Chat now with support
Chat with Support

Identity Manager 8.0 - Administration Guide for SAP R/3 Structural Profiles Add-on

Restricting Synchronization Scope

Restricting Synchronization Scope

The definition of a scope in the synchronization project allows you to limit the objects for synchronization. In order to synchronize only departments from the organization structure, you create a hierarchy filter for the target system connection. The hierarchy filter limits the scope to specific objects.

To create a hierarchy filter

  1. Open the synchronization project in the Synchronization Editor.

  2. Select the category Configuration | Target systems.
  3. Select the Scope view and click Edit scope.

    The hierarchy filter is displayed on the right-hand side of the scope view.

  4. Mark all the departments to be included in the scope in the hierarchy.
  5. Save the changes.

If the synchronization scope is limited to specific departments, only employees that are members of the selected department are synchronized. Therefore, expand the synchronization configuration to synchronize all employees. An extra schema class is supplied to do this. Add a mapping and synchronization step for this schema class.

The hierarchy filter does not effect the schema class "HREmployee_Unfiltered (all)". This means that all employees are synchronized by the new synchronization step, even if the scope is limited to specified departments.

To synchronize employees if the scope is limited to specified departments

  1. Open the synchronization project in the Synchronization Editor.

  2. Update the target system schema.

    For more information, see To update the target system schema.

  3. Create a mapping for the schema type "HREmployee_Unfiltered".

    For more information, see To create a mapping.

  4. Add a synchronization step in the synchronization workflow, which uses this map.

    For more information, see To customize the synchronization workflow.

  5. Run a consistency check.

  6. Activate the synchronization project.

  7. Save the changes.

To update the target system schema

  1. Select the category Configuration | Target systems.
  2. Select the view General and click Update schema.
  3. Confirm the security prompt with Yes.

    This reloads the schema data, making all unused schema data available.

To create a mapping

  1. Select the category Mappings.
  2. Click in the navigation view.
  3. Enter the general properties of a mapping and select the required schema classes.
    Table 7: Schema Classes
    Property Description
    Schema class in One Identity Manager Person (all)
    Schema class in the target system HREmployee_Unfiltered (all)
  4. Click OK.

    This starts the mapping wizard.

  5. Select Create mapping rules based on template on the page Select task.
  6. Select Employee on the Select source mapping page.
  7. The property mapping rules are displayed on the Analysis result page added by the wizard. Check the list and disable the rule you do not want to be added.
  8. Click Finish on the last page of the mapping wizard.

    This opens the Mapping Editor for the new map. Check the property mapping rules and the object matching rules that have been created.

To customize the synchronization workflow

  1. Select the category Workflows.
  2. Select the synchronization workflow in the navigation view (by default "Initial Synchronization").
  3. Click in the workflow view.
  4. Enter the synchronization step properties. Select the new map in the Mapping menu.

    TIP: Take the rest of the properties (processing methods, quotas, rules) from the properties of the synchronization step "Employee".
  5. Click OK.
  6. Double-click on the synchronization step "Employee" in the workflow view.
  7. Select the tab General and set Disabled.
  8. Click OK.

For more detailed information about the topics described here, see the One Identity Manager Target System Synchronization Reference Guide.

Managing Employees and Departments

After you have imported employees and departments into the One Identity Manager database, you can continue editing their properties. You can also enter additional properties (for example, language or employee's primary location). Employees can be added to business roles, organizations or as customers to the IT Shop. In this way, employees can be supplied with the required company resource through One Identity Manager and taken into account in the Identity Audit.

NOTE: If you want to synchronize personnel planning data regularly with the One Identity Manager database, object properties written by synchronization, must not be edited in One Identity Manager. Otherwise the changes are overwritten by synchronization.

Employees and departments with the data source import "SAP R/3" cannot be deleted in One Identity Manager.

To display employees who arise from importing personnel planning data

  • Select the category Employees | Data source | SAP R/3 in the Manager.

To display departments which arise from importing personnel planning data

  • Select the category Organizations | Departments | Data source | in the ManagerSAP R/3

Displaying Communication Data

Displaying Communication Data

It is possible to add communication data to SAP HCM systems, such as telephone numbers and employee email addresses, You can import communication data into the One Identity Manager database by synchronizing personnel planning data or you can enter it in the Manager.

To display imported communication data

  1. Select the category Employees | Data source | SAP R/3.
  2. Select an employee in the result list.
  3. Select the task Display SAP communication data.

    You will see all the communication data assigned to the employee with its respective validity period.

To enter the employee's communication data

  1. Click Add.

    This inserts a new row in the table.

  2. Edit the communication data properties.
  3. Save the changes.

To edit communication data

  1. Select the entry you want to edit in the table.
  2. Edit the communication data properties.
  3. Save the changes.

To delete the employee's communication data

  1. Select the entry you want to delete in the table.
  2. Click Remove.
  3. Save the changes.

Appendix: Configuration Parameters for the SAP R/3 Structural Profiles Add-on Module

Appendix: Configuration Parameters for the SAP R/3 Structural Profiles Add-on Module

The following configuration parameters are additionally available in One Identity Manager after the module has been installed.

Table 8: Configuration Parameters for the Module
Configuration parameter Description
TargetSystem\SAPR3\HRProfile Preprocessor relevant configuration parameter for controlling module components for managing structural profiles in SAP R/3. Changes to the parameter require recompiling the database.

If this parameter is set you can manage personnel planning data and structural profiles with One Identity Manager.

Related Documents