Using Exchange 5.5 to authenticate Portal Users

I have searched through the forums and metalink for examples
and/or instuctions on how to successfully use the Exchange 5.5
LDAP directory to authenticate users, to no avail. I have tried
a number of different methods with no success.
Has anybody out there successfully acheived this and if so can
you please post details regarding the process.

I have the ports setup it's the FW policy that I'm having issues with.
when I attempt to login I'm watching the ACS logs and don't see connection attempt failures from the device. I was hoping someone with the same FW has gone through this so I could compare notes and see where I have gone astray in my rule configuration.
ej

Similar Messages

Authenticate Portal user using AD

Users are getting authenticated with OID.
Question is :
Would it be possible to authentocate with AD and if user does not exists in AD then authentocate using OID.
We have more users in OID. Not all users have AD userid /password but they do have account in OID.
Is it possible to do ?
Thanks
Sanjay

Hi Ritesh,
According to your description, the users and the SQL Server Analysis Service server are not on the same domain, what you want is that let user enable browse the cube data, right?
In this case, here is a blog which describe how to connecting to SQL Server Analysis Services using a Different Domain Account that the user currently log on (SSAS on Different Domain and the user logon to another Domain), please see:
http://blogs.technet.com/b/nraja/archive/2011/09/19/connecting-to-sql-server-analysis-services-using-a-different-domain-account-that-the-user-currently-log-on-ssas-on-different-domain-and-the-user-logon-to-another-domain.aspx
Regards,
Charlie Liao
TechNet Community Support

Can I use SAP HR to drive ESS Portal user creation?

Hello
We are implementing a new instance of SAP HR and Portal for ESS and MSS and I am not sure of all the steps that need to be completed so any guidance / tips would be greatly appreciated.
Company currently has an LDAP - but not used extensively. Not all employees currently in LDAP as not all have network ids. All employees will have a SAP account to enable ESS (via Kiosks etc). ESS iViews in Portal will call SAP HR and possibly SAP BW. We have an instance of SAP already and user admin maintained via CUA - this will continue.
Scenario:
My initial thoughts are that we try to use SAP HR as the leading system to drive the ESS Portal users and access. Basically I want to create the user in SAP and assign them an ESS SAP role... then through syncronization have the user created in the Portal and have the correct ESS Portal assigned (in the Portal)
My thinking so far is to go the following way;
1) Create User Master Record in SAP (SU01)
2) Hire employee into the org structure (via HR processes)
3) Populate Infotype 0105 with SAP username
4) Populate Infortype 1016 - with SAP role to be assigned to allow ESS access (not sure about this aspect) or role could be assigned in 1) above
I am not sure of the next steps - I think there must be a way in an SAP table to map the ESS SAP role to the ESS Portal Role (is this via WP3R?)
then I am hoping that a standard job can be run (is this RSLDAPSYNC_USER) that will create the user in the Portal (UME?) and assign the correct Portal role ?
(obviously configuration needed)
For MSS and HR Power users - we would continue to assign SAP roles via SU01.
Can anyone assist with;
- Is my thinking correct in terms of how this should / could work?
- in SAP how can I map SAP Roles to Portal Roles ?
- will syncronization in SAP create the user in Portal and assign the role ? what do I need to configure?
Thanks in advance

Dear Michale,
I just dont know if this can throw some light on your prob.'
In our Orgn we had around 250 ess users and 200 sapr/3 users. Some of the r/3 users also logon to ess via their r/3 uname and password.
What we have done is like follows:
1. Created a role for only the ess users ZHRESS. For this i asked the HR functional people with sap_all profile to do all the job which the ESS users are supposed to do and tracer the authorization via tcode st01. We created the role on the basis of this trace report.
2. For the purely ESS users we created the users via tcode HRUSER and assigned then with the above role.
3. For the R/3 users who are supposed to avail the ess facility we assigned them with the role ZHRESS role in addition to the other roles assigned to them to carry out their normal R/3 transactions. Then we mapped their R/3 uname to their employee no via PA30 infotype 105.
4. Tcode HRUSER saved time which would have consumed had we done it via su01 and moreover it picked Name etc data from the HR master table. In HRUSER tcode , setting the user attributes helps to define what roles the users are to be assigned, what should be their initial password etc.
Pl let me know if it satisfies you querry.
Regards

