How do I completely Stop SAP IDM???

Hi everyone,
I started a large mass provisioning job to assign business roles to users to IDM. However, I discovered some major errors in my input. I need to stop the provisioning. Technically the "job" is already finished, so I cannot push stop there. The provisioning that the job started however, is still running. I have tried stopping the dispatcher, but as soon as I restart it, the provisioning continues as well. I need to know how to completely stop it, and have it NOT restart.
Thanks

Jai Suryan wrote:
1) If you know the repositories that you have provisioned, then you can scramble the connection string, i.e. remove the password from the repositories, so that all the tasks will run into error due to connectivity issue. This will leave you with failed assignments for the users. There are other posts in SCN suggesting how to work with this failed assignments.
It' probably better to screw up the repository connection parameters like Jaisuryan suggests and let the remaining tasks fail. With the IdM having either "Failed" or "OK" as status you know what went through and you can remove the assignments easier.
If you let it execute without the provisioning tasks set, all provisioning is marked as successful and you have no way of knowing which privileges were actually provisioned to target and which weren't. When you have "OK" status and user was created without real tasks, the deprovisioning will fail as the user is not found from target. Then you have to do deprovisioning first and have another job that removes the failed deprovisionings with the option that bypasses tasks.
regards, Tero

Similar Messages

How do I completely stop Windows 8 apps?

Hi ,
I'm having multiple apps running in the background (Windows 8 like) and then when I try to close them using the [X] in the Top Right corner, they keep showing as running in the Task Manager.
So, how do I really completely close an app so that it will not show up in the Task Manager? I can do Kill task from Task Manager, but I don't thing that's how Microsoft envisioned this to work.
Thanks,
Alex

Hello there,
You can close a running app by pressing "Alt + F4" keys together. Or you can move your mouse cursor to top-middle area of screen and the cursor will change into a hand shape. Now click and hold the app, then drag and drop it to the bottom and
it'll immediately close the app.
Hope this helps!

How to Start and Stop the SAP System

Hi,
I have installed "Sneak Preview"; Searched for start and stop scripts but there are more than one script which has named start.bat and stop.bat. Moreover, I searched the documents which comes with Sneak Preview but could find useful instruction there either.
Question: Could you please point me to the documentation where it explains the starting and stopping SAP, for Sneak Preview?
Thanks in advance
Jawad Kakar

Please help me by showing action plan for stop sap , offline backup and then start sap.
i am little bit confuse How to start and stop SAP on cluster for offline backup
Below are the systems name with host name , please explain me in sequence
Systems name                                   Hostname
# Hope SAP ERP Prod DB Primary       gsgbbux860
# Hope SAP ERP Prod DB Standby      gsgbbux861
# Hope SAP ERP Prod Cluster              gsgbbux862
# Hope SAP ERP App 1                       gsgbbux864
# Hope SAP ERP App 2                       gsgbbux865
Thanks in advance
Zaheer

How to start & stop SAP J2EE services.

Hello,
Can anyone tell me the steps how to Start and Stop SAP J2EE operations and how to troubleshoot the problems when the Java doesn't come-up.
Regards,
Murali

Hi,
In windows,
go to SAP management console,Right click on the SID and then start all tasks
similarly to stop,Right click,
stop all tasks
If it is linux machine,
switch to SIDadm user,by giving the command su sidadm
ex:if SID is J2E,then it will be j2eadm.and then it is startsap or stopsap.
For troubleshooting,
1.go to /usr/sap/SID/JCxx/j2ee/cluster/server0/log
look for defaulttrace.trc file.
you can get to know the errors here and find teh root cause of it.
2.you can also look for devp_trace in SAPmanagement console.
3.Before doing all this,first check if JAVA_HOME,path and LD_LIBRARY_PATH is set properly and proper JDK is taken.
4.check id DB is up and running.
reward points if helpful
Message was edited by:
usha rani

How to start and stop the BI Services in Solaris 10

Hello All,
Can anyone guide me on how to start and stop the BI Services in Solaris 10. In windows there are options set in Start->Programs->Middleware_Home->Start/Stop BI Services.
Primarily after doing changes to the scheduler configuration, I need to restart the services to get it implemented? If yes how can I do it?
Any help will be appreciated
Thank you
Ash
Edited by: 902739 on Jan 11, 2012 12:17 PM

Please help me by showing action plan for stop sap , offline backup and then start sap.
i am little bit confuse How to start and stop SAP on cluster for offline backup
Below are the systems name with host name , please explain me in sequence
Systems name                                   Hostname
# Hope SAP ERP Prod DB Primary       gsgbbux860
# Hope SAP ERP Prod DB Standby      gsgbbux861
# Hope SAP ERP Prod Cluster              gsgbbux862
# Hope SAP ERP App 1                       gsgbbux864
# Hope SAP ERP App 2                       gsgbbux865
Thanks in advance
Zaheer

How can I completely delete an app, so it won't even be listed in the app store under purchased items? And I will stop being prompted to make updates even though I've removed it from my iPad?

