Initial settings for the BI folks to run Portal

Wednesday, January 30, 2008

10 times out of 11, the BI Consultants I have met have cumbersome laptops and insane browser settings. Not to forget ... the missing software and constant bickering that Portal Sucks !!

Here I am, helping them feel easy at work by giving them some tips to follow before you constantly scratch those Portal Dudes !!

Add the Portal and BI systems in your browser
Within Internet Explorer, you should make sure that you add your SAP NetWeaver Portal and BI systems to the list of trusted sites within Internet Explorer. This is available through the Tools -> Internet Options -> Security -> Trusted Sites -> Sites area.



















Within Internet Explorer, you should make sure that you add your SAP NetWeaver Portal and BI systems to the list of sites that can always use cookies. This is available through the Tools -> Internet Options -> Privacy -> Sites .







JAVA script settings:
Within Internet Explorer, you should check your advanced tab settings. Also, a requirement is to ensure that JavaScript is enabled for your internet explorer browser. If you disable JavaScript, your page and portal won’t load. See this Microsoft guide on how to enable javascript on your client browser.
On the Tools menu, click Internet Options, and then click the Security tab.
Click the Internet zone.
If you do not have to customize your Internet security settings, click Default Level.
If you have to customize your Internet security settings, follow these steps:a. Click Custom Level.b. In the Security Settings – Internet Zone dialog box, click Enable for Active Scripting in the Scripting section.
Click the Back button to return to the previous page, and then click the Refresh button to run scripts. If it is not, see this Microsoft hotfix page http://support.microsoft.com/kb/871205 for a resolution to this issue.

HTTP Content
If you’re having issues with IE such that it won’t decompress HTTP Content on IE 6 SP2. Ensure that your wininet.dll file is at the following version for IE 6 SP2

Next, add your local domain to your trusted sites in Internet Explorer. If you can’t add the entire domain, add the ABAP and JAVA systems manually. If you’re still having issues with Internet Explorer 6.0 and you’ve followed all these steps, I suggest using HTTP Watch or another http trace program and check your http return codes when loading pages and also use the JavaScript debugger to get a better idea of the types of JavaScript errors you are receiving. Then search Microsoft’s Knowledge Base articles at http://support.microsoft.com/.


MSHTML.dll
In addition, you need the latest version of the mshtml.dll version for Windows XP SP2. This is mentioned and available in this Microsoft hot fix: http://support.microsoft.com/kb/917425.
Setting up Internet Explorer 7.0
Internet Explorer 7.0 is supported for NetWeaver as of SPS10.
Installing Latest Version of .NET 1.1 framework
Download and install the latest version of Microsoft .NET Framework 1.1. Currently, there is a version 2.0 available, but 1.1 is required. See OSS note 877774 for details. Keep in mind this must be installed BEFORE SAPGUI or the BI Addon is installed. http://www.microsoft.com/downloads/details.aspx?FamilyID=262d25e3-f589-4842-8157-034d1e7cf3a3


Install Microsoft Visual J# .NET
This is a new Prerequisite (Note 964495): You need have installed "Microsoft Visual J# .NET Version 1.1 Redistributable Package" http://www.microsoft.com/downloads/details.aspx?FamilyId=E3CF70A9-84CA-4FEA-9E7D-7D674D2C7CA1&displaylang=en


Installing MSXML Parser
The latest version of Microsoft XML Parser should be installed. MSXML parser comes installed on Windows XP machines, but if you’re using a prior operating system, you may need to install it. Also, you should make sure the version you are using is up to date. MSXML Parser is required for Visual Composer designtime. Currently, the latest version is MSXML Parser 6.0 which is located at: http://www.microsoft.com/downloads/details.aspx?FamilyID=993c0bcf-3bcf-4009-be21-27e85e1857b1&DisplayLang=en


Installing Adobe SVG Viewer
Download and run Adobe SVG Viewer 3.0 http://www.adobe.com/support/downloads/product.jsp?product=46&platform=Windows Adobe SVG Viewer is required for all users that will use the Visual Composer Designtime. It is not required for any runtime users or for any other BEx tools (at least it isn’t required yet …)