Mapping of single Portal users to multiple backend user

Hello Experts,
It is possible to map single portal user to the multiple R/3 user? If yes, than what is procedure to achieve it?
I have a SAP Portal where some users have 2 user ID in ECC, but I need to in Portal the users have only one user ID and password. How can I do to these users can select between their 2 profiles in ECC? Is posible?
Thanks!
Regards

Hi,
This is not possible since you would have used SSO to connect to the Backend. Either it is SSO or User Mapping is done, Portal User can only access the Backend with one User ID.
If you use SSO, for Example if the Portal User is UserA then you would have the UserA in the Backend too. It will use the UserA in backend to access. (Note: Single User can't access multiple Backend. Since we would have already maintained the Backend Connection details in the System and also in JCo Destination. So it is not possible for a User to access the Backend with two different Backends)
If you use User Mapping, then you can decide the User which it should use. (For ESS/MSS this is not recommended and it is not feasible too).
Regards,
Baskar.N

How to send mail in PL/SQL using exchange server details.

Hi Experts,
Business user has provided us the exchange server details to send mails.How can I send mails thru PL/SQL using exchange server details.

user595740 wrote:
Business user has provided us the exchange server details to send mails.How can I send mails thru PL/SQL using exchange server details.Basic answer - not easily.
Oracle supports the standard application protocol SMTP - it does not support a proprietary protocol like that used by Exchange that only works on the Windows operating system. It however provides you with the flexibility to code this yourself.
If you for example use Microsoft MAPI (Mail Application Programming Interface), you can integrate it with PL/SQL using the external procedure (extproc) feature of Oracle.
In a nutshell, extproc enables you to create PL/SQL wrappers for public DLL calls. I posted sample code that demonstrates this in {message:id=2271919}. The sample code is for calling a DLL interface on HP-UX, but the concept is identical on Windows.

JSR168 portlet - How to acquire Portal user identity?

My scenario is:
- Write a JSR168 portlet to access data in an Oracle database
- The portlet will use the identity of a Oracle Portal user, who currently logs in, to create the connection to that database
- In the database, I create a global role, that in turn, assigned to an enterprise role, already granted to the portal user.
- When that user logins the database, depend on his available roles, the database will control his access on data
My problem is: how can I get the identity (username/password) of that Portal user to establish the connection to my database?
If anyone know, plz give me some help. I'm very thankful.

Dear Steven,
Can you elaborate on your query a bit further?
If you are looking for some SQL statement that will validate against a table for a given portal user then you can use the API wwctx_api of Portal.
For example,
SELECT FIELD1, FIELD2, FIELD3.....
FROM TABLE1
WHERE PORTAL_USER = WWCTX_API.GET_USER;
I hope this helps.
Thanks.
Saabir.

When I send e-mail messages with file by using a POP3 in Exchange 2010 I received delivered message with file. How I can disable this functions that file do not include to delivery message. I use Exchange 2010 only local users.

When I send e-mail messages with file by using a POP3 in Exchange 2010 I received delivered message with file. How I can disable this functions that file do not include to delivery message. I use Exchange 2010 only local users.

