Changing username(identity) in IdM when infotype 0105 system id changes

Hi All
Please could you provide me some advise on how to address this requirement.
IDM 7.2 SP6
When HR hires a contractor in SAP HR they set the system id in infotype 105 with a specific value eg. X123456. The extract job
creates the identity in IDM with this system id.
In due course if the contractor becomes a permanent employee the system id in 105 is updated to a different value eg. Y123456 by the HR team.
When this occurs and the HR extract job is run as a delta for the same employee nothing happens. The customer expectation is that it would update the identity in IdM with the new system id eg. Y123456 but it fails as the Personnel Number already belongs to a User Account ID in IDM.
Question is, is there a way to meet the customer's expectation? If yes, how?
Are there any drawbacks with this solution?
Please advise
Thanks
Ran

Ah, see! That's why I wanted to see some screenshots. ^^
Okay, we fill that through IdM, not the other way around (if we talk about the same thing, but I think we are now ). So the new identity is created in IdM and the info type is filled through IdM (as is the email adress in another info type). But the username is not the mskeyvalue in our IdM, at least not for employees. So either he needs another way to get the information from the info type into IdM OR they change the workflow so that the info type in HR is filled via IdM.
Well, Ranjit will come back eventually. *g*
Thank you for clearing that up, Matt!

Similar Messages

  • HT3140 put a date 1970 june 27 . and now the whole system is out of control i cant get to internet cannot change date and time  always when i opened system preferences stays in a waiting mode but doesnt show any opcion don t know what to do and i just bou

    put a date 1970 june 27 . and now the whole system is out of control i cant get to internet cannot change date and time  always when i opened system preferences stays in a waiting mode but doesnt show any opcion don t know what to do and i just bought this computer

    It may well be a driver issue but considering the loading: Xorg trying to load different drivers is somewhat normal. @cafe you can see that these are autoconfigured by X above the loading in the log:
    Jul 20 19:48:24 arch gdm-Xorg-:0[216]: (==) Matched intel as autoconfigured driver 0
    Jul 20 19:48:24 arch gdm-Xorg-:0[216]: (==) Matched intel as autoconfigured driver 1
    Jul 20 19:48:24 arch gdm-Xorg-:0[216]: (==) Matched modesetting as autoconfigured driver 2
    Jul 20 19:48:24 arch gdm-Xorg-:0[216]: (==) Matched fbdev as autoconfigured driver 3
    Jul 20 19:48:24 arch gdm-Xorg-:0[216]: (==) Matched vesa as autoconfigured driver 4
    As long as one of the drivers gets loaded, which it apparently does the failing of the others is fine.
    Was there an update maybe ?

  • HT4759 When did the system requirments change? I logged on with windows xp until last week now it wont let me on???

    As above
    Thanks

    Mikeandnicki wrote:
    I have looked through everything but cannot find a way to delete or spend the 69 cents credit. Can anyone help me?
    Contact iTunes Customer Service and request assistance
    Use this Link  >  Apple  Support  iTunes Store  Contact

  • I need to know how to change the identity (email address) used for the iTunes store as I no longer use that email

    I need to know how to change the identity (email address) used for the iTunes store as I no longer use that email.

    Settings > iTunes & App store.
    Tap AppleID, sign out then sign back in.
    The Apple ID is right everywhere else. I've synced the phone. I've reset it in Settings on the phone. I've changed it at Apple.
    When you write, "I've changed it at Apple, this means you updated yoru old AppleID or you ceated a new AppleID?

  • I recently changed my Apple ID.   When I try to change my iCloud account on my Mac. I cannot access the account. I've changed the password once already. Any suggestions? My iPhone's account is fine.

    I recently changed my Apple ID.   When I try to make changes to my iCloud account on my Mac., I cannot access the account via System Preferences. I've changed the password once already.   My iPhone's iCloud account is fine. At this point my iCloud account no longer is working with my Mac. Does anybody have any suggestions?

    I finally figured out the answer to my own question. I created a new iCloud account on my Mac. Problem solved!

  • When i am running the RBDMDOC it will not genarated the idoc for the infotype 0105

                   Hi experts,
                            I am run a pa40 action and change the record of 0105 infotype, in bd64 as part of data filtering I am also mentioned 0105 . but when I am run the RBDMIDOC  the idoc is not generated of the infotype 0105 .
    Thanks in Advance .
    Venkateswara Rao.

