IDM 8.0 : See connected users on Identity Manager ?

Hi everybody.
My client wants to see all connected users on IdM in order to upgrade the application without disturbing them.
It is possible to see connected users on IdM ?
If it's true, can you explain me the steps to achieve it ?
Thanks in advance.
Florent
Edited by: flobR on Jun 5, 2009 2:05 PM

Florent...
Sun Identity Manager does not give you the ability to see who is currently connected to the application. The key is that SIM is simply a web application running on the J2EE application server. Most J2EE application servers should give you some functionality in this area. Check the documentation for your application server.
If your application server is tomcat, you'll likely need to do some custom coding and create an implementation of HttpSessionListener to track user sessions.
Thanks...
-Lester
[http://www.identityworker.com|http://www.identityworker.com]

Similar Messages

Unable to create the user in identity management

Hi,
I have installed ABAP+JAVA system as per standard ABAP will take care of java datasourse.
But we can create the user in identity management, I could not create the user in identity management.
In R3 for j2ee_admin user i have given the role SAP_BC_JSF_COMMUNICATION and SAP_BC_JSF_COMMUNICATION_RO
I am phasing the issue when i create the user in identity management :
Current user has user creation permissions in the UME, but cannot create users in the back-end system (data source). The original and possibly untranslated message was: "No active writeable datasource found for user creation, check your Persistence Configuration.".

Please check this thread /message/7428560#7428560 [original link is broken]
Thank you,
Shyam

