how to configure anonymous access to knowledge management (nw7.0)

Upload: rudhras

Post on 08-Apr-2018

220 views

Category:

Documents


0 download

TRANSCRIPT

  • 8/7/2019 How to Configure Anonymous Access to Knowledge Management (NW7.0)

    1/10

    How-to Guide

    SAP NetWeaver 2004s

    How Toconfigure ananonymous

    access to KMVersion 1.00 February 2006

    Applicable Releases:SAP NetWeaver 2004s

  • 8/7/2019 How to Configure Anonymous Access to Knowledge Management (NW7.0)

    2/10

    Copyright 2006 SAP AG. All rights reserved.

    No part of this publication may be reproduced ortransmitted in any form or for any purpose without the

    express permission of SAP AG. The information

    contained herein may be changed without prior notice.

    Some software products marketed by SAP AG and its

    distributors contain proprietary software components of

    other software vendors.

    Microsoft, Windows, Outlook,and PowerPoint

    are

    registered trademarks of Microsoft Corporation.

    IBM, DB2, DB2 Universal Database, OS/2, Parallel

    Sysplex, MVS/ESA, AIX, S/390, AS/400, OS/390, OS/400,

    iSeries, pSeries, xSeries, zSeries, z/OS, AFP, Intelligent

    Miner, WebSphere, Netfinity, Tivoli, and Informix are

    trademarks or registered trademarks of IBM Corporation

    in the United States and/or other countries.

    Oracle is a registered trademark of Oracle Corporation.

    UNIX, X/Open, OSF/1, and Motif are registered

    trademarks of the Open Group.

    Citrix, ICA, Program Neighborhood, MetaFrame,

    WinFrame, VideoFrame, and MultiWinare trademarks

    or registered trademarks of Citrix Systems, Inc.

    HTML, XML, XHTML and W3C are trademarks or

    registered trademarks of W3C, World Wide Web

    Consortium, Massachusetts Institute of Technology.

    Java is a registered trademark of Sun Microsystems, Inc.

    JavaScript is a registered trademark of Sun Microsystems,Inc., used under license for technology invented and

    implemented by Netscape.

    MaxDB is a trademark of MySQL AB, Sweden.

    SAP, R/3, mySAP, mySAP.com, xApps, xApp, and other

    SAP products and services mentioned herein as well as

    their respective logos are trademarks or registered

    trademarks of SAP AG in Germany and in several other

    countries all over the world. All other product and

    service names mentioned are the trademarks of theirrespective companies. Data

    contained in this document serves informational

    purposes only. National product specifications may vary.

    These materials are subject to change without notice.

    These materials are provided by SAP AG and its affiliated

    companies ("SAP Group") for informational purposes

    only, without representation or warranty of any

    kind, and SAP Group shall not be liable for errors or

    omissions with respect to the materials. The only

    warranties for SAP Group products and services are those

    that are set forth in the express warranty statements

    accompanying such products and services, if any.

    Nothing herein should be construed as constituting an

    additional warranty.

    These materials are provided as is without a warranty

    of any kind, either express or implied, including but not

    limited to, the implied warranties of merchantability,

    fitness for a particular purpose, or non-infringement.

    SAP shall not be liable for damages of any kind including

    without limitation direct, special, indirect, or

    consequential damages that may result from the use of

    these materials.

    SAP does not warrant the accuracy or completeness of

    the information, text, graphics, links or other items

    contained within these materials. SAP has no control

    over the information that you may access through the

    use of hot links contained in these materials and does not

    endorse your use of third party web pages nor provide

    any warranty whatsoever relating to third party web

    pages.

    SAP NetWeaver How-to Guides are intended to

    simplify the product implementation. While specific

    product features and procedures typically are explained

    in a practical business context, it is not implied that those

    features and procedures are the only approach in solving

    a specific business problem using SAP NetWeaver. Shouldyou wish to receive additional information, clarification

    or support, please refer to SAP Consulting.

    Any software coding and/or code lines / strings (Code)

    included in this documentation are only examples and

    are not intended to be used in a productive system

    environment. The Code is only intended better explain

    and visualize the syntax and phrasing rules of certain

    coding. SAP does not warrant the correctness and

    completeness of the Code given herein, and SAP shall

    not be liable for errors or damages caused by the usage of

    the Code, except if such damages were caused by SAPintentionally or grossly negligent.

  • 8/7/2019 How to Configure Anonymous Access to Knowledge Management (NW7.0)

    3/10

    - 1 -

    1 (Business) Scenario

    There is content within your portal which you want to publish. This content should be

    accessible for everyone but no explicit authentication should be required. This use caseis also known as anonymous login scenario. Within your portal you want to define a rolewhich should be used for non named users. In this scenario it is described how toprovide information to anonymous users.

    2 Introduction

    This guide describes the creation of a role for anonymous access which contains a KM example. For additional information concerning the creation of PCD Content pleaserefer to www.help.sap.com.

    Figure01: Entry-Site for Anonymous with 3 different KM iViews.

    Be aware that in this scenario the following URL is used for an anonymous access:http://server:port/irj/portal/anonymous

    Also refer to note 837898 for further information and setup concerning the anonymousaccess.

    KM Basic Search

    KM Documents

    KM Navigation

  • 8/7/2019 How to Configure Anonymous Access to Knowledge Management (NW7.0)

    4/10

    - 2 -

    3 The Step By Step Solution

    This chapter describes step by step the necessary actions which have to be followed to

    enable an anonymous access to KM Content. It starts with defining content within apublic role and checking the results.

    As prerequisite the following configuration was set up reflecting to note 837898

    The definition of KM short URLs in the URL Generator service of KM (this isdefault setting for NW2004s)

    Change the authentication scheme for the URL Access iViews (Document, BasicSearch, Details, Highlighted Content) to anonymous.

    For the configuration which are described here, please be sure you are logged on withan administrator-role (super-admin-role) with sufficient permissions in the portal.

    Within the next seven steps we will define the content in the anonymous role. Thiscontent is based on a example. We will create a KM Navigation iView, a page and assignthat content to a role.

    3.1 Defining Content to an Anonymous Role

    1. iView - Creation

    Open Content AdministrationPortal Content

    Choose your custom folder (or createa new one) where you can store yourcreated content

    Right-click on this folder and chooseNew iView iViewTemplate

    Choose KM Navigation iView

    2. Provide the necessary informationfor iView-Name, ID, prefix, languageand description and choose Nextand then Finish

    Open the iView for editing afterwards

    In the dropdown box PropertyCategory please select Show All

  • 8/7/2019 How to Configure Anonymous Access to Knowledge Management (NW7.0)

    5/10

    - 3 -

    3. Maintain the following properties:

    Authentication Scheme toanonymous

    Path to Initially Displayed Folder:

    customerpath.

    (e.g. /documents/PublicDocuments/External_Documents

    Path to Root Folder for Navigation:customerpath

    Save your changes

    4. Create a page within your customfolder

    Right-click on this folder and choose

    New Page

    Provide the necessary information forPage-Name, ID, prefix, language anddescription and choose Next andthen Finish

    Open the Page for editing afterwards

    5. In the dropdown-box PropertyCategory please select Show All

    Change the property Authentication

    Scheme to anonymous Create a delta-link to your iView

    Save your page

    6. Create a role within your customfolder

    Right-click on this folder and choose

    New Role

    Provide the necessary information forRole-Name, ID, prefix, language anddescription and choose Next and

    then Finish Open the Role for editing afterwards

  • 8/7/2019 How to Configure Anonymous Access to Knowledge Management (NW7.0)

    6/10

    - 4 -

    Add Page to Role Delta Link

    Change the Parameter Entry Pointto yes

  • 8/7/2019 How to Configure Anonymous Access to Knowledge Management (NW7.0)

    7/10

    - 5 -

    3.2 Assigning the created role to Anonymous Group

    We will now assign the anonymous role to our anonymous group.

    7. Role - Assignment

    Open User AdministrationIdentity Management

    Search for the user groupAnonymous Users , mark it andchoose modify in the DetailsView

    Go to tab Assigned Roles andadd your created role to the

    Anonymous Users - group

    3.3 Testing the Anonymous AccessOpen a browser window, enter the anonymous URL and verify that the changes takeeffect.

    Figure02: Result page for Anonymous

    3.4 Additional InformationHere you find additional considerations about this scenario. The anonymous groupshould be treated as a normal user group within the portal. These examples give you anidea which considerations you have to perform to enable also a secure anonymousaccess.

  • 8/7/2019 How to Configure Anonymous Access to Knowledge Management (NW7.0)

    8/10

    - 6 -

    Permission Settings withinthe KM (ACL, Service ACL)

    Please note that you have to treatthe anonymous user group like anormal user group. This meansthat your permissions have to beset up correctly if some informationis restricted from being used fromthe anonymous users. Keep inmind that this group is alsoincluded to the Everyone group.

    In our example, we provide theAnonymous Group with read-permissions only

    Also notice that during a search-

    request also the ACLs arechecked!

    Figure03: Permissions for the Anonymous Group (inPublic Documents)

    Figure04: Group Everyone and Service Permissions Commands for Anonymous

    Group

    You have to consider about theservices you will provide to theanonymous -group. Although thegroup has only read permissions

    to a certain folder, the group isallowed to perform several actions.Therefore please refer to note837898 to find detailedinformation!

    Hint:

    In our example, we created a newLayout Set and we removed thehover-menu from being displayed,so that the anonymous groupdoes not see any commands.

    Figure05: Hover Menu enabled (withoutconfiguration of the Layout Set)

    Figure06: Hover Menu disabled (Layout Setmodified)

  • 8/7/2019 How to Configure Anonymous Access to Knowledge Management (NW7.0)

    9/10

    - 7 -

    Search and Search-Result-List

    To restrict the Anonymous Groupto search in an extended way, wehave to exclude some searchoptions. (e.g. restrict the group toa certain index or remove theAdvanced Options)

    This can be done within theSearch Option Set.

    The Rendering Information of theSearch Result List can bemaintained within a Layout Set.

    Both sets will be assigned to thebasicsearch iView. Figure07: Basicsearch-iView with modified Search

    Option Set and Layout Set

  • 8/7/2019 How to Configure Anonymous Access to Knowledge Management (NW7.0)

    10/10

    www.sdn.sap.com/irj/sdn/howtoguides