    Hi Venkat Narayan,
       Thank for giving such a help,
    1.   I am created record for the infotypes  i.e :0,1,2,6,105.
    2    In bd64 I done a data filtering for above infotypes , its fine , but when I am running the bd21   Tcode the idoc is generated for    0,1, 2,6,. it is not generated for p0105.
         please find the following screen shorts.  
    Thanks.
    venkat

  • Sap Username Infotype 0105

    Hello,
    i wrote a report to extract HR Data. I#m looking for a way to extract the information about the corrsponding SAP user which is configured in infotype 0105 (sy-name). I defined the following passage in my coding, but that's the way to extract the last user who did changes in that infotype:
    *sapUsername
    attributes_wa-attr_tab = 'EMPLOYEE'.
    attributes_wa-attr_field = 'SAPUSERNAME'.
    if p0105-uname NE ' '.
      attributes_wa-value = p0105-uname.
      append attributes_wa to attributes.
    else.
      attributes_wa-value = ' '.
      append attributes_wa to attributes.
    endif.
    What field i have to youse to extract the information about the corresponding user in infotype 0105?
    Please help!

    Hi,
    The SAP User id of the Employee is maintained in the USRID field of Infotype 0105 subty 0001.
    If you are looking for the user who changed the record, the field is UNAME.
    Regards,
    Suresh Datti

  • When I try to email photos from iPhoto I get this message: The email server didn't recognize your username/password combination. It won't let me change it, what do I do?

    When I try to email photos from iPhoto I get this message: The email server didn’t recognize your username/password combination. It won't let me change it, what do I do?

    Can you send email ok via the Apple Mail application?
    The username and password are set in the Accounts section of the Mail application. Start Mail, select preferences and select Accounts. Then make absolutely sure that the username, password and outgoing mail server are entered correctly.

  • Infotype 0105 creates usr01 when running HRALXSYNC

    After Hiring new employee (pa48) and creating infotype 0105 the system creates user for the employee of type 'C' (communication date).
    We do not want every employee to has user in the system.
    therefor we want to prevent the automatic creating of user.
    Is there any way to prevent that process?
    best regards.
    Yotam.

    Hi Yotam,
    No, a user is needed in E-Recruiting. That's the reason why we create a random user if you don't have IT0105 filled.
    Regards,
    Nicole

  • I want to change my Apple ID. When doing so and after having entered my current username and password it asks me for two security questions. I am not entering these correctly (thought I was). How can I proceed?

    NNeed to change Apple ID but can't remember security question answers

    To change the iCloud ID you have to go to Settings>iCloud, tap Delete Account, then sign back in with the other ID.  When you delete the account it will prompt you about what to do with the iCloud data.  If you need to migrate it and merge it with the data in the new account choose Keep on My iDevice; then choose Merge to upload the data and merge it with the new account.  If your data is already in the other account and you don't need to migrate it to the other account, choose Delete from My iDevice.

  • Integration regarding cost center between OM, Infotype 0105 and the user

    Hello,
    we are just implementing OM, where the cost center for an organizational unit is maintained. Within a OU
    exist positions to which persons are assigned.
    In the HR Master data Infotype 0105 "Communication" the system user name for this person is maintained.
    My request:
    In SU01 on "Logon data" tab is a field "Cost center". What do I need to fill it with the value from the assigned position in OM?
    Thanks in advance,
    Thomas

    The connection from user-id via IT 105 to pers nr and from there to OU and cost centre is clear.
    What I want to know is wether the field cost center in TA SU01 can be automatically populated with the corresponding value from the OU for this user. I don't want to change the value via SU01 so it is sufficient when the field in SU01 is in status ReadOnly. But as the information is in the system I want it to be automatically displayed in the User-id-context.
    Regards,
    Thomas

  • Updating Infotype 0105 "Communication" with SAPNWRFC and PERL (long !!)

