Configure SAP LDAP mapping for MS-ASD

Hello,
I 'm configuring an LDAP connector from my MS-AD to my SAP-4.7 ABAP system so the user account from the MS environment gets synchronized with my SAP system.
I have configured the connection and created some mapping already but I have still some questions about the settings:
1. With the report I'm able to synchronize an MS_AD account with my SAP environment. For the first test I only add one account name so all other existing accounts are not changed. When the MS-AD account not exists on SAP the account is created like the mapping. I have also the option in this report to delete the user account from the SAP system when the account doesn't exist any more in the MD-AD. How could I prevent that some special user accounts on the SAP system are note deleted even when they are not available in the MS-AD?
2. With the mapping function MAP_SPLIT_CHAR  a variable by a certain character into two ore more SAP fields like telephone number and telephone extension. Is it possible to split the content of a variable by a fixed amount of characters?
For example the user location is written like ABC.XZZ
ABC is the building number and X is the floor number and ZZ is the chamber.
3. With the mapping function MAP_conc_CHAR I'm able to combine to MS-AD fields into one SAP filed. Is it possible to combine a constant value with a field from MS-AD?
4. I'm able to insert multiple parameters or user roles by using the function MAP_CONSTANT. I add one attribute and the constant values as parameters. For a couple of parameters I have to insert a MS-AD field. How could I combine inserting constant parameters with some MS-AD fileds
Example
The Parameters CAC and BUK are fixed to the company code. But the parameter PER must be set to the employee number. This value I get from the MS-AD .
5. For the Employee mapping to SAP-HR I have also to configure the Stucture and fields. Does any one have an overview of structure names and field names from the employee structure? It couldn't be asked with the F4 option which could be user with the user mapping.
Manny thanks in advanced for the answers.
Kind regards,
Richard Meijn

Hi,
1.
create a user group for the special users and another user group for "real" users. Restrict the synchronization report to the second user group.
2.
You can write your own mapping functions. You will need a developer key in your system and some ABAP knowledge. Create your functions with SE80 or SE37. It is easy to create a function
3.
The same: create your own mapping function.
4.
It might be possible to fill the different parameters from different AD values depending on the parameter name. Use the ABAP statement "CASE". But there is no such function. You have to write it by yourself.
But think about what you really want to do. Do you want to invent an Identity Management? There are already a lot of tools. The SAP answer "SAP Netweaver Identity Management" was already mentioned.
Regards
Rainer

Similar Messages

  • Configure virtual path mapping for forms 11.1.2

    Hi
    How to configure virtual path mapping for "Oracle Fusion Middleware Forms and reports 11gR2 (11.1.2.0.0)" on my client?
    Configuration type = development.
    In forms 10g I configure it in "orion-web.xml".
    C:\oracle\ids\j2ee\DevSuite\application-deployments\forms\formsweb\orion-web.xml
    Regards
    Tobias

    If you use the development mode install in 11.1.2 I think you cannot use the "forms.conf" approach because you don't have an OHS installed.
    We've used the approach described in the following metalink document (solution no. 1) which works with deployment as well as development installations. Tested on 11.1.1.4 and 11.1.2.
    How to Create Virtual Mappings in Forms 11g [ID 1063043.1]
    (essentially you extend the WebLogic deployment plan for the formsapp to include the additional mappings and then redeploy the formsapp in WebLogic)
    Regards
    Andreas
    Edited by: Andreas Leidner on Dec 7, 2011 1:45 PM

  • NAT configuration and Port Mapping for xBox

    I'm looking for help with port mapping to open up the NAT for an xBox One. I'm working with the following network devices:
    xBox One
    DSL Modem: Embarq (ZyXEL) 660R series
    Airport Extreme version 7.7.3
    I understand the following from researching the issue:
    The default settings for both devices block the ports needed for xBox Live.
    Airport Extremes are not on the compatible list for xBox.
    Port Mapping is better then creating a DMZ for the xBox.
    The xBox needs its own manually set IP address.
    I switched my Network>Router Mode from Off (Bridge Mode) to DHCP and NAT. I then created a DHCP Reservation and the Port Settings for that IP.
    After doing this, the Airport would restart and display a warning - Double NAT. I figured this was because the 660 settings showed the NAT Mode to be SUA Only. The Edit Details link displayed an empty table where you edited the SUA/NAT Server Set. I switched from NAT Mode>SUA Only to None. So there was my Double NAT and I would have thought that would have removed one.
    I also disabled the Firewall and Enabled the UPnP.
    After restarts the Airport continued to display the Double NAT error. However, with the 660's NAT Mode set to None, the Internet was not there. Web browsers and email accounts replied with server not found.
    Only with the 660 set to SUA Only and the Airport in Bridge Mode is the Internet accessible. I now have the details for the SUA filled out for the xBox's IP address and ports.
    Hypothesis
    Since both devices are acting as DHCP servers the port mapping is not working. Rather then have the 660 distribute IP addresses and then having the Airport distribute another range of numbers, I need to have both devices bridge and distribute one range of numbers. Currently the 660 is using the 192.168 range and the Airport is using the 10.0 range.
    Am I correct? Any thoughts and suggestions are welcome.