Error when access User Administration / Identity Management

The user 'administrator' is locked.
When I try to access User Administration / Identity Management area to unlock the 'administrator' user I got the following error:
Can anyone help me ?
#1.5#0050569F4EE700610000003F0000070400043B1305FE89C8#1190852804709#com.sap.security.core.wd.jmxmodel.JmxModelCompInterface#sap.com/tcwddispwda#com.sap.security.core.wd.jmxmodel.JmxModelCompInterface#daniel.silva#498####531a11606c9011dcb22f0050569f4ee7#SAPEngine_Application_Thread[impl:3]_18##0#0#Error##Java###public void supplyUmeProperties(IPrivateJmxModelCompInterface.IUmePropertiesNode node, IPrivateJmxModelCompInterface.IContextElement parentElement)
[EXCEPTION]
#1#java.lang.reflect.UndeclaredThrowableException
     at com.sap.security.core.jmx._gen.IJmxServer$Impl.getUmeProperties(IJmxServer.java:1199)
     at com.sap.security.core.wd.jmxmodel.JmxModelCompInterface.supplyUmeProperties(JmxModelCompInterface.java:847)
     at com.sap.security.core.wd.jmxmodel.wdp.InternalJmxModelCompInterface.supplyUmeProperties(InternalJmxModelCompInterface.java:506)
     at com.sap.security.core.wd.jmxmodel.wdp.IPublicJmxModelCompInterface$IUmePropertiesNode.doSupplyElements(IPublicJmxModelCompInterface.java:3892)
     at com.sap.tc.webdynpro.progmodel.context.Node.supplyElements(Node.java:408)
     at com.sap.tc.webdynpro.progmodel.context.Node.getElementList(Node.java:351)
     at com.sap.tc.webdynpro.progmodel.context.Node.createMappedElementList(Node.java:500)
     at com.sap.tc.webdynpro.progmodel.context.Node.supplyElements(Node.java:395)
     at com.sap.tc.webdynpro.progmodel.context.Node.getElementList(Node.java:351)
     at com.sap.tc.webdynpro.progmodel.context.Node.createMappedElementList(Node.java:500)
     at com.sap.tc.webdynpro.progmodel.context.Node.supplyElements(Node.java:395)
     at com.sap.tc.webdynpro.progmodel.context.Node.getElementList(Node.java:351)
     at com.sap.tc.webdynpro.progmodel.context.Node.createMappedElementList(Node.java:500)
     at com.sap.tc.webdynpro.progmodel.context.Node.supplyElements(Node.java:395)
     at com.sap.tc.webdynpro.progmodel.context.Node.getElementList(Node.java:351)
     at com.sap.tc.webdynpro.progmodel.context.Node.getElements(Node.java:339)
     at com.sap.tc.webdynpro.progmodel.context.Node.getElementAtInternal(Node.java:617)
     at com.sap.tc.webdynpro.progmodel.context.Node.getCurrentElementInternal(Node.java:870)
     at com.sap.tc.webdynpro.progmodel.context.Node.getCurrentElement(Node.java:877)
     at com.sap.security.core.wd.navigation.wdp.IPrivateNavigationFrameView$IContextNode.currentUmePropertiesElement(IPrivateNavigationFrameView.java:161)
     at com.sap.security.core.wd.navigation.NavigationFrameView.onActionSmallSize(NavigationFrameView.java:159)
     at com.sap.security.core.wd.navigation.NavigationFrameView.wdDoInit(NavigationFrameView.java:97)
     at com.sap.security.core.wd.navigation.wdp.InternalNavigationFrameView.wdDoInit(InternalNavigationFrameView.java:161)
     at com.sap.tc.webdynpro.progmodel.generation.DelegatingView.doInit(DelegatingView.java:61)
     at com.sap.tc.webdynpro.progmodel.controller.Controller.initController(Controller.java:215)
     at com.sap.tc.webdynpro.progmodel.view.View.initController(View.java:398)
     at com.sap.tc.webdynpro.progmodel.controller.Controller.init(Controller.java:200)
     at com.sap.tc.webdynpro.progmodel.view.ViewManager.getView(ViewManager.java:690)
     at com.sap.tc.webdynpro.progmodel.view.ViewManager.bind(ViewManager.java:536)
     at com.sap.tc.webdynpro.progmodel.view.ViewManager.getView(ViewManager.java:705)
     at com.sap.tc.webdynpro.progmodel.view.ViewManager.bindRoot(ViewManager.java:560)
     at com.sap.tc.webdynpro.progmodel.view.ViewManager.init(ViewManager.java:155)
     at com.sap.tc.webdynpro.progmodel.view.InterfaceView.initController(InterfaceView.java:43)
     at com.sap.tc.webdynpro.progmodel.controller.Controller.init(Controller.java:200)
     at com.sap.tc.webdynpro.progmodel.view.ViewManager.getView(ViewManager.java:690)
     at com.sap.tc.webdynpro.progmodel.view.ViewManager.bind(ViewManager.java:536)
     at com.sap.tc.webdynpro.progmodel.view.ViewManager.getView(ViewManager.java:705)
     at com.sap.tc.webdynpro.progmodel.view.ViewManager.bindRoot(ViewManager.java:560)
     at com.sap.tc.webdynpro.progmodel.view.ViewManager.init(ViewManager.java:155)
     at com.sap.tc.webdynpro.clientserver.window.WebDynproWindow.doOpen(WebDynproWindow.java:311)
     at com.sap.tc.webdynpro.clientserver.window.ApplicationWindow.open(ApplicationWindow.java:204)
     at com.sap.tc.webdynpro.clientserver.cal.ClientApplication.init(ClientApplication.java:347)