    When I read the SAP-Press Book "mySAP HR: Technical Principles and Programming"
    (actually it was the german edition "Technische Grundlagen und Programmierung")
    I came across Chapter 9.1.3 "Using BAPIs", in which some sample code is provided
    for updating the email-adress in infotype 0105 "communication".
    I just thought: "OK, that could be easily (and better !) done with PERL and SAPNWRFC".
    My PERL-script should do the following:
    1) Read subtypes 0001 and 0010 from IT 0105 via RFC
    2) Compare that data against our LDAP-Server
    3) call the approbiate BAPIs for updating IT 0105 via RFC
    OK, here's the ABAP-code which accomplishes task #1: 
    [code]
    Z_EMAIL_TAB is a customer-defined structure with 3 components:
    component      component-type
    MY_PERNR       PERNR_D
    MY_NICKN       SYSID
    MY_EMAIL       COMM_ID_LONG
    FUNCTION z_read_email.
    ""Lokale Schnittstelle:
    *"  IMPORTING
    *"     VALUE(MY_DATE) TYPE  ENDDA OPTIONAL
    *"  TABLES
    *"      Z_EMAIL STRUCTURE  Z_EMAIL_TAB
      DATA: sql_date  TYPE begda,
            sql_mandt type mandt.
      DATA: BEGIN OF wa_ldap_out,
                     pernr TYPE pernr_d,
                     nickn TYPE sysid,
                     email TYPE comm_id_long,
            END OF wa_ldap_out.
      DATA: exc_ref    TYPE REF TO cx_sy_native_sql_error,
            error_text TYPE string.
      IF my_date IS INITIAL.
        MOVE sy-datum TO sql_date.
      ELSE.
        MOVE date TO sql_date.
      ENDIF.
    we use native SQL (Oracle), so we have to specify the mandant
    exclude-values for PERSK refer to pensionists etc
    move sy-mandt to sql_mandt.
    EXEC SQL.
      open dbcur for
          SELECT DISTINCT
                pa0001.pernr,
                pa0105_0001.usrid,
                pa0105_0010.USRID_LONG
           FROM pa0000 pa0000,
                pa0001 pa0001,
                pa0105 pa0105_0001,
                pa0105 pa0105_0010
            WHERE
                 pa0000.pernr =  pa0001.pernr and
                 pa0000.begda <= :sql_date AND
                 pa0000.endda >= :sql_date AND
                 pa0001.begda <= :sql_date AND
                 pa0001.endda >= :sql_date AND
                 pa0001.persk NOT IN ('12' ,'13' ,'17' ,'18') AND
                 pa0000.stat2 = '3' and
                 (pa0001.mandt = pa0105_0001.mandt() and pa0001.pernr = pa0105_0001.pernr() and pa0105_0001.usrty() = '0001' and pa0105_0001.begda() <= :sql_date and pa0105_0001.endda(+) >= :sql_date) and
                 (pa0001.mandt = pa0105_0010.mandt() and pa0001.pernr = pa0105_0010.pernr() and pa0105_0010.usrty() = '0010' and pa0105_0010.begda() <= :sql_date and pa0105_0010.endda(+) >= :sql_date) and
                 pa0000.mandt =  pa0001.mandt and
                 pa0000.mandt = :sql_mandt
    ENDEXEC.
    DO.
        EXEC SQL.
            FETCH NEXT dbcur into :wa_ldap_out
        ENDEXEC.
        IF sy-subrc <> 0.
            EXIT.
        ELSE.
            APPEND wa_ldap_out to z_email.
        ENDIF.
    ENDDO.
    EXEC SQL.
      close dbcur
    ENDEXEC.
    ENDFUNCTION.
    [/code]
    Using Native-SQL (we have an Oracle-Backend) saves us from looping through IT0105 twice.
    (I don't like ABAP's Open-SQL, it's too limited)
    Now we have a nice little table with all our employees pernr, userid and email-adress.
    Let's stay on the ABAP-side and have a look at the update-function (task #3):  
    [code]
    FUNCTION z_upd_smtp .
    ""Lokale Schnittstelle:
    *"  IMPORTING
    *"     VALUE(MY_PERNR) TYPE  PERNR_D
    *"     VALUE(MY_EMAIL) TYPE  AD_SMTPADR
    *"     VALUE(MY_DATE) TYPE  BEGDA OPTIONAL
    *"  TABLES
    *"      BAPIRETURN STRUCTURE  BAPIRETURN1
      DATA: wa_bapireturn TYPE bapireturn1.
      IF my_date IS INITIAL.
        MOVE sy-datum TO my_date.
      ENDIF.
      CALL FUNCTION 'BAPI_EMPLOYEET_ENQUEUE'
        EXPORTING
          number        = my_pernr
          validitybegin = my_date
        IMPORTING
          return        = wa_bapireturn.
      IF wa_bapireturn-type NE 'E'.
        CLEAR wa_bapireturn.
        CALL FUNCTION 'BAPI_EMPLCOMM_CREATE'
          EXPORTING
           employeenumber        = my_pernr
           subtype               = '0010'
           validitybegin         = my_date
           validityend           = '99991231'
           communicationid       = my_email
