Show TOC

Testing Remote Role Assignment IntegrityLocate this document in the navigation structure


  • You are authorized to access the portal role containing the Federated Portal workset.

  • A system administrator has created an FPN connection that pairs your system with a remote system.

  • You have at least administrator read permission for the FPN connection. For more information, see Assigning Administrator Permissions to FPN Connections .

  • You have defined the HTTP/ HTTPS properties of the remote producer in the producer object. This configuration is needed for the SOAP validation.

  • You have successfully tested the connection to the remote producer using the Access to Remote System test (see Testing FPN Connections ).

  • If you want the Remote Role Assignment test to check the trust configuration between your portal and the remote producer portal, then you need to enter the RMI-P4 hostname and port of the remote producer portal in the FPN connection.

    If you decide not to enter the RMI-P4 communication settings, the trust check will be skipped. Alternatively, you can use the Single Sign-On wizard in SAP NetWeaver Administrator to verify the trust between your portal and the remote system.


Content usage mode: remote role assignment

Applies to: consumers


The functionality described in this topic does not apply to an SAP NetWeaver Composition Environment system without usage type EP Core - Application Portal (EPC).

You can use the Configuration of Remote Role Assignment test to check the readiness and integrity of the remote role assignment (RRA) configuration on your consumer portal. You can use the test before the user administrator assigns users and groups to remote roles on a producer portal or if you experience problems at runtime or design time. You must run the test separately for each remote producer portal that you want to work with.

The test checks various aspects of RRA-related configuration and functionality. For example, it:

  • Checks the locally defined HTTP/ HTTPS properties that reference the remote producer portal

  • Checks the registration of the local consumer with the remote producer

  • Compares the proxy service properties with Java Virtual Machine (JVM) system properties

  • Validates the trust configuration between the local consumer and the remote producer

  • Validates the SOAP configuration

  • Simulates the assignment of local user to a remote role


    You can use the default eu_role role as a test role, or any other out-of-the-box or custom role that exists on the remote system.


  1. In the portal, navigate to Start of the navigation path System Administration Next navigation step Federated Portal Next navigation step SAP NetWeaver - FPN Connections Next navigation step Manage My FPN Connections End of the navigation path.

    The My FPN Connections tab appears.

  2. In the My FPN Connections table, select an FPN connection.

  3. Choose Start of the navigation path Run Tests Next navigation step Configuration of Remote Role Assignment End of the navigation path. The Configuration Settings of Remote FPN Tests dialog box appears.

  4. In the Remote Administrator for Portal Logon area, enter the logon credentials of an administrator on the remote producer portal.

  5. In the Remote Role for Testing Role Assignments area, enter the ID of any remote role that you want to test. If you do not want to test the user assignment to a custom role, you can use the default eu_role role. Note that the assigned test user is removed after the test has completed.

  6. Choose Run Tests .

    The results of the test appear in a pop-in area below the selected FPN connection.


    If one of the checks in the test fails, then the remaining checks are not executed.