User Management Development.

Hi,
Is it possible to change the code running behind users creation
mechanism in the portal so it will do something else in addition/instead
of what it doing by default. For example, register that new user in
some external system too. If not, what would be your suggestion if
for each new user I have to do something else at the registration
moment?
Thank you,
Yuri

Hi,
since I don't know how to change the standard iViews by customizing I would suggest to program a new iView which retrieves the necessesary data such as uid, name, email and so on and then create the user.
There are some documents in SDN regarding the UME:
http://media.sdn.sap.com/html/submitted_docs/60_sp2_javadocs/ume/index.html
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sapportals.km.docs/documents/a1-8-4/Using%20The%20New%20User%20Management%20API%20in%20EP%206.0
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sapportals.km.docs/documents/a1-8-4/Using%20The%20New%20User%20Management%20API%20in%20EP%206.0
Basically you create a user by
IUserMaint userMaint = UMFactory.getUserFactory().newUser(this.getUserID());
userMaint.setEmail(this.getEmail());userMaint.commit()
Hope that helps.

Similar Messages

Using Jackrabbit User Manager programmatically for changing passwords and getting user data.

I am trying to do a change password request using the Jackrabbit User Manager with the REST URL /system/userManager/user/<username>.changePassword.json. The problem I am having is that this request requires an oldPwd form param in the request. The issue is that when I am trying to do this request it is in response to the user selecting "Forgot Password" so our logic has created a random password which we then email to the user so they can use that the next time they want to login. We need to change that user's password in CRX so they can log in using it next time. Since they haven't logged in there is no session, NOT the problem. THE PROBLEMS, I don't know 1. how to use the userManager to get that user's old password, since /system/userManager/user/<username>.json doesn't appear to return the password and 2. if I could get the old password it most certainly will be encoded, some how, so I will need some decoding algorithm to pass it through in order to get the actual password to set as the oldPwd form param to my change password request. Please let me know if you require any further explanation. Any assistance would be greatly appreciated. Thank you, in advance, for your assistance.
Sincerely,
Mike Sucena
[email protected]

Hi Mike,
msucena wrote:
Justin:
Does your response mean that until version 2.1.2 of Jackrabbit User Manager is released I cannot change the password without knowing the old password?
No. It means that this feature is not available in version 2.1.0 of the Sling Jackrabbit User Manager bundle. It was added after that release. You have a number of options:
Build the bundle from source.
Use one of the SNAPSHOT bundles available from the Apache Snapshots repository.
Use the release which is being voted upon now (https://repository.apache.org/content/repositories/orgapachesling-175/org/apache/sling/org .apache.sling.jcr.jackrabbit.usermanager/2.2.0/). (Note - we decided to use 2.2.0 as the version number rather than 2.1.2 as originally planned due to the scope of this release).
Write a different servlet which performs the same actions.
Meaning that being able to use either the credentials of the "Admin" user or using the credentials of a member of the "UserAdmin" group is not supported in the current released version 2.1.0?
Correct. It was added after the 2.1.0 release.
If I currently need the old password is there any Sling REST - Jackrabbit API call I can use in order to get the old password since using /system/userManager/user/<username>.json doesn't appear to return the password?
-Mike
The plain text password is not stored. And this should be considered a good thing.
If you have questions about the development process we follow in Sling (or at Apache as a whole), by all means ask on the Sling users mailing list. It is reasonably well-established and we love to talk about it.

I need user management system in PHP recommendations to work with Flex client side

Hi All,
I have a very big project that involves PHP server side (That i have to develop) and Flex client side. I was wondering it there is a ready made PHP user management system that i can use to provide me:
- user login/logout
- forgot my password functionality
- register (better with captcha)
Does someone can recommend this kind of php system?