How can I completely delete an app, so it won't even be listed in the app store under purchased items? And I will stop being prompted to make updates even though I've removed it from my iPad?

Once an app is deleted from an iOs device, you will no longer be prompted for updates. Update alerts only occur for apps curently installed.
Purchases can be hidden (but not completely deleted) from the purchased list, but only using itunes on a computer.

SAP IDM 7.2: How to setup SSO functionality for WebUI of CRM and GRC?

Hello IDM-experts,
where can my customer find information about
SAP IDM 7.2: How to setup SSO functionality for WebUI of CRM and GRC?
Customer situation description:
The situation is that we are using SAP IDM 7.2. We are using a functionality to allow our users to access a webpage from where they can gain
SSO access to the Abap systems via the SAPGui. See screenshot as an example.
Now what we want is to access the CRM and GRC WebUI also with the same SSO possibility. We cannot find any guide/best practice on how to do
this or if it is possible via SAP IDM 7.2.
You can see a weblink in the first screenshot but it does not work. It will ask you for a username and password, see second screenshot.
Kind regards,
Daniela

Do you know how the SAP GUI SSO is setup ? Is it using SNC/Kerberos ?
If it is (I suspect it is), then you will need to use similar method of authentication for the ICF Services. These cannot use SNC since they are accessed via browser, but what you want is possible.
Thanks
Tim

How do we permanently stop MASS_CRM_* and R3AD_* locks from being applied??

Good afternoon Experts,
How do we permanently stop MASS_CRM_* and R3AD_* locks from being applied in CRM? We have several jobs that run weekly to download information from R/3 to CRM. The information only takes a few minutes to download into CRM, however the blocks are applied during the middle of the night, and cause backups within our system.
Queue name R3AD_SCE also becomes blocked as well during these downloads.
How do we stop these from being applied, without manually having to go into R/3 to remove during the middle of the night?
We currently are on CRM 4.0. The only notes that I found regarding this problem was for 3.0 - 3.5.
Thank you for your help!
Jami
Edited by: Jami Shircel on May 27, 2009 8:00 PM

Thank you very much for your reply.
We are running a job created to download all materials from R/3 into CRM, using SAP program SMOF_DOWNLOAD with variant of material. I believe the locks are coming on as this is a load. However, the job only takes about 15 seconds to run and take the information from R/3. CRM takes longer to process that information. However, the lock does not come off when the job is complete. We have to manually remove the lock the next time someone from the team logs into CRM. This causes problems as nothing from R/3 to CRM is passing through while the locks are on. As soon as the lock is removed, the systems begin communicating again. The job is not impacted as it takes less than 15 seconds to run.
How do we either stop the lock from coming on, or have it automatically come off when the job is complete?
I reviewed the note suggested, but it was for account life cycles. Perhaps the wrong number was written?

ActiveDirectory - SAP IDM integration in Identity Life cycle Management

Hi Experts
In our landscape SAP HCM is supposed to be the leading data source and SAP IDM takes identity information from SAP HCM. From SAP IDM it will provision into Active directory and other third party systems, Sap systems.
Here are the questions
1) How can we leverage on the investment on Active directory after SAP IDM -Active directory investment ? I mean after SAP IDM comes to a landscape, Active directory will only be used to login to domain and for authentication if for java system Active directory have been set as user data source. What are the other advantages of Active directory- SAP IDM integration as Active directory will not be leading data source and identity information will be in identity store.?
2) After the user details are taken from SAP HCM system, will the user record will be created in SAP IDM on Identity store ? Is it where we actually assign the SAP IDM business role and the related technical role to the user?
3) Suppose if we assign a business role " employee " , will IDM actually create user id in all target system and assign all the technical roles? . Or we have to manually select each repository for target system in Identity center and select the privileges and provision it ? Will there be any automated feature that after assigning the business role to identity in identity store users and roles get automatically provisioned on all the target systems?
Thank you in advance for your help.

