transport a customized Category together with repository assignment from OACT

 We configured the custom content server in OACO and created new category in OACT and asgined the Content Reporsitory to Category, But while transporting the entriies Category is showing in quality but repository is empty.

We have a note for this  issue, we need to add teh repository manually in the TR.

Go to task and opend and edit it.

Click on the ckey sybol

Add the above values. under Table keys we have to enter the repository id's

then Save and release and transport.

Reference: 3332669 - How to transport a customized Category together with repository assignment

How to Edit and modify the table entry in SE16

Fist login to SAP and goto SE16

Enter table name and execute.

Now enter /h in transaction box and press enter. it will say debug is switched on.

then double click on the entry, it will open a new window in debug mode:

Now click on F7(Return) , it will directly take to below screen(if code = 'SHOW'

double click on code, it will display value right side.

click on change button and change the value to EDIT

Change te vlaue to EDIT

Once changed the valued, press enter.

Click on Continue button

It will take you back to SE16 in Editable mode.

Once you enter or modify the value, click on save. It wll give message: Database record created successfully.

dump CALLBACK_REJECTED_BY_WHITELIST getting while opening screen with graphical editor

 

getting above dump while opening a screen with graphical editor.

solution: 

Edit the TCP/IP RFC EU_SCRP_WN32 in SM59 and goto Logon & Security:

check the box Positive List Actv

and add take the Called funiton module from dump and put * for callback Function Module.

Changing BW client in S/4 HANA

 2952974 - Change of BW client in ERP or SAP S/4HANA system

1. Log onto your new BW client.
2. Transaction BDLS: This step is necessary only if you have created a MySelf BW system in your old BW client. As a result, the MySelf system indicates the correct logical name again. Adjust the logical name of your BW client in line with the logical name of the new client. <BW client old> --> <BW client-new>
3. Transaction SE37: Execute the function module RS_MANDT_UNIQUE_SET with your new BW client. 

Adding Public URL to SAP Fiori to access from Internet

 1. Configure Webdispatcher

2. finalize the hostname name to use in the public URL, i.e https://<name>.domain.com

3. request RISE team to get a Public IP for Public URL.

4. Request customer to create A-records in your public DNS with the public IP addresses (share hostname and public IP to network team)

SM20 Log anaylize for ABAP users to get the time spent in system

 If we want analyze SM20 logs for ABAP user or background user or Fiori login. Below are few details which can help.

In SAP SM20 logs, Type and Method define the nature and technical approach of a security event (like a logon or report execution). Type commonly indicates the session category (e.g., Dialog, RFC), while Method specifies how that interaction occurred (e.g., Password, Certificate), often appearing as pairs like type=E, method=A

Type=A (Dialog Logon)

Type=B (Background Job Start): Indicates the session is for a background process, not a manual dialog login.

Type E (Establishment): Indicates the establishment of a shared memory area or an internal call. (Mostly for Fiori login)

type=H: HTTP/HTTPS session (Web-based logon)

Method=P (Password) Password authentication (user explicitly entered credentials)

Method=A (Authorized/Internal): Signifies an internal system call, such as background processing, rather than an interactive user session.

In our case: we have given Message text as: Logon successful (type = A, method = P) to get he user login details

and Message text: User logoff to get the log out time and merged to get the time spent.

for fiori login, we use: Logon successful (type = H, method = P), but fiori logout we may not get, since no one will logout fiori, they just close the browser.

Audit Log - Event Description
The user has logged onto the system.
<ZU>Possible Types (= Access types):</>
A = Dialog logon (SAP GUI)
B = Background job start
H = HTTP logon
U = User switch (internal call)
' ' = Password check (API, internal call)
M = SMTP
P = ABAP Push Channel (APC)
E = Build of a shared object area (internal call)
O = AutoABAP (internal call)
T = Server startup procedure (internal call)
V = SAP start service (internal call)
J = JAVA virtual machine (internal call)
W = BGRFC watchdog (internal call)

<ZU>Possible methods (=authentication modes):</>
P = Password
T = Logon ticket
t = Assertion ticket
X = X.509 certificate
S = SNC
R = RFC ticket
A = Authorized impersonation (background processing)
E = External (EXTID)
U = User switch
s = HTTP security session
2 = SAML2
1 = SAML1
o = OAuth2
N = SPNego
a = APC session
B = SAML bearer
r = Reentrance ticket
D = OpenId connect (with interaction)
d = OpenId connect (no interaction)

If a user type or a method is not listed here, you might find more
information in SAP Note 320991.

SAP Fiori Search connectors not working after client copy.

