cancel
Showing results for 
Search instead for 
Did you mean: 

user mapping problem? [connecting EP to BW]

Former Member
0 Kudos

Hello,

I am trying to put an SAP BW report on a Portal page...

The connection test (run from system landscape) to the BW

system fails.

At the same time I can preview the iView based on this

BW system, the only thing I have to do before the iView

is displayed is to enter BW user name / password (login

widow pops up).

The iView is also displayed on the portal page (when

logged as an end-user). But again, the user has

to enter the user name / password.

I have defined user mappings for EP users (i.e. for

every EP user I have defined a mapping to a BW user).

What can I do so that the EP end-users don't have

to enter the BW user id / password when they display

the page with the iView? Is this the user mapping

problem, SSO problem, or maybe connectivity problem?

SAP EP version is 6.0 SP 9.

Any help highly appreciated.

Greetings,

Tomek.

Accepted Solutions (0)

Answers (1)

Answers (1)

Former Member
0 Kudos

How have you configured the BW system in the system landscape? Is it set as a BW system? It is set for SAPLOGON tickets? Have you configured sso in the BW system?

Former Member
0 Kudos

Hi Eric,

> How have you configured the BW system in the system

> landscape?

Yes, I have (otherwise I couldn't run connection tests).

> Is it set as a BW system?

Yest, it is.

> It is set for SAPLOGON tickets?

Yes.

> Have you configured sso in the BW system?

I have imported the EP certificate into BW,

but I am not sure if it is enough.

Also, do I have to configure SSO when using

UIDPW logon method (rather than SAPLOGONTICKET)?

Greetings,

Tomek.

Former Member
0 Kudos

Did you use transaction strustsso2 to import the portal cert in BW? Did you make sure to add the portal cert to the ACL? You shouldn't have to configure SSO if you want to use user mapping.

Former Member
0 Kudos

> Did you use transaction strustsso2 to import

> the portal cert in BW? Did you make sure to add

> the portal cert to the ACL?

Yes, but I will have to investigate it further to see

if I haven't done any mistakes.

> You shouldn't have to configure SSO if you want

> to use user mapping.

Does it mean that if EP is configured for SSO wit some

other system (not BW), I won't be able to use user

mapping between EP and BW? My understanding is (please,

correct me if I'm wrong) that I am not forced to use

SSO between EP and BW even if there is SSO between EP

and some other systems.

I started thinking about using SSO between EP and BW

because when I tried to use UIDPW logon method, there

was this logon window popping up (despite the fact I

defined user mappings). So it seems user mapping does

not work for some reason.

Greetings,

Tomek.

Former Member
0 Kudos

It started working, though I am not sure I understand

why... Both the system in the EP landscape, and the

iView that displays the BW report are set to use UIDPW

logon method. The only thing that has changed is that

I have imported again the EP public key certificate,

and added it to the ACL (on BW's WAS). I do not

understand why it needs the certificate if both

the iView, and the system use user mapping?

Thanks for your help.

Greetings,

Tomek.

Former Member
0 Kudos

I can't tell you technically why it needs the cert but it has been my experience that it does. I think this is a bug.

H_Ettelbrueck
Employee
Employee
0 Kudos

Hi,

please check SAP note 754868 - depending on your landscape, it may explain the behaviour you see.

Best regards

Heiko

Former Member
0 Kudos

Hi Heiko,

First of all I have to say that with no visible cause,

it stopped working. Now again I have to enter username

and password every time I enter the portal page with

BW-based iView. I have no idea why, as nothing has been

changed since it started working.

Regarding the solutions provided in the SAP note:

1. "Move the WAS to another DNS domain." It didn't

help (still have to enter username / password).

2. Setting "ume.logon.security.relax_domain.level"

to 0 didn't help neither.

3. "Synchronize portal users and WAS users in a way

that you can use SAP logon tickets for logon."

This also doesn't work. I made a test in which

I logged into a portal user, which has the same

username/password as a BW user. When I tried to

open the page with BW-based iView, login window

appeared.

Just one more question... In system landscape,

when setting up a new system definition, what should

I enter in "WAS path"?

BTW... I have also observed another strange thing...

When I log into SAP EP as user A, enter a portal page

with a SAP BW - based iView, enter user name and

password (as the EP forces me to do so), the iView

displays the BW report. Now, when I log out of the portal,

and without closing the browser window log into as user B,

and enter the same page with BW based iView, I do not

have to enter the user login / password. So apparently

the portal uses the login / password entered within

another session (which is obviously wrong).

Many thanks for your kind help.

Greetings,

Tomek.