FA with IDM (integration) flow solution

hi all,
I just would like to share with you guys this post that is very helpful if you are looking to integrate your current IDM enterprise with Oracle FA(+IDM soultion inside of it):
http://thiagoleoncio.blogspot.com/2014/05/how-oracle-fusion-apps-works-with-idm.html
I hope this helps you on your own solution.
thx and have a great day,
Thiago Leoncio.

Hi vikas and Frank,
Do you have any information related on How to enable the webservices in the GRC 10 (does NWBC holds the key). if you have any information related to it please share it with me.
Thanks and regards,
keerthi

Similar Messages

Are you utlizing SAP's Quality Center with Integration to Solution Manager?

Hello,
I am interested in hearing from folks who are utilizing SAP's Quality Center with or without Integration to Solution Manager. Please post your experience on setting this up and realizing the benefits, i.e. efforts involved, what features of HPQC you are using, is it a good tool to use for integrated SAP testing etc.
Thanks in advance for your help!
Abu

Hi
I luv solman so if u ask me i can do all with solman itself and say not to go with Quality center
but again it is upto project requirement
it is very easy to build the automated scripts in QTP etc used with Quality center but again bit more complicated in ECATT
its upto the ur decision but if u r gng with manual test case management forgot quality center and go with Solman
So far i have done 5 Test Management implementation including both type of test casees automatic and manual and all are managed with solman
moreover if u get service desk configured in place then its integrated with solman test management whic helps u a lot.....
one step ahead go for Change management.
Hope it ans ur query
Regards
Prakhar
Edited by: Prakhar Saxena on Jun 9, 2010 12:06 AM

Level of IDM integration with SAP

Hello.
I'd like to know the amount of integration IDM can have with a SAP ERP system. Specifically, (SAP) role assignment. Can you provision users with their SAP roles from the IDM?
I'm also curious as to whether you can control User organizations with IDM in a similar way as an LDAP resource. With the available creation and edition of the resource objects.
I know that it's possible to provision permissions to Users in the resource, along with password changes and so.
Is there any identity based operation that can't be done from IDM?
thanks for your time.
Jorge Garrido
Message was edited by: jgarrido
jgarrido

Hi Frank,
Thnx for the useful doc, can you share also the step by step document which can be used for user provisioning in IDM.
Basically I need a doc which talks about the following steps :
1. Insert a user with the correct roles(s) into one of the SAP Development boxes from IDM. (I found out yesterday the Portal handles users a bit differently - I think we should include the portal and one of the other systems too). The insertion of the user should be triggered through the Active Directory web interface.
2. Change the user roles through IDM.
3. Delete the user roles through IDM.
4. Have the user login to the SAP system with said account and test aforementioned roles.
Lemme know
Appreciate your prompt response

Integration of Oracle applications with IDM

Hi All,
Please trow some light on how do we integrate Oracle applications with Oracle IDM(Identity Management).
Is MRM capable of providing inbounding and outbounding webservices. If not do we have any adapters for integeating the other applications with IDM.
What is the good practice to integrate a BPEL service with IDM.
Thanks in advance.
Regards,
Naveen

Hi,
Have a look at this thread.
Installation Procedure for APEX
Installation Procedure for APEX
Regards,
Hussein

Integration of PeopleSoft with IDM

Hi,
While configuring PeopleSoft with IDM running on TOMCAT, I am getting "PeopleSoft: com.waveset.util.WavesetException: com.waveset.util.WavesetException: DOWNbea.jolt.ServiceException: Invalid Session" exeception and in the tomcat console, it is asking for pstools.properties file? I am connecting remotely to Peoplesoft server. Can anyone advice me how to overcome this problem?

You need a JAR file called psjoa.jar from your Peoplesoft support team. The JAR file contains all the pstools.properties file, as well as all the necessary classes for connecting to the Component Interface.
Jason

GRC -IdM integration (HCM IdM GRC IdM)