Installing Adobe Flash Player
Download and Install Adobe Flash Player (v7.0+) - plug in for Internet Explorer 6.0 Adobe Flash Player is required for Visual Composer (both designtime and runtime). This is located at: http://www.adobe.com/shockwave/download/download.cgi?P1_Prod_Version=ShockwaveFlash


Verify SAPGUI Settings for BI
In excel, go to Tools -> Macro -> Security -> Trusted Publishers Verify the SAP AG certificate and make sure “Trust Access to Visual Basic Project” and “Trust all installed addins and templates” are checked. Run C:\Program Files\SAP\FrontEnd\Bw\sapbexc350.xla and ensure there are no red files… Run C:\Program Files\SAP\FrontEnd\Bw\sapbexc700.xla and ensure there are no red files…
Server Side Settings
Step 1 – Ensure that your ABAP and JAVA systems are on the same fully qualified domain name. There are numerous cross-domain issues that could occur. Also, ensure that all communication server side is using the fully qualified domain name. Step 2 – You may be missing style elements which could cause incorrect rendering. If you are still having issues, try switching to an SAP Delivered Theme instead of Custom Theme on the Portal.
Hope this blog helps the BI folks and ofcourse the Portal DUDES !!!

Email Connectivity in SAP Netweaver Portal

Tuesday, January 29, 2008

Sending Emails from the Portal is a key functionality for Collaboration and certain KM services. Below is a step by step configuration of Email in Portal.

Create the system Object for the Microsoft Exchange Server














Use the SMTP server address












Create the Alias for the system object



















Configure the email service

System Administration > System Configuration > Content Management > Global Services > Mailing Services > check for the tick sign in the Active section.















Creating an Email Transport


System Administration > System Configuration > Collaboration > Transports















System Administration > System Configuration > Collaboration > Transports > Mail Transport > Click New > use the SMTP address











Make sure you have the collaboration link activated on the portal to test this functionality.





















Check your email for the response..










I hope the above configuration was simple enough....

Flavors of EP

One of the hottest topics on SDN is the versions of EP. In this blog I have focussed on 4 different areas:
Running an Enterprise Portal
Collaboration
Knowledge management
Mobilizing Business Processes
(Click on the image to see a larger version)












































URL in SAP Netweaver

Monday, January 28, 2008

Short URL

Easy way:

Step 1:

Click on add to Browser favorites in the page title bar in the right-top corner of the page.

Check the favorites and determine the URL link for the iView.






Hard way:

STEP1: Go to a PCD object in the Portal content directory and determine the path under PCD location properties.

Step 2: Copy the link and go to system administration > navigation > short URL >

Step 3: Type ROLES:// followed by the PCD location and determine your short URL.

Step 4: concatenate the URL (check the below example) For example, the user mapping iView can be displayed with the following URL: http://myServer:50000/irj/portal?NavigationTarget=

ROLES://portal_content/every_user/general/eu_role/

com.sap.portal.portal_personalization/com.sap.portal.persoUserMapping

A short version of the URL might be the following, with the navigation target hashed and shortened: http://myServer:50000/irj/portal?NavigationTarget=navurl:

//b3d6d9ebac16a46574d62757803b05d4

I know it’s goofy to add a hard and easy way to work this but the hard way is for the GEEKS!

And of course the Slackers enjoy the easy one J

URL for Portal Quick Links:

Quick links are shortcuts to iViews and pages. Each quick link is a string that you add to the default portal URL in order to navigate to a specific iView or page. Quick links provide a meaningful name for iViews and pages to which users may want to navigate.

