Using two User Stores for one relying party trust

Hi all,
We got a request to implement a trust with an external party.
Internal users should be able to make use of that application. But also external users, which have their account stored in a different user store (question is asked if its a SQL or LDAP kind of store).
Is it possible to have a SSO effect for both internal and external users?
Somehow ADFS has to know if the user is internal or external. I can imagine an internal user being in the office will get a nice SSO feeling. From what i think this is not possible for external users. External users should still authenticate once on our sts
(adfs). Lets say this is true, is it possible for ADFS to see if a user is external, and then use the User Store that belongs to that external user?
You also must take in mind that an internal user could also be in a internet cafe, so SSO is not possible. Also this time the user should authenticate to the sts. But this time it has to use Active Directory as User Store.
I know internal users have a username in a different format then external users.
Is it possible for ADFS to know which User Store to pick based on the format of the username?
Thanks in advance for the reaction.

Hi,
Thank you for your posting!
Since Active Directory Federation Service is not an extension of Active Directory schema, I suggest you refer to the following forum to get professional support:
Claims based access platform (CBA), code-named Geneva Forum
http://social.msdn.microsoft.com/Forums/vstudio/en-US/home?forum=Geneva
Thank you for your understanding and support.
Best Regards,
Amy Wang

Similar Messages

Can we use two Communication channels for one Interafce

Hi All,
Can we achive this in XI .
on basis of one value of field
If we get a value X=0 then use CC1
if we get a value X=1 then use CC2
for Single Interface.........
Regards

Hi Gangadhar,
i am working same scenario.
the scenarios is
Proxy->PI->JDBC
the condition is
IF Flag =0 it will sent to JDBC ,
IF Flag =1 it will sent to file and Mail
in mail it comes as a attachment.
I have achived this scenario using multi mapping in IR.
In ID i have used one bussiness system as Abap related and one is Bussiness Service.In that Bussiness system i have assign two Communiction Channesl.
In Reciever determination u have to select STANDARD and assing the recievers.
In interface dermination u have to select ENHANCED.
Please do these steps u r scenario will work fine.
Thanks
Ravi

Two users competing for one AppleID

I'm pretty new to all things Apple, and I only use my MacBook Air when I'm travelling. I recently decided to finally set it up and update all my details so that I can purchase apps etc.
I was surprised to find that all emails form apple.id were in French. I couldn't log in, my password was changed, but the account still used my email address as username, and I was able to change the password.
I have now discovered that someone else is using the same AppleID, it appears that their username and my email address were similar enough that Apple merged the accounts, so I now have their username, but I still of course (hopefully) am the only one to have access to my email account, which also serves as the username, or so I thought.
Owning the username/email address is not enough however, because the other person has now set up security questions using a recovery address that is not mine. Who will own it in the end...? I tried to get in touch with Apple support, but they do not have any support available in any of the countries I frequent, too 3rd world it seems.
Can anyone help me in this. I'm very glad I didn't enter any billing or credit card info. If the fact that my email address is a close match to some random person's username can grant them to access my account and change security settings, then I'm more than a bit worried about the security of my account.

soo your account and his account became one?
because then you need to make a new account. plus i think that he can see all you things like documents that you have on icloud.

Two item renderer for one datagrid column?

hi
i have one doubt
can we use two item renderer for one datagrid column
any possibilities
why i am asking this because
during drag and drop i need one itemrenderer and during application initialization i need another itemrenderer
any possibilities
karthik.k

Hi,
I think your requirement can be completed by using ViewStack you can pass selected index to it according to requirement.
See:
<itemRenederer ...
     <viewstack selectedIndex = 0 ...>
          <vBox id="vBox1" >
                    Your 1st itemrenderer will come here....
          </vBox>
          <vBox id="vBox2" >
                    Your 2nd itemrenderer will come here....
          </vBox>
     </viewStack>
</itemRenederer>
You have to just toggle selectedIndex.
Thanks

Can I use two Time Capsules? one as an extension of my laptop (for music and video storage) and the other one to back up everything from the laptop and Time Capsule (for music and videos)

Can I use two Time Capsules? one as an extension of my laptop (for music and video storage) and the other one to back up everything from the laptop and Time Capsule (for music and videos)

Not via Time Machine. It cannot back up from a network location.
The 3rd-party apps CarbonCopyCloner and ChronoSync may be workable alternatives.
EDIT: And, if you're going to do that, you could back up from the Time Capsule to a USB drive connected to the TC's USB port. Second TC not required.
Message was edited by: Pondini

