Chat now with support

Get Live Help
Complete Registration

Sign In

Request Pricing

Contact Sales

Identity Manager 8.1.4 - Administration Guide for Connecting to SAP R/3

Table of Contents

Managing SAP R/3 environments

Architecture overview One Identity Manager users for managing SAP R/3

Setting up SAP R/3 synchronization

Users and permissions for synchronizing with SAP R/3 Installing the One Identity Manager Business Application Programing Interface

Uninstalling BAPI transports

Setting up the synchronization server Creating a synchronization project for initial synchronization of an SAP client Special features of synchronizing with a CUA central system

Excluding a child system from synchronization

Displaying synchronization results Customizing the synchronization configuration

How to configure SAP R/3 synchronization Configuring synchronization of different clients Updating schemas Adding other schema types Creating a schema extension file

Defining tables Defining functions Defining schema types

Speeding up synchronization with revision filtering Synchronizing composite roles Restricting synchronization objects using user permissions Post-processing outstanding objects Configuring the provisioning of memberships Accelerating provisioning and single object synchronization Help for the analysis of synchronization issues Disabling synchronization

Basic data for managing an SAP R/3 environment

Setting up account definitions

Creating an account definition

Master data for an account definition

Creating manage levels

Master data for manage levels

Creating a formatting rule for IT operating data Collecting IT operating data Modify IT operating data Assigning account definitions to employees

Assigning account definitions to departments, cost centers, and locations Assigning an account definition to business roles Assigning account definitions to all employees Assigning account definitions directly to employees Assigning account definitions to system roles Adding account definitions in the IT Shop

Assigning account definitions to a target system Deleting an account definition

Editing a server

Master data for a Job server Specifying server functions

Target system managers

Basic data for user account administration

User account types External identifier types SAP parameters

Displaying master data for SAP parameters General master data for SAP parameters Assigning SAP parameters to departments, cost centers, and locations Assigning SAP parameters to business roles Editing parameter values for indirect SAP parameter assignment Inheritance of parameter values by SAP user accounts

Printers Cost centers Start menus Companies Login languages Security policies Communication types Licenses Special versions Password policies for SAP user accounts

Predefined password policies Using password policies Editing password policies

General master data for password policies Policy settings Character classes for passwords

Custom scripts for password requirements

Script for checking passwords Script for generating a password

Password exclusion list Checking a password Testing password generation

Initial password for new SAP user accounts Email notifications about login data

SAP systems SAP clients

General master data for SAP clients Specifying categories for inheriting SAP groups, SAP roles, and SAP profiles How to edit a synchronization project

SAP user accounts

Linking user accounts to employees Supported user account types Central user administration in One Identity Manager Entering master data for SAP user accounts

General master data of an SAP user account SAP user account login data Phone numbers Fax numbers Email addresses Fixed values for an SAP user account Measurement data SNC data for an SAP user account

Directly assigning SAP parameters Additional tasks for managing SAP user accounts

Overview of SAP user accounts Changing the manage level of SAP user accounts Assigning SAP groups and SAP profiles directly to an SAP user account Assigning SAP roles directly to an SAP user account Assigning structural profiles Granting access to clients of a central user administration Assigning SAP licenses Locking and unlocking SAP user accounts Assigning extended properties Renaming SAP user accounts

Automatic assignment of employees to SAP user accounts

Editing search criteria for automatic employee assignment

Automatically creating departments based on SAP user account information Locking SAP user accounts Deleting and restoring SAP user accounts Entering external user identifiers for an SAP user account

SAP groups, SAP roles, and SAP profiles

Editing master data for SAP groups, SAP roles, and SAP profiles

General master data for SAP groups General master data for SAP roles General master data for SAP profiles

Assigning SAP groups, SAP roles, and SAP profiles to SAP user accounts

Assigning SAP groups, SAP roles, and SAP profiles to organizations Assigning SAP groups, SAP roles, and SAP profiles to business roles Assigning SAP user accounts directly to SAP groups and SAP profiles Assigning SAP user accounts directly to SAP roles Adding SAP groups, SAP roles, and SAP profiles to system roles Adding SAP groups, SAP roles, and SAP profiles to the IT Shop Assignment and inheritance of SAP profiles and SAP roles to SAP user accounts

Additional tasks for managing SAP groups, SAP roles, and SAP profiles

Overview of SAP groups, SAP roles, and SAP profiles Effectiveness of SAP groups, SAP roles, and SAP profiles SAP group, SAP role, and SAP profile inheritance based on categories Assigning extended properties to SAP groups, SAP roles, and SAP profiles Showing SAP authorizations

Validity period of role assignments

Assigning the validity period of direct role assignments Configuring the validity period of indirect role assignments Determining the validity period of indirect role assignments

General master data for SAP products Assigning SAP products to employees

Assigning SAP products to organizations Assigning SAP products to business roles Assigning SAP products directly to employees Adding SAP products to system roles Adding SAP products to the IT Shop

Additional tasks for managing SAP products

Overview of SAP products Assigning SAP groups, SAP roles, and SAP profiles to an SAP product Assigning account definitions to SAP products Assigning subscribable reports to SAP products Assigning extended properties to SAP products Editing conflicting system roles

Providing system measurement data

Mapping the measurement data Entering licenses for SAP user accounts Finding licenses using SAP roles and SAP profiles

Determining an SAP user account rating Transferring calculated licenses Disabling license calculation

Reports about SAP systems

Overview of all assignments

Configuration parameters for managing an SAP R/3 environment Default project templates for synchronizing an SAP R/3 environment

Project template for client without CUA Project template for the CUA central system Project template for CUA subsystems

Referenced SAP R/3 table and BAPI calls Example of a schema extension file

Companies

To display a company

Select the SAP R/3 | Companies category.
Select the company in the result list.

The company's properties, assigned client and assigned user accounts are displayed on the overview form.

Login languages

To display a login language

Select the SAP R/3 | Basic configuration data | Login languages category.
Select the login language in the result list.

The login language's properties, the associated SAP system and assigned user accounts are displayed on the overview form.

Security policies

You can load security policies into the One Identity Manager database using synchronization and assign then to a user account.

To display security policies

Select the SAP R/3 | Security policies category.
Select the security policy in the result list. Select the Change master data task.

Valid security policy attributes, the assigned client, and user account accounts are displayed on the overview form.

Communication types

Communication types can be loaded into the One Identity Manager database by synchronization and assigned to user accounts.

To display communication types

Select the SAP R/3 | Communication types category.
Select the communication type from the result list.

The assign user accounts are shown on the overview form.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating

© ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center