Using GRC in a Federated Portal Network

Hi All,
We are usning a Federated Portal Network and would like to do Role provisioning through GRC.I know that GRC can do role provisioning in one single portal.
I would like to find out if it can be done in a Federated Portal Environment in which I have a Consumer and Producer Portal.
In Simple Terms - I would like to Assign a role that is present in the Producer Portal through the Consumer portal (This is called as Remote Role Assignment) using GRC.
Can anyone please help me with this.
Any thoughts will be very helpful.
Best Regards,
Vivek

Hi Vivek,
I have worked with CUP and EP and it works fine. I have not used CUP with Federated Portal so I don't have idea about this. It seems it will act something like CUA for EP. Am I correct?
CUP works with CUA but for that, it has to bec configured for CUA. I don't see any separate configuration for Federate Portal. Can you open a Customer message with SAP about this?
I doubt this will work but it is worth a try. Please let me know about the outcome.
Regards,
Alpesh
SAP GRC Manager (PwC)

Similar Messages

Missing MSS iViews in Federated Portal Network

Hello, portal gurus, we have a FPN related issue that hope some of you can help.
We have two portal systems that we set up as a Federated Portal
Network. One producer portal, verision is 7.0, SP11, and one
consumer portal, version is 7.0 SP13. We installed the ESS and MSS business
packages in the producer portal. Those business packages came with the SAP NetWeaver
2005 installation, and they are working ok on the producer portal.
In addition, we were able to do the remote role assignment in the
consumer portal successfully. The problem is that some of the MSS
links and iViews that are shown up ok in the producer portal are missing from the consumer portal.
Have anyone experienced the same issue? Is it because the dismatch of the SP level causing the issue? Are there any fixes to this issu?
Thanks a lot for any input!
Jane

Hi Jane,
PCD content and KM content are two different things and they have different transport mechanism.
If you want to transport PCD content to another portal go to System Administration/Transport/Transport Package/Export. In PCD tree in any place create transport package and add to it objects which you need (folders, roles, worksets, iviews and so on) and save transport package file localy on your computer or server. After that go to the system where you want to locate your content. Go to System Administration/Transport/Transport Package/Import If you save tranport file localy on your computer chose client and upload tranport file.
KM transport very clear describe here How to Export KM Contents by ICE protocol using Offline Channel Beside this way you can transport KM content use program Portal Drive (very useful program especially when you need quickly transport some KM files from one portal to another).
Regards
Dmitriy

How to integrate PPM 5 with Federated Portal Network

Hi experts,
If we are using PPM 5 standalone (without portal) and we want to include it into Federated Portal Network, which steps we have to follow to configurate PPM in the Federated Portal. Do we have to install stack java for PPM 5 at portal level or can we have PPM as producer without stack java in the consumer (federated portal).
Thanks a lot,
CAMILO URIBE

Hi Camelo,
For PPM 5.0, you need only abap stack only. For the portal you will need java stack also.
Business packege need to be applied for PPM 5.0 and the necesarry settings need to be done in portal to access PPM through portal.
The federaed or non-fedarated option is for portal only and it will not impact the decison of accessing PPM through portal.
Regards
Amit

CRM factsheet and BI 7.0 Web-Templates in Federated Portal Network Scenario

Hi All,
i have some essential questions regarding a Federated Portal Network Scenario.
Our costumer works with 1 CRM-Portal (CRM 5.0, EP 7.0) and 1 BI-Portal (BI/EP 7.0).
He decided to implement a Federated Portal Network, using the CRM-Portal as the Consumer-Portal.
In the CRM-Portal we are working with the Business Package for SAP_CRM which also comprises Reports that are called from the BI.
The BI-Reports (BI 7.0 Web Templates) are now stored in the BI-Portal
How i can assign these BI-Reports (producer) into the factsheet of the CRM-Portal (consumer)?
Is that generally possible that the facsheet of the Consumer Portal (CRM) works togehther with BI 7.0 Web Templates from the Producer-Portal (BI)?
Best regards
Mustafa Darwish

It's been solved.
See note: 1058268 - BI 7.0 WebTemplates do not run in CRM 5.0 specific iViews

UWL in Federated Portal Network

Hi All,
Can anyone please suggest how UWL works in case of Federated Portal Network? I have a requirement to show the tasks, alerts, notifications from more then one Producer in the same UWL iview on Consumer.
I followed the steps as mentioned in the SAP help document Running the UWL in the Consumer Portal http://help.sap.com/saphelp_nw70/helpdata/en/45/8084e2e8c9487fe10000000a114a6b/frameset.htm but no luck.
I would appreciate if anyone can let me know the proper process for doing this or could provide any document for it.
Thank you in advance.
Regards
Seema Rane.

