RE: CUP and IDM

Dear Experts,
Even after reading IDM documentation, I am not able to figureout the difference between CUP and Identity management. Can any explain me the difference. CUP and IDM both provides user provisioning, Password self service. what is the advantage of integrating IDM with CUP?
Thanks
raj

Hi,
SAP IDM helps companies to centrally manage their user accounts (identities) in a Complex system landscape. This can provision into both SAP and non-SAP systems.
Suppose any request for role assignment is there in SAP IDM and if role assignment requires compliance check then it will be sent for request processing and risk analysis in CUP. Based risk approved /declined request status will be sent to SAP IDM. If request is approved IDM will start provisioning to target SAP system else no provisioning.
And if role assignment do not require compliance check IDM will directly provision to target system.
CUP: Workflow for risk analysis and mitigating controls and Provides web services for compliance checks, status checks.
Regards
Dilip

Similar Messages

[SOLVED] Problem With Cups and Hp printer.

I am new to using cups. I usually have my operating system do everything for me. Arch seems to be a lot more tricky though.
I have an HP Deskjet 6980 printer. I have been able to successfully use it with Ubuntu, Debian, and Fedora. I noticed that Arch came with HP Device Manager. This is the same program I used to add my printer to fedora. I decided to use this. During the process of adding my printer, it recognized it and when I pressed add printer, it said please restart CUPS and try again. I opened up system monitor and killed the cups process. I then tried to run the installer again and I got the same error. Then I tried to load up the cups interface on firefox but it failed to. I think I need to restart cups but I do not know how.
Last edited by brianji03 (2010-05-08 17:56:05)

brianji03 wrote:
I was successfully able to restart cups. Thankyou. However, I am still getting that error. Is there something I need to do in the cups interface?
Nevermind. I figured it out. My printer now works. Thanks for telling me how to restart cups.
Could you possibly post how you solved it so others reading this thread can benefit from it?