How can I use two single-dimensional arrays-one for the titles and array

I want to Use two single-dimensional arrays-one for the titles and one for the ID
Could everyone help me how can i write the code for it?
Flower
public class Video
public static void main(String[] args) throws Exception
int[][] ID =
{ {145,147,148},
{146,149, 150} };
String[][] Titles=
{ {"Barney","True Grit","The night before Christmas"},
{"Lalla", "Jacke Chan", "Metal"} };
int x, y;
int r, c;
System.out.println("List before Sort");
for(c =0; c< 3; ++c)
for(r=0; r< 3; ++ r)
System.out.println("ID:" + ID[c][r]+ "\tTitle: " + Titles[c][r]);
System.out.println("\nAfter Sort:");
for(c =0; c< 3; ++c)
for(r=0; r< 3; ++ r)
System.out.println("ID:" + ID[c][r]+ "\tTitle: " + Titles[c][r]);

This is one of the most bizarre questions I have seen here:
public class Video
public static void main(String[] args) throws Exception
int[] ID = {145,147,148, 146,149, 150};
String[] Titles= {"Barney","True Grit","The night before Christmas", "Lalla", "Jacke Chan", "Metal"};
System.out.println("List before Sort");
for(int i = 0; i < Titles.length; i++)
System.out.println("ID:" + ID[i]+ "\tTitle: " + Titles);
System.out.println("\nAfter Sort:");
for(int i = 0; c < Titles.length; i++)
System.out.println("ID:" + ID[i]+ "\tTitle: " + Titles[i]);
Generally you don't use prefix (++c) operators in you for loop. Use postfix (c++).
Prefix means that it will increment the variable before the loop body is executed. Postfix will cause it to increment after.

Can you have two iCloud accounts for one Apple id?

Can you have two iCloud accounts for one Apple id?

the appleID is you in the ios world if you have an iphone and an ipad and an Ipod touch and an appletv and a mac then you should use 1 appleID on all of them it does not mean the same data is on all of them unless you want it to be

Bank Transfer file: generate two outgoing files for one pmt method?

Hello Experts,
Two files (header and item) are expected from the hungarian bank for each payement.
It's possible to generate two outgoing files for one pmt method using DMEE tree? If yes, can you tell me how?
If not, there is an other solution? Use a classic program (copy and adaptation) for example?
Thank you in advance.
Amal

Are you sure you need separate files file header and items.
Usually both header and items are placed in the same file. Please reconfirm or get the formats from the Bank.

Can i Use two qery hints in one SQL(Oracle)?

Hi,
Can i Use two Query hints in one SQL(Oracle)? USE_HASH and No_Merge
Thanks

user10916886 wrote:
Can I use like
/*+ USE_HASH(X,Y) NO_MERGE(X) */
will this work?Not really: NO_MERGE relates to mergeable views, not base tables. So whilst the USE_HASH may result in a hash join between the tables X and Y, USE_MERGE will be ignored for X.
As hoek says, however, HINTs should be a last resort only, and if they're to be used at all you're best to stay with those that don't involve explicit objects, like ALL_ROWS, FIRST_ROWS_10, etc.
user10916886 wrote:
Im my database, if i don't use query hints. The expalin plan uses Nested loops, hence the query takes a lot of time.You would be better trying the ALL_ROWS hint here, instead of USE_HASH.
Edit
The optimizer, however, will have chosen NESTED LOOPs where it did because it believed that to be the most efficient data retrieval path with the information that it had to hand. So, if your statistics are comprehensive and up-to-date, yet the optimizer is continually opting for the less efficient plan, there's something else wrong, and HINTs are only masking that problem in the short-term.

User Store for Portal

Hello,
We are implementing a new portal, and having trouble deciding on the user store for the portal.
Scenario:
u2022     The main functionality of the Portal is dependent on the SAP Systems (ESS\MSS), and BW System.
u2022     Currently there is no CUA or SAP Identity management Systems available.
u2022     The Usernames in our LDAP and SAP ECC systems are different, so we canu2019t use the LDAP.
From our preliminary brainstorming, we came up with following decision:
u2022     Use the ECC ABAP Store for user Base (So we leverage all the ECC users, and their current role assignments in the portal)
u2022     Later on, once weu2019re ready to install SAP IDM, and then Switch Portalu2019s User Store from ECC ABAP Store to IDM.
QUESTIONS:
1.     Is our approach here correct?
2.     Would it possible to switch portalu2019s user store from ECC ABAP Store to IDM?
3.     Should we consider installing CUA in the meantime until weu2019re ready to move to IDM?
Any Help or opinions would be much appreciatedu2026
Thanks,
Harman