For example, if the base address of the portal is http://myServer:50000/irj/portal and the quick link to the page is email, a URL to the page would be: http://myServer:50000/irj/portal/email







Portal Theme Editor Concept

Prior to 7.0 version of Netweaver the idea of changing the web templates of BI Reports were completely dependent on modifying the contents in the BWReports.css cascading style sheets in the MIME repository via T-code SE80. The various elements in the file were edited using a CSS editor and later imported back with the respective changes. With the changes the reports were generated on a web browser and the template would adapt the cascading style sheet that was modified. These URL’s were later linked to the Portal or sometimes a different application.

Now things have changed a bit. The concept of Portal Theme Editor has taken precedence over the use of the MIME objects in the backend BI system. Developers can now use this editor as a central editing location for all the web applications that are executed in the Portal browser. Just for clarifications or for some naïve learners, Web Templates are created in the Web Application Designer (BEx Tool), these web templates when executed on a browser is called BEx Web Application and this Bex Web Application when executed on a Portal Browser is called a BEx Web Application iView.

So getting back to the point after taking the beginners detour, these web applications can be assigned a specific Portal theme by using certain components in the Theme Editor. Some of them are Global Formats Content Area, Complex Elements, Basic Elements, and Component-Specific Formats.

Lets feed the baby using a spoon and follow the below steps to achieve the invincible: Execute the BEx Web application in the Web browser and Decide what needs to be changed. Open the same as a template in your WAD and identify which web item needs to be changed and use the theme editor to make the necessary changes. (System admin > portal display)

Now let’s get graphical. Consider the below screen print. It is an example of a standard web application as seen on a BEx web analyzer.















(Click on image to see a larger version)

To change or modify certain parts of the template consider the below screen prints:



















































BI-Portal

Sunday, January 27, 2008

Configuration of BI and Portal

You can summarize the configuration in three main topics:

    1. Communication
    2. Single Sign-On (SSO)
    3. User Management

You have to setup both directions for communication:

    1. Java to ABAP communication
    2. ABAP to Java communication

For communication, the RFC/JCo protocol and HTTP(S) web protocol are used. Communication is used to create and display BI content in the Portal. Communication is used to display Portal content in BI (e.g. BEx Information Broadcasting shows Knowledge Management folder). See note 888687 for technical details.

For Single Sign-On (SSO), you have to ensure that Java and ABAP trust each other:

    1. Java is trusting ABAP
    2. ABAP is trusting Java
Single Sign-On (SSO) is working with SAP Logon Tickets. SAP Logon Tickets are created with the help of certificates and could be validated with certificates. Therefore, certificates must be exchanged between Java and ABAP.
Certificates consist of a public key and optionally of a private key. The private key of certificate is required for creating and signing SAP Logon Tickets. The public key of certificate is used for validating SAP Logon Tickets.
SAP Logon Tickets are digitally signed with the private key of the issuing system's certificate. They contain the user ID, authentication scheme, validity period, issuing system and digital signature but they do not contain any passwords. SAP Logon Tickets are validated with the public key of the issuing system's certificate (the public key is located in System PSE or TicketKeystore). They are only accepted if the issuing system is part of Single Sign-On Access Control List (ACL) or EvaluateTicketLoginModule in the validating system. Reports to Run:

1. RSPOR_SETUP
    1. Execute the report RSPOR_SETUP with transaction SE38 (or SA38; or you can execute the report from the SAP Reference IMG, see Documentation below)
    2. Use value help of entry field Program ID (or RFC Destination) to choose __ as RFC Destination (this destination is created by the Template Installer)
    3. Enter Portal SID (required to check step 10)
    4. Press button Execute

2. RS_TEMPLATE_MAINTAIN_70

Run Report RS_TEMPLATE_MAINTAIN_70 and Enter Template ID 0ANALYSIS_PATTERN > Choose Program / Execute
Choose Analyse / Validate , Choose Analyse / Execute in Debug Mode ,A Web Browser is opened and you have to logon to the Portal. Finally, an empty Analysis Pattern (without data) should appear. After these tests you can continue your testing by creating and using your own Queries (with BEx Query Designer), Web Templates (BEx Web Application Designer) and Reports (BEx Report Designer).