Hi IdM & GRC Gurus,
We want to implement a scenario where IdM (7.1) gets user data from HCM, followed by Workflow and SoD analysis in GRC (5.3) and Finally IdM performing the Provisioning (HCM > IdM > GRC > IdM), however I donu2019t see any documentation for this exact scenario. If SAP's direction is for IdM being provisioning solution and not GRC (CUP), the above scenario should be implemented. SAP documentation "SAP IdM Compliant Provisioning using GRC Access Control Configuration Guide. PDF" is similar but here GRC (CUP) is doing the final provisioning.
I have following questions
1     Which Framework should be imported in IdM to implement IdM - GRC integration, where IdM gets user data from HCM, followed by Workflow and SoD analysis in GRC and Finally IdM performing the Provisioning (HCM > IdM > GRC > IdM)?
2     GRC Provisioning Framework (GRC 53 Provisioning Framework_Folder.mcc) that is available on SDN, is based on HCM to IdM followed by GRC conducting SoD analysis and provisioning. Can the same framework be used for a scenario where IdM does the provisioning in the last step (same as question 1)?
3     "If answer to question 2 is yes? What are the changes/customization required to GRC Provisioning Framework (GRC 53 Provisioning Framework_Folder.mcc)? As per the limitations (page 37) mentioned in the document SAP IdM Compliant Provisioning using GRC Access Control Configuration Guide. PDF, ""It is not possible to only carry out a check for Segregation of Duties, without having the
request provisioned to the GRC Access Control back-ends. It means that the Identity Center
cannot just ask if a certain entitlement assignment is valid.
If the request is approved, the accounts and role assignments will always be performed in
the GRC Access Control back-end systems."" If this is true, how can we impliment HCM > IdM > GRC > IdM (IdM doing provisioning in the end)?"
4     If GRC Provisioning Framework (GRC 53 Provisioning Framework_Folder.mcc) is implemented along with HCM framework (SAP Provisioning Framework_Folder.mcc) and HCM_Staging_Area_Identity store.mcc, which Identity Store should GRC Provisioning Framework be imported (HCM_Staging_Area OR SAP_Master)?
Regards,
Anurag

Hi Joel,
within the VDS you create a local user ('HR_USER') and you choose some password. Later while configuring the HCM system you use these credentials to define the connection from HCM to the VDS.
Kind regards
Frank

ActiveDirectory - SAP IDM integration in Identity Life cycle Management

Hi Experts
In our landscape SAP HCM is supposed to be the leading data source and SAP IDM takes identity information from SAP HCM. From SAP IDM it will provision into Active directory and other third party systems, Sap systems.
Here are the questions
1) How can we leverage on the investment on Active directory after SAP IDM -Active directory investment ? I mean after SAP IDM comes to a landscape, Active directory will only be used to login to domain and for authentication if for java system Active directory have been set as user data source. What are the other advantages of Active directory- SAP IDM integration as Active directory will not be leading data source and identity information will be in identity store.?
2) After the user details are taken from SAP HCM system, will the user record will be created in SAP IDM on Identity store ? Is it where we actually assign the SAP IDM business role and the related technical role to the user?
3) Suppose if we assign a business role " employee " , will IDM actually create user id in all target system and assign all the technical roles? . Or we have to manually select each repository for target system in Identity center and select the privileges and provision it ? Will there be any automated feature that after assigning the business role to identity in identity store users and roles get automatically provisioned on all the target systems?
Thank you in advance for your help.

Hi Matt,
Thank you very much.
Only change we have is before approval it should go to GRC AC check all the compliance and only after that it is approved and it should come back to SAP IDM .
I am actually looking for a tutorial which actually shows how you assign a business role and the whole procedure of SAP IDM automatically provisioning to target systems which you have just explained. I suppose there is no such exact tutorial and I want to know how we can configure this on SAP IDM . Any specific clues?
Also I am describing the exact steps that will follow . Correct me if I am wrong.
1) User id will be created on AD with same user name and password as it is in Identity store. Will be assigned AD groups
2) Create same user in Portal and make the user data source as AD and will assign the technical role portal as per the business role definition
3) create same user in all abap systems and set abap database as user data source and assign the technical role needed as per the business role definition
4) Create same user in third party systems and with the privileges on their target systems as per the business role definition.
With this provisioning stops. I suppose all the above steps will be automatically done by SAP IDM with no manual interaction required after final approval. Correct me if I am wrong.
So some other information i wanted is
1) When you assign business role at work flow, how exactly SAP IDM know about the target systems that user should be created and assigned roles and made their authentication source.
for eg:- for a business role "employee" should get access to ERP with role X, AD with group Y, Portal with role Z. So in work flow when business role employee is assigned how SAP IDM will know that user should be created on to ERP with role X, AD with group Y, Portal with role Z. Can you explain technically along with detail steps? Or how exactly we configure a business role which knows the target systems and their techical roles.
Thank you once again for the fabulous help . You/Matthew is a tremendous help in understanding SAP IDM better.

TS1468 I am having trouble with two cover flows duplicating themselves more than once, is there anyone out there that can help me with this, they are not duplicated in my itunes library, just the ipod.

