Quantcast
Channel: SCN: Message List - SAP Identity Management
Viewing all 5016 articles
Browse latest View live

Re: How to stop/start dispatcher on Linux command line

$
0
0

Hello Fedya,

 

Problem with your solution is that you have to provide the command with a password, this can be solved by sourcing the password in a script, but this is not secure enough for us.

 

I have found the following solution for the automatic start/stop, which can be executed from the instance profile of the NW JAVA instance in which our IDM is running:

 

put this syntax in the bottom of your instance profile:

 

#-----------------------------------------------------------------------

# Start/stop IDM Dispatchers

#-----------------------------------------------------------------------

Execute_10 = local csh -c "$(DIR_INSTANCE)/IDM/identitycenter/Service-Scripts/start_dispatchers.sh"

Stop_Program_00 = local csh -c "$(DIR_INSTANCE)/IDM/identitycenter/Service-Scripts/stop_dispatchers.sh"

 

 

 

 

cat start_dispatchers.sh

 

#!/bin/sh

FILE=/usr/sap/XXX/JXX/IDM/identitycenter/Service-Scripts/dispatchers.txt

DIR1=/usr/sap/XXX/JXX/IDM/identitycenter/Service-Scripts

# Bepaal welke dispatchers er zijn gedefinieerd

cd $DIR1

rm $FILE

ls -l Dispatcher_Service_*.sh | awk '{print $9}' >> $FILE

# Start dispatchers

cat $FILE | while read regel

do

  sh ./$regel &

done

 

 

 

 

cat stop_dispatchers.sh

#!/bin/sh

 

 

ps -ef | grep Dispatcher_Service | grep .prop | awk '{print $2}' | while read regel; do kill -9 $regel; done


Date format to be dd/mm/yyyy

$
0
0

Hi Experts,

 

In IDM 7.2 UI user creation form date format for attribute Valid from and Valid To is mm/dd/yyyy and now client requires this in format  dd/mm/yyyy.

I checked these two attribute details in UI task but there is no option available to do the modification. As this is field where manual input is required could you please help me to find a solution.

Thank you

Ranjan

Re: Date format to be dd/mm/yyyy

$
0
0

Hello,

 

This is usually set by the user language in the UME and/or the regional settings of the pc itself.

I usually remove the language in the UME so that the local regional settings can do their work ;-)

 

UMEUserlanguage.jpg

RegionalSettings.jpg

 

Best regards,

 

Laurent

Re: Apply entrytype filter to Data Source in Virtual Directory Server (VDS)

Re: Apply entrytype filter to Data Source in Virtual Directory Server (VDS)

$
0
0

Hi Pat, I'm sure I have looked at it.  It's on my list to research for you.  Sorry for the delay!

 

Matt

Re: Date format to be dd/mm/yyyy

$
0
0

Thank you very much. I could not do this in UME but could set format on local system and worked fine.

Re: Date format to be dd/mm/yyyy

$
0
0

Cool

 

Don't forget to mark your post as answered

 

Cheers

Re: Apply entrytype filter to Data Source in Virtual Directory Server (VDS)

$
0
0

Pat,

 

I can't get this to work at all, and I'm pretty sure I've done it in the past.  I think your best bet at this point is to raise an OSS note, unless there's someone from the Development team lurking who knows more VDS than I do.

 

Matt


Integration of SAP Identity Management 8.0 - SAP HCM

$
0
0

I started to work in a SAP Identity Management Project. I want to integrate as primary source for identity information SAP HCM. Nowadays my client has SAP ECC 6.0 on SQL Server 2008 but  there are a migration plan SAP ECC on hana, so I wondering, if I start to work with the actual versión and then do a upgrade, is a good option?, I mean, What I should do to upgrade  IDM to the new SAP ECC ? If would be dificult? I am very novice in the topic, is the first time that used SAP Identity Management. I will appreciate your help.

 

Best Regards!

Re: Integration of SAP Identity Management 8.0 - SAP HCM

$
0
0

Hi there!

 

At the moment, I think your best bet  is to do a standard HCM connection. While we can do an initial load from HANA, I would agree with you in saying that we're not all the way there as far as supporting HANA supported applications.

 

I'm SAP and the Product Management team will let us know when there's new functionality and how to move over to new supported applications.

 

Hopefully there will be a CEI for this.

 

Matt

Re: Apply entrytype filter to Data Source in Virtual Directory Server (VDS)

$
0
0

Thanks for your time Matt.  I appreciate you having a look into it.

 

I'll ask around a bit more off-line and may well raise an incident with AGS.

Re: Apply entrytype filter to Data Source in Virtual Directory Server (VDS)

$
0
0

Pat,

 

Just be warned, not too many people are up on VDS these days, try to get directly to Developer level support.

 

I did make a little progress by changing the filter in the Database node. In the Default database prarameters section, I changed the Base filter to mx_entrytype=MX_PERSON.  All the entries still show up, but only MX_PERSON entries will show details.

