IDM with EP

Hello Experts,
I want to setup the Enterprise portal with IDM 7.1 (Newly)
Identity Management for SAP System Landscapes Configuration Guide ->
3.4.3 Setting up the SAP NetWeaver Portal Environment Use Case says
The AS Java that is running the portal reads the identity data directly from the
corporate LDAP directory server, and only the user/role assignments are provisioned to this
system
1)Why LDAP directory server required to setup EP with IDM. With out LDAP is it possible to setup Portal enviroment with IDM ?.
2)If lDAP Server is must to Setup the Enterprise portal with IDM, is it possible to use the IDM server as LDAP server?. please guide us.,
Thanks
Thirumal
Edited by: Thirumalai Malai on Apr 21, 2009 8:56 AM

Hi Thirumalai,
Please check out this link will let you know all the basics regarding the query you have in LDAP Setup.Hope your query resolves soon.
Link[LDAP|https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.highlightedcontent?documenturi=%2flibrary%2fbusinessobjects%2fsupport-content%2fg-i%2fguidetoLDAPAuthenticationUsing+SSL.pdf]
you can also check the thread regarding LDAP
Link[Thread|Re: LDAP;
Have a best day ahead.

Similar Messages

SUN IDM with Windows Vista

Hello,
Has anybody tried installing SUN IDM with windows vista
I tried IDM 7.1 with vista home premium and doesnt seem to work. Curious to know if any body has success with vista
Awaiting replies
Thanks,

What error message are you getting?
Have you installed Java and an apllication servers as requested?
1) Set Up a Java Virtual Machine Software Development Kit and Java Compiler
The application requires a Java compiler and a Java Virtual Machine (JVM) to run the Java classes that perform actions within Identity Manager. Both of these can be found in a Java SDK. Download from or http://java.sun.com/javase/downloads/index_jdk5.jsp *** You should add JAVA_HOME to your list of system environment variables and to your system path. To do this, add JAVA_HOME to your system environment and JAVA_HOME\bin to your path, making sure to list it before any other Java environment variables.
2) Install Tomcat application server from official http://tomcat.apache.org/ to local hard drive. Configure Tomcat memory requirements and restart. Min: 256k

IDM with SQL server Error: Cannot find columns for the table...

Hi all,
I am Configuring IDM with SQL Server repository and ran into this error.
'Cannot find columns for the table 'object'
.....jdbc...[SQL Server]Invalid object name 'object'
Can anybody please help me!!
G

Yes, permissions are very important. I ran into a similar problem because I didn't have the correct permissions. Make sure the user has the following permissions:
CREATE ANY TABLE
ALTER ANY TABLE
DROP ANY TABLE
CREATE ANY PROCEDURE
EXECUTE ANY PROCEDURE
DROP ANY PROCEDURE
Also, make sure there is enough space in the default tablespace of that user.
HTH
~Suvesh

Integrate Oracle IDM with Sql Server 2005

Hi Guys,
We maintain the employees information in Oracle IDM and we want to integrate Oracle IDM with Sql server 2005.
how we can this.

The DB connector?
The 9.0.1.4 version supports SQL server 2005.
The latest version of the GTC db connector might also work.
Best regards
/Martin

IDM with WebCenter Portal Application

Can anybody point me on the basics of using IDM with my WebCenter Portal Application. What are the steps I need for authentication and authorization?

Hi.
Is the following documentation helpful?
Integrating an Enterprise Deployment with Oracle Identity Management - 11g Release 1 (11.1.1.8.0)
Regards.

Expert pls help: Sun IDM with ldap active sync

Hi all,
Currently i am configuring Sun IDM 6.0 SP1 to active sync with Sun directory server. I have enabled Retro Change Log but yet i cant find my changeNumber in directory server. Could anyone show me a way (search?) to get what changeNumber directory server currently running?

Check the account used by IDM to access DS can search cn=changelog branch. If he is not Directory Manager, you probably need to set an ACI on that branch.
HTH

Custom pluggable idm with custom login module

Hello All. I've developed a custom implementation of the pluggable identity management framework as explained in chapter 13 of the book "Oracle® Containers for J2EE Security Guide10g (10.1.3.1.0)". I have OAS 10.1.3.1.0.
Everything works fine except when the identity is validated with in the tokenAsserter. The process is supposed to continue with the login method implemented in my custom login module but instead the default oracle implementation (RealmLoginModule) is being executed.
The application is a servlet and is configured to use a custom loginModule. If I don't use de custom auth method (auth-method="CUSTOM_AUTH" in orion-application) my loginModule is called but when I plug it to my custom idm implementation it doesn't.
The custom idm is packed in to a jar containing the idm and the login module. The jar is deployed to the <ORACLE_HOME>/ext/lib directory.
Any suggestions? Thanks