Hi Matt,
Thank you very much.
Only change we have is before approval it should go to GRC AC check all the compliance and only after that it is approved and it should come back to SAP IDM .
I am actually looking for a tutorial which actually shows how you assign a business role and the whole procedure of SAP IDM automatically provisioning to target systems which you have just explained. I suppose there is no such exact tutorial and I want to know how we can configure this on SAP IDM . Any specific clues?
Also I am describing the exact steps that will follow . Correct me if I am wrong.
1) User id will be created on AD with same user name and password as it is in Identity store. Will be assigned AD groups
2) Create same user in Portal and make the user data source as AD and will assign the technical role portal as per the business role definition
3) create same user in all abap systems and set abap database as user data source and assign the technical role needed as per the business role definition
4) Create same user in third party systems and with the privileges on their target systems as per the business role definition.
With this provisioning stops. I suppose all the above steps will be automatically done by SAP IDM with no manual interaction required after final approval. Correct me if I am wrong.
So some other information i wanted is
1) When you assign business role at work flow, how exactly SAP IDM know about the target systems that user should be created and assigned roles and made their authentication source.
for eg:- for a business role "employee" should get access to ERP with role X, AD with group Y, Portal with role Z. So in work flow when business role employee is assigned how SAP IDM will know that user should be created on to ERP with role X, AD with group Y, Portal with role Z. Can you explain technically along with detail steps? Or how exactly we configure a business role which knows the target systems and their techical roles.
Thank you once again for the fabulous help . You/Matthew is a tremendous help in understanding SAP IDM better.

Something keeps trying to download on my mac and I don't know what it is. It is not in the apple store and just comes out nowhere and request for my password to download something and I don't know what it is. How to make this stop?

Something keeps trying to download on my mac and I don't know what it is. It is not in the apple store and just comes out nowhere and request for my password to download something and I don't know what it is. How to make this stop? It pops up every single day.

Erica,
     I can, with 99.99% certainty, tell you that you are absolutely right in not wanting to download or install this "Helper," whatever it is (but we can be equally certain it would not "help" anything).
     I cannot comment as to Oglethorpe's recommendation of 'adwaremedic'; I am unfamiliar with it. His links to the Apple discussion and support pages warrant your time and attention.
     It might be really simple -- Trying looking in your Downloads folder, trash anything that you don't know with certainty is something you want to keep, and then Secure Empty your Trash. Then remove the AdBlock extension, LastPass, and Web of Trust extensions to Safari and re-boot. If the issue goes away, still be extraordinarily careful in the future.
     Unfortunately, it's probably not going to be that simple to get rid of, in which case I'd then try the line by line editing in HT203987.
     I have no further suggestions (other than a complete wipe and re-install...but that's a pain because trying to restore from Time Machine would simply ... restore the Mal).
   For the rest of us, please post when you find a solution.
     Best.
     BPW
(Also, try to edit your second post -- black out your last name on the screenshot and re-post it for others)

How do I completely wipe out old email account info?

I periodically have problems with my ATT email account and it quits downloading incoming mail to MacMail. ATT swears it is not their problem even though it isn't happening with any other email account but ATT. I don't have problems sending mail.
In the past I have fixed it by deleting the old account and going through adding it back as a "new" account to set it up again. In the past the 'Add Account' process would take me through setting up the imap mailbox and server, then go to the smtp setup. I have had to do this numerous times in the past - every few months.
But this time the first "Add Account" screen already displayed the email address (even though I deleted the account). And as soon as the imap info was entered the "Add Account" process appeared to complete the smtp setup automatically as it displayed the completed screen.
After that MacMail went through what appeared to be the downloading of emails into my inbox (several thousand of them). The bar in the "Mail Activity" area in the lower left corner continued to move across and the number of emails remaining was displayed.
In spite of that, the emails never showed up in my inbox. Oddly, the "Notes" from my iPhone (which are sent to my email automatically) were downloaded - just not any of the emails. I can send emails.
The ATT webmail is still showing all the emails and I can send and receive from webmail. I just can't download into MacMail.
It appears that somewhere in all the system stuff my Mac is retaining some ATT information and pulling that information instead of starting from scratch and truly setting it up as a new account. Where is all that old infor stored and how do I completely get rid of it?
Oddly, at the same time I was having the problems with my Mac, my iPhone stopped downloading ATT email as well. I was able to fix that by deleting the account and setting up again.
Thanks,
Camille

All of a sudden now - two whole days later - all the emails have finally appeared. I have no clue what is going on.