I think there is not native rule for this, but you could try a transport rule which removes all attachments over a very small file size like 1KB.
http://blogs.technet.com/b/exchange/archive/2009/05/11/3407435.aspx
CRM Advisor

Creating users using custom made class/UI in portal

This is what i have to achieve,
I need to create an interface in portal which will,
1. Create users in the OID where the users extend a class which i have created in OID with my custom attributes.
2. Then create them in portal and then assign them to default groups which will depend on a parameter in the user creation form.
From reading various documents in Metalink and OTN i have understood that the wwsec_api package allows us to do all this except that it is all for a user which will extend a predefined set of classes.
So i decided to do this
1.Make entries into the OID using the DBMS_LDAP package using commands like
emp_vals(1) := p_first_name;
DBMS_LDAP.populate_mod_array(emp_array,DBMS_LDAP.MOD_ADD,'firstName',emp_vals);
retval := DBMS_LDAP.add_s(emp_session,emp_dn,emp_array);
2.Fire the wwsec_api.add_portal_user to create the portal user and then activate and assign him to the default group after running the provsyns.sql file
The problem i face is that i get errors when i execute the said procedure from any other schema other than portal.
When the procedure is recreated in the portal schema and executed it works fine.
So i decided to create the entire package in the portal schema itself.
Now the problem i face is that the proc would execute fine on the sql prompt but fail when called from the form created in portal based on this procedure.
I found out that the execution fails when the wwsec_api.xxx calls are made.
The exceptions are not specific and have the error code 1 => user defined exception
To have a workaround for this i directly inserted into the wwsec_person$ table with no values for the GUID column( I know this is not recommended but i gave it a try)
The insert worked fine but i still had to set his default group.I tried updating the rows for the user to set the default_group column but there seems to be a trigger on it which causes the update to fail.
Also when i check up the wwsec_person$ table there two rows for each user that i created ,one without the GUID/default_group and the other with the GUID/default_group.I guess this is because of the trigger.
If i try using the wwsec_api.set_defaultgroup api, the proc fails.
It is quite interesting to note that all the steps mentioned above, grant access to the user to portal.
But the place it fails is while setting the default group for the same which is of prime importance to me.
Also because I am inserting directly into the tables i have also to delete them when the user is deleted, this is because i again cannot execute the delete_portal_user in the wwsec_api package from the browser.
Surprisingly the wwsec_api.create_list function works fine.
Once i have created the users all the manipulations like changing group memberships etc become easy as i just modify the required details in the OID itself.
What i need is a proper/safe way to do what i have just mentioned above.
Please help out ASAP as this is urgent.
Regards,
KK

Based on your requirements, you should go about things a little differently...
You have written your custom DBMS_LDAP code to create and populate the user entry including your custom objectclasses - good.
You don't need to create the user profile in the Portal schema at all.
To set the default group, just set the orcldefaultprofilegroup attribute in the user entry in OID. This should be set to the DN of the default group.
When the user logs on, his profile will automatically be created, and the default group will also sync up with the user entry in OID (patch required - 2830252).
Also, you should have DIP provisioning running so that updates to the orcldefaultprofilegroup attribute in OID are subsequently conveyed to the portal schema. It will also take care of automatically deleting the user profile from the portal if the user is removed from OID.
Please see the Portal Configuration Guide on how to enable and activate the Directory Integration Platform (DIP) provisioning integration between OID and Portal

How to check whether portal user exists or not using UM API.

Hi Experts,
Let us say i need to create an user account "PortalUser",i know how to create an user,setting first name,lastname,password for that.
but here before creating the portal user, i need to check whether that user exists or not.If user already exists ,then i need to skip the below for creating the user.
IUserFactory userFact = UMFactory.getUserFactory();
IGroupFactory groupFact = UMFactory.getGroupFactory();
IRoleFactory roleFact = UMFactory.getRoleFactory();
IUser tuser = userFact.getUserByLogonID("PortalUser");
IUserMaint newUser = userFact.newUser("PortalUser");
newUser.setFirstName("PortalUser");
newUser.setLastName("Test");
newUser.setEmail("PortalUser.Testatgmaildotcom");
//Locale PortalLanguage = new Locale(Lang.toLowerCase(), "");
Locale PortalLang=new Locale("en");
newUser.setLocale(PortalLang);
newUser.save();
newUser.commit();
IUserAccount userAcc = UMFactory.getUserAccountFactory().newUserAccount("PortalUser", newUser.getUniqueID());
userAcc.setPassword("test1test$");
userAcc.save();
userAcc.commit();
Thanks in advance.
Thanks
Sony.