    Port forwarding through a double NAT.. is near impossible.. !!
    And the xbox is so attuned to using UPNP it is very hard not to.. even port mapping is not a great fix. Since apple decided gamers did not count as users for Airports.. I think honestly it is best to bypass the airport and stick to upnp from the modem router.
    What method of authentication does your ISP use? Because it is really better to use one router.
    And in fact the router should be the Zyxel. If you plug the Xbox to the Zyxel running in full router mode, with the airport removed from the network does it work and open NAT??
    If not replace the Zyxel with a modern listed router that is xbox compatible and bridge the airport to it.

  • How to configure Netscape LDAP realm for WLS6.1

    I 've installed NDS 3.1 on my machine & created users & groups using Netscape admin
    console.
    dn='uid=abc,ou=AMITOrg,o=Airius.com'
    What information should be entered in the 'Properties' of V2 LDAP realm?
    Where should i specify server, port of my NDS?
    Please let me know the sample settings.
    Thanks & regards,
    Amit

    Which version of Netscape Directory Server ?
    NDS development has stopped several years ago.
    Regards,
    Ludovic.

  • SAP WEB Dispatcher for Two systems

    Hi experts,
    i want to configuration  SAP web dispatcher for two hosts
    web dispatcher has installed on saprate host( host are accessible via public ally) and other host contains two ABAP system are in same host.
    i have configure two HTTP ports in the Web Dispatcher profile
    icm/server_port_0 = PROT=HTTP, PORT=8888
    icm/server_port_1 = PROT=HTTP, PORT=7777
    In addition, you define the system assignments, as follows:
    wdisp/system_0 = SID=ERP, MSHOST=ms_erp, MSPORT=8082, SRCSRV=*:8888
    wdisp/system_1 = SID=CE1, MSHOST=ms_erp, MSPORT=8127, SRCSRV=*:7777
    but i want to know how can do the url mapping i want to open WEBGUI for both ABAP systems.
    and how can access?
    Please suggest.
    Regards,

    Hi Vivek,
    Check the below link, I think it would help you with the configuration.
    One Web Dispatcher, Multi Systems with URL Prefixes
    And also read the below document for the Mapping of one SAP Webdispatcher to Multiple Systems.
    http://help.sap.com/saphelp_nw73ehp1/helpdata/en/b0/ebfa88e9164d26bdf1d21a7ef6fc25/content.htm
    Regards,
    Sushil

  • MAP for Finished and Semi Finished goods

    Dear Friends,
    Please let me know;
    1. If Finished and Semi finsihed goods are maintained with price indicator 'S' and all are inhouse production then SAP updata moving average price or these material or not ?
    2. If SAP updata MAP for finished and semi-finished,  later can we change map manually or not ? if yes How ?
    3. Is there any way to stop updata of map by sap in case of finsihed and semifinished goods.
    Actually according to my product costing variant, I dont need any price in map of FG and SFG. Kindly give me your expert openion on this issue.
    Thanks
    Ravi

    Hi
    1. If you maintain price control S for inhouse produced finished product also, system updates moving average price with resepect stock and value of production (may be period wise production cost may be varying). But this is statistical.
    2. You can change price control from S to V if you require. You need to change first in material type and then change in material master.
    3. If the value is getting updated also it will have no impact. In case of product cost variant also it will get updated.
    Thanks

  • Configuring Multiple LDAP Domains

    I am having trouble configuring multiple ldap domains for declarative security and form-based authentication.
    I have setup another instance of Directory Server on my local machine, on a different port. I want to be able to talk to this alternate directory server for form-based authentication and roles.
    I have tried to do this by following the instructions at http://docs.iplanet.com/docs/manuals/ias/60/sp3/admin/adbasica.htm#21662, but I've had no luck. Below are screenshots of my configuration. (I've attached a word document in case you don't have a HTML-enabled mail reader).