Hi, guys
Free and open source PHP User Management Scripts. These scripts provide a solution of creating a membership system of a website.
Some PHP user management scripts listed on PHPKode.com. which you can choose the right php user management to meet your demands!
Hopefully can help you!
Best regards!
Anny

Service for User Management API

Hi,
I want to use the User Management service in the portal component.I would like to include the classes present in the package com.sapportals.portal.prt.service.usermanagement.IUserManagementService.
To develop the Portal component , I am using Netweaver Developer studio. The problem is How can I add the service User Management service to my particular project ?
Any ideas.
Thanks,
Vivek

Hi Darell, hi Vivek,
> request.getService
... is deprecated. Use <i>PortalRuntime.getRuntimeResources().getService</i>
Vivek: To get this work, as usual you'll have to add com.sap.portal.usermanagement/lib/com.sap.portal.usermanagementapi.jar to your classpath as well as com.sap.portal.usermanagement to the SharingReference within portalapp.xml.
Hope it helps
Detlev
PS: Vivek, seems you overlooked my helping answers at /thread/27173 [original link is broken] ...

User Management in XI implementation

Hi,
Could someone provide me the user management and authorization assignment in an XI implementation.
What are the authorizations that shall be given to an XI developer. In our case the XI developer is doing admuin work also like SLD config etc. But still as an administrator I do not want to give him all the authorizations. Is there any standard XI implementation methodology?
Regards,
Shobhit

Hi Shobit,
you have several roles:
SAP_XI_DISPLAY_USER
SAP_XI_DEVELOPER
SAP_XI_CONFIGURATOR
SAP_XI_CONTENT_ORGANIZER
SAP_XI_MONITOR
SAP_XI_ADMINISTRATOR
SAP_SLD_CONFIGURATOR
SAP_SLD_ADMINISTRATOR
Most of them are composed from other roles. Look to transaction PFCG to see the single roles and a description.
For Java stack authorisations have a look to Michals weblog
<a href="/people/michal.krawczyk2/blog/2005/05/25/xi-how-to-add-authorizations-to-repository-objects: How to... add authorizations to Repository objects</a>.
Regards,
Udo

User Management for e-Commerce ERP

Hello Experts,
I am working on e-Commerce ECC6.0 version.
Had some questions in the area of user management:
A)
The scenario is that the e-commerce application needs to be integrated to Poral, now my doubt is which userType option is the best to be chosen for such cases.
Is it mandatory to use user type "ERP e-Commerce logon via UME"?
I have not worked with UME before and hence if you can also share some links / pointers in that area?
what other SSO logon options are available?
B) In case there is no portal and e-Commerce is working as standalone application:
There is already a ECC6.0 system in place where until now customers have been maintained. The client has been using a custom Online Store application on which login was via the customer id. Now they want to use e-Commerce for ERP, but still want the logon to be via the customer id only. In such case the only option that I can think of is via "R3_SU05Customer_LoginCustomerNo" userType. But since su05 type is not recommended now, I was wondering if there could be some other option as well? Can you guide..
Thanks

A
Is it mandatory to use user type "ERP e-Commerce logon via UME"?
UME makes the user management simple and central to the Security / System group.
have not worked with UME before and hence if you can also share some links / pointers in that area?
UME is not something any developer / functional analyst will do. We should leave that to the security group. If you insist, here is a starter [Help on UME.|http://help.sap.com/saphelp_nw04/helpdata/en/e5/618a3eacd49076e10000000a114084/frameset.htm]
B
See section 2.6 of this [E-Commerce with ERP Business Configuration Guide|https://websmp205.sap-ag.de/~sapdownload/011000358700002100812006E/Config_Guide_ECO_ERP_50.pdf]
There are some steps on migrating from SU05 to SU01. You can always have the current customer number as the alias for the internet user.
Easwar Ram
http://www.parxlns.com

Does TestStand 2.0 have a user manager accessible through the base deployment engine?

I only see API calls to show add and edit users for the base deployment engine, but not a full user administrator like in the Sequence editor. Is this only available with the TestStand development env?

