Chatta subito con l'assistenza
Chat con il supporto

Identity Manager 8.2.1 - Administration Guide for SAP R/3 Structural Profiles Add-on

Managing personnel planning data and structural profiles Setting up SAP HCM system synchronization Managing structural profiles Mapping personnel planning data Configuration parameters for the SAP R/3 Structural Profiles Add-on Module Default project template for the SAP R/3 Structural Profiles Add-on Module Referenced SAP R/3 tables and BAPI calls

Setting up a synchronization project for synchronizing additional personnel planning data

You can import typically required personnel planning data into the One Identity Manager database using the initial synchronization project for personnel planning. This includes general employee main data, communications data, departments, and their managers. For more information, see Project template for synchronizing personnel planning data.

The SAP HCM system has other personnel planning data available. To import these, create a new synchronization project and configure mapping for the additional data. You can use predefined schema types to do this.

Prerequisite
  • Synchronization for SAP R/3 base administration is set up.

To set up a synchronization project for additional personnel planning data

  1. Set up an initial synchronization project as described in the One Identity Manager Administration Guide for Connecting to SAP R/3. The following special features apply:
    1. On the SAP HCM settings page in the system connection wizard, state whether you want to configure any additional settings. Set the Show expert settings option to do this.
    2. If you have set the Show expert settings option, select the address type to import on the SAP HCM Settings page.

      If the option is not set, the page is not shown. The address type 1 (Permanent residence address) is imported by default.

    3. On the SAP connector schema page, click Next.

      TIP: You can enter a file with additional schema types on this page. The connector schema is extended by these custom schema types. You can also enter this data after saving the synchronization project. For detailed information, see the One Identity Manager Administration Guide for Connecting to SAP R/3.
    4. On the Select project template page in the project wizard, select the "SAP HCM Employees and Departments” project template.
    5. The Restrict target system access page is not displayed. The target system is only loaded.
    6. On the last page of the project wizard, disable the Activate and save the new synchronization project automatically option.
    7. To close the project wizard, click Finish.

      This creates and allocates a default schedule for regular synchronization. The synchronization project is created.

  2. Create mappings for the additional schema types in the Synchronization Editor.
    Table 6: Properties of a Mapping
    Properties Meaning
    Mapping name Display name for the mapping.

    Mapping name is used as key. It cannot be changed after saving.

    Mapping direction Mapping direction permitted for all property mapping rules. Select "in direction of One Identity Manager"
    Description Text field for additional explanation.
    Hierarchy synchronization

    Specifies whether the mapping is part of the hierarchy. This option is important for optimizing synchronization.

    Only suitable for updates Specifies whether schema class objects are never added during synchronization but only updated or deleted.
    Schema class in One Identity Manager

    One Identity Manager schema class valid for this mapping. Displays all schema classes with a configured mapping, in the menu.

    • Click to edit schema class properties.

    Create a new schema class to set up a mapping for another schema type.

    • Click to create a new schema class.

    Schema class in the target system Target system schema class valid for this mapping. In the menu, all the schema classes with a configured mapping are displayed.

    Click and create a new schema class for a schema type.

    TIP: If you require schema types that cannot be selected here, add your own.

    For information about setting up mappings and schema classes, see the One Identity Manager Target System Synchronization Reference Guide.

  3. In the Synchronization Editor, edit the "Initial synchronization" workflow. Create additional synchronization steps for the new mappings.
    1. In the Synchronization direction input field, select "In direction of One Identity Manager".

    For detailed information about creating synchronization steps, see the One Identity Manager Target System Synchronization Reference Guide.

  4. Save the synchronization project in the database.
  5. If you required schema types that cannot be selected when you add a mapping, add your own schema types. For detailed information, see the One Identity Manager Administration Guide for Connecting to SAP R/3.

  6. Run a consistency check.

  7. Activate the synchronization project.

To synchronize on a regular basis

  1. In the Synchronization Editor, open the synchronization project.

  2. Select the Configuration > Start up configurations category.

  3. Select a start up configuration in the document view and click Edit schedule.

  4. Edit the schedule properties.

  5. To enable the schedule, click Activate.

  6. Click OK.

To start initial synchronization manually

  1. In the Synchronization Editor, open the synchronization project.

  2. Select the Configuration > Start up configurations category.

  3. Select a start up configuration in the document view and click Run.

  4. Confirm the security prompt with Yes.
Detailed information about this topic
  • One Identity Manager Target System Synchronization Reference Guide
Related topics

For more information about setting up synchronization server, see the One Identity Manager Administration Guide for Connecting to SAP R/3.