    My screenshots were wrong in the e-mail below, but correct in the attached word doc.
    ----- Original Message -----
    From: Matt Raible
    Newsgroups: iplanet.ias.general
    Sent: Wednesday, August 22, 2001 7:05 AM
    Subject: Configuring Multiple LDAP Domains
    I am having trouble configuring multiple ldap domains for declarative security and form-based authentication with iPlanet Application Server 6.0, SP3.
    I have setup another instance of Directory Server on my local machine, on a different port. I want to be able to talk to this alternate directory server for form-based authentication and roles.
    I have tried to do this by following the instructions at http://docs.iplanet.com/docs/manuals/ias/60/sp3/admin/adbasica.htm#21662, but I've had no luck. Below are screenshots of my configuration. (I've attached a word document in case you don't have a HTML-enabled mail reader).

  • LDAP:Mapping Error while creating as per SAP Note No. 784697

    Hi,
    While configuring LDAP connection for Creating Users in Active
    Directory from Employee Data Stored in SAP HR, we are encountering
    error while mapping Structure as per the document provided at Link -
    https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/40b0d690-0201-0010-2c86-9092407528c3
    (Doc attached in attachment section also).
    Error encountered is - "The filter mappings are not suitable for the
    LDAP application USER", while we are mapping structure field as
    provided.
    Steps for Reconstruction    
    1. Go to transaction - LDAPMAP.
    2. Go to EDIT Mode - Select LDAP server, and double click on Mapping.
    3. Enter the mapping fields as provided in attached document at Page
    No.17, figure No.7.
    4.After entering all the mapping fields and when click on "Back"
    button, an error message occured as below (error doc attached) -
    "The filter mappings are not suitable for the LDAP application USER"
    please let me know.Why the error had encountered.

    Hi Chiranjeevi ,
    use the below thread to solve your issue ,
    LDAP and LDAPMAP - Mapping fields
    B&R,
    Saravana.s

  • Sending IDoc Batches to SAP: Issue with Header Mapping for SNDPRN

    We are sending batched IDocs from XI to SAP. We need the individual IDocs to reflect different SNDPRN values. Our mapping creates the different IDoc EDI_DC40 record correctly with different SNDPRN values. However, XI wipes out the SNDPRN values in the payload. When we define Header mapping to get the Sender Party as the XPath to the SNDPRN in the payload, then the header mapping errors out because the XPath returns multiple values.
    I wanted to know if anyone has successfully implemented sending IDoc batches to SAP from XI with different SNDPRN values.
    Your feedback is appreciated.
    Jay Malla
    Licensed To Code
    Genentech SAP XI Team

    Hello,
    I have the same problem. I want XI send an IDOC with the SNDPOR, SNDPRT and the SNDPRN that are in the EDIDC40.
    <u><b>I find this in sap.help : </b></u>
    <i>Mapping
    The IDoc adapter does not make any special demands on mapping. The IDoc adapter must simply be provided with an IDoc XML structure at the Integration Server outbound channel. This either already exists or must be generated by using a mapping.
    If the IDoc XML structure contains a control record, it is deleted and created again by the IDoc adapter. If you want to include additional values in the control record, you must select the Apply Control Record Values from Payload checkbox in the parameters in the communication channel and provide a corresponding mapping for the values.
    You can include the values from the following fields in your IDoc control record:
    MESCOD, MESFCT
    TEST
    EXPRESS
    STD, STDVRS, STDMES
    SNDSAD, SNDLAD
    RCVSAD, RCVLAD
    REFINT, REFGRP, REFMES</i>
    http://help.sap.com/saphelp_nw04/helpdata/en/b9/c5b13bbeb0cb37e10000000a11402f/frameset.htm
    Perhaps we must use party configuration but I don't know how do this !
    Regards,
    Chris<u></u>

  • SAP business process maps for mySAP ECC6.0?