Why do want to be able to edit users on every test station. You can make life simpler by putting your users.ini file in a network location and from Station Options>User Manager, point to that location. That way you only have to add users once and you can do that from the development system. Even if there's a reason to have different users for different stations, you could just copy the different users.ini files you create to the local TestStand directories on the test stations. I do that with the StationGlobals.ini file. I find it easier to have of my test stations use the same station globals. I define the unique ones as sequence file globals. When I do have to add a new station global, I take my local copy of StationGlobals.ini and just do a c
opy to all of the test stations. Personally, I much prefer the fact that users and station globals can't be edited by the operator interface. That's just one less thing I have to worry about the test operators getting in and changing something.

Can only see User Management in Admin Tools

I configured an LDAP realm and included the required admin group to access
the Administration Tools. However, the only thing I can see in
Administration Tools is User Management. Why is that?

Wendy,
Would it be possible for you to send us a file from your LDAP directory
server? Please forward this information to the support case you have open.
In the \iPlanet\Servers\slapd-yourhost\config directory.
Send the dse.ldif file.
Basically what we want to do is to compare the user and group dn values
specified in the vlvBase lines with your config.xml. Also grab the
string that starts with creatorsname ... look for something like
creatorsName:
uid=admin,ou=administrators,ou=topologymanagement,o=netscaperoot
The principal value in the config.xml will be the creatorsName string.
Set the principal string in config.xml should be something like
Principal="uid=admin,ou=Administrators,ou=TopologyManagement,o=NetscapeRoot"
unless your iPlanet schema has been changed.
So, in the config.xml LDAPRealm definition explicitly set Group is context.
GroupIsContext="false"
Set the AuthProtocol to simple.
Your config.xml LDAPRealm definition should have 13 fields and look
something like:
<LDAPRealm
AuthProtocol="simple"
Credential="password"
GroupDN="o=beasys.com, ou=Groups"
GroupIsContext="false"
GroupNameAttribute="cn"
GroupUsernameAttribute="uniquemember"
LDAPURL="ldap://myhost.beasys.com:389"
Name="myLdapRealmV1"
Principal="uid=admin,ou=Administrators,ou=TopologyManagement,o=NetscapeRoot"
SSLEnable="false"
UserAuthentication="bind"
UserDN="o=beasys.com, ou=People"
UserNameAttribute="uid"/>
-- Jim
Wendy Kajiyama wrote:
Hi,
iPlanet 5.0, no service pack.
I got the user and group DN from our Network Admin.
"Jim Litton" <[email protected]> wrote in message
news:[email protected]...
Wendy,
Can you also supply the vendor and version number of your directory
server?
I was looking at your config.xml from your support case and I am
unfamiliar with the user DN and group DN strings you are using.
Where did you find the syntax for those strings? Is that particular
string syntax documented somewhere on the LDAP vendors site?
Jim Litton
Developer Relations
Ture Hoefner wrote:
Hello Wendy,
I suspect a configuration problem in the LDAPRealm, but it is possible
that you have a P13N-only license. That is probably a long-shot because
I
don't know if we sell those any more. You are using Portal 7.0, right?
I can try to help... can you answer these questions:
* which version?
* After you log into as "administrator" (who is a member of
"SystemAdministrator"), can you access the Group Management tools and
see
the "SystemAdministrator" group and the list of users who belong to that
group?
* Do the all of the users and groups that you see match what you have
in
your LDAP server?
"Wendy Kajiyama" <[email protected]> wrote in message
news:[email protected]...
Hi Ture,
Thanks for your reply. Unfortunately, after contacting support and
receiving the patch for LDAP I am still having the problem of not being
able
to see the icons in Admin Tools.
Any other ideas?
Thanks,
wendy
"Ture Hoefner" <replyto@newsgroup> wrote in message
news:[email protected]...
Hi Wendy,
Which version?
After you log into as "administrator" (who is a member of
"SystemAdministrator"), can you access the Group Management tools and
see
the "SystemAdministrator" group and the list of users who belong to
that
group? Does it match what you have in your LDAP server? If you cannot
list
members of groups in your Portal JSP admin tool then contact support
and
ask
for the patch that fully enables WLS's LDAPRealm for use with Portal
(it
is
CR070870 for Portal 4.0, I don't know if there is a patch for 7.0, or
if
it
is included in a SP for 7.0...)
If you are able to list the users in a group then make sure you have
the
group "SystemAdministrator", not "SystemAdministrators".
I've used delegated portal administration with LDAPRealm for 7.0 so I
know
it works. I suspect a configuration issue. I will try to help you
figure
it out.
"Wendy Kajiyama" <[email protected]> wrote in message
news:[email protected]...
yup, i set up LDAP to have the required administrator groups and log
in
the
admin tools as administrator which is a user in the
SystemAdministrator
group.
"kurt c" <[email protected]> wrote in message
news:[email protected]...
could this not be a permissions issue? are you logged in as
'administrator'?
"Wendy Kajiyama" <[email protected]> wrote:
I checked to see if ebusiness.jar was in my application and it's
there.
Any
other ideas?
Thanks!
wendy
"Peter Laird" <[email protected]> wrote in message
news:[email protected]...
Wendy,
You may be seeing CR081150, which is a bug report regarding the
removal
of
ebusiness.jar
from your application. If you remove this JAR, the admin tool
fails
to
load certain
EJBs which cause it to only display more than the user tool. The
workaround is
to put ebusiness.jar back into your applicaiton. If this is
unacceptable,
contact
Support and they will work with you.
Cheers,
PJL
"Wendy Kajiyama" <[email protected]> wrote:
I configured an LDAP realm and included the required admin group
to
access
the Administration Tools. However, the only thing I can see in
Administration Tools is User Management. Why is that?