I am having trouble with two cover flows on my IPOD, duplicating themselves more than once, they haven't duplicated themselves in my Itunes library, just the ipod, could anyone have any ideas on how I could fix this problem. I have tried so many times, even if I restore the ipod, it still does the same thing. Please if possible email me at [email protected] with any suggestions.

Aha! I have sorted it.
For those with similar problems, the solution is this:
Macintosh HD > Library > Audio > MIDI Drivers
Then delete DigiDioMidiDriver.plugin

Connect one Business system with two Integration Server

Hello,
Can we able to connect one Business System with two Integration Server?
I have one Business system (ECC 6.0 with the client 900) and it is already connected with PI 7.0 system.Can I able to connect the same sytem (with same client) with PI7.1?
I want to do the HTTP Connection for ABAP Proxy for this two XI system with one business Sytem ?
Is this possible ?Is there any work around solution there?
Thanks.

Hello ,
This document describes about connecting with Two PI7.1 system using Application Server 7.1 and Application Server 7.0 SP14 .
I want to connect same ECC system via abap proxy with two different PI system .One is PI7.0 and another one is PI7.1 system.
Is this possible if i use Application Server 7.1 or Application Server 7.0 SP14 ?
Thanks.
Lakshmi
Edited by: Muthulakshmi Pandi on Apr 16, 2009 11:48 PM
Edited by: Muthulakshmi Pandi on Apr 17, 2009 12:21 AM

Multiple integration flows for different business operations

Hi - I have following business requirement & need ur advice.
There are different business operations (read as INSERT/DELETE/QUERY) to performed on same business object (read as CUSTOMER). In order to develop these integration use case I can have following three approaches.
*1. Single Requestor ABCS & Single Provider ABCS -* Develop single integration flow & implement logic for the business operations in them. That means, Develop single Requestor ABCS for all business operations, which will call the EBS and again EBS would call same Provider ABCS. Both Requestor & Provider ABCS would implement business logic for all business operations required.
*2. Single Requestor ABCS & Multiple Provider ABCS -* In this case the flows for all business operations starts with single point service. That means, Develop single Requestor ABCS for all business operations, which will call the EBS and again EBS would call different Provider ABCS based on the business operations. The Requestor ABCS would implement business logic for all business operations required. There would be different ABCS service for different business operations.
*3. Multiple Requestor ABCS & Multiple Provider ABCS -* In this case the completely independent flows are to be developed for all business operations. Independent Requestor ABCS and independent Provider ABCS. Off course if there some common business logic for all or some business operations, those can be implemented as common service & can used across all independent flows for different business operations.
Please do suggest what approach would be best one to pick up. Or it is case to case basis. In case yes, please suggest the criteria on which the decision can be taken.
Thanks In Advance
Priyadarshi

Hi Pryadarshi,
AIA recommends having an ABCS for each Verb and Noun combination for a specific Business Process, i.e. CreateCustomerABCS and UpdateCustomerABCS. Therefore, #3 would be the preferred approach. This is to allow for maximum flexibility. However, you may have a process that demands to model the integration as #2.
The decision would depend on how the participating application services are modeled and the granularity of individual service call. For example, a ProcessCustomer invocation at the source end may call CreateCustomer provider service.
Regards
Rohit

How to create Integration Flow for SOAP to RFC scenario?

Hello Friends,
We have Single Stack SAP PO 7.3 EHP 1 SP08 AS Java in our environment. We have a scenario where a RFC needs to be made available as SOAP Web Service. So we are using SOAP Sender Adapter and RFC Receiver adapter. We want to build this scenario with NWDS (Eclipse). We have imported the RFC and created data types, message types, service interfaces etc. But we are facing trouble in creating the Integration flow.
Please let us know if we need to create only one integration flow or need to create two integration flows (one for request and one for response) and what all configuration would be needed in Business Component and Communication Channel.
A step by step guide would be highly appreciated.
Best Regards,
Shreyansh Shah

Hi Shreyansh,
Found these links for you. Have a look at them and go through them. They should help you.
https://help.sap.com/saphelp_nw73ehp1/helpdata/en/95/8969b91d50439296dbd0a8ded93da7/content.htm
Understanding Integration Flow - Process Integration Tools (Eclipse-Based) - SAP Library
https://help.sap.com/saphelp_nw73ehp1/helpdata/en/e4/c9be6beab94f0b932e3c67f50e0093/content.htm
Regards,
Jannus Botha

Integrate an existing SOA11g suite with IDM 11g

Hello gurus,
     We need to install SOA 11g with Oracle Service Bus, Service Registry,BPEL Process Manager, Web service Manager. Along with this setup , we need to Configure Oracle integrated security framework to enable security and identity management policies to be defined centrally.
     For this, do we need to install seperate SOA11g suite and configure, OSB, BAM, WSM etc and later integrate it with IDM? IDM would also need SOA for workflows, can we use the already configured SOA11g with IDM or we need to install a seperate SOA 11g for IDM's use?
     Am a little confused with integrating SOA11g with IDM11g so any guidence would be very helpfull.
Thanks

828703 wrote:
hai all,
Please let me know if during the installation of IDM 11g we can point to and use an existing deployment of the SOA or not? are we bound to use the SOA that is shipped with the IDM deployment media?
As it is mentioned in the oracle document that we can not use the SOA installed with IDM (bundled with IDM 11g) for any other application, it is exclusively for IDM. So can it be other way around that we can't use existing SOA for the IDM?
thanks....Nopes, I have this from good authority, as of now you cannot point OIM to an existing SOA but will have to use the same bundled with OIM and should be in same domain.

Activation of CRM RDS with ERP integration impact on existing ERP configuration

Hi,
I'm doing automatic content activation (via Solution Builder) of the CRM RDS solution with ERP integration. The CRM system is a new installation which will linked to an existing ERP system.
Will the activation of RDS Solution content overwrite the existing configuration in ERP? What is impact of on existing configuration and existing process on ERP?
Regards,
SK

1. The add-on seems to support all new versions of ECC, does this include ECC on HANA ? --> The add-on supports all release of ECC above the base release mentioned in the Integration guide, including ECC on HANA
2. Is it necessary to backup the environment before installing the add-on ? --> The Add-On does not contain any DB tables. It should not interfere with the ECC environment, so you can install these without any disruption or downtime. As part of general hygiene, you may want to make sure that there is a recent enough backup for the ECC system.
3. The component seems to be isolated from impacting any ECC functionality and its just for the purpose of integrating C4C with ECC. Would this mean that no regression testing is required in ECC ?
No regression testing is required for ECC standard functionality. It will not affect existing distribution models. You will have to set up new ones for Cloud for Customer Integration scenarios.
4. The component doesn't seems to have an uninstall option which would meant that any reverts could only be done through system backup only. Is this accurate ? --> There is no uninstall option.

OpenSSO-Sun IDM integration

Hi All,
I have implemented the OpenSSO-Sun IDM integration based on the "OpenSSO Integration Guide.pdf". Now, if the users are created in Sun-IDM are provisioned to OpenSSO. Can anyone suggest me, can the users created in OpenSSO be provisioned to Sun IDM?
Also, is there any way to have a password sync between OpenSSO and Sun IDM users? That is, if the user's password is changed in OpenSSO can it also be changed in Sun-IDM?
Best Wishes,
Aruna

Hi Frank,
Thanks for the response,
1. This is user/pw from the AC system you need to send with the web service call from SUN to AC
So, we create and provide user credentials to IDM team and they need to incorporate the user credentials when ever they are calling the web services in AC5.3 ?
For this initial communication happening, what need to be done. Setting up SAP Jco is required in this case? Do we get involved with the configuration/development activity at IDM end?
I could not find proper documentation on this, this leaves me in what amount of involvement I have to do as a SAP GRC AC5.3 consultant.
Regards......

HCM IDM Integration

I'm working on integrating HCM with IDM. I came across the following limitations in one of the documents i happened to glance.
1. When replicating the data to the Identity Center from SAP HCM over the Virtual
Directory Server, you can only use scheduled synchronization. You can not
synchronize the data based on events. This is a limitation of SAP HCM.
2. The delta mechanism is not pre-configured when importing the data from the SAP
HCM system into the staging area in the Identity Center. A full load is always
performed.
Can someone suggest me ways to achieve this integration. Is there are document available?

Hi Joel,
in general, the delta mechanism is only availabe if you are using the Business Suite 6.0 Ehp4 and NW IdM 7.1.
The documentation describes shortly which BADIs have to be activated to use the delta mechanism (usually you will modify the BADI implementation to catch changes of employee master records which are relevant for your IdM installation only):
Retrieval of Employee-Related Data by SAP ERP HCM
http://help.sap.com/erp2005_ehp_04/helpdata/EN/75/28be4785c247828834285cc3aefc11/frameset.htm
If you are using this delta mechanism you can schedule the LDAP export with a short repetition period - as a result you get something like nearly event driven synchronization between HCM and IdM.
Kind regards
Frank

FA with IDM (integration) flow solution

Similar Messages

Maybe you are looking for