Hi Seema,
There are two ways to configure UWL on the federated portal:
1. Run UWL on the Consumer Portal:
a. Everything must be copied over, including xml files. Retrieve information directly from the backend. Use the IviewLauncher Handler. This uses the remote delta link from the producer.
Have a look here at the help documentation:
http://help.sap.com/saphelp_nw70/helpdata/en/45/8084e2e8c9487fe10000000a114a6b/content.htm
2. Run UWL in Producer Portal:
a. Here the configuration is predefined.
b. Use remote role assignment or remote delta links
producer remote delta links should be available as remote delta links on the consumer.
copy as remote delta links; config is done on the producer
Have a look here at the help documentation:
EP7
http://help.sap.com/saphelp_nw70/helpdata/en/45/81ab2f3bab6975e10000000a114a6b/content.htm
(for nw701, 702, 720 search the help documentation accordingly)
I hope that this information is helpful to you.
Beth Maben
EP - Senior Support Consultant
AGS Primary Support, Business Suite & Technology
Please see the UWL Wiki @
https://www.sdn.sap.com/irj/scn/wiki?path=/display/bpx/uwl+faq ***

ERP2005 MSS reporting in a federated portal network

Hello,
We are implementing ERP2005 MSS on a federated portal network, and were facing a problem with the MSS reporting IView (application mss~rpt).
When we execute this function on the producer portal (the portal connected to the ECC backend, with the BPs and Webdynpros), the IView launches well, a report can be selected and finally in the second step, the button Report Results opens up a new portal window. The URL of this window contains a navigation target which points to an IView of the standard ERP2005 Business Package:
NavigationTarget=ROLES://portal_content/com.sap.pct/line_manager/com.sap.pct.erp.mss.bp_folder/com.sap.pct.erp.mss.roles/com.sap.pct.erp.mss.manager_self_service/com.sap.pct.mss.hcm.rpt.iac
This IView will then launch a session which starts Internet service HRWPC_FC_EXEC on the integrated ITS. Directly on the producer everything works fine and the report is displayed in an ITS session perfectly. Works as designed so far
However, when we execute this on the consumer portal (with remote role assignment) a popup window opens when clicking the button Report Results, and nothing happens no report.
The cause of this is that the external popup window links to the consumer portal, and NOT the producer portal. Since the business package is not deployed on the consumer portal, the navigation target cannot be found and no content is displayed.
Now, the quick and dirty solution would be to deploy the BP on the consumer portal, but this is of course not in the strategy of federated portal. Displaying the report in the same window should also do the trick, but I didnt find any option to do this.
Does anyone have any idea on how to solve this without having to deploy the BP on the consumer portal?
Best Regards,
Jos

Here are some tips.
Firstly, make sure you use NWA to read the exact error in Default Trace. If you are experiencing the 'User Authentification' error or needing to add the Super Admin role to J2EE_GUEST, then it is highly likely that you have an SSO problem between your consumer and producer. Try a simple test...Log on to the consumer and then type or copy in the url of your producer. Are you getting the logon page? If so then SSO is definately not working. You can try vice versa as well but for simple fed scenarios, producer to consumer is not required.
You should not have to modify settings in Visual Admin. You can do it directly in NWA Trusted Systems. Client is referring to the client number of your JAVA engine...Don't worry about any BASIS administrators who insist JAVA has no clients! The default client is 000 but this may have ben changed - its a ConfigTool setting in UME. You can see it in NWA Trusted Systems. It tells you the client number of the portal you are logged into. You must ensure that when you load up this portal's certificate, the client field must be as it is set here.
Regards
Mr.T

Federated Portal Network - probelm

hi all,
I'm working on Federated Portal Network. I've this problem. I tried to assign remote role to portal user (consumer). But i'm not able to see any roles in the Remote producer.
Also, there is no workset called "Proxy-to-remote-roles" in User Administration Role. I'm running Sneak Preview SP09 version of NW04s Portal Server.
Kindly help.
Regards
Ak.

hi,
I've understood the presentation and the concept behind the FPN process... But my problem is A WORKSET IS MISSING. If you look at the first video file you gave, the author goes to this workset called "Proxy-to-remote-roles" in the Role USER ADMINISTRATION. This workset is completely missing. This is used to access the roles on the producer from consumer.
I face the same problem in both Sneak Preview SP09 and also in full version of EP70 in NW04s.
Without this, i can't proceed with federation... Is there any other workaround? Is there any solution for this one?
Regards,
Ak.
Regards
Ak.

