立即与支持人员聊天
与支持团队交流

Identity Manager 9.2 - Administration Guide for SAP R/3 Structural Profiles Add-on

Managing personnel planning data and structural profiles Setting up SAP HCM system synchronization Managing structural profiles Mapping personnel planning data Configuration parameters for the SAP R/3 Structural Profiles Add-on Module Default project template for the SAP R/3 Structural Profiles Add-on Module Referenced SAP R/3 tables and BAPI calls

Setting up a synchronization project for synchronizing additional personnel planning data

You can import typically required personnel planning data into the One Identity Manager database using the initial synchronization project for personnel planning. This includes general the main data of HCM employees, communications data, departments, and their managers. For more information, see Project template for synchronizing personnel planning data.

The SAP HCM system has other personnel planning data available. To import these, create a new synchronization project and configure mapping for the additional data. You can use predefined schema types to do this.

Prerequisite
  • Synchronization for SAP R/3 base administration is set up.

To set up a synchronization project for additional personnel planning data

  1. Set up an initial synchronization project as described in the One Identity Manager Administration Guide for Connecting to SAP R/3. The following special features apply:

    1. On the SAP HCM settings page in the system connection wizard, state whether you want to configure any additional settings. Set the Show expert settings option to do this.

    2. If you have set the Show expert settings option, select the address type to import on the SAP HCM Settings page.

      If the option is not set, the page is not shown. The address type 1 (Permanent residence address) is imported by default.

    3. Click Next on SAP connector schema.

      TIP: You can enter a file with additional schema types on this page. The connector schema is extended by these custom schema types. You can also enter this data after saving the synchronization project. For more information about this, see the One Identity Manager Administration Guide for Connecting to SAP R/3.

    4. On the Select project template page in the project wizard, select the SAP HCM Employees and Departments project template.

    5. The Restrict target system access page is not displayed. The target system is only loaded.

    6. Disable the Activate and save the new synchronization project automatically option on the last page of the project wizard.

    7. To close the project wizard, click Finish.

      This creates and allocates a default schedule for regular synchronization. The synchronization project is created.

  2. Create mappings for the additional schema types in the Synchronization Editor.

    Table 6: Properties of a mapping

    Properties

    Meaning

    Mapping name

    Display name for the mapping.

    Mapping name is used as key. It cannot be changed after saving.

    Mapping direction

    Mapping direction permitted for all property mapping rules. Select in direction of One Identity Manager.

    Description

    Text field for additional explanation.

    Hierarchy synchronization

    Specifies whether the mapping is part of the hierarchy. This option is important for optimizing synchronization.

    Only suitable for updates

    Specifies whether schema class objects are never added during synchronization but only updated or deleted.

    Schema class in One Identity Manager

    One Identity Manager schema class valid for this mapping. Displays all schema classes with a configured mapping, in the menu.

    • Click to edit schema class properties.

    Create a new schema class to set up a mapping for another schema type.

    • Click to create a new schema class.

    Schema class in the target system

    Target system schema class valid for this mapping. In the menu, all the schema classes with a configured mapping are displayed.

    • Click and create a new schema class for a schema type.

    TIP: If you require schema types that cannot be selected here, add your own.

    For more information about setting up mappings and schema classes, see the One Identity Manager Target System Synchronization Reference Guide.

  3. In the Synchronization Editor, edit the Initial synchronization workflow. Create additional synchronization steps for the new mappings.

    • In the Synchronization direction field, select In direction of One Identity Manager.

    For more information about setting up synchronization steps, see the One Identity Manager Target System Synchronization Reference Guide.

  4. Save the synchronization project in the database.

  5. If you required schema types that cannot be selected when you add a mapping, add your own schema types. For more information about this, see the One Identity Manager Administration Guide for Connecting to SAP R/3.

