Permission Checks and Configuration of Remote Role Assignment

New

On the producer portal, a user administrator must assign the UME actions, Remote_Producer_Write_Access and Remote_Producer_Write_Access, to a role to which the pcd_service user is assigned. If such a role does not exist, the user administrator must create a role and then assign the pcd_service user to it.

This configuration is now mandatory; it ensures that a user administrator on the consumer portal can perform remote role assignments in the Identity Management tool.

In addition, when a user administrator deletes a role on a producer portal, the administrator performing the deletion should be assigned the Remote_Producer_Write_Access action (through the pcd_service user). This ensures that all remote role assignments to that role on the respective consumer portals are also automatically removed. Without the assigned UME action, the role assignments remain on the consumer portal after the source role is deleted on the producer portal, thus creating undesirable inconsistencies in the database.

More Information: Exposing Roles on the Producer for Remote Role Assignment Usage

Configuring HTTP-Based Producer-Consumer Communication with HTTPS-Based Client-Consumer Communication

New

Until now, the communication protocol used between a consumer portal and a producer portal had to be the same as the runtime communication protocol used between the portal client of business users and the consumer and producer portals.

Now, a system administrator can configure the communication protocol between a producer and consumer to work over HTTP, while end user clients access the consumer portal and producer portal over HTTPS.

To configure this setup, the system administrator must have access and authorization to work in the PCD Inspector tool.

More Information: Security Considerations

SSL Protocol Support Available in Remote Delta Link Usage Mode

New

The remote delta link usage mode now supports the SSL protocol. SSL support only applies to the encryption of transferred data; SSL-based authorizations are not currently supported.

Note that setting up SSL for remote delta link usage is optional. If you choose to do so, you need to perform the necessary configuration steps on the producer portal and the consumer portal.

More information: Setting Up SSL for Remote Delta Link Usage

Support for Producer Objects and Folders in the XML Content and Actions Tool

New

The XML Content and Actions export tool now supports producer objects and Portal Catalog folders (which contain producer objects).

Once you have created an XML script using the export tool, you can run the script on a different consumer portal to re-create the same producer objects or to update existing producer objects.

Note that after creating a producer object or updating an existing one, the import tool also makes an attempt to register the consumer portal with the corresponding producer portal.

More Information:

Additional Producer-Side Configuration Required for Exposing WSRP-Compliant iViews

New

Until now, it was sufficient for an administrator on a producer portal to set the required portal permissions to each iView to expose it as a WSRP application to remote administrators.

Now, for each iView that you want to expose as a WSRP application to an SAP NetWeaver or non-SAP consumer portal, a content administrator on the producer portal must set a new property, called Expose as WSRP Application, to Yes.

The new property is available by default to all iViews. The default value of this property is No, which means that by default no iViews are exposed to any consumer portal connecting via WSRP, regardless of any permission settings made to the iView.

More Information:

Support for WSRP Application Sharing Usage Mode in SAP NetWeaver Composition Environment

New

Portals running SAP NetWeaver Composition Environment now support the WSRP application sharing usage mode. You can use this content usage mode to expose certain WSRP-compliant applications from your CE producer portal to any non-SAP consumer portals that are WSRP-complaint.

More information (including supported application types):

Setting Up Trust Between Consumer and Producer Portals

Changed

A new Single-Sign-On (SSO) wizard is available in the SAP NetWeaver Administration tool. The wizard allows administrators to configure SSO authentication with SAP logon and assertion tickets. The Running Content in a Remote Portal documentation is now aligned with the functionality provided by the wizard.

As was done previously, a system administrator on the ticket-issuer system must still export a key certificate file using the Key Storage application in the SAP NetWeaver Administration tool and then transfer it to a system administrator on the ticket-issuer system. However, instead of using the Key Storage application in the ticket-accepting portal, the system administrator must now use the SSO wizard to import the key certificate file.

Furthermore, the manual configuration of authorization settings in the SAP NetWeaver Administration tool, which was once necessary on the ticket-accepting system following the ticket exchange, is no longer needed.

More Information: Setting Up Trust

Behavior of Integration Properties with Remote Delta Link Usage Mode

(Relevant to remote delta link usage only)

The value of an object property that is categorized as an integration property can in some cases be taken from the value that is stored on the consumer portal, and not from the remote producer portal. This means that if a content administrator updates the value of an integration property in a source object (iView, page, and role) on the producer portal, then any corresponding remote object on the consumer portal renders its content at runtime with the old value from the consumer portal.

Information about the instances when this takes place and a list of the known integration properties is now available in the documentation.

More information: 'Remote Delta Link' Mode