 We have performed client copy, after copy search connectors not working in fiori apps of target client.

in fiori app Create Maintenance Notification  getting error "No results have been found for search '*' in 'Technical Object'"

So we thought to run the task list in target client: SAP_ESH_INITIAL_SETUP_WRK_CLIENT for component: SAPAPPLH

Got below error in step Update Software components.

We ran the task list SAP_ESH_ADJUST_AFTER_CLIENT_COPY, still facing error.

then i ran the program : ESH_REFRESH_RUNTIME_BUFFER

then it worked.

SAP ADS forms asking for credentials

 Check the report: FP_TEST_00

This is becuase, there are few steps which need to perform in all clients.

In this link document, below steps need to perform in all clients: https://help.sap.com/docs/forms-service-by-adobe/sap-forms-service-cf/create-oauth-2-0-profile?q=location

Configure an OAuth 2.0 Client

Create a Connection via Logical Port

SNC SSO issues

 1928669 - How to start Secure Login Client Console manually

SAP My Inbox attachment URL

 After we configure Fiori to access from public network, the myinbox attachments like PO & PR.. are opening with internal or webdispatcher URL which willnot work  from public network.

Tha Attachments also should use the Public URL to access form public network.

We will below tcodes to setup workflow visualization realted parameters:

SWFVISU

SWFVMD1

SWPA - for to furthe settings and maintain the public URL like below: 

first parameter is the public URL: 

Below SAP note solution section will help 2009417 - Service class for generation of URLs

In the standard system, the protocol, host address, and port are taken from the configuration of the relevant application type (BSP, Web Dynpro ABAP, for example). If you need to deviate from the standard system, you can set three configuration parameters for each application type. You must create these parameters by choosing "Create Parameters" in transaction SWPA. The names of the parameters are as follows:

Parameter	Subparameter	Default value	Documentation object
SWF_URL	BSP_STD_HOST		SWF_URL_BSP_STD_HOST
SWF_URL	BSP_STD_PORT		SWF_URL_BSP_STD_PORT
SWF_URL	BSP_STD_PROTOCOL		SWF_URL_BSP_STD_PROTOCOL
SWF_URL	WD_ABAP_HOST		SWF_URL_WD_ABAP_HOST
SWF_URL	WD_ABAP_PORT		SWF_URL_WD_ABAP_PORT
SWF_URL	WD_ABAP_PROTOCOL		SWF_URL_WD_ABAP_PROTOCOL
SWF_URL	WEBGUI_HOST		SWF_URL_WEBGUI_HOST
SWF_URL	WEBGUI_PORT		SWF_URL_WEBGUI_PORT
SWF_URL	WEBGUI_PROTOCOL		SWF_URL_WEBGUI_PROTOCOL

SAP Cloud connector

  To download cloud connector, it is available at: https://tools.hana.ondemand.com/#cloud

Sync users from s/4 hana to IAS and vice versa for UUID sync

 

Connect Identity Authentication service to On-Premise System

In SAP S/4HANA, user name is usually used to access the system and user name is unique. In BTP, email is used to access the system and email address is unique for each user. When configuring SSO between BTP and S/4HANA system, we need a common identifier across the landscape. Usually, email or Global User ID(UUID) are used to uniquely identify a user. For Task Center integration, only Global User ID is supported. The UUID is automatically generated for every newly created, imported or provisioned user in the Identity Authentication Service. So, We need to connect the Identity Authentication Service to the SAP S/4HANA system to update the Global User ID in SAP S/4HANA system. When updating the UUID from IAS to S/4HANA, the email address is used to map the users. So, the users must have email address maintained in transaction code SU01.

Firstly, we need to sync the users from the S/4HANA to IAS, if user with same email address exist in the IAS, the login name will be updated in IAS. If the user does not exist in the IAS, the user will be created in the IAS.

Then, we need to sync the Global User ID(UUID) to S/4HANA system.

Reference: https://help.sap.com/docs/SUPPORT_CONTENT/fioritech/5129990827.html

Change SAP Transport Request Number Range

 Sometimes we may require to set up new number range for the TR's created in SAP ABAP System:

Ex: Normally TR's are created strating from:DEVK900000, curent numberrunning may be DEVK902500.

You may need to start from a new number for some reason. Ex you need to start from DEVK910000.

run below command in DB level: below command is to run in hana db with schema SAPABAP1.

update SAPABAP1.E070L set TRKORR = 'DEVK910000' WHERE LASTNUM=’TRKORR’;

Referencenote: 1674286 - How to modify CTS transport number range (ABAP)