[SOLVED] cups and laserjet 1018

Hi all,
I've been trying to use cups to set up a Laserjet 1018 with no success. The problem I'm having is that, even though according to the CUPS web interface my job is completed, my printer doesn't print anything. That's what I tried so far (based on the archlinux entry on CUPS and forums):
- I installed the drivers hplip and foo2zjs.
- cups is in my daemons array.
- I tried to stop and start usblp module.
- the device node permissions are correct.
That's the output of my /var/log/cups/error_log (I'm using "LogLevel debug" in my cupsd.conf):
D [25/Jun/2011:21:30:05 -0600] cupsdReadClient: 16 POST / HTTP/1.1
D [25/Jun/2011:21:30:05 -0600] cupsdAuthorize: No authentication data provided.
D [25/Jun/2011:21:30:05 -0600] cupsdReadClient: 16 1.1 Get-Jobs 1
D [25/Jun/2011:21:30:05 -0600] Get-Jobs ipp://localhost:631/printers/Hewlett-Packard-HP-LaserJet-1018
D [25/Jun/2011:21:30:05 -0600] [Job 1] Loading attributes...
D [25/Jun/2011:21:30:06 -0600] [Job 2] Loading attributes...
D [25/Jun/2011:21:30:06 -0600] [Job 3] Loading attributes...
D [25/Jun/2011:21:30:06 -0600] [Job 4] Loading attributes...
D [25/Jun/2011:21:30:06 -0600] [Job 5] Loading attributes...
D [25/Jun/2011:21:30:06 -0600] [Job 6] Loading attributes...
D [25/Jun/2011:21:30:06 -0600] [Job 7] Loading attributes...
D [25/Jun/2011:21:30:06 -0600] [Job 8] Loading attributes...
D [25/Jun/2011:21:30:06 -0600] [Job 9] Loading attributes...
D [25/Jun/2011:21:30:06 -0600] [Job 10] Loading attributes...
D [25/Jun/2011:21:30:06 -0600] [Job 11] Loading attributes...
D [25/Jun/2011:21:30:06 -0600] [Job 12] Loading attributes...
D [25/Jun/2011:21:30:06 -0600] [Job 13] Loading attributes...
D [25/Jun/2011:21:30:06 -0600] [Job 14] Loading attributes...
D [25/Jun/2011:21:30:06 -0600] [Job 15] Loading attributes...
D [25/Jun/2011:21:30:06 -0600] [Job 16] Loading attributes...
D [25/Jun/2011:21:30:06 -0600] [Job 17] Loading attributes...
D [25/Jun/2011:21:30:06 -0600] [Job 18] Loading attributes...
D [25/Jun/2011:21:30:06 -0600] [Job 19] Loading attributes...
D [25/Jun/2011:21:30:06 -0600] [Job 20] Loading attributes...
D [25/Jun/2011:21:30:06 -0600] [Job 21] Loading attributes...
D [25/Jun/2011:21:30:06 -0600] [Job 22] Loading attributes...
D [25/Jun/2011:21:30:06 -0600] [Job 23] Loading attributes...
D [25/Jun/2011:21:30:06 -0600] [Job 24] Loading attributes...
D [25/Jun/2011:21:30:06 -0600] [Job 25] Loading attributes...
D [25/Jun/2011:21:30:06 -0600] [Job 26] Loading attributes...
D [25/Jun/2011:21:30:06 -0600] [Job 27] Loading attributes...
D [25/Jun/2011:21:30:06 -0600] [Job 28] Loading attributes...
D [25/Jun/2011:21:30:06 -0600] [Job 29] Loading attributes...
D [25/Jun/2011:21:30:06 -0600] Returning IPP successful-ok for Get-Jobs (ipp://localhost:631/printers/Hewlett-Packard-HP-LaserJet-1018) from localhost
D [25/Jun/2011:21:30:06 -0600] cupsdReadClient: 16 WAITING Closing on EOF
D [25/Jun/2011:21:30:06 -0600] cupsdCloseClient: 16
D [25/Jun/2011:21:30:06 -0600] PID 2503 (/usr/lib/cups/cgi-bin/printers.cgi) exited with no errors.
D [25/Jun/2011:21:30:06 -0600] cupsdSetBusyState: Not busy
D [25/Jun/2011:21:30:36 -0600] cupsdReadClient: 12 WAITING Closing on EOF
D [25/Jun/2011:21:30:36 -0600] cupsdCloseClient: 12
Any suggestions are more than welcome!!
Cheers,
Last edited by falsum (2011-06-26 12:39:10)

owain wrote:I had trouble with another LaserJet (the 1005), until I realised that as well as installing hplip, I needed to run 'hplip -i' (as root) to get it to download the necessary firmware.
For some reason, I don't have a "hplip" command (I searched for this file in every folder).

Cups and "waiting for printer to become available"

Hi all,
i have a problem with cups (i don't know since when),
when i try to print something i receive the message:
"waiting for printer to become available"
And i'm aware that this problem happens when you have usblp loaded. So first of all i checked if the usblp module is loaded and here the result:
usblp 9311 0
usbcore 119004 8 usblp,uvcvideo,uas,usb_storage,usbhid,ohci_hcd,ehci_hcd
But if i go to check the /etc/rc.conf file the MODULES line is:
MODULES=(lib80211_crypt_tkip wl radeon vboxdrv vboxnetflt powernow-k8 cpufreq_ondemand !snd-pcm-oss !b43 !ssb !usblp)
And it seems that usblp module is not loaded.
Now the question is:
What's wrong?
I did something wrong? I forgot somethin?
Thanks,
Ivan