Thanks for your answer, it really helps. I had already cheeked all that stuff and it was correct, but knowing that another person had made it worked the same way I was doing it, made me think I was doing it right and the problem may simpler. It really was. OC4J was really calling my login module all the time but it was getting a runtime exception, a very simple one, that was making OC4J to propagate the authentication to the default login module (RealmLoginModule), and that was the error I was watching in the logs that had me all confused.
I will start another thread though about stolen cookie in a SSO solution that I’m developing with this implementation.
Thank you.

SAP IDM with MS Active Directory (OU names in Arabic)

Dear Gurus,
With SAP IDM , we need to integrate with MS Active directory such a way that SAP IDM only fetches users who have “SAP” in one of the AD field. That means do not read entire AD but only fetches users in SAP who have “SAP” tagged in one of the AD field.
Is it possible ? We tried that in SAP LDAP connector but its not possible in LDAP connector in SAP as LDAP connector is reading through all the users in our CUA system.
Question is it possible through SAP IDM that we use some thing (maybe BAPI) to restrict users and do not read all users but only users having “SAP” in one of the AD field.
Also note that our AD has some OU's name in Arabic.
Regards,

If you want to filter this in the ADS Initial Load job then you can modify the repository LDAP Filter:
(&(objectclass=person)(orgUnit=SAP))
Replace orgUnit=SAP with your your attribute and tag.
Br,
Chris

Integration of IDM with CUP workflow/

can CUP and IDM be integrated with to have same workflow?
Thanks,
derek

Hi Derek,
Access Control supports following three ntegrations with IDM.
- Using the IdM system as the leading provisioning system where requests are submitted to Access Control for SoD compliance and provisioning to one or more ERP systems.
- Using Access Control as the leading provisioning system where requests are submitted to the IdM system for provisioning to one or more non-ERP systems.
- Using Access Control as the leading provisioning system where requests are submitted to other supported systems via SPLM SOAP provisioning requests.
For more details on how to configure, please refer to "Configuration Guide" of AC 5.3 at the following location.
https://websmp103.sap-ag.de/~form/sapnet?_SHORTKEY=01100035870000718172&
Click on Access Control --> SAP GRC Access Control 5.3
Hope this helps.
Best Regards,
Sirish Gullapalli.

Using Sun IDM with Firefox 3.0.3

We just upgraded to Firefox version 3.0.3. When I try to run a report in Sun IDM, I get the following error:
There was an error while retrieving task status.
This connection has timed out. Please login again.
It works properly in IE, and previous versions of Firefox.
Does anyone know of a fix for this, and has there been any other problems with Firefox 3.0.3?
Thanks,
Jody

jweisbau wrote:
There was an error while retrieving task status.
This connection has timed out. Please login again.That error you're seeing is from the little java applet that runs when a report is generated. It's possible a new security restriction regarding applets is active in your browser.
You can still see the report by looking in Server Tasks -> All Tasks and viewing the result of the report task there.

AM/IDM with Sun JES Messaging

Is there any information about using IDM and AM to control access, do SSO (for MessengerExpress/CalendarExpress/CommunicationsExpress, etc.), and automatically provision new users?
If anyone currently uses these tools to do this, what does the architecture look like?
To what extent does this framework exist in a default install (based on single-host deployment example), e.g. is a policy agent installed?
Thanks,
s7

starman7 wrote:
Is there any information about using IDM and AM to control access, do SSO (for MessengerExpress/CalendarExpress/CommunicationsExpress, etc.), and automatically provision new users?IDM offers a communications services resource adaptor:
http://docs.sun.com/source/820-0821/Sun_Comm_Services.html
This allows you to provision accounts for users by provisioning the account in LDAP (which is what delegated administrator also does). You will need to make sure that the appropriate AM attributes are added to the users entries.
To what extent does this framework exist in a default install (based on single-host deployment example), e.g. is a policy agent installed?There is no policy agents installed by default. For Comm-Suite-5 you can configure AM support with UWC and enforce AM logins using the following steps:
http://msg.wikidoc.info/index.php/AM_redirection_using_Policy_Agent
Regards,
Shane.