Federated Portal Network not working - specific scenario!

hi,
I tried to implement Federated Portal Network between three systems.
2 Producers
1 Consumer.
The systems i use are in the following fashion
Producer 1: Sneak Preview NW04s EP700 SP09
Consumer : Sneak Preview NW04s EP700 SP09
Producer 2: NW04s Full Version (EP 700 + BI 7.0) SP09
The scenario between Producer1 and Consumer works fine. I'm able to see the roles that are in the Producer1 from my consumer.
But the scenario between Producer2 and my COnsumer doesn't work. I'm not even able to see any roles that are there in my producer from my consumer.
Can someone tell me why this is happening? Is there anyother configuration that i need to do in extra to this if i'm using an ABAP+Java System?
I've followed http://help.sap.com/saphelp_nw2004s/helpdata/en/5b/9f2d4293825333e10000000a155106/content.htm
this link for my Configuration.
Kindly Help.
Regards
Ak.
PS: Posts will be appropriately rewarded

Hello,
We were able to resolve the issue by removing the proxy settings on both portals. We think it was something in the SPS17 support pack that made these settings obsolete.
On both portals, navigate to System Administration u2192 System Configuration u2192 Service Configuration.
Go to the Portal Catalog, navigate to the com.sap.portal.ivs.httpservice application.
Open the proxy service.
Remove the proxy server property values, as necessary and leave the defaults for Proxy Server.
NOTE: We are using a reverse proxy and we did have to define its settings in the proxy service. But after installing SPS17 we had to remove them and restart both portals. This resolved our FPN issues.
Thank you,
Jim V

Federated portal network to set a chat between different portals

Hi,
We need to set a chat between two different portals (each portal is placed in a different geographical location). Our doubt is if it's possible create the chat using a federated portal network.
We think if we create the chat in the producer portal (enabling collaboration launch pad, instant messaging, etc. etc.) and after we use remote content copy, a user from the consumer portal can access to chat configured in the producer using producer's iViews and collaboration services.
Is this scenario possible? Do we have to use remote role assigment instead of remote content copy?
Thanks in advance,
Samantha.

There are two discussions going on same topic, we are heading nowhere, please take a part.
How to create a chat between portals
/thread/436045 [original link is broken]
Regards,
Nitin

Federated Portal Network Exception

Hi experts
I'm used in Federated Portal Network
BW - Producer EP 7.0 SP 25
EP - Consumer EP 7.0 SP 18
and i got the following error:
Exception id: 233133350_XXXX
com.sap.portal .prt.runtime.PortalRuntimeException: Iview Not Found:fpn: XXX_Consumer/pcd:portal_content/.....
the ports is ok
and the content of producer (EP) shows up a consumer (BW)
but i can't open the iviews of producer (BW) from the consumer (EP)
please advise....
regards
Yossi

Hi yossi,
Please find the below forum link.If not can you post the full error
Federated Portal Network - Error-"Unexpected Error - Unable to get IView
Hope it helps...
Thanks,
Rahul

URL to XSS WebDynpro's in Federated Portal Network

Hi,
i'm setting up a federated portal network between a producer portal (SPS18) (https://producer.domain.com) with the XSS applications deployed and a consumer portal (SPS13) (https://consumer.domain.com). I'm using the Remote Role Assigment (RRA).
The federation works fine (sort of) because on the consumer portal I can assign the remote roles but when I launch any of the XSS applications from the producer portal, the applications are launched with the wrong url -> https://producer:50000 (note that it's httpS) instead of https://producer.domain.com
I'm confused to where this configuration is done. As far as I know I can change settings in:
- the Federation configuration (there is no mention of the port 50000 there at all)
- the portal system landscape of the producer portal (modified the WebDynpro_XSS system to use https:443)
- the system landscape directory (where all the JCO connections are maintained and the Java Server instance)
- anywhere else
Can anyone help?
Much obliged
Marcel

Solved it. It is done in the federation configuration. In SAP Note 880482 - Central Note: Federated Portal Network (SAP NetWeaver 7.0) the problem is identified, specific for SPS13. The two properties of the producer: External Hostname and External Port were not updated properly and needed to be changed manually.

ITS iView and Session Management in Federated Portal Network

Hi,
We use an ITS iView for an HR application in the Portal. When used in federation the session management doesn not work correctly. We fill in a selection screen in the begin of the application and then run the report. When we click the back button in the Portal and then reload the app, the selection of the previous session is used, in stead of showing a new selection screen.
This only occurs when used in Federated Portal Network. SAP OSS already pointed out that the USR_ABORT command is not given in the consumer Portal. How can we make sure that this command is given, so that the session is correctly closed? How can we set these session management properties and options?
Best regards,
Jan Laros

Solved it. It is done in the federation configuration. In SAP Note 880482 - Central Note: Federated Portal Network (SAP NetWeaver 7.0) the problem is identified, specific for SPS13. The two properties of the producer: External Hostname and External Port were not updated properly and needed to be changed manually.

How to configure KM in federated portal network

Dear Friends,
Can anyone help me in configuring KM in federated portal network. If KM is configured in producer portal how to make use of that KM content in consumer portal.
Is it possible to directly configure KM in consumer portal?
Please help me out.
Thanks & Regards
Sireesha.