    Any idea how we can get the SAP business process maps for mySAP ECC6.0?  Is this imbedded in Solution Manager?
    Thanks,
    Phani

    Hello Phani,
    I suppose you are looking for the solution maps for mySAP ERP (which contains SAP ECC as a component). These maps are not contained in the SAP Solution Manager, but they are delivered with the SAP Solution Composer, an offline PC tool which allows you to browse and pre-scope your own solution (evaluating your solution). The tool itself including the latest solution map content is always available for download at the SAP Service Marketplace:
    <a href="http://service.sap.com/s-composer">http://service.sap.com/s-composer</a>
    You can also view the mySAP ERP - as part of the cross-industry maps -  right here:
    <a href="http://service.sap.com/form/sapnet?_SHORTKEY=01100035870000338980&">http://service.sap.com/form/sapnet?_SHORTKEY=01100035870000338980&</a>
    The SAP Solution Manager would then come into play for configuring the respective processes (implementing you solution).
    Best regards,
    Doreen Baseler

  • Is there pre-configured message mapping for SRM Content?

    Hi,
    My requirement is to do a message mapping between the SRM Message "Purchase Order Request" and the R/3 Idoc Orders01. Is there a preconfigured message mapping in SRM content or will I have to do it?
    I see the generated proxy class from the outbound message interfacePurchaseOrderRequest_Out which will carry the message to XI and my requirement is to map it to the Interface ORDRSP.Orders01 Please let me know if there is a pre-configured message mapping for this ? or is the message mapping between the message "Purchase Order Request" and the R/3 IDOC ORDERS01 to be done by the developer himself?

    HI,
    There are mappings available in the predelivered SRM content from SAP.
    Did you import  the SRM content into the repository? If so , you can find this.
    www.service.sap.com/ibc -> Integrated Business Content for mySAP SRM->
    Hope this helps,
    Rgds,
    Moorthy
    Message was edited by:
            Krishna Moorthy P

  • How to install and configure "SAP MAPI Service Provider" in 470(basis 620)?

    Hi everyone,
    Requse:
    Send E-mail from SAP and Recive E-mail from MS outlook2003.
    My question:
    How to install and configure "SAP MAPI Service Provider" in 470(basis 620)?
    For example:
    Which setting need to do in R/3 server?
    Which parameters need to select when install 620gui?
    Which setting need to mark in MS outlook2003?
    Thanks and Regards,
    Colin.

    Hi Colin,
    For SAP MAPI read,
    http://help.sap.com/saphelp_46c/helpdata/en/04/81dd4ebf2811d2897f0000e8216438/frameset.htm
    For Sending mail from SAP,
    http://help.sap.com/saphelp_46c/helpdata/en/55/a8b538891b11d2a25a00a0c943858e/frameset.htm
    For Receiving mails read,
    http://help.sap.com/saphelp_nw04/helpdata/en/af/73563c1e734f0fe10000000a114084/frameset.htm
    <b>Which parameters need to select when install 620gui?</b>
    Don't get this question...
    <b>Which setting need to mark in MS outlook2003?</b>
    None
    Regards
    Juan
    Please reward with points if helpful

  • I have used SAP doc mgmt for years. We copied a client and now when I configure a Class to my DMS DIR and go to CV01n Additional Data NONE of the characteristic entry boxes show up. Additional Data is blank.

    I have used SAP doc mgmt for years. We copied a client and now when I configure a Class to my DMS DIR and go to CV01n Additional Data NONE of the characteristic entry boxes show up. Additional Data is blank.
    It appears there must be some high level setting missing in the client. I have checked all authorizations and cannot find a difference between this client and all of the other clients we have. Only this one client does not show the class characteristics in the Additional Data tab.
    Any ideas of why this standard function is not working). It does not matter which DIR I config the 017 class to, nothing shows on Additional Data.

    Hi,
    The issue is resolved. We are working in a sandbox with Class configuration on a DMS issue related to standard class 017. There are no standard settings in SPRO - Cross-Application Components | Maintain Object Types and Class Types | for the object type DRAW that will allow "auto-populating" characteristic values as we do with VC class 300.
    For whatever reason DRAW and class 017 are not configured by SAP in the same manner as class 300 for example.
    We made a config entry for DRAW Class 017 VBAP. Let's just say the system did not like that.
    We are exploring other options.