         NOCOMMIT              =
         IMPORTING
            return                = wa_bapireturn
         EMPLOYEENUMBER        =
         SUBTYPE               =
         OBJECTID              =
         LOCKINDICATOR         =
         VALIDITYBEGIN         =
         VALIDITYEND           =
         RECORDNUMBER          =
        APPEND wa_bapireturn TO bapireturn.
        CALL FUNCTION 'BAPI_EMPLOYEET_DEQUEUE'
          EXPORTING
            number        = my_persnr
            validitybegin = my_datum
          IMPORTING
            return        = wa_bapireturn.
        APPEND wa_bapireturn TO bapireturn.
      ELSE.
        APPEND wa_bapireturn TO bapireturn.
      ENDIF.
    ENDFUNCTION.
    [/code]
    And finally the PERL-Script (task #2):
    [code]
    ##### Connect to LDAP-server #################################################
    use Net::LDAP;
    use Net::LDAP::Control;
    use Net::LDAP::Constant qw(LDAP_CONTROL_PAGED);
    $pagec = Net::LDAP::Control->new( LDAP_CONTROL_PAGED,
                                      size => 1000);
    --- replace with your company-specific values ------------------------------ #
    $ldap = Net::LDAP->new( 'your-ldap-server' ) or die "$@";
    $mesg = $ldap->bind( 'CN=your-ldap-user,CN=aaaa,DC=bbbb,DC=dd,DC=eeeeeee,DC=fff',
                          password => 'your-password'
    use SAPNWRFC;
    --- Connection to SAP  ----------------------------------------------------- #
    SAPNW::Rfc->load_config("your-config-file");
    $sap_conn = SAPNW::Rfc->rfc_connect;
    --- SAP RFCs --------------------------------------------------------------- #
    SAP_RFCs();
    --- read all Email-adresses from IT0105 ------------------------------------ #
    $rd_handle_eml = $rd_eml->create_function_call;
    $rd_handle_eml->invoke();
    foreach $row_hashref_eml (@{$rd_handle_eml->Z_EMAIL}) {
         $MY_PERNR = $row_hashref_eml->{MY_PERNR};
         $MY_NICKN = $row_hashref_eml->;
         $MY_EMAIL = $row_hashref_eml->;
         $MY_NICKN =~ s/ //g;
         $MY_EMAIL =~ s/ //g;
         if ($MY_NICKN ne '') {
             $strMail_LDAP = nick2email(lc($MY_NICKN));
             if (lc($MY_EMAIL) ne lc($strMail_LDAP) && $strMail_LDAP ne '') {
                 updIT0105("$MY_PERNR","$strMail_LDAP");
                 print "SUCCESS = $i_uit_success, $MY_PERNR $strMail_LDAP\n";
         else {
    do some error-processing here
    $sap_conn->disconnect();
    exit;
    sub SAP_RFCs {
    --- Read E-Mail-Adress from IT0105 ----------------------------------------- #
    $rd_eml = $sap_conn->function_lookup("Z_READ_EMAIL");
    --- Update E-Mail-Adress in IT0105 ----------------------------------------- #
    $rd_uit = $sap_conn->function_lookup("Z_UPD_SMTP");
    sub nick2email {
        $strNickn = $_[0];
        $strEMail = '';
    --- our userid is stored in LDAP-item "mailnickname", just change filter to your needs #
        $filter = qq {
                      (& (mailnickname=$strNickn)
                         (givenName=*)
                         (| (objectCategory=person)
                            (objectClass=person)
        while (defined ($search = $ldap->search(
                                base   => "OU=your-base-OU,DC=bbbb,DC=dd,DC=eeeeeee,DC=fff",
                                filter => $filter,
                                attrs => ['mailNickname','mail','whenChanged'],
                                control => [ $pagec ]
            foreach $entry ($search->entries) {
                $strEMail = $entry->get_value('mail') ;
            ($resp) = $search->control( LDAP_CONTROL_PAGED );
            last unless ref $resp && $pagec->cookie($resp->cookie);
        return $strEMail;
    sub updIT0105 {
        $rd_handle_uit = $rd_uit->create_function_call;
        $rd_handle_uit->MY_PERNR($_[0]);
        $rd_handle_uit->MY_EMAIL($_[1]);
        $rd_handle_uit->invoke();
        $i_uit_success = 1;
        foreach $row_hashref_uit (@{$rd_handle_uit->BAPIRETURN}) {
            if ($row_hashref_uit->{TYPE} ne 'S' && $row_hashref_uit-> ne ' ') {
                $i_uit_success = 0;
    [/code]
    I run this script every Friday on a virtual Windows XP machine (VMWare) scheduled with the AT-Command
    and it works really fine, enjoy !!!
    P.S.: I hope there aren't any typos in the code, but please check
    P.P.S: Thanks again to Piers for SAPNWRC, fantastic.