 

My updated guess is that we would needs some sort of custom code to hide the other stuff.  If you're a Java programmer, see if you can find the old Virtual View class / configuration.  That might give you some leads.

 

Matt

Re: Apply entrytype filter to Data Source in Virtual Directory Server (VDS)

$
0
0

Hi Matt,

 

As always it was the one variation that I hadn't yet tried until documenting the steps for AGS.  The correct syntax was to enclose it in brackets without quotation marks on the value...

(mx_entrytype=MX_PERSON)

documentation.jpg

The documentation is close, but not quire right for the database in my circumstance.  For a data source of type database it did require the brackets, but didn't require the quotation marks.

 

This only shows the entries of type MX_PERSON as expected.

 

Thanks for your help.

 

Pat

Re: Integration of SAP Identity Management 8.0 - SAP HCM

$
0
0

Hi Canales,

the short answer is that ECC database is behind the interfaces and what is the database of ECC is transparent for IDM so the upgrade later to HANA db should also be transparent for IDM.

 

In more details

When HCM syncronizes with IDM it uses RPLDAP_EXTRACT_IDM and Business Add-In (BAdI) implementation for delta download. In the other direction BAdI Implementation BADI_IDM_HR_COMMUNICATION of BAdI definition BADI_EXTEND_IDENTITY is used to update employee data in the SAP ERP HCM system.

Roles are the PFCG ones.

Best wishes,

Fedya Toslev

Re: Apply entrytype filter to Data Source in Virtual Directory Server (VDS)

$
0
0

Pat,

 

Excellent! So glad they were able to help you.  I think you should write it up as a Blog.  VDS knowledge is tough to come by, so it should be preserved whenever possible!  If you're not interested in writing it, I'll be happy to.

 

Matt


Active user id not searchable in basic search but searchable in advanced search

$
0
0

Hello All,

 

SAP IDM 7.2 SP8.

Database: DB2

 

Issue1:

I am struggling to find why active user id not searchable in basic search but searchable in advanced search.

See screenshots below.

1_1.JPG

1_2.JPG

 

Issue2:

When I try to remove privilege from this active user, I see the error given below. It seems that IDM understand that entry(user id) does not exist. I think this issue occurs due to Issue1 mentioned above.

"Unable to set value for attribute Member of Privilege. Detailed information (may not be translated): Entry does not exist"

1_3.JPG

 

Can you please help me to know why these issues occur and how to resolve them ?

 

Thank you.

 

Kind Regards,

Pradeep

Re: Active user id not searchable in basic search but searchable in advanced search

$
0
0

Would like to know if somebody has solution to this issue mentioned above.

Thank you.

Re: Active user id not searchable in basic search but searchable in advanced search

$
0
0

Hi Pradeep,

 

I have no solution but you are not alone. Even we (7.2 SP9, SQL Server) have users only searchable in advanced search option. Should this happen, I reset the mskey or delete the user and re-create. Never raised it with SAP yet but I suppose you should report to get to root cause.

 

Kind regards,

Jai

Re: Active user id not searchable in basic search but searchable in advanced search

$
0
0

Thank you Jai.

Unfortunately, I can not delete such users in our production IDM system because of audit/compliance process. So, I would need a fix for it.

I believe this is causing issue in removal of privileges from such users as I mentioned in my problem description in Issue2.


I also think I would need to raise SAP message to get the root cause.

 

@All: Anyone else in this forum has any solution for this ?

 

Thank you.

 

Kind Regards,

Pradeep

How to connect non sap custom system to SAP IDM 8?

$
0
0

Hi every one,

 

Weeks ago, I asked same topic to here and get many comments helpful.

But still I am not at the required point that I like to get your kind help more.

 

On my previous question, Matt showed us how to get it with detailed screen shots and description in his blog post.

http://scn.sap.com/community/idm/blog/2015/11/16/connecting-non-sap-applications-to-sap-idm-database-oriented

 

But his presentation was on IDM 7.2 and some part are not applicable in IDM 8.0 unfortunately.

Specific point of concern is how to make an Initial Load job.

If I look in his initial load job, there are 12 job passes and 20 scripts and many constants.

Matt made it using job wizard using job template (AS Java (Database)- Initial Load).

Unfortunately I can't find any job templates in my environment.

 

Here,

- is there any way to use job template in 8.0 as like in 7.2?

- or should I make scripts and passes one by one?

 

And for the passes in Initial Load Job,

where can I get information of each passes like 'create account attributes' or 'Prepare MX_REPOSITORYNAME Arrtibute', etc.

What it does and how to make, etc.

 

Saying my situation,

I am preparing a POC for a current SAP customer which will get employee data from HCM and provision to SAP ERP and custom systems.

But in this country, there was no SAP IDM reference so far that no one have experience for SAP IDM at all.

This is very beginning in this country.

So I need your help indeed.

 

Any advice will be appreciated.

 

Best regards,

dongsu

Viewing all 5016 articles
Browse latest View live