Hi,
Try this code,
IUserFactory factory = UMFactory.getUserFactory();
IUser user = factory.getUserByLogonID(userId);
lastName = user.getLastName();
firstName = user.getFirstName();
refer this pdf,its very helpful
https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/events/webinars-nw-rig/using%20the%20user%20management%20api%20with%20ep%20applications%20-%20webinar%20powerpoint.pdf
Regards,
Sunaina Reddy T

Timezone from portal user settings not used in DateNavigator

Hi experts
I'm facing a problem with DateNavigator component.
There is a WDJ application that used with different timezones in NW Portal.
In the app there is a DateNavigator which bound to the date context attribute.
When user select some date in DateNavigator, system converts selected date to the context using system default timezone, rather than timezone in portal user settings. This leads to the fact that the time in context is wrong - the system considers that user works in "Default" timezone but really user works in its own timezone, which different with default.
If I force TimeZone.setDefault(WDClientUser.getCurrentUser().getTimeZone()) everything works fine, but this is an empty and wrong way.
I'm using NW 7.2 CE.
Thanks in advice, how to solve this issue!

mwohlf wrote:
After Installing Patch 121657-19 the Calendar Express view seems to mix up
the default preferences with the user selected preferences.I hit the same issue with a 6.2->6.3 upgraded system and a fresh 6.3 installation. A quick search didn't reveal any pre-existing bugs nor could I find any obvious problems delving into the xsl code -- please log a Sun support case to have this issue looked into further. Please note that in 6.3 calendar express is a deprecated interface so you should be making every effort to move to UWC/CE anyway.
Regards,
Shane.

Create portal user using web dynpro abap application

Dear All,
I would like to know is it possible to create portal user-id through web dynpro abap application.
My requirement is
> I have to create a web dynpro abap application. In the web dynpro abap application I have name email-id and phone number as entry fields.
> I will click on submit, one unique id will get created. This unique id will be the login id for portal.
I found how to create portal user using web dynpro java, but i could not find regarding web dynpro abap.
If it is possible to create the portal users using web dynpro abap pls share the code as well.
Regards,
Swapnil Indulkar

Hi swapnil,
I think by using BAPi.. BAPI_USER_CREATE1 you can create.
Please check this...
Create portal user from webdynpro abap
Creating user and assigning a group through code
user administration su01
How can i get the portal user id from logon ticket in the webdyn 4 ABAP
Cheers,
Kris.
Edited by: kissnas on May 21, 2011 8:47 AM

Authenticate SSAS user using ADFS

Hi,
We have developed some SSAS cubes, but client is not able to access then as the client is on a different domain. We need to expose our OLAP services over HTTPS and authenticate client using ADFS claims.
Please let me know if this is possible, and how to host/ setup OLAP services over HTTPS using IIS.
Regards,
Ritesh

Hi Ritesh,
According to your description, the users and the SQL Server Analysis Service server are not on the same domain, what you want is that let user enable browse the cube data, right?
In this case, here is a blog which describe how to connecting to SQL Server Analysis Services using a Different Domain Account that the user currently log on (SSAS on Different Domain and the user logon to another Domain), please see:
http://blogs.technet.com/b/nraja/archive/2011/09/19/connecting-to-sql-server-analysis-services-using-a-different-domain-account-that-the-user-currently-log-on-ssas-on-different-domain-and-the-user-logon-to-another-domain.aspx
Regards,
Charlie Liao
TechNet Community Support

How to assign Tasks to other users using Exchange Web Service.

