Symptom
You have set the integration between SAP Jam and Sharepoint 2013 and when checking connection you receive the following message:
“Saved with Errors. You cannot currently access "Example-SharePoint". Please contact your system administrator about your permissions.”
Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.
Environment
SAP Jam Collaboration
Reproducing the Issue
- Go to SAP Jam
- As Company Admin go to Admin console
- Go to Integrations
- Click on External Applications
- Add Application
- Select Microsoft Sharepoint 2013
- Fill in the fields and Save
- Click on Action
- Then click on Check Connection
- You will face the following message:
- “Saved with Errors. You cannot currently access "Example-SharePoint". Please contact your system administrator about your permissions.”
Resolution
Extending the existing SharePoint Application to enable Basic Authentication
In order to enable Basic Authentication for the SAP Jam integration user while keeping NTLM as the default authentication mechanism for end-users, go back to the SharePoint Central Administration console, click on "Manage web applications", select the site, and click on the "Extend" button.
By extending the existing web application, you can select a separate port specific for SAP Jam to access SharePoint. Ensure that Basic Authentication is selected. SAP highly recommends selecting the Secure Sockets Layer (SSL) configuration for Basic authentication.
At the bottom of the form, you will also select the name of the "zone" and the public URL for this site. This URL is the URL which SAP Jam will use to connect to your SharePoint server, and should be accessible from the Internet, as is the case with a reverse proxy. For additional security, you should configure the reverse proxy to only accept incoming connections from the specific Jam site which you are subscribed to. Because the extended SharePoint application site will be running on a different network port than your main SharePoint site, it should be straightforward to isolate connections for only SAP Jam.
Change the External Application configuration in SAP Jam
At this point, you should be ready to reconfigure the SharePoint connection in the SAP Jam administration screen. You may need to add your sites SSL certificate to the Jam "External Applications Trusted Certificate Authorities" page. Change the Jam connection user name to the Basic authentication form of the username and change the Service Document URL to the new port number (or reverse proxy URL). (In the case of the example, it is now https://sp2013.sapjam.corp:8080/_vti_bin/cmis/rest?getTest). You should get a "Connection OK" message.
See Also
2811838 - Jam integration with SharePoint not validating "Site URL"
Keywords
integration, sharepoint, repository, microsoft , KBA , LOD-SF-JAM-SPT , Integration with Sharepoint , LOD-SF-JAM , SAP Jam , Problem