Sun Idm with LDAP failover

Hi All,
Not sure if anyone encountered this issue.
I m using Sun Idm version 7.1 and sun one directory server 5.2 as corp ldap. I want to configure failover for ldap. I have setup master-master replication between ldaps. Now in idm on resource configuration page for ldap, I specified url of failover server. I brought down current ldap server and checked the connection. It shows successful because it picked failover one.
Now, after this stage I am not able to create/modify accounts on ldap (now running on failover) and its giving me the error "javax.naming.NameNotFoundException. [LDAP error code 32- No such object]"
Any suggestions, please provide.

Hi
Came across this issue myself (just now) and fixed it so thought I'd comment. I appreciate this post is quite old now but this might help anyone else who has this issue.
We are using IDM 8.1 and have 2 DSEE 6.3 instances - one master and one replica. In the help description for Failover Server on the LDAP resource configuration page it says:
"List all servers in the form of "ldap://ldap.example.com:389/o=LdapFailover" which follows the standard LDAP v3 URLs described in RFC 2255. Only the host, port, and dn parts of the URL are relevant in this setting."
We originally listed our second server as above and included the "/o=LdapFailover" bit on the end and we got the same error. We removed the "/o=LdapFailover" and just left "ldap://<host>:<port>" there and it all works.
Hope this helps someone.

Idm with LDAP as repository

Hi,
Does idm supports as LDAP as repostiory ??
Regards,
madhusrinivas

That is logical also. since IDM does so many read write operations if we start using LDAP for that it will be very slow as write operation in any hiererchical database is slow.

Error during Exchange 2007 mailbox provisioning with IDM 8.1.1.1

Hi
We want to create Exchange 2007 mailboxes from IDM.
When we let Exchange set the SMTP address (EmailAddressPolicyEnabled=true), it works fine
But when we set the SMTP address in IDM with the attribute PrimarySmtpAddress (and EmailAddressPolicyEnabled=false) there are an error and an information in the provisioning task
Error : PowerShell:6c13f14c-3825-4064-a585-48b4756de3a3 is not a mailbox user
Information : Added exchange mailbox to the user based on the RecipientType change from: 'User' to: 'UserMailbox'
We see that the mailbox has the SMTP address set by Exchange.
After 5mn, the task ends successfully and we see that the SMTP address is the one set by the IDM attribute PrimarySmtpAddress.
We guess that this error is caused by the active directory replication delay between controllers.
Does anybody know how to solve this problem ?
Thank you

Hi Patrick
Thank you for your answer.
The cmdlet enable-mailbox can be used with the PrimarySmtpAddress option and, in this case, the EmailAddressPolicyEnabled option is automatically set to false.
Cf. the MS technet help : "The PrimarySmtpAddress parameter specifies the primary SMTP address for the mailbox. By default, the primary SMTP address is generated based on the default e-mail address policy. If you specify a primary SMTP address by using this parameter, the command sets the EmailAddressPolicyEnabled attribute of the mailbox to $false, and the e-mail addresses of this mailbox aren't automatically updated based on e-mail address policies."
I have tested this option on our Exchange 2007 environment and it works fine.
In IDM if PrimarySmtpAddress is used but not EmailAddressPolicyEnabled, there is an error : "PowerShell:The e-mail addresses for this recipient are automatically generated based on e-mail address policies. To modify the primary SMTP address for this recipient, you must disable automatic updating of e-mail addresses based on e-mail address policy”
If PrimarySmtpAddress is used and EmailAddressPolicyEnabled is set to false, then the log shows that 2 powershell commands are run by the gateway, the second immediately after the first.
Enable-Mailbox with the parameters -Identity and -Database, run with no error
Set-Mailbox with the parameters -Identity, -EmailAddressPolicyEnabled (set to FALSE) and -PrimarySmtpAddress, run with the error “…is not a mailbox user.”
After 5 mn (the retry delay) another powershell command is run :
Set-Mailbox with the parameters -Identity, -EmailAddressPolicyEnabled (set to FALSE) and -PrimarySmtpAddress, run with no error.
The solution would be that IDM, when PrimarySmtpAddress is set, runs only the command Enable-Mailbox with the parameters PrimarySmtpAddress, which set automatically EmailAddressPolicyEnabled to FALSE
Gilles

SAP GRC AC with SAP IdM and without SAP Idm

Hello,
Could anyone provide me what are the advantages implementing SAP IdM with SAP AC suite?
Can I use SAP GRC User Provisioning tool with SAP HCM position based concept?
Thanks in advance.
-Harry

Hi ,
In GRC 10 there is no concept of web services . GRC 10 uses native SQL query for calling risk analysis which mean no need to configure web service in GRC 10
Thanks & Regards
Asheesh

IDM with EP

Similar Messages

Maybe you are looking for