Hi,
Q1 You wrote: " The Usernames in our LDAP and SAP ECC systems are different, so we canu2019t use the LDAP."
This is not 100% true... take a look at this help document as it explains some possibilities for you:
http://help.sap.com/saphelp_nw70ehp2/helpdata/en/0b/d82c4142aef623e10000000a155106/frameset.htm
Q2 Not really, see Q1 and in addition IDM is a Management and Provisioning System/Tool. It isn't a userstore on itself.
In other words IDM contains the single truth but it provisions it to systems (JAVA , ABAP, LDAP etc).
So it won't be possible to connect your Portal from an ABAP user store to an IDM user store as it doens't exist.
What theoretically could be possible is to now connect you Portal to an ABAP user store and later Back to its own UME and let this UME be under provisioning by the IDM system. But I can remember that it is not supported to go back from ABAP to UME. See also: http://help.sap.com/saphelp_nw70ehp2/helpdata/en/f5/8fdc3fca21eb06e10000000a1550b0/frameset.htm
Q3 Personally I think it is a first good step as it helps you to centralize and uniform your users and roles. But If you already decided to go for IDM (lets say next year) then it maybe the Return On Investment for implementing CUA now is nihil.
Do not hesitate to ask if above answers are unclear.
Good Luck,
Benjamin

Can we use two costing variant for standard cost estimate

Hi,
Can we use two costing variant for standard cost estimate of two different materials in the same period ? e.g. Costing variant Z001 for Material code 1000 and Costing Variant Z002 for Material code 2000.
Here the system is not allowing to change the costing variant in Marking Allowance (t code CK24) for marking and release of Material cost 2000 if the standard cost for Material code 1000 is already marked and released.
Thanks,
Bijay

For a material in a period only one price can be released. Though you cn have two separate costing variants and then calculate standard estimate with that. U can release based on one variant only for a month. Or use MR21 and update the price as per the other variant
Thanks and Regards

User store for OAM

I am setting OID as default User store for OAM 11gR2. And shall continue to use the internal UserIdentityStore1 as Security Store.
Is this ok? What is best practice.

This should be fine and is recommended way.
When trying to set this up. I would recommend keep few things in mind. i.e. Make sure that you are having a new LDAP Authentication Module created for default User Identity Store. You don't want to create a mess out of your Authentication Modules and Authentication scheme configurations. Few of the OOTB Authentication Schemes use LDAP Authentication Module. If you change the User IdentityStore for it. Then your system store would be UserIdentityStore1 whereas the OAMConsoleScheme and other Authentication Schemes will be using LDAP Module which will be pointing to your OID's User Identity Store instead of your System Store.
~Yagnesh

Why sometimes we have to use two message( ) to display one message ?

Sometimes one message( ) function is not working properly ? We have to use two message( ) to display one message ? Why ?

And just to add a little on what dave said:
You can also detect which button the user has clicked and do some action accordingly.
DECLARE
al_id ALERT;
al_result NUMBER;
BEGIN
al_id := Find_Alert('MESSAGE');
SET_ALERT_PROPERTY(al_id, ALERT_MESSAGE_TEXT, 'your message here');
al_result := Show_Alert(al_id);
IF al_result = ALERT_BUTTON1 THEN
... --do some action.
END IF;
END;

Two deliveries required for one sales order

Hello Friends,
I have a quirey , I have two types of goods in one sales order, one is dangerous goods and other one is normal. How ever we are thinking to make two seperate deliveries even they are in one sales order. How can two diff deliveries gets created.
We are planning to create new shipping point with new loading group for the dangerous goods .
Will the above decision works or is there any simplest way to create two auto deliverys for one sales order.
Reg.

Hi all,
I have yet another proposal - using copy control and adding there dangerous goods profile LIPS-PROFL as split criterial. This field is populated originally from material master MARA-PROFL field. You can check for example routine FV50C201. Split criteria are defined in likp-zukrl field.
I think that is better solution then introducing new shipping point. Because there are some determinations and dependencies related to shipping points. So the more shipping points you have, the more additional config you have. If it is needed by business to have separate shipping points - then fine. But if the goods are shipped from the same place, then I would rather modify copy control instead of multiplying config and master data. I say duplicated effort in master data - because with 2 shippiong points you would need to maintain DG profile field and additionally loading group.
Kind regards
Witek Prawecki.

Suprisingly two Processes running for one database

Hi all,
Today morning in one of our database servers, we see two processes running for one database.
COBLpo05 11949 1187 0 Mar 25 ? 37:50 ora_smon_BLINDEA1
COBLpo05 7789 1187 0 Mar 25 ? 5:35 ora_smon_BLINDEA1
Can anybody suggest me what is the reason behind it and what to do in this case?
Thanks in Advance.

The ORACLE_HOME may have been set twice with differents values in it (i.e. extra slash) before starting twice the same db.
Please, have a look to this article from Ivan Kartik :
http://ivan.kartik.sk/index.php?show_article=40
And depending of your OS, you could check what ORACLE_HOME is used for each process :
How to Check the Environment Variables for an Oracle Process*
Doc ID: 373303.1*
Nicolas.
added the metalink note ref.
Edited by: N. Gasparotto on Sep 4, 2009 11:34 AM

Using two User Stores for one relying party trust

Similar Messages

Maybe you are looking for