Restricting synchronization scope

The definition of a scope in the synchronization project allows you to limit the objects for synchronization. In order to synchronize only departments from the organization structure, you create a hierarchy filter for the target system connection. The hierarchy filter limits the scope to specific objects.

To create a hierarchy filter

  1. In the Synchronization Editor, open the synchronization project.

  2. Select the Configuration > Target system category.
  3. Select the Scope view and click Edit scope.

    The hierarchy filter is displayed on the right-hand side of the scope view.

  4. Mark all the departments to be included in the scope in the hierarchy.
  5. Save the changes.

If the synchronization scope is limited to specific departments, only employees that are members of the selected department are synchronized. Therefore, expand the synchronization configuration to synchronize all employees. An extra schema class is supplied to do this. Add a mapping and synchronization step for this schema class.

The hierarchy filter does not affect the "HREmployee_Unfiltered (all)" schema class. This means that all employees are synchronized by the new synchronization step, even if the scope is limited to specified departments.

To synchronize employees if the scope is limited to specified departments

  1. In the Synchronization Editor, open the synchronization project.

  2. Update the target system schema.

    For more information, see To update the target system schema.

  3. Create a mapping for the "HREmployee_Unfiltered" schema type.

    For more information, see To create a mapping.

  4. Add a synchronization step in the synchronization workflow, which uses this map.

    For more information, see To customize the synchronization workflow.

  5. Run a consistency check.

  6. Activate the synchronization project.

  7. Save the changes.

To update the target system schema

  1. Select the Configuration > Target system category.
  2. Select the General view and click Update schema.
  3. Confirm the security prompt with Yes.

    This reloads the schema data. This makes all unused schema data available.

To create a mapping

  1. Select the Mappings category.
  2. Click in the navigation view.
  3. Enter the general properties of a mapping and select the required schema classes.
    Table 7: Schema classes
    Property Description
    Schema class in One Identity Manager Employee (all)
    Schema class in the target system HREmployee_Unfiltered (all)
  4. Click OK.

    This starts the mapping wizard.

  5. On the Select task page, select Create mapping rules based on template.
  6. On the Select source mapping page, select Employee.
  7. On the Analysis result page, the property mapping rules that the wizard is going to add are displayed. Check the list and disable the rule you do not want to be added.
  8. On the last page of the wizard, click Finish.

    This opens the Mapping Editor. Check the property mapping rules and the object matching rules that have been created.

To customize the synchronization workflow

  1. Select the Workflows category.
  2. Select the synchronization workflow in the navigation view (by default "Initial Synchronization").
  3. In the workflow view, click .
  4. Enter the synchronization step properties. In the Mapping field, select the new map.
    TIP: Take the rest of the properties (processing methods, quotas, rules) from the properties of the synchronization step "Employee".
  5. Click OK.
  6. In the workflow view, double-click on "Employee".
  7. Select the General tab and set Disabled.
  8. Click OK.

For more information about the topics described here, see the One Identity Manager Target System Synchronization Reference Guide.

Managing employees and departments

After you have imported employees and departments into the One Identity Manager database, you can continue editing their properties. You can also enter additional properties (for example, language, or employee's primary location). Employees can be added to business roles, organizations, or as customers to the IT Shop. In this way, employees can be supplied with the required company resource through One Identity Manager and taken into account in the Identity Audit.

NOTE: If you want to synchronize personnel planning data regularly with the One Identity Manager database, object properties written by synchronization must not be edited in One Identity Manager. Otherwise the changes are overwritten by synchronization.

In One Identity Manager, employees and departments with the data source import "SAP R/3" cannot be deleted.

To display employees who arise from importing personnel planning data

  • In the Manager, select Employees > Data source > SAP R/3.

To display departments which arise from importing personnel planning data

  • In the Manager, select Organizations > Departments > Data source > SAP R/3.

Communication data display

It is possible to add communication data to SAP HCM systems, such as telephone numbers and employee email addresses, You can import communication data into the One Identity Manager database by synchronizing personnel planning data or you can enter it in the Manager.

To display imported communication data

  1. Select the category Employees > Data source > SAP R/3.
  2. Select an employee in the result list.
  3. Select the task Display SAP communication data.

    You will see all the communication data assigned to the employee with its respective validity period.

To enter the employee's communication data

  1. Click Add.

    This inserts a new row in the table.

  2. Edit the communication data properties.
  3. Save the changes.

To edit communication data

  1. Select the entry you want to edit in the table.
  2. Edit the communication data properties.
  3. Save the changes.

To delete the employee's communication data

  1. Select the entry you want to delete in the table.
  2. Click Delete.
  3. Save the changes.
Related Documents

The document was helpful.

Seleziona valutazione

I easily found the information I needed.

Seleziona valutazione