Hi Sireesha,
1) In order to use all capabilities provided by Knowledge Management, the
recommended solution would be to use KM only on one portal in the federation.
This could be the central consumer portal or alternatively one of the producer
portals. Then all features, like versioning, taxonomies, approval workflows,
subscriptions, template-based publishing will be available in this portal.
2) In case KM has to be federated to different producer portals, KM iViews (e.g.
Document iViews, Navigation iViews) could be integrated with the content sharing
modes provided by FPN. However, this is not a deep integration, because only a
redirect to the remotely located iViews is performed. The services themselves, like
taxonomies, will not be available in the consumer portal.
The recommended approach is to Configure KM on Consumer Portal only or Producer portal only.
Regards,
Shailesh Nagar

Questions on Federated Portal Network

Hi All,
I have a few questions on Federated Portal Network. Please if someone can provide appropriate answers
It is said that the look n feel will be same. Will the consumer have the look n feel of the producer or the producer application will have the look n feel of the consumer portal. Also, if it is required for the content of the producer portal to maintain it's own look n feel, is it possible
How to take care of the performance bottlenecks. Are there any standards available to improve the performance
Any limitation on the no of producer portals which can be configured with the consumer portal
If one portlet, has undergone some kind of change, then how is the consumer portal notified of this. Is there some kind of synchronization mechanism that takes place or this change is implicitly conveyed to the consumer portal, both in the case of Remote Delta Link or Remote Role Assignment
How does the session management work between the consumer portal and producer portal
What is meant by transitive content sharing
Regards
Nikhil

Hi Rasmus,
Is your consumer portal required High Availability? A scheduled re-bounce of the instance should help (weekly, monthly, etc.) as a preventive measure. Maybe you can observe to see how long does it take before the problem comes back (after a full cache refreshed) and then schedule your re-bounce accordingly. As much as we try to do our best, "things" happen
Or, you can adjust your cache settings (e.g. reduce the maxValidityPeriodInSecond property) to avoid the problem.
http://help.sap.com/saphelp_nw70/helpdata/EN/5b/9f2d4293825333e10000000a155106/frameset.htm
According to the following link, the cache stores only semantic objects (iViews, pages, layouts and roles); since worksets are not semantic objects, could that be why?!
http://help.sap.com/saphelp_nw70/helpdata/EN/5b/9f2d4293825333e10000000a155106/frameset.htm
Regards,
Dao

Exception in User Mapping (Remote iViews) in Federated Portal Network (FPN)

Hi all,
I am trying to implement Federated Portal Network. Content Usage mode as 'Remote Delta link' but getting runtime exception at Consumer Portal side while navigating through following path:
Ideally it should display login page asking for user credentials to connect to remote producer portal
Path at Consumer Portal side: Personalize -> User Mapping (Remote iViews) -> select remote producer portal alias from Remote Content Provider dropdown
Consumer portal : EP1 SPS 12
Producer portal: EP4 SPS 11
Exception as below:
The initial exception that caused the request to fail, was:
com.sapportals.portal.pcd.gl.PermissionControlException: Access denied (Object(s): portal_content/every_user/general/eu_role/com.sap.portal.portal_personalization/com.sap.portal.umeEnduserRemoteUserMappingWD/com.sap.portal.umeEnduserRemoteUserMappingWD)
at com.sapportals.portal.pcd.gl.PcdFilterContext.filterLookup(PcdFilterContext.java:422)
    at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1248)
    at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1254)
    at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1254)
    at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1254)
Request you to kindly share your inputs.
Thanks and Regards

Hi all,
I am trying to implement Federated Portal Network. Content Usage mode as 'Remote Delta link' but getting runtime exception at Consumer Portal side while navigating through following path:
Ideally it should display login page asking for user credentials to connect to remote producer portal
Path at Consumer Portal side: Personalize -> User Mapping (Remote iViews) -> select remote producer portal alias from Remote Content Provider dropdown
Consumer portal : EP1 SPS 12
Producer portal: EP4 SPS 11
Exception as below:
The initial exception that caused the request to fail, was:
com.sapportals.portal.pcd.gl.PermissionControlException: Access denied (Object(s): portal_content/every_user/general/eu_role/com.sap.portal.portal_personalization/com.sap.portal.umeEnduserRemoteUserMappingWD/com.sap.portal.umeEnduserRemoteUserMappingWD)
at com.sapportals.portal.pcd.gl.PcdFilterContext.filterLookup(PcdFilterContext.java:422)
    at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1248)
    at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1254)
    at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1254)
    at com.sapportals.portal.pcd.gl.PcdProxyContext.basicContextLookup(PcdProxyContext.java:1254)
Request you to kindly share your inputs.
Thanks and Regards

Using GRC in a Federated Portal Network

Similar Messages

Maybe you are looking for