  6. Run a consistency check.

  7. Activate the synchronization project.

To synchronize on a regular basis

  1. In the Synchronization Editor, open the synchronization project.

  2. Select the Configuration > Start up configurations category.

  3. Select a start up configuration in the document view and click Edit schedule.

  4. Edit the schedule properties.

  5. To enable the schedule, click Activate.

  6. Click OK.

To start initial synchronization manually

  1. In the Synchronization Editor, open the synchronization project.

  2. Select the Configuration > Start up configurations category.

  3. Select a start up configuration in the document view and click Run.

  4. Confirm the security prompt with Yes.

For more information about setting up synchronization projects, see the One Identity Manager Target System Synchronization Reference Guide. For more information about setting up the synchronization server, see the One Identity Manager Administration Guide for Connecting to SAP R/3.

Related topics

Restricting synchronization scope

The definition of a scope in the synchronization project allows you to limit the objects for synchronization. In order to synchronize only departments from the organization structure, you create a hierarchy filter for the target system connection. The hierarchy filter limits the scope to specific objects.

To create a hierarchy filter

  1. In the Synchronization Editor, open the synchronization project.

  2. Select the Configuration > Target system category.
  3. Select the Scope view and click Edit scope.

    The hierarchy filter is displayed on the right-hand side of the scope view.

  4. Mark all the departments to be included in the scope in the hierarchy.
  5. Save the changes.

If the synchronization scope is limited to specific departments, only HCM employees that are members of the selected department are synchronized. Expand the synchronization configuration to synchronize all HCM employees anyway. An additional schema class, HREmployee_Unfiltered (all), is provided for this purpose. Add a mapping and synchronization step for this schema class. The hierarchy filter does not affect the HREmployee_Unfiltered (all) schema class. This means that all HCM employees are synchronized by the new synchronization step, even if the scope is limited to specified departments.

To synchronize HCM employees if the scope is limited to specified departments

  1. In the Synchronization Editor, open the synchronization project.

  2. Update the target system schema.

    ClosedUpdate target system schema

  3. Create a mapping for the HREmployee_Unfiltered schema type.

    ClosedCreating mappings

  4. Add a synchronization step in the synchronization workflow, which uses this map.

    ClosedCustomize synchronization workflow

  5. Run a consistency check.

  6. Activate the synchronization project.

  7. Save the changes.

For more information about the topics described here, see the One Identity Manager Target System Synchronization Reference Guide.

Related topics

Managing HCM employees and departments

After you have imported HCM employees and departments into the One Identity Manager database, you can continue editing their properties. You can also enter additional properties (for example, language, or the primary location).

HCM employees are mapped as identities in One Identity Manager. They can be added to business roles, organizations, or as customers to the IT Shop, just like every identity. In this way, HCM employees can be supplied with the required company resource through One Identity Manager and taken into account in the Identity Audit.

NOTE: If you want to synchronize personnel planning data regularly with the One Identity Manager database, object properties written by synchronization must not be edited in One Identity Manager. Otherwise the changes are overwritten by synchronization.

In One Identity Manager, identities and departments with the data source import SAP R/3 cannot be deleted.

To display identities that arise from importing personnel planning data

  • In the Manager, select Identities > Data source > SAP R/3.

To display departments which arise from importing personnel planning data

  • In the Manager, select Organizations > Departments > Data source > SAP R/3.

Related topics

Communication data display

It is possible to add communication data to SAP HCM systems, such as telephone numbers and email addresses of HCM employees with a validity period, You can import communication data into the One Identity Manager database by synchronizing personnel planning data or you can enter it in the Manager.

To display imported communication data

  1. Select the Identities | Data source | SAP R/3 category.

  2. Select an identity in the result list.

  3. Select the Display SAP communication data task.

    You will see all the communication data assigned to the identity with its respective validity period.

To enter the identity's communication data

  1. On the form for SAP communication data, click Add.

    This inserts a new row in the table.

  2. Edit the communication data properties.

  3. Save the changes.

To edit communication data

  1. On the form for SAP communication data, select the table you want to edit.

  2. Edit the communication data properties.

  3. Save the changes.

To delete the identity's communication data

  1. On the form for SAP communication data, select the table you want to delete.

  2. Click Delete.

  3. Save the changes.
Related topics
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级