    Hi,
    I am very interested in your solution. Can you send me the scripts?
    Greeting Jan

  • Tool(s) in Cisco Unified CM Administration to support Identity Management (IDM)?

    Hi,
    In our "Cisco Unified CM Administration System version: 7.0.1.11000-2" installation, I can manually create and administrate users information.
    But we do also have an identity Management (IDM) system in house, that creates users in Microsoft 2003 Active Directory and some sub-systems with the necessary rights they need.
    It would be a lot easier, if our IDM system could create the user in our “Cisco Unified CM Administration System version: 7.0.1.11000-2" when they are created in the MS Active Directory, with the right username, first name, last name, department name and so forth.
    Is there any tool that I can use to make this automatic import of user information?
    Kind regards,
    Carl-Marius

    There are couple solutions.
    You may integration CUCM with LDAP.  Whenever you have a user created in LDAP, CUCM will synchronize that user into CUCM user database.  Then you may assign different permissions for different LDAP users.
    If you don't want to do LDAP integration, you may also consider using AXL to create users in CM database.  AXL is an interface for 3rd-party software to read/write database.
    Michael
    http://htluo.blogspot.com

  • How to change your Administration Server password when you're locked out

    How to change your Administration Server password when you're locked out
    The Netscape server products are all managed by a single administration
    server, which gives you a web forms-based interface you can use to
    configure them, start/stop them, check their logs, and so forth.
    <P>
    There are three levels of protection that keep the general public from
    being able to get into your administration server and mess up the
    configuration of any Netscape servers you have installed:
    <P>
    <OL>
    <LI> <B>Obscurity:</B> Your administration server can run on any port you'd
    like (usually something between 81 and 30,000), so if an attacker
    doesn't know what port to find your admin server on, he can't get
    into it.<P>
    <LI> <B>Host restrictions:</B> You can tell your admin server to only allow
    connections from specific hosts, and to reject all other hosts.
    <P>
    <LI> <B>Password protection:</B> Even if a user connects to your admin server
    from a valid host, he won't be allowed to get into even the first
    page unless he presents a valid username and password.
    </OL>
    <P>
    If you, the legitimate administrator of your web server, are unable to
    access the administration server (if you forgot your password or the
    admin port number or if you accidentally locked your own site out),
    then here is how to get past each of these levels of protection:
    <P>
    <OL>
    <LI> If you don't remember what port your administration server is
    running on, just look in your "ns-admin.conf" file, which is in
    the "admserv" directory under your Netscape server directory.
    (For 1.x web servers on Windows NT, run "regedt32" and go to the
    "HKEY_LOCAL_MACHINE\SOFTWARE\Netscape\Administration" section).
    You will see a "Port" entry there that specifies what port your
    admin server is on. You can change this value if you want your
    admin server to run on a different port, but make sure you restart
    the admin server after you change the value.
    <P>
    <LI> If your admin server is complaining "Unauthorized host" when you
    try to connect to it, then you can open it up to all sites by
    going into the "ns-admin.conf" file or the "Administration"
    section of your NT registry, as described above, and deleting the
    lines for "Hosts" and "Addresses" (either one of those might not
    be present) then restarting your admin server (on Unix run
    "stop-admin" then "start-admin"; on NT go into the Services
    control panel and stop/start the "Netscape Administration" or
    "Netscape Admin Server" service). You will then be able to get
    back into the admin server, where you can then try new settings
    for your host and address restrictions if you wish.
    <P>
    <LI> If you have forgotten the password to your admin server and now
    you can't log into your admin pages, all is not lost! Go into
    your "ns-home" directory, and into the "admserv" directory under
    that. You should find an "admpw" text file containing a simgle
    line of text, something like this:
    admin:lnOVeixulqkmU
    The first part of that line is the name of your admin account
    (usually just "admin"), and the second part is your admin
    password, encrypted. Edit this file to remove the encrypted
    password so that your file looks like this:
    admin:
    Then shut down your admin server, bring it back up again, and log
    into your admin server but don't give any password. It should let
    you in, at which point you can then go to the appropriate
    configuration page to set a new admin password, and then you're
    back in business.
    </OL><P>
    Note that because it is so easy to change the admin password this
    way, it's good to periodically make certain that your admin
    password file and your web server's configuration files are not
    left world-writable, and that only trusted people have access to
    them. (By default they're not world-writable, but it's good to
    make sure of this from time to time.)