How to assign Tasks to other users using Exchange Web Service.
Any workaround also would help

Hi Glen,
I am trying to use ExtendedPropertyType and put in UpdaterItemType as in this code as below. Although it is not updating the Owner
field.
I have tried it both by Propertyname and PropertyID. Although new custom property's canbe
added but to change an existing one like 'Owner' ? Would this be the right method.
2. And Is ProprertyID a fixed value as 0x811f or does it need to be calculated.
3. Is 'Owner' the right propertname for assigning a task ?
Thanks a lot.
Please see code below for reference.
PathToExtendedFieldType pathExtended = new PathToExtendedFieldType();
//pathExtended.DistinguishedPropertySetId = DistinguishedPropertySetType.PublicStrings;
pathExtended.DistinguishedPropertySetId = DistinguishedPropertySetType.Task;
pathExtended.DistinguishedPropertySetIdSpecified = true;
pathExtended.PropertyId = 0x811f;
pathExtended.PropertyIdSpecified = true;
//pathExtended.PropertyName = "Owner";
pathExtended.PropertyType = MapiPropertyTypeType.String;
ciSetAT.ExtendedProperty = new ExtendedPropertyType[1];
ciSetAT.ExtendedProperty[0] = new ExtendedPropertyType();
ciSetAT.ExtendedProperty[0].ExtendedFieldURI = pathExtended;
ciSetAT.ExtendedProperty[0].Item = "[email protected]";
SetItemFieldType set1 = new SetItemFieldType();
set1.Item = pathExtended;
set1.Item1 = ciSetAT;
UpdateItemType request = new UpdateItemType();
request.ItemChanges = new ItemChangeType[1] { new ItemChangeType() };
request.ItemChanges[0].Item = itemId;
request.ItemChanges[0].Updates = new ItemChangeDescriptionType[2];
request.ItemChanges[0].Updates[0] = setstart;
request.ItemChanges[0].Updates[1] = set1;

To get the Roles, Worksets, iviews assigned to portal user using webdynpro

Hi..
I need to display the roles, worksets, pages and iviews that are assigned to a particular portal user using WebDynpro.
I tried to search in SDN and found a few blogs on this... but all are for DynPages. I could not find any inputs on how to achieve this in Webdynpro.
I am listing down the blogs for your reference :
1) /people/prakash.singh4/blog/2005/07/28/browse-roles-folders-pages-iviews-assigned-to-a-user-ep6-sp9-and-higher
2) /people/prakash.singh4/blog/2005/09/06/create-a-sitemap-for-your-portal
Please provide me your suggestions on how to display the roles, worksets, pages and iviews that are assigned to a particular portal user using WebDynpro.
Thanks and Regards,
Sayan Ghosh

Please use following code to get all roles assigned to user:
     IWDClientUser wdUser = WDClientUser.forceLoggedInClientUser();
     IUser user = wdUser.getSAPUser();
     String strRoleID = "", strRoleDesc = "";
     IRoleFactory iRoleFactory;
     iRoleFactory = UMFactory.getRoleFactory();
     // Get All the Roles of the User
     Iterator iteratorRoles = user.getRoles(true);//prtRequest.getUser().getRoles(true);
     // Loop through all the Roles
     while(iteratorRoles.hasNext())
          strRoleID = iteratorRoles.next().toString();
          try
               strRoleDesc = iRoleFactory.getRole(strRoleID).getDescription();
               wdComponentAPI.getMessageManager().reportSuccess("Role: "+strRoleDesc);
          catch(Exception e)
               wdComponentAPI.getMessageManager().reportException("Exception e: "+e, false);

Can my AD connected server use kerberos to authenticate windows users?

Hi,
I have installed our brand new Xserve with leopard and set it up so that it is connected to a directory service (AD). I have check to see if it kerberized and it does appear so.
What I want to do is provide SSO for our users when they visit our intranet. Our users will be using Windows XP Pro clients. I have tried using basic authentication but this requires the user to enter their network username and password to authenticate. When I try setting the realm security to be Kerberos it doesn't work.
Can this be done and if so what am I doing wrong? Surely I am not the only person trying to integrate a mac server into a windows environment and provide windows clients with a seamless experience!
Please help anyone!!!!

Ok, we managed to solve this!!!
It was to do with Active Directory. You need to set the xserve in Active Directory to be trusted for delegation (all kerberos services) and voila! Sorted!

Using Exchange 5.5 to authenticate Portal Users

Similar Messages

Maybe you are looking for