Oddly enough...
I couldn't find usblp in my lsmod output but I was also getting this "cups waiting for printer". My file utility is version 5.18 and although I considered downgrading it, that just felt too much like thrashing about. (My printer is a USB HP LaserJet 1020)
In the end, I did something else that felt like almost as much thrashing about. I followed the "changes to module blacklisting" page with usblp, restarted cups and cycled power on the printer. Now it's working again. I wish I entirely new why.
I think what happened was the automatic power up of the printer (or of the computer) loaded usblp but the fooz file for LaserJet was unloading it so (a) I never saw it in the lsmod output and (b) it was in the system long enough to snarl things, followed by (c) if only it was blacklisted at the time that the system saw the printer it would not be there and not foul things up. Does that sound like a reasonable chain of events.
one more reason to resent (grumble, grumble, grr grr) systemd over the older (admittedly clunkier, more manual -- but more CONTROLLABLE!) initscripts. (Okay, I'm over 45)
cheers...ank
Last edited by ansak (2014-04-27 03:43:41)

Trouble printing with my HP Deskjet printer using CUPS and hplip

tl;dr This 1,646 word post describes my frustration with CUPS and hplip. I cannot get my HP Deskjet F4400 set up with CUPS, and all the solutions I've tried don't work.
I'm running Arch Linux ARM on my Seagate DockStar, a small ARM-based "plug computer" that I use as a home server. My printer is the HP Deskjet F4480, which is part of the HP Deskjet F4400 series.
I previously had CUPS set up to share my printer with my home network, using hplip for the printer driver. I never upgraded CUPS or hplip because those versions worked fine, and I didn't want to break anything avoid breaking anything. The versions that I was using had to have been at least one to two years old.
Everything was working very smoothly... until a few days ago. The drive I was running Arch Linux ARM on became corrupt, so I had to install a fresh copy of the operating system. That meant losing all of the working versions and configuration files each application I had installed, including CUPS. I thought I had a backup image of the drive, but it didn't work when I tried to restore it. (Yes, it was stupid of me not to test my backup.)
Setting up CUPS was one of the first things that I wanted to do after reinstalling, since my family depends on the network printing functionality almost daily. Unfortunately, I could not get CUPS to work with my printer correctly. It wouldn't be able to display a list of drivers, HP's setup utility encountered an error adding it, and it threw various errors when I tried to print test pages. I ended up reading hundreds of forum posts, wiki articles, and CUPS/hplip tutorials to try to figure out how to properly set it up. I ended up spending a total of nearly ten hours trying to get the printer to print with CUPS, and it's still not working after all that work.
I'm going to explain in this post some of the many things that I've tried so far. I just removed all of the printing packages from my system and any extra files that were left behind. I'm now going to be installing all of the packages again and documenting everything that I have been trying to do to get it to work. I'll try to include exact error messages and logs where necessary.
1. I first found this article on the Arch Linux ARM website on how to set up a CUPS printer. I didn't really want to use webmin, but I did it anyway so that I could follow the guide. I installed all the packages mentioned except for cups-pdf, since I didn't need print to PDF support. Everything installed smoothly, and I configured CUPS and webmin to allow access to other computers on the network. I started to notice problems in the instructions - /etc/rc.d/cups was actually /etc/rc.d/cupsd, /etc/printers.conf was actually /etc/cups/printers.conf, and webmin didn't actually add anything to the printers.conf file. I uninstalled webmin at this point because I didn't need it, and I decided I wasn't going to follow that guide with incorrect information.
2. I then tried to set up the printer on my own using the CUPS web interface listening on port 631. I clicked the Add Printer button and it switched me to the HTTPS web interface. I then logged into the root account and was presented with the list of printers. My printer was listed as "HP Deskjet F4400 series (HP Deskjet F4400 series)", so I selected it and continued. I saw a list of printer models (PPD files) ending in CUPS+Gutenprint v5.2.9. There was no entry for my printer, so I tried the "HP DeskJet Series (en)" one. I set the default options and chose Maintenaince->Print test page. I then got a ridiculously simple error: "Unable to print test page: No such file or directory". How do I even know what file or directory it's referencing? I read online that it may be because I'm not in the lp group, but root is indeed in there. I saw in the error log "Avahi client failed: -26". I started dbus and avahi-daemon just in case, but I still got that silly error. I restarted cups and the same error message occured.