Future of knowledge management development

Hi All,
I heard that there is a great future and demand for knowledge management development because only few resources are available in the market and we can expect more projects in the future in KM development.
Am i right and am i going in the right direction
Please show me the correct way
thanks
Bala

KM is a very broad term. Several kinds of systems can come under it. In fact all systems which can give knowledge to the user can be deemed as KM. So it has more to do with the output than with the technology or the technical development of that system. Still, KM in the current paradigm refers more to document management systems, easy retrieval and proper publishing of files are more heard of. Also, tacit information from text chats are attended to in these. Tools such MS Sharepoint, Documentum, SAPs own EP can be regarded as some of the tools used to implement KM. Certain definitions of KM include OLAP systems into it.
thanks
Bala

Station Options - User Manager tab

Within the Station Options, I see the User Manager tab. If I use the default configure location, the Users.ini file will live in C:\Program Files\National Instruments\TestStand 3.5\Cfg\Users.ini. Is this where BOTH the development and target Users.ini file will live, or is this only the development location? If this location applies only to the development, where is the target location specified?

That's correct.
All of my deployments, locally and at our contract manufacturers, are connected to a network. For the CM's we provide an inexpensive server that is connected to the CM's network. The testers are connected to a network provided by the server. All test results go to the server. That makes it easy for both the CM and my company to get test results. Also, the sequence files, test steps, model files, etc. are all deployed to the server. This makes it simple to update all testers at once and I don't have to worry that one tester out of several and 3 thousand miles away missed getting updated. Servers are cheap.

Using User Management Engine API in Portal Application

Hello,
I actually develope a simple Portal Application, which print any User-Infos. Especially I need the date of the last Login. For this purpose I read the Article Using User Management Engine API - Portal - SAP Library where they use the library com.sap.security.api. In the articel they describe also, how to set DC dependencies. But this doesn't function for a Portal Component, because they do not appear in the Component Browser.
So my question is, how get I the User Management Engine API referenced in my Portal Application, so that I can use the package com.sap.security.api. In the filesystem I can not find a JAR-File for the Development Componenten tc/je/usermanagement/api
Greetings,
Thomas

HI,
Getting the last logon date can be a small problem. There is a method called: getLastSuccessfulLogonDate, but that one is deprecated since NW 2004s.
https://help.sap.com/javadocs/NW04S/SPS09/se/com/sap/security/api/IUserAccount.html#getLastSuccessfulLogonDate()
In NW 7.3 the method is still there: Generated Documentation (Untitled), but even so, JavaDoc states that the value is not updated automatically
"get last sucessful logon date NOTE: This attribute is not automatically updated during login."