How do you complete or re-attempt failed provisioning tasks

Hi All,
If a modify operation has been perfomed, and subsequent provisioning tasks failed, is there a way to get IdM to go back and attempt to complete the failed task and remaining tasks.
For example, when the MX_VALIDTO attribute changes we call an event task to determine if MX_DISABLED should be set or not. This task is a generic pass which executes some logic which evaluates other attributes. This step failed because we caused an error to be raised due to an unexpected value in one of those other attributes.
We have now modified the logic in the script and want to 're-provision' the failed task without triggering a new change on the identity.
I know about the uRetryPrivilegeAdd and uRetryPrivilegeRemove internal functions, but it seems as if these only deal with cases where privilege assignment had failed. Is there something similar that will reconcile and clean up failed task heirarchies where it is just attribute / entry modifications rather than privilege assignments.
Regards
Paul

Hi Paul,
Hope all is going well with your project, the two bits of code you need for this are:
Find all the failed privileges for an Identity
var sql = "SELECT MSKEY,aValue,provstatus FROM MXPV_Priv_AddStatus WHERE (MSKEY = " +V_MSKEY +" and (ProvStatus = 1001 or ProvStatus = 1101))";
sqlresult = uSelect(sql);
This will give you a load of pairs of failed MSKEY - identity and aValue - privilege, which you need to split into strings via an array and then into values, and you can then retry using
retry = uRetryPrivilegeAdd(provmskey,provavalue);
I've put the full code on http://sap-idm.blogspot.com/2011/01/retrying-failed-provisioning-tasks-in.html in case you need more information.
Good luck,
Ian Daniel

Stuck with black screen with Apple and download bar approx 1 quarter done. Downloading Yosemite. It has completely stopped. I can't access anything. Please help

Stuck with black screen with Apple and download bar approx 1 quarter done. Downloading Yosemite. It has completely stopped. I can't access anything. Please help

You should really read the manual.
"How do you restore from backup? "
Restore. When given the choice, choose to use backup.
"And how can I check to see if the pics and videos are on my computer somewhere first??"
They would only be where you put them. What program did you use to import them? Pics/vids taken with ipod are not part of the sync process at all. You should be importing them just as you would with any digital camera.
If you did not import them, then they are not on your computer.

How to use cartography with SAP BI, SAPBWKEY

Hi experts,
if found many documents about SAP BI and displaying the data on a map. I would wonder if someone could explain me step by step how to create a connection between the ArcGIS map *.shp / *.dbf and the SAP BI data table.
I have following topic. We have a data table with DE / 94447 (Country / postal code) and need to map it to the exact polygon from the .shp file using SAPBWKEY in .dbf
But if it is a compounded characteristics, what to type into the SAPBWKEY field in order to address the correct position on the map? Otherwise the data are displayed on the wrong coordinates.
Can you help?
Regards
Stan

Jennifer,
There is no product called virsa control by SAP. Virsa was a small company which made different solution for SOX compliance. It was acquired by SAP. If you are talking about SAP BusinessObjects Access Control 5.3 then see the links below to understand the integration between SAP IdM and SAP AC 5.3.
https://www.sdn.sap.com//irj/sdn/go/portal/prtroot/docs/library/uuid/b0aafd33-e662-2a10-a197-dd3137f7f7e0
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/b0da2dba-0480-2b10-a7ae-f055ab6e9355
Regards,
Alpesh

SAP IDM 7.0 connecting to SAP GRC 10.1

Hi Gurus,
I was looking into connecting SAP IDM 7.0 with SAP GRC AC 10.1 and I cannot find a suitable connector for this.
Could any of you provide some guidance on how to make this connections.
Thanks and Regards,
Juan

If i remember correctly the 7.0 version had only mx_provision, mx_deprovision and mx_modify -tasks so the integration would have be built on these tasks. As there is no validate add task to hang the GRC call GRC would have to do provisioning.
7.0 datamodel is different than 7.2, I haven't studied in detail but would guess there is enough difference also in the tables that store tasks/jobs etc that the 7.2 GRC provisioning framework would not even import to 7.0. You would need to set-up a 7.2 on the side to study the framework to see how to duplicate the tasks..
VDS in the middle is another thing as it would need to be able to communicate with your custom connector in 7.0.
If you must stick with 7.0 maybe the GRC connector of 7.1 is worth a try.. But you would probably need also older VDS.
Depending on the level of your existing customisations and what data from 7.0 is worth keeping the upgrade to 7.2 is not necessarily big thing compared to the effort of building the interim custom interface.. The real question is how big and complex is your 7.0 implementation?
regards, Tero

How do I completely Stop SAP IDM???

Similar Messages

Maybe you are looking for