3. I researched online that pretty much the only way for my printer to have a driver would be to install hplip. Before installing hplip, I uninstalled CUPS, leaving cupsd.conf but deleting printers.conf. Then I installed CUPS and hplip together, with hplip requiring foomatic-db, foomatic-db-engine, and foomatic-filters. Everything seemed to install correctly. I started CUPS again and then ran hp-setup -i to try to install my printer. I selected USB and it found my printer, hp:/usb/Deskjet_F4400_series?serial=[printer serial number here]. I entered a simple name and then was told that no PPD file was found for the printer but that I could specify one manually. There were none I could find online; everywhere it just said to install hplip. I used the find command to find "f4400" and finally found 2 compressed PPDs located at /usr/share/ppd/HP/hp-deskjet_f4400_series-hpijs.ppd.gz and /usr/share/ppd/HP/hp-deskjet_f4400_series.ppd.gz. I gunzipped both of them and pointed hpsetup to the hpijs one, knowing that I was using the hpijs one when it was working before. It told me "Description for the file: HP Deskjet f4400 Series hpijs, 3.12.6". Hooray! I selected to use it, but then setup failed: "error: Printer queue setup failed. Please restart CUPS and try again." Ugh!
4. I restarted CUPS and went into the hp-setup process again. It gave me the same printer queue setup failed error. I don't know if these entries in the CUPS error log are related or not, but these errors relating to foomatic showed up. I restarted CUPS again and this time used the non-hpijs file with hp-setup. This one was called "Description for the file: HP Deskjet f4400 Series, hpcups 3.12.6". It failed again with the same error and the same entries in the error log. I found lots of posts online about this error, but none seemed to have a solution that would work for me. Now I tried running hp-setup in debug mode with -g. Here is what it said before the error. I then tried to Google "debug: addPrinter() returned (0, Unable to connect to CUPS server)". I saw on an Arch bug report to install dbus-python and python2-gobject, as well as create a symlink for /usr/bin/python2 to /usr/bin/python. It didn't work - same error.
5. I then tried to add the printer to CUPS via its web interface. Now there were two listed, HP Deskjet F4400 series (HP Deskjet F4400 series) and HP Deskjet F4400 series USB [printer serial number here] HPLIP (HP Deskjet F4400 series). So, hplip added the second one. I tried both of them, but after clicking Continue the page started to hang. I got another stupid, undescriptive error. "Unable to get list of printer drivers: Success". I saw the same foomatic errors in the error log as before. I then started reading the ArchWiki page on CUPS, located here. I tried the blacklisting usblp. I tried changing the permissions on the device node, although this starts to become ridiculous that it is even required to do that. Nothing was working; the printer installation still didn't work with hp-setup or with CUPS. Then, I found what I was looking for: the exact error I had on the wiki page! It said for "Unable to get list of printer drivers" you should "Try to remove Foomatic drivers." WTF? Foomatic is required for hplip, and hplip is required for my printer. I can't do that. Forum posts say to try that or do the permissions or usblp thing. Nothing is working.
6. I tried various other things to get it to work, even though I knew they probably wouldn't make it any different. I copied the PPDs from hplip to another folder and uninstalled hplip and foomatic. I then added them to /usr/share/cups/model and CUPS successfully found them and set up the printer. I reinstalled hplip and foomatic since they're needed for those PPDs to function, and I tried printing a test page. It failed. I tried using the CUPS web interface to modify the printer driver; nope, that wasn't going to happen: "Unable to get list of printer drivers: Success".
That concludes the list of some of the things that I have tried so far. I really want to get this printer working, but right now I am really fed up with CUPS and hplip. It's things like this that make me hesitant to recommend Linux to anyone else. So much manual configuration and tinkering the inner workings of things is required to do tasks that would be quite simple on Windows. For example, I can plug this printer into my Windows 7 machine right now, wait for the driver to automatically be installed and configured, and have a test page in my hands less than a minute after I first plugged in the USB cable. I can share the printer with any other Windows machine on the network by checking a single checkbox.
But back to my problem with getting the printer to work on my DockStar. I just uninstalled all of CUPS, hplip, and foomatic again and removed all of their files. I can walk through things to try that you guys post and then give you full logs of everything - just give me exactly what to do and install and the exact order to do it all in. I just don't know what to do at this point and am so frustrated with this that I'm about to give up.
Does anyone have any suggestions on how to get this printer working? I know this was a very long post, but I just wanted to explain everything that I've tried and how nothing worked. I really hope that we can figure this out so that I'll be able to print, and maybe it'll solve a few other people's problems with their printers, too. Thanks for reading, and thanks in advance for the help.