    If you mean that yu forgo the password for yur encrypted backup then you can only:
    Warning: If you encrypt an iPhone backup in iTunes and then forget your password, you will not be able to restore from backup and your data will be unrecoverable. If you forget the password, you can continue to back up and use the device, however you will not be able to restore the encrypted backup to any device without the password. You do not need to enter the password for your backup each time you back up or sync.
    If you cannot remember the password and want to start again, you must perform a full software restore and when iTunes prompts you to select the backup from which to restore, choose set up as a new device.
    Above from:
    http://support.apple.com/kb/HT4946

  • I am the founder of a non-profit organization, a donor had just given us her used iBook G4.  What do I need to do to wipe out her "stuff", change username and password, start all over new.  We will use this iBook in our learning center in Saigon, Vietnam

    To good citizens of the MAC world,
    I am the founder of a non-profit organization, we are caring for 6,200 orphans and street kids in Vietnam.  A donor had just donated her used iBook G4 for us to use in one of our several "learning centers" in Vietnam.  Folks sometimes donating PC but this is the first time we ever received a MAC.. :-)  I would like to know how to start this iBook all over new: change username and password.  I am looking so forward to bring it to Saigon in a few days and let our children experience MAC ... I am a 2 years MAC users and I have no intention to return to the Dark side.  Please help. I have the original OS disk.  Thank you so much.

    There should be no need to zero the hard drive.
    Using the Restore discs that came with the iBook when it was new, restore the system software using the appropriate instructions which you can find through a link contained in this Apple Knowledge Base article:
    http://support.apple.com/kb/HT1561?viewlocale=en_US
    Good luck with it.

Maybe you are looking for

  • Not a Valid Month Issue

    Hi, When i execute an insert statement i get ORA-01843 not a valid month error. below is the SQL i try to execute in SQLPlus; Insert into IKD$TA_L_FACHL_SCHRITT (FACHL_SCHRITT_ID, FACHL_SCHRITT_TEXT, VALID_FROM, VALID_TO) values (1,'LOAD_STG_TMD_ZUSA

  • Display null rows / columns in matrix report

    Hi, Is it possible to display any character ('0' for example) in a matrix report where the entire row or column show no value at all ? My matrix shows Row1 and Row2 with values but no Row3 at all like this: Column1 Column2 Column3 Row1 value1 value2

  • How to use JOURN.E TOUCH as an e-reader?

    Greetings from Greece! I just bought the new Journ.E Touch Tablet. https://www.toshibatouch.eu/index2.php Although I'm happy with the different facilities, I haven't find a way yet to be able to read my e-books (pdf files), or any other "office" docs

  • How is final cut express on colours?

    Hi. I am a new mac user and have worked for some time with adobe premier to edit movies.. Thinking about buying final cut express, and have a few questions about it. Does anyody know if it is easy to change colours in a clip? Or do i need to buy some

  • CMR 1:M with compound keys?

    Pardon a possible repost, my original post disappeared. I've got two tables with compound PKs. Does OC4J 9.0.3 support CMR for CMP beans with compound keys? Thanks!