     at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.initApplication(ApplicationSession.java:668)
     at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doProcessing(ApplicationSession.java:268)
     at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessingPortal(ClientSession.java:725)
     at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessing(ClientSession.java:661)
     at com.sap.tc.webdynpro.clientserver.session.ClientSession.doProcessing(ClientSession.java:227)
     at com.sap.tc.webdynpro.clientserver.session.RequestManager.doProcessing(RequestManager.java:150)
     at com.sap.tc.webdynpro.clientserver.session.core.ApplicationHandle.doProcessing(ApplicationHandle.java:73)
     at com.sap.tc.webdynpro.portal.pb.impl.AbstractApplicationProxy.sendDataAndProcessActionInternal(AbstractApplicationProxy.java:739)
     at com.sap.tc.webdynpro.portal.pb.impl.AbstractApplicationProxy.create(AbstractApplicationProxy.java:208)
     at com.sap.portal.pb.PageBuilder.updateApplications(PageBuilder.java:1240)
     at com.sap.portal.pb.PageBuilder.createPage(PageBuilder.java:340)
     at com.sap.portal.pb.PageBuilder.init(PageBuilder.java:538)
     at com.sap.portal.pb.PageBuilder.wdDoInit(PageBuilder.java:177)
     at com.sap.portal.pb.wdp.InternalPageBuilder.wdDoInit(InternalPageBuilder.java:150)
     at com.sap.tc.webdynpro.progmodel.generation.DelegatingComponent.doInit(DelegatingComponent.java:108)
     at com.sap.tc.webdynpro.progmodel.controller.Controller.initController(Controller.java:215)
     at com.sap.tc.webdynpro.progmodel.controller.Controller.init(Controller.java:200)
     at com.sap.tc.webdynpro.clientserver.cal.ClientComponent.init(ClientComponent.java:429)
     at com.sap.tc.webdynpro.clientserver.cal.ClientApplication.init(ClientApplication.java:345)
     at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.initApplication(ApplicationSession.java:668)
     at com.sap.tc.webdynpro.clientserver.session.ApplicationSession.doProcessing(ApplicationSession.java:268)
     at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessingStandalone(ClientSession.java:705)
     at com.sap.tc.webdynpro.clientserver.session.ClientSession.doApplicationProcessing(ClientSession.java:659)
     at com.sap.tc.webdynpro.clientserver.session.ClientSession.doProcessing(ClientSession.java:227)
     at com.sap.tc.webdynpro.clientserver.session.RequestManager.doProcessing(RequestManager.java:150)
     at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doContent(DispatcherServlet.java:56)
     at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doPost(DispatcherServlet.java:47)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:390)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:264)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:347)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:325)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:887)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:241)
     at com.sap.engine.services.httpserver.server.Client.handle(Client.java:92)
     at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:148)
     at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
     at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
     at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
     at java.security.AccessController.doPrivileged(Native Method)
     at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:100)
     at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:170)
Caused by: javax.management.InstanceNotFoundException: com.sap.default:name=IJmxServer,j2eeType=UmeJmxServer,SAP_J2EECluster=KMD not in repository
     at com.sap.pj.jmx.server.MBeanServerImpl.invoke(MBeanServerImpl.java:940)
     at com.sap.pj.jmx.server.interceptor.MBeanServerWrapperInterceptor.invoke(MBeanServerWrapperInterceptor.java:288)
     at com.sap.engine.services.jmx.CompletionInterceptor.invoke(CompletionInterceptor.java:400)
     at com.sap.pj.jmx.server.interceptor.BasicMBeanServerInterceptor.invoke(BasicMBeanServerInterceptor.java:277)
     at com.sap.jmx.provider.ProviderInterceptor.invoke(ProviderInterceptor.java:258)
     at com.sap.engine.services.jmx.RedirectInterceptor.invoke(RedirectInterceptor.java:340)
     at com.sap.pj.jmx.server.interceptor.MBeanServerInterceptorChain.invoke(MBeanServerInterceptorChain.java:330)
     at com.sap.engine.services.jmx.MBeanServerSecurityWrapper.invoke(MBeanServerSecurityWrapper.java:287)
     at com.sap.engine.services.jmx.ClusterInterceptor.invoke(ClusterInterceptor.java:813)
     at com.sap.pj.jmx.server.interceptor.MBeanServerInterceptorChain.invoke(MBeanServerInterceptorChain.java:330)
     at com.sap.security.core.jmx._gen.IJmxServer$Impl.getUmeProperties(IJmxServer.java:1172)
     ... 84 more