Had similar issue with my HP Deskjet F4500C All in one printer, here's what I did:
make sure these packages are installed or install them
pacman -S cups cups-pdf hplip pyqt3 python2-pyqt
pacman -S system-config-printer-gnome
rc.d cups start
To add device and install hp driver:
1. Run ‘hp-setup’ as root.
2. Click ‘Show Advanced Options’ button and check-enable ‘Manual Discovery’.
3. Enter IP address 192.168.59.63 in the ‘…device ID…’ entry and click ‘Next’ to install driver.
run system-config-printer as root, to add printer
# system-config-printer
click “Add”， Select Device -> Network Printer -> input the IP address of the printer such as “192.168.1.3″, click “Find” -> “Process”
you should be ok from here, if not some further steps:
If you encounter the following error:
File “/usr/share/system-config-printer/newprinter.py”, line 1531, in getNetworkPrinterMakeModel
debugprint (host + “: ” + args)
TypeError: cannot concatenate ‘str’ and ‘list’ objects
You should comment out the error line at 1531 of newprinter.py, and then continue to add the printer.
4). Finally, you can run hp-check to see what problems exists for the printer.

Im using firefox 4.0.1 and Idm 6.05, I get an error while i click download button.

Im using firefox 4.0.1 and Idm 6.05, I get an error while i click download button.
ERROR Displyed is : "cannot connect to dl120.duckload.com:80" and "permission denied. check your Firewall settings and ensure IDM has permits to access internet"
But i have disabled Windows firewall and i dont have Antivirus.. Plz help me...
For more plz see tis screen shot : [http://img845.imageshack.us/img845/5234/idmerr1.png link text]

See if the "stable" version released on 30 June is compatible with Firefox 5.0. That page doesn't mention which versions of Firefox it is compatible with, a serious oversight, IMO. <br />
https://www.torproject.org/torbutton/
Plus, it looks like that developer hasn't updated his AMO page in over a year, which makes it impossible for users of that add-on to get automatic updates as each new version of Firefox is released. <br />
https://addons.mozilla.org/en-US/firefox/addon/torbutton/

Journalctl with no PID message for cups and avahi contemporary failure

I have facing a persistent problem with avahi-daemon and cups as systemd services. They have been enabled but fallen in a failed state as being started. Any investigation of the failures by journalctl (using _PID=) returned no useful info (log period only). Is there another way how to find why the services failed? A dependency between cups and avahi should be IMHO optional and recommended only for those using printers connected remotedly (or managable by users in cups.conf). I cannot identify wheather the failures are caused by systemd issue, some wrong config file or missing some needed file. Any idea? Thank you all.

Had similar issue with my HP Deskjet F4500C All in one printer, here's what I did:
make sure these packages are installed or install them
pacman -S cups cups-pdf hplip pyqt3 python2-pyqt
pacman -S system-config-printer-gnome
rc.d cups start
To add device and install hp driver:
1. Run ‘hp-setup’ as root.
2. Click ‘Show Advanced Options’ button and check-enable ‘Manual Discovery’.
3. Enter IP address 192.168.59.63 in the ‘…device ID…’ entry and click ‘Next’ to install driver.
run system-config-printer as root, to add printer
# system-config-printer
click “Add”， Select Device -> Network Printer -> input the IP address of the printer such as “192.168.1.3″, click “Find” -> “Process”
you should be ok from here, if not some further steps:
If you encounter the following error:
File “/usr/share/system-config-printer/newprinter.py”, line 1531, in getNetworkPrinterMakeModel
debugprint (host + “: ” + args)
TypeError: cannot concatenate ‘str’ and ‘list’ objects
You should comment out the error line at 1531 of newprinter.py, and then continue to add the printer.
4). Finally, you can run hp-check to see what problems exists for the printer.