SSO2 Wizard

SAP released a Note 1083421 . There is a wizard called SSO2Wizard_700.ZIP which you can download from the Note. This note is valid since 23.12.2007 , so I have to conclude this is fairly new. The wizard when downloaded can be accessed via the Portal URL followed by /SSO2

OK...so this can help SSO logon ticket issues from the ABAP side and it automatically checks for inconsistencies. Its like the template Installer or the Support Tool we have for BI.

Netweaver BI and how does it support SOA?

SAP Subscription Services

Saturday, January 26, 2008

Subscription Services

To ensure that the subscription and notification service can be used directly after the installation, you need to configure the required e-mail channels and servers.

Syst system Administration ® System Configuration ® Knowledge Management ® Content Management ® Utilities ®Channels > E-Mail Channel > click Edit.

To display all entry fields, choose Mode ® Advanced. Enter your mail server and, in the Type field, select your mail protocol and choose OK.















































To test the subscription service lets delete a document in the folder. Changes in the folder are notified via email as shown below.


SAP GRC

SAP GRC- Governance, Risk and Compliance and Secrets of an External Auditor.

Have you ever imagined learning what an external auditor does in his daily life? If the external auditors had to mention the secrets of their trade the company would not be spending a lot of money on them working day and night trying to evaluate your ICOFR- Internal Control over financial reporting and start marking you down with deficiencies, significant deficiencies and good lord !! those Material weaknesses ….Needless to say these are the secrets of auditing which can make our life easy with those auditors!! Hence, I decided to share my knowledge about these controls for SOX -Sarbanes Oxley evaluation. Before we get into the controls here are some of the terminologies used in the secret world of Auditing. TOD- Test of design, TOE- Test of Operative effectiveness, PCAOB- Public Company Accounting Oversight Board.

Here goes the story…SEC (Securities exchange Commission) set up a board called PCAOB sometime in 2004 to oversee the auditors of public companies in order to protect their interests of investors. The external auditors follow the rules or auditing standards set by this board. Here are the auditing standards defined by PCAOB. http://www.pcaob.com/Standards/index.aspx. The general documentation every external auditor on this planet uses something called ITGC – IT general controls. The ITGC has four sections where the controls are defined and evaluated. This is a template used by these auditors to evaluate the company’s processes after mapping them from the ICOFR-Internal Control over Financial Reporting. The four sections are Access to programs and Data, Program Changes, Program Development and Computer Operations. TOD or test of design is used to document the control objectives, Control numbers and their description. Ever since SAP bought VIRSA the world has changed in terms of those auditors having to spend less time with their clients and unfortunately suck little blood and money from their clients J. SAP Solutions for Governance, Risk, and Compliance: GRC Access Control (comprising applications formerly known as Virsa Compliance Calibrator, Virsa Firefighter, Virsa Access Enforcer and Virsa Risk Terminator) Virsa Compliance Callibrator is a fantastic tool to solve the SOD conflicts and streamline a steady definition of the roles and authorization. This tool will satisfy the section I.E section of the ITGC and there is no chance they can mark you down with any kind of deficiencies. The Virsa Access Enforcer is another tool which will satisfy the I.C controls. The I.B controls can be satisfied by using another tool called Virsa Firefighter which handles exceptional access requests. The Virsa Role Expert is another web based tool. Auditors love to snap your monitors with their highly traditional early Stone Age practice tool called (Alt+Prt Sc) and of course cut all the trees on this planet by printing reams of paper. So get ready to snap your own monitors and make your printer auditor friendly. The I.A controls involve the following solutions: maintain a policy document that provides security related guidance for your SAP system landscape. Make sure every user has his own unique ID and no system accounts exist. Make sure the user access to the SAP system is done with the use of profiles defined. Auditors use a system generated report (No excel sheets involved) to assess the periodic review of user access which will satisfy the I.D controls. So generating reports to satisfy their strict controls can only help you from seeing a deficiency in their Test of Operative Effectiveness.

(More to come in SAP GRC- Governance, Risk and Compliance and Secrets of an External Auditor Part –II)