Hey,
Try this steps
C:\usr\sap\J2E\JC01\j2ee\configtool->configtool.bat->open it
1. Click on Secure store
2. Right you will find :
admin/password/J2E->retype your admin passowrd which you gave during installation=>SAVE properly
Restart the server and try login visual admin

Unable to see Default alias in Identity management

Hi Experts!!!!!
I have added a new system in the portal which connects my backend system, I have defined the system alias and in the screen it shows me the alias is ready for user mapping,
But i have selected SAPLOGON ticket, then the system is not visible in the identity management.But when i select uwidp the system is available for user mapping.Due to this the connector test gets failed.
I have seen in some of the posts and found that eu_role should be given in permissions i have done it.Does this needs server restart to make the changes to take effect.
What would be the problem I am able to see the alias in the other system when i selected SAPLOGON ticket.
After creating the alias do we need to make any changes?
I have followed the help document of SAP.
Regards,
Vamshi.

Hi Vamshi,
basically, SAP NetWeaver Portal offers two different Single Sing-on techniques to connect seamlessly with integrated backend systems.
1) SAP Logon Ticket
2) User Mapping
This are two totally different techniques to achieve the same goal: Single Sign-on.
Using SAP Logon Ticket, the SAP NetWeaver Portal issues an encrypted and signed HTTP coockie containing the portal user's logon id. The backend system checks the ticket and authenticates the corresponding user.
Using User Mapping, the SAP NetWeaver Portal uses previously given backend credentials (username/password) to log into backend application on behalf of the users. The user can enter his credentials either via personalization dialog (therefore the user needs the eu_core_role) or in identity management.
If you select SAP Logon Ticket the user does not need to map his backend credentials. That's why you do not see the system in the identity management (tab user mapping).
However, if you select User Mapping (UIDPWD) and run a connection test the SAP NetWeaver Portal tries to log into the backend system using the mapped credentials of the current user. If the current user did not map any credentials (or if he entered wrong credentials) the connection test will fail.
Hope this helps you to understand how the portal works.
Best regards,
Martin

Problem in creating a user in Identity management

hi all
i work on portal 7.0 and am involved in the branding of the portal.
when i try to create an user in Identity mgt the following error message is displayed..
..current user has user creation permissions in th UME , but cannot create users in the backend systems(datasource).Original and possibly untranslated message was "no active writeable datasource found for usr craetion,check your permissions configuration".
kindly help
thanks in advance
krishna chaitanya.

Hi Chaitanya,
I think you are using a LDAP or SAP system to store users. The problem is when you are defining the datasource configuration file. This might be in *read only * mode.
You can check this by System Admin -> System Configuration -> UME Configuration ->Data Sources tab..
You check wether you data source config file is in read only mode or not. If this file is in read only mode you cannot create users from the front end
You need to create users from LDAP or SAP system what ever may be your back end.
Thanks,
Raju Bonagiri

I can't see system users in Workgroup Manager

How do I get the user accounts that are already on Mac OS X Server to show up as users in Workgroup Manager? Re-adding the user from "Add User" creates a conflict, so I know the account is being seen by Workgroup Manager. Thanks for the help.

Hi
Yes. Firstly de-select the option to show System Users and Groups. Use the Filter to only show you Users with UIDs above a certain number. If you've used the default numbering system start with IDs over 1000. This gets around you inadvertently exporting and/or deleting the default Administrator account.
Select the users you're interested in the Local node. Go the Server Menu and select Export. Save the exported file to the Desktop and give it a meaningful name. Now delete those exported users from the local node. You can't have the same users in both directory nodes. Select the LDAP node and select Import from the Server Menu. The rest should be fairly obvious.
A couple of things to look out for. When importing those Users they should automatically be assigned Open Directory for their User Password Types in the Advanced Tab. Change them to suit if they come in as Crypt. Passwords don't carry over so you will have to either assign these again or force users to change them at next log on. Assuming these are users with networked home profiles?
Tony

Any good Power Shell command or script to see connected users in real time for Lync 2013

Are there any good Power Shell commands or scripts that can tell you how many users are connected to a pool in real time so you can evaluate the current load. I have 3 FE servers in a single pool. We just started deploying the lync client to the users and
were curious as to how many are actually connected. I saw a number of home made scripts but really didn't care for any of them. I just want to find out how many users that are actually connected to the pool at a particular moment so we can see how many users
are really using the product.

Have you looked at Pat Richard's get-csconnections script?: http://www.ehloworld.com/269
Please mark posts as answers/helpful if it answers your question.
Blog
Lync Validator - Used to assist in the validation and documentation of Lync Server 2013.