  • What jar for com.sap.aii.mapping is

    Dear
    i am testing with blow blog.
    /people/pooja.pandey/blog/2005/06/27/xslt-mapping-with-java-enhancement-for-beginners
    in this blog, java program use the following;
    import com.sap.aii.mapping.api.AbstractTrace;
    import com.sap.aii.mapping.api.StreamTransformationConstants;
    what .jar file name is?
    i could not find com.sap.aii.mapping on eclipse.
    thanks
    Denis

    Denis,
    You need the <b>aii_map_api.jar</b> file for this.
    You will get this in the following location on your XI server,
    <b>j2ee\cluster\server0\apps\sap.com\com.sap.xi.services</b>
    Upload the Jar, in your Project Build Path.
    Regards,
    Bhavesh

  • Error for package com.sap.aii.mapping.lookup

    Hi All
    I am writing a code for the DB lookup. When I import the package in the Message
    Mapping (Advance Function) I am getting an Error.
    C:/usr/sap/SXI/DVEBMGS00/j2ee/cluster/server0/./temp/classpath_resolver/Map6af6f7d1335111dc9b51000c2967ead8/source/com/sap/xi/tf/_MM_File2JMS_.java:3: package com.sap.aii.mapping.lookup does not exist
    import com.sap.aii.mappingtool.tf3.;import com.sap.aii.mappingtool.tf3.rt.;import java.util.;import java.io.; import java.lang.reflect.;import com.sap.aii.mapping.lookup.; ^
    C:/usr/sap/SXI/DVEBMGS00/j2ee/cluster/server0/./temp/classpath_resolver/Map6af6f7d1335111dc9b51000c2967ead8/source/com/sap/xi/tf/_MM_File2JMS_.java:57: cannot resolve symbol symbol : class Channel location: class com.sap.xi.tf._MM_File2JMS_ Channel channel = null;
    C:/usr/sap/SXI/DVEBMGS00/j2ee/cluster/server0/./temp/classpath_resolver/Map6af6f7d1335111dc9b51000c2967ead8/source/com/sap/xi/tf/_MM_File2JMS_.java:58: cannot resolve symbol symbol : class DataBaseAccessor location: class com.sap.xi.tf._MM_File2JMS_ DataBaseAccessor accessor = null; ^
    Thanks
    Farooq.

    Hey satish I am getting same Error:
    C:/usr/sap/SXI/DVEBMGS00/j2ee/cluster/server0/./temp/classpath_resolver/Map7801d381335311dc8660000c2967ead8/source/com/sap/xi/tf/_MM_File2JMS_.java:3: package com.sap.aii.mapping.lookup does not exist import com.sap.aii.mappingtool.tf3.;import com.sap.aii.mappingtool.tf3.rt.;import java.util.;import java.io.; import java.lang.reflect.;import com.sap.aii.mapping.lookup.;import java.io.*; ^ C:/usr/sap/SXI/DVEBMGS00/j2ee/cluster/server0/./temp/classpath_resolver/Map7801d381335311dc8660000c2967ead8/source/com/sap/xi/tf/_MM_File2JMS_.java:57: cannot resolve symbol symbol : class Channel location: class com.sap.xi.tf._MM_File2JMS_ Channel channel = null; ^ C:/usr/sap/SXI/DVEBMGS00/j2ee/cluster/server0/./temp/classpath_resolver/Map7801d381335311dc8660000c2967ead8/source/com/sap/xi/tf/_MM_File2JMS_.java:58: cannot resolve symbol symbol : class DataBaseAccessor location: class com.sap.xi.tf._MM_File2JMS_ DataBaseAccessor accessor = null; ^ 3 errors

Maybe you are looking for

  • Questions on C-Folders

    Hello All, Here are my questions on C-Folders. Thanks in advance. C-Folder questions: 1. Does a Functionality exist like u2018copy with referenceu2019 in C-Folders for objects. While I was testing I can copy objects (materials, documents) and paste t

  • Problems creating a new user in SAP EP 6.0

    Good mornig for all. We have a problem when in SAP EP 6.0 I try to create a new user. I am connected how superuser and this one has all authorities. When I input all fields to create a new user system response with "could not create user". I see logs

  • Saving Sales order in CRM to R/3

    Dear Friends, When i make a Sales order in CRM it is flown to R/3. There is no problem when i do this. But if i make any changes in the Sales order in CRM then the Delivery block in the item schedule lines of same sales order in R/3 comes as pending

  • Problem in downloading file using servlet

    Hello, I wnat to send a file throung servlet to my desktop program. when i call this servlet through internet explore it is working fine but when i call this in my desktop program then desktop program get nothing. my desktop program does not get anyt

  • ECC 6-  Table that gets updated when Currency Translation to Group Currency

    Hi All, I would like to know which table gets updated with the Values when we execute tcode "FAGL_FC_TRANS"? I would like to see the values that system posted during April 09, May09 etc for each GL that was Translated into Group Currency using the tc