User Management via Web Services

Hi,
We are investigating building a user management application that will control user creation and management across a range of applications, including SAP ECC6 and BW. The idea is to use web services to interact with the systems. I have seen that a range of BAPIs exist for managing users (e.g. BAPI_USER_CREATE, BAPI_USER_CHANGE) - does anyone have any experience in using these BAPIs via web services that they would be willing to share?
Thanks

HI Colin,
We did that successfully. It was webservice/infopath based Interactive . net form which would do user management and also Workflow funtionality. In summary from my experience
- Initial cost would be cheaper, however ongoing maintainance on whole infrastructure should be considered.
- SAP BAPI/FM/webservice development was very easy
- Integration with Infopath was challange
- Fronted development was pain as you would need other people to do that for you
- Once operational, was very easy to managed
- Future enhancement was limitless
- Limitation of integration to other technology
- Should only be justifiable in absence of IDM solution
- Too much custom development
- Change management in SAP was easy (Transport, testing, QA etc) however Infopath and Frontend change Management was not easy
Let me know what other information you need. Finding BAPI's and designing in SAP is the easy part, you should think more about how you are going to deploy Webservice to end users.
However if your IT department has more bucks to spend, think about more longer term solution and towards IDM or product such as GRC etc.

VPN user management via VMS

I am using Catalyst 6500 IPSEC module for VPN remote access users. As far as I know you can manage VPN remote access users via CiscoWorks VMS if they are connected to a VPN3000 series concentrator.
Is it possible to manage these users if they connect to IPSEC module the same way using VMS?

HI Colin,
We did that successfully. It was webservice/infopath based Interactive . net form which would do user management and also Workflow funtionality. In summary from my experience
- Initial cost would be cheaper, however ongoing maintainance on whole infrastructure should be considered.
- SAP BAPI/FM/webservice development was very easy
- Integration with Infopath was challange
- Fronted development was pain as you would need other people to do that for you
- Once operational, was very easy to managed
- Future enhancement was limitless
- Limitation of integration to other technology
- Should only be justifiable in absence of IDM solution
- Too much custom development
- Change management in SAP was easy (Transport, testing, QA etc) however Infopath and Frontend change Management was not easy
Let me know what other information you need. Finding BAPI's and designing in SAP is the easy part, you should think more about how you are going to deploy Webservice to end users.
However if your IT department has more bucks to spend, think about more longer term solution and towards IDM or product such as GRC etc.

Lookout 6.02 User Manager Non-Functional

When User Manager is launched from Lookout menu (6.02 Full Development Version), a "User Manager for Domains" window opens and an error dialog with the same title says "Could not find domain controller for this domain."

Hmm.. do you perchance have LabVIEW / DSC 8.0 installed on the same machine? I know LabVIEW / DSC 8.0 has added "domain" funtionality to the security stuff. It could also be the latest Logos.
-Khalid

User Manager

I am facing a problem with the TestStand User Manager. I logged in as an Administrator. In the User Manager, I created a new user, configuring him as a Developer . I saved the changes and logged out. I again logged in the Developer account. Now, in the User Manager, TestStand allows me to configure only my account's(the developer account) password. This is because of the Privilege "Configure.Edit Users" set to False for a developer. But when I logout and login again in the Developer account, TS allows me to change even the Administrator's account and the Developer's Group Privileges or any other account's password and privileges. Why is this happening???
During the second time login, if I change the Developer's Group Privileges to only Developer, then for the next login it works properly. Again for the next login, TS allows to change any property.... Why is this happening?
I am using TS3.5

Hi,
That does sound strange.
Just to clarify what you are doing.
a) Created new user (as a developer)
b) logged in as new user, only allowed to changed passwords of new user.
c) logged out / logged in as new user. Now able to change any account, even the administrator.
d) change new user as developer, save and logged out
e) repeat as for b) etc.
When you log out do you close TestStand or do you just use the menu item File | Logout... .
regards
Ray Farmer
Regards
Ray Farmer

User Management Development.

Similar Messages

Maybe you are looking for