Steps for replacing a connector in GRC CUP and RAR

Hi All, We have GRC 5.3 CUP and RAR installed and I would like to replace an existing connector PRD with one called PRD010. Does anyone have the necessary steps to follow to perform this? Your input is appreciated.

Hi Sudip,
Sorry I didn't clarify and thanks for responding. This will be the same backend. I want to change the connector name within the RAR and CUP config, etc. I'm concerned about all the "tags" in the database tables pertaining to this connector name if you know what I mean. It seems that when you make a change like this you end up with data in the database tagged with the old connector names which makes it difficult to clean out the old stuff unless maybe there is a proper sequence of steps to go thru. Can it be just as simple as creating the new connector and then exporting and importing the rules with the new connector name? Maybe I'm making this more difficult than it really is.
Regards,
Gary

ERM & CUP and Role Status attribute

Hi,
Under a strategy where roles are imported into CUP from ERM, could anyone share the use / meaning / purpose for "Role Status" attribute in EMR?
Thanks for all. Best regards,
Imanol

Varun,
We have been extensively checking the sync from ERM into CUP and I can tell you that roles into CUP can be imported eventhough they have Development status value in ERM.
Anyone has identified the same behaviour in CUP when sync roles from ERM?
Thanks for all. Best regards,
Imanol

Cannot find FF info in ERM, CUP and RAR (GRC5.3)

I can only find FF info on the ABAP system txn /VIRSA/VFAT.
But on the ERM, CUP and RAR (GRC5.3), I cannot find any info about FF.
Which menu path/tab should I go search?
Thanks!

Hi Crishty,
GRC AC contains four components RAR(CC),CUP(AE),ERM(RE) and SPM(FF).
These seperate component have four seperate URL, so you will not get FF in ERM,CUP & RAR.
Here are the URL to access these grc component,
URL for RAR(CC)-
http//<hostname>:<portnumber>/webdynpro/dispatcher/virsa/ccappcomp/ComplianceCalibrator
URL for CUP(AE)-
http://<hostname>:<portnumber>/AE
URL for ERM(RE)-
http://<hostname>:<portnumber>/RE
URL for SPM(FF)-
http://<hostname>:<port>/webdynpro/dispatcher/sap.com/grc~ffappcomp/Firefighter
Thanks,
Sudip

Netbeans IDE and IDM 8

Since BPE is deprecated in IDM 8, we need to use Netbeans IDE. I installed Netbeans 6 and IDM 8 but they are not compatible. Does anyone have any luck using it or know if they are working on updating the IDE plugin?

Joseph.Smith wrote:
First, I don't recall 6.1 being a supported version. Only 6.0 ! If you use the current development build of the plugin (v8.1) it works with NB 6.1 and IDM 8.0. It fixes the bugs which prevented the use of NB 6.1.
That an issue with the the IDE being a separate product. There isn't any documentation that came out the same time as 8.0. We all know, the last thing the engineers wanna do is document and I don't think Sun has a writer doing open source stuff ! (Although this java.net project is closed)
I'd recommend you follow the 7.1 documentation on how to configure.If you use the wizard to create a new IDM project you will get a file README.txt which explains how to work with the project. The plugin extends also the Netbeans help with a chapter "Identity Manager IDE".

