Testing Remote Role Assignment Integrity 

Applicable to: remote role assignment

Use

You can use the Remote Role Assignment test to check the readiness and integrity of the remote role assignment (RRA) configuration on your consumer portal. You can use the test before the user administrator assigns users and groups to remote roles on a producer portal or if you experience problems at runtime or design time. You must run the test separately for each remote producer portal that you want to work with.

The test checks various aspects of RRA-related configuration and functionality. For example, it:

●      Checks the locally defined HTTP/ HTTPS properties that reference the remote producer portal

●      Checks the registration of the local consumer with the remote producer

●      Compares the proxy service properties with Java Virtual Machine (JVM) system properties

●      Validates the trust configuration between the local consumer and the remote producer

●      Validates the SOAP configuration

●      Simulates the assignment of local user to a remote role

You can use the default eu_role role as a test role, or any other out-of-the-box or custom role that exists on the remote system.

Prerequisites

●      You have access to the federated portal administration tools in the standard System Admin role on your portal.

●      You have created a producer object that represents the remote system (see Adding Producers).

●      You have been assigned at least administrator read-write permission to the producer object.

The producer may inherit the permission assigned to its parent folder in the Portal Catalog. For example, the NetWeaver Content Producers folder.

●      If you want the Remote Role Assignment test to check the trust configuration between your portal and the remote producer portal, then you need to enter the RMI-P4 hostname and port of the remote producer portal in the producer object. Note that configuring the RMI-P4 communication settings are only mandatory for remote delta link usage.

If you decide not to enter the RMI-P4 communication settings, the trust check will be skipped. Alternatively, you can use the Single Sign-On wizard in SAP NetWeaver Administrator to verify the trust between your portal and the remote system.

●      You have successfully tested the connection to the remote producer using the Producer Connection test (see Testing the Connection to a Producer).

Procedure

...

       1.      In the consumer portal, launch the System Connection Tests tool as follows:

¡        If you are currently editing the producer object that represents the remote producer portal with which you want to test your RRA configuration, then from the Display dropdown list in the object editor toolbar, select Connection Tests.

¡        If you are not editing producer object, then do the following:

...

                                                  i.       Navigate to System Administration ® Federated Portal ® Myself as Content Consumer ® Manage My Producers.

                                                ii.       In the Portal Catalog, navigate to the producer object that represents the remote producer portal with which you want to test your RRA configuration.

                                               iii.       In the context menu of the producer object, choose Open ® Connection Tests in the context menu.

The System Connection Tests tool is displayed.

       2.      In the row of the Remote Role Assignment test, choose Configure test settings.

       3.      In the Configuration Settings of Remote Role Assignment Test window, enter the following:

○       The logon credentials of an administrator on the remote producer portal.

○       The ID of any remote role that you want to test. If you do not want to test the user assignment to a custom role, you can use the default eu_role role. Note that the assigned test user is removed after the test has completed.

       4.      Choose OK.

       5.      Select the checkbox of the Remote Role Assignment test.

       6.      Choose Test.

The details of the test and the results are displayed on the screen.

If one of the checks in the Remote Role Assignment test fail, then the remaining checks are not executed.