Server admin not seeing directory users from workgroup manager

I am setting up a new Xserve with Snow Leopard (get 'em while we can). We have eight other XServes running Leopard or Snow Leopard server. On those machines we have set up file sharing over AFP. The machines are connected to our Active Directory server and our users authenticate using their domain passwords. All of our other servers were setup in Leopard and were upgraded to Snow Leopard. We have not had any issues authenticating to those boxes.
This is the first one that we have actually setup new-out-of-the-box in Snow Leopard. I can set Workgroup Manager up to connect to our AD, and can see and search my domain users and groups in Workgroup Manager. When I try to set up my File Shares in Server Admin, none of my domain users show up-only local accounts.
What have I missed? In Leopard, when I connected to the domain, the users immediately became available in Server Admin. Not so in SL, at least on this box.
Help?

Hi
The first thing to check is if you've bound the Server to the AD Domain. The second thing is if the /Active Directory/All Domains is in the Search Policy. If you don't do either of these WorkGroup Manager won't display anything coming from the AD Schema.
In 10.6 Apple moved the Directory Utility from where it used to be in /Applications/Utilities and made it part of the Accounts Preferences Pane. Perhaps it's this change that's confusing you? I would not advise doing this but it's also possible you used the Server Setup Assistant to do most of the configuration? If you did maybe something went wrong at that stage (won't be the first time) and you need to manually bind the Server instead?
As ever make sure this server is using the same NTP Server as the others.
Tony

Unable to create users in identity management of XI system

Hi
I am trying to create an user using j2ee_admin user in XI system. But I am getting the following error
Current user has user creation permissions in the UME, but cannot create users in the back-end system (data source). The original and possibly untranslated message was: "The unique ID is null and principal cannot be bound!".
Please help me why I am getting this problem and how to resolve it
Regards
Sowmya

Hi,
Please make sure that you have assigned the role of
SAP_BC_JSF_COMMUNICATION role to the user J2EE_ADMIN.
Since, it is delivered without a profile, so you must first generate a
profile otherwise it will not work properly.
Please check that the role is NOT SAP_BC_JSF_COMMUNICATION_RO (this is
a read only role and therefore the users won't be able to create the
user).
As described in the SAP Note 748195 you can assign the
assign the SAP_BC_JSF_COMMUNICATION role to the communication user.
You must restart the J2EE Engine after you change the role assignment.
Additionally, you can check consistencies on UME using SAP Note 1016283.
Best regards,
Sumanth

Using SPML for Identity Management in EJB WebService

Dear All,
I have a requirement af using SPML(Service Provisioning Markup Language) for Identity management. Identity management is used to manage the user like deleting a user, modifying, adding a user etc for a application.For that the request for all these functions need to be made using the SPML. The idea is that first the data used to make any request will come from the SAP R3 using an EJB which will retrieve that data by calling a BAPI via JCO and then it is needed to be passed to the entitlement system using the SPML.Thus I have to publish a web service which will get data by calling BAPI and give it to entitlement system using SPML and how can I achieve it?. I have less knowledge about SPML, your guidence will help.
Thanks & Regards,
Samir

There is a document on the SAP Service Market Place that covers the SPML in the UME APIs. This quote is from the [UME documentation|http://help.sap.com/saphelp_nw04s/helpdata/en/5b/5d2706ebc04e4d98036f2e1dcfd47d/frameset.htm]:
SPML Support
The UME APIs support access using the Service Provisioning Markup Language (SPML). For more information, see service.sap.com/security > Security in Detail > Secure User Access > Identity Management > SAP Identity Management APIs.
-Michael
Edited by: Michael Shea on Jan 17, 2008 9:01 AM

JmxSecurityException when using Identity Management

Search or 'create new user' in Identity Management iView results in the following error:
"com.sap.engine.services.jmx.exception.JmxSecurityException: Caller
<anonymoususer> not authorized, only role administrators is allowed to
access JMX".
The message appears while I am logged in as Administrator to the portal; looks like a misconfiguration of anonymous access/user.
The same error appears when navigating to IM through NWA, and when trying to use other admin tasks in NWA.
How could anonymous user configuration affect the IM iview within the super_admin_role?
ONly When assigning <anonymoususer> administrators group, the IM iview will be functioning properly while logged in as Administrator!
Any help is much appreciated.