ObjectGUID as matching attribute for reconciliation between AD and IdM

Hello together,
I want to use the AD attribute objectGUID as matching attribute between AD and IdM. It is one of the attribute which will never be changed (in case of name changes of a person or similiar changes).
Our IdM can read this attribute and save it (with the help of a java script). This works fine.
But if I want write back something to AD I do not know how the "To LDAP directory" path must be configured. I get always the error that the account can not be found in the AD. Maybe the attribute must be changed with a java script ...
Has anyone already used this attribute?
Thanks!
BR
Michael

Michael, I have done this many times in pretty much the same way you have indicated. While DN is good for basic LDAP / AD operations, ObjectGUID is preferred for ModRDN operations or if you want to change the user's DN. I have written about these operations in a blog, Using modRDN with SAP NW IDM.
Hope it helps!
Regards,
Matt

How to remove and change the color of Java cup and border

Hi to all,
How to remove and change the color of Java cup and border.
Thanks in advance
khiz_eng

This is just an Image. You would need to create your own image and call setIconImage(Image) on your JFrame.

Future direction of User Provisioning Tools ( GRC CUP or IDM)

Hi Security Colleagues,
We all know that SAP has GRC CUP(Access Enforcer) and NW IDM for provisioing.
We can use either of toll for user provisioning.
Based on your experience , what is the best tool ? ofcourse ,It changes from one company to other depends on requirements.
I am noticed that lot of SAP devlopment activity going on around IDM.
Based on SAP's future direction, what is the best tool ?
Its a common problem for most of SAP customers as SAP is giving IDM freely as part of NW license.
please share your thoughts..
Thank You.

For Futuristic product availabliliy, I always prefer the following two places to check. Can you please also check their?
http://service.sap.com/pam
http://service.sap.com/scl
Check the following Two points under the 2nd Link:
Scenario & Process Component
SAP's Release Strategy
Now based on your query I will also stick to the suggestions given in the Other two posts. To add few more points which you may get helpful I would like to emphasize on the below discussion:
u2022 SAP NetWeaver Identity Management helps companies to centrally manage their user accounts (identities) in a complex system landscape. This includes both SAP and non-SAP systems.
u2022 The solution provides an authoritative, single source of user information and enables self-service management of user information and authorizations using workflow technology.
u2022 In many cases resources such as meeting rooms, PCs and mobile devices, which all may have their own identity in some context, can be included in an identity management solution.
Out of all other points, lets discuss about Provisioning:
u2022 The term provisioning is often used to denote user provisioning or account provisioning.
u2022 The functionality includes:
o creation of accounts
o setting initial passwords
o setting and modifying access rights
o disabling (revoking) an account
o deleting an account
u2022 The overall purpose is to make sure an identity (for example a user) has the correct access to the applications.
u2022 User provisioning products also include workflow capabilities to apply business rules to the account provisioning process and typically provide user self-service capabilities (e.g., password reset)
(All these details I picked up and pasted here from different section of a Solutioning Material I prepared for my company to introduce IDM solutions to my customer... couldn't give here properly due to space constraints). You can understand the Importance SAP is imposing on this product for All aspects of Automating Security and Identity of Living and Non-Living staffs as well. By using this you can get more benefits besides of Provisioning which is available in separate Solutions under other products like Virsa etc. Please go through the relevant materials available in the IDM Forum (Bernhard provided u the link) to understand go for an realization assessment.
regards,
Dipanjan
Edited by: Dipanjan Sanpui on Oct 5, 2009 11:42 AM

GRC, CUA and IDM

We are in process of installing GRC 10.0 in our landscape. We have following questions?
1. Can I run my CUA from GRC box instead of say Solman?
2. Can I hook GRC with LDAP so I import the users from active directory?
3. Do we need IDM, if active directory is hooked up to the system where we have the CUA?
Regards,
Kedar
Edited by: Kedar Joshi on Aug 8, 2011 5:57 PM

Hi Kedar,
The easy answer to your question is yes to all of them!
1. It is technically possible to run CUA from the GRC box as it is an ABAP based environment.
Depending on your user provisioning processes though, you may want to consider the scