596, 111.030.0609
    Nokia 5800 XpressMusic (NAM, Product Code: 0577454) Software v51.2.007, Type RM-428

  • Using Flash with Facebook Connect

    I was wondering if anyone has any information or resources on using Flash AS3 with facebook connect.  What I'm particularly looking for is how to do facebook authentication within the flash interface (so the user doesn't need to exit to the facebook website to connect) and also if there are any ways to make facebook calls from within flash once you have authenticated (rather than loading xml generated in PHP as I am currently doing).
    Any information or resources would be appreciated.

    The dial in process would be exactly the same as if you were dialing into the bridge as a participant. Most of the time it needs the following steps.
    Phone number:           800-555-5555
    Delay:                        3000 ms
    DTMF: (passcode)     123456#
    Delay:                        3000ms
    DTMF:                      1 or # (for a roll call or to join the bridge)
    However if the provider is not using a SIP compliant bridge, the Universal Voice tool will fail upon attempting to dial out.
    Also, for the hosted environment, the phone bridge must have a toll-free number.

  • Using Password with DSNless connection to Access DB

    Has anyone actually used a password to connect to a local Access database? I keep getting the "Not a valid password" error.
    I have created an application for distribution and do not want to allow the users to change my database, so I put a password on it. Because the users can create new databases with the program, I would like to use a DSNless connection to allow the user to change the databases easily.
    I have successfully worked with the database through a DSN connection with the password, and with the DSNless connection without a password, but am unable to get in with a DSNless connection and a password.
    I have read as many postings and topics using the main key words as I can find in the APIs, forums, tutorials, bug databases, etc., but this topic is not addressed.
    I have tried as many permutations on the advice I did find, and nothing works so far. Here are a few of the tries I made:
    String theurl = "jdbc:odbc:Driver={MicroSoft Access Driver (*.mdb)}; DBQ=c:\\demo\demo.mdb;Password=\"demo\"";
    con = DriverManager.getConnection(theurl)
    String userid = "";
    String password = "demo" 
    String theurl = "jdbc:odbc:Driver={MicroSoft Access Driver (*.mdb)};DBQ=c:\\demo\demo.mdb;"
    con = DriverManager.getConnection(theurl,userid,password);What am I doing wrong?
    I would appreciate any help I can get.

    I'm sorry, I should have posted my entire code. As you can see, I have included the Class.forName method. The password that I set on was on the database; I did not create any users. The question about copying a database vs. creating a new one is moot here, because this database was created independently from any others. (However, you are correct in that I am actually copying a "Master" version of the database, not actually creating a totally new one.)
    Here is my code:
    import java.sql.*;
    import java.util.*;
    import sun.jdbc.odbc.*;
    public class testPassword {
      private String theurl;
      private String user = "";
      private String password = "";
      private Connection con;
      private Statement stmt;
      public testPassword() {
        try {
          Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
              theurl = "jdbc:odbc:Driver={MicroSoft Access Driver (*.mdb)};" +
                "DBQ=c:\\demo\\demo.mdb;Password=\"demo\"";
          boolean found = false;
          con = DriverManager.getConnection(theurl);
          try {
           stmt = con.createStatement();
           String pword = "";
            String query = "SELECT password FROM SysInfo";   // system Info
            ResultSet rs = stmt.executeQuery(query);
            while (rs.next()) {
              pword = rs.getString("password");
            rs.close();
            stmt.close();
            con.close();
            System.out.println("Inner Password: " + pword);
            System.exit(0);
          } catch (Exception e) {
              System.out.println("Inner failed " + e.toString());
              System.out.println("Outer Password: " + password);
        } catch (Exception ex) {
            System.out.println("Outer failed " + ex.toString());
            System.out.println("URL: " + theurl);   
      public static void main(String [] args) {
           testPassword app = new testPassword();
    }BTW, for those replies that I keep seeing all over the forum that say that you MUST create a DSN, that is NOT correct. Please do a search on "dsnless" or "dsn-less" and you will see that it is totally feasible.

  • Unable to use the with clause in oracle 9.0.2

    Hi,
    I need to use oracle SQL with clause in oracle 9.0.2 database. Its a 9i feature but i am unable to use it.
    It is giving internal error, when i try to execute it.
    Even for simple query:
    WITH acct_summary as ( select TOT_COLL_AMT from tdc_acct)
    select TOT_COLL_AMT from acct_summary WHERE TOT_COLL_AMT>100;
    Error message while using 8.0.5 sql plus client:
    SP2-0642: SQL*Plus internal error state 2091, context 0:0:0
    Unsafe to proceed
    Please help to find out why i am not able to use the sql with clause in oracle 9.0.2 database.
    Thanks and regards,
    Raajkathir

    Hi Jens Petersen,
    Yes, You are correct. Thank you very much.
    Regards,
    Raja

  • Unable to use HD with usb shows errors on disc,

    I have just bought a new airport extreme, and have conected it to my windows pc using a Belkin draft n adaptor, i am unable to use my 305gb maxtor 3200 0344, which is displayed in the setup utility as the above, but when i open the utility it tells me there are errors on the disc and to connect to my pc and run a disc repair, i have done this and there seems to be no problems, The airport disc agent does'nt seem to display it and is just blank, it is ntfs and on the box it said it is also apple mac compatable, any thoughts, thanx.

    jask, Welcome to the discussion area!
    Sorry but NTFS is not a supported format. You will need to reformat the drive. See KB 305038, AirPort Extreme (802.11n): USB storage device supported formats and protocols.

  • Unable to use PE9 with my Canon 5D Mark III

    I could use some help please.  When I try to download my new Canon 5D Mark III Raw into PE9 I get an error message telling me that PE is unable to open it because it is the wrong file type.  My new Canon 5D Mark III lists the file type as ST8Axxxx instead of the normal IMG_xxxx that I'm used to.  Can anyone tell me how to use PE9 with my Canon 5D Mark III camera?  Thank you!

    Hi,
    The 5D MK III is not supported by PSE 9. It requires ACR 6.7 or 7.1 which will not apply to PSE 9.
    You can either :-
    1) Update to a newer version of elements
    2) Use the Canon software to covert the raw files to TIF files and then import the TIF files
    3) Download and install the free Adobe DNG Converter. Convert the raw files to DNG files and then import the DNG files into elements.
    You can obtain latest dng converter from:
    mac: http://www.adobe.com/support/downloads/product.jsp?product=106&platform=Macintosh
    windows: http://www.adobe.com/support/downloads/product.jsp?product=106&platform=Windows
    Hope it helps

  • HELP - IM UNABLE TO USE MY MOBILE NETWORK CONNECTION

    guys i need your help. Im unabble to use my mobile network connection in spite of all the directives given by the various institutions. I was told by an expert that this has happened to a few BB10 users and that if I did not receive mobile network connection right after inserting my sim, there's no chance that I'll ever get to use my mobile network to browse . I am however able to use the wifi. Please reply help if you have any idea what i can do

    sandey_bbe wrote:
     so lond as i have credits, i should be able to browse with pay as you go. 
    Probably not, for the data plan.
    You need to CALL them and MAKE SURE you have the data plan actually on your account, not just assume it.
    And this has nothing to do with pins on the SIM card missing etc., since your SIM is actually working.
    1. If any post helps you please click the below the post(s) that helped you.
    2. Please resolve your thread by marking the post "Solution?" which solved it for you!
    3. Install free BlackBerry Protect today for backups of contacts and data.
    4. Guide to Unlocking your BlackBerry & Unlock Codes
    Join our BBM Channels (Beta)
    BlackBerry Support Forums Channel
    PIN: C0001B7B4   Display/Scan Bar Code
    Knowledge Base Updates
    PIN: C0005A9AA   Display/Scan Bar Code

  • Leopard : Network : Unable to use DHCP with manual address.

    After installing Leopard on my Macmini (PowerPC 1.42Ghz, 1GB RAM, 80GB HDD), I found my IP address obtains different IP address than Panther and Tiger use. Then I go into System Preferences -> Network -> select Ethernet -> select "Using DHCP with manual address" in the "Configure" combo box, and change the IP address from 192.168.0.8 to 192.168.0.100. Once I hit apply, the network connection never comes back. There is no complaint that another computer is using the 192.168.0.100 IP address. This works if I am using Panther or Tiger on the same computer.
    Any help is appreciated.

    Setting the DHCP to a number you want to use can be very useful in a busy environment. I usually choose to use numbers that are outside of the range of numbers being controlled by my router (Westell).
    Port Forwarding for services like ARD, Azureus, or any server application break when the IP number changes for any reason.
    Some routers will not allow numbers outside of a restricted range of numbers that can be set up in the router configuration menu's. In this case, I find out if the router is assigning numbers from the high or low end and make sure I assign numbers at the opposite end of the range.
    My Westell router does allow me to use numbers other than the range of 50 numbers it has been told to use for DHCP, but I have also encountered problems when trying this on a wireless connection.

  • I'm unable to use Fiverr with Firefox. Last year I was able to order Fiverr gigs and send messages inside Fiverr but for the last 3 weeks I've been unable to.

    I'm unable to use Fiverr.com with Firefox. Last year I was able to order Fiverr gigs and send messages but for the last 3 weeks I've been unable to do either. I can login to Fiverr but I'm unable to use the service.
    I'm using Windows 7.

    Many site issues can be caused by corrupt cookies or cache. In order to try to fix these problems, the first step is to clear both cookies and the cache.
    Note: ''This will temporarily log you out of all sites you're logged in to.''
    To clear cache and cookies do the following:
    #Go to Firefox > History > Clear recent history or (if no Firefox button is shown) go to Tools > Clear recent history.
    #Under "Time range to clear", select "Everything".
    #Now, click the arrow next to Details to toggle the Details list active.
    #From the details list, check ''Cache'' and ''Cookies'' and uncheck everything else.
    #Now click the ''Clear now'' button.
    Further information can be found in the [[Clear your cache, history and other personal information in Firefox]] article.
    Did this fix your problems? Please report back to us!

  • Using StartTLS with IMAP connection to Exchange is giving me different certificates for machines different to the IMAP server, security exception each time

    I'm using Thunderbird with my work email account, which is using Exchange, this is not officially supported but access is allowed via IMAP.
    The problem is when I'm using StartTLS or SSL I'm getting multiple different self signed certificates being returned, seeming depending on which specific backend server is handling the request, each time it causes the Confirm Security Exception dialog to be displayed. If I confirm the exception I get the dialog being displayed again until eventually I get a certificate that seems to match the first certificate I confirmed, at which point I can download or send my pending mail.
    Thus is seems that there is only one certificate being stored as an exception for each server connection. Is there some way round this?
    Thanks.

    What is the reason for the exception prompt in the first place?

  • How to use SSO with Forms application

    Can somebody explain, how can we configure the SSO with Forms application.
    I have two application server instances. One for infrastructre and Other for application.
    Thanks

    Have a look at http://www.oracle.com/technology/products/forms/pdf/10g/frm10gsso.pdf and http://download-uk.oracle.com/docs/cd/B14099_19/web.1012/b14032/sso.htm#i1006721

Maybe you are looking for

  • Convert DateWID in fact to a date

    All, I have a requirement to convert a date_wid into a date in one of my fact tables. Below is the formula that i am trying to use CASE WHEN "Oracle Data Warehouse"."Catalog"."dbo"."Fact_W_WRKFC_EVT_MONTH_F_Snapshot"."X_CONTRACT_START_DT_WID" = 0 THE

  • IPod stuck in recovery mode.

    So this is really perculiar and I remember it happening to my own iPod and it was fixed pretty quickly. Me and my Mum share an iPod touch and when she first bought it, she had to send it in for repair because it was stuck on the "recovery mode" scree

  • Error creating //image file

    I don't know if anyone out there is still getting this error message, but I have found that by simply removing the "/" in the FTP dialog box under "host directory" your problem is solved. Apparently Muse adds the "/" and if you have one in the dialog

  • ISE - Periodic Dynamic Auth Failures

    I am running into an issue where I get a handful of Dynamic Auth Failure errors in ISE. In the results it's showing a CoANAK and the error cause is 200. In the steps it's showing: 11204 Received reauthenticate request 11220 Prepared the reauthenticat

  • Error ALC-WKS-007-043

    I am continuing the discussion started in Tito Kraer, "Form Guide Conversions" #6, 19 Dec 2007 7:31 am, since the subject has really changed. I had posted that I needed a simpler process than I had, like . . . display an xdp form in WS, enter data, s