Hi ,
The same error appears when navigating to IM through NWA, and when trying to use other admin tasks in NWA.
ONly When assigning <anonymoususer> administrators group, the IM iview will be functioning properly while logged in as Administrator!
To access visual admin or NWA , user should be assigned to administrator role .
Search or 'create new user' in Identity Management iView results in the following error:
"com.sap.engine.services.jmx.exception.JmxSecurityException: Caller
<anonymoususer> not authorized, only role administrators is allowed to
access JMX".
The message appears while I am logged in as Administrator to the portal; looks like a misconfiguration of anonymous access/user.
Can you please tell clearly stepwise what exactly you are trying to do?
Regards,
Koti Reddy

Identity Management (Changed)

Dear Experts,
I am facing a peculiar problem. When I click on
user administration->identity management
the content area is empty. Then I used
content administrator->portal content->search
to have a look at the user administration WorkSet. I found that the Identity Management ivew had a "(Changed)" text added to it. The same is there for import also. I have logged in using j2ee_admin login. Can anybody suggest me some solution for this.
Edited by: Thanu Krishnan on Apr 11, 2008 10:51 AM

Hi,
user administration->identity management
when you select this you will get the search option on the right hand side of the screen are you able to get that,the select j2ee_admin user id give a search , thats what you get when you select the ablove link what else you want to get?
Regards,
Vamshi.

VERY URGENT - Identity Management Error

Hi,
When I run the User Administration --> Identity Management --> it is giving an error :
A required service for Identity management user interface is not available . Contact System Admistrator .
In SAP NOTE 869852 , pg 6 : to reploy the UMEADMI*.SDA .
Will it be the correction of reploying ?
As this is occuring in production server , if i apply any other affects will cause to the server.
Thanks ,
Srini

Srinivas,
Perhaps some of the portal application hasn't started. Perform the following steps:
To restart all the portal apps, telnet to the portal server:
telnet portal.mycompany.com 50108
// If your port is 50000, then the telnet portal becomes 50008.
Login as administrator and then run the following commands:
jump 0
add deploy
list_app
start_app-all
If portal runs on a cluster, follow these steps as well:
jump 1
add deploy
list_app
start_app-all
Hope this helps.

Extended Identity Manager User Attributes

Howdy,
I'm trying to add some attributes to the user accounts stored local to the Identity Manager. I went to the configure menu, and set up the attributes under the Identity Attributes tab. I set the attributes to be stored locally and saved them. I also made sure to indicate that the attributes should be available to the IDM admin and end user interfaces. However, the attributes do not show up when I list the users. When I go to the users attribute tab, it contains only the Account ID attribute. Shouldn't I be able to add a new attribute and edit it?
Much thanks in advance for any help you may be able to provide.

It is an XML object so I dont think it has a limit as such, though the system will get slower to checkout and checkin if you overextend it.
there usually isn't any reason to extend it extensivly... I believe it stores most of that, if the querable flag is set at least, in the user attributes table
if you need a lot of data connected to a user you could always have an extra table and store it in, you dont need to store everything in the user object unless you need it every time the user is checked in/out etc etc

Advantage and disadvantages of SAP IDM & Microsoft Identity management Tool

Hi Folks,
I am looking some points on SAP IDM and Microsoft tool for Identity Management. I am looking below mention points.
1. Difference in the feature and prize.
2. Limitation
3. Solution architecture for both
Relevant answers will be rewarded.
Regards,
Akshay Shail

Hi,
I can add some points about SAP NW IdM. Regarding your question about the prize: If you only connect SAP systems (it can handle all types of SAP ABAP and SAP Java Systems) they don't charge you extra, because it's already in the NetWeaver license. Furthermore, if you use the SAP Central User Administration: It isn't further developed and will be replaced by SAP NW IdM.
The systems you mentioned can be connected, I think these are basics for everey IdM solution. HR interation is possible with SAP IdM, don't know about the other solution in this point.
There are some whitepapers and presentations about SAP NW IdM: https://www.sdn.sap.com/irj/sdn/nw-identitymanagement?rid=/webcontent/uuid/f0b68fb1-d8af-2a10-2a8e-cc431c15bb39&anchor=section2.
Nevertheless, your question about limitations and solution architecture probably needs a PoC if you want to answer them in deep.
Best regards,
Nils

IDM 8.0 : See connected users on Identity Manager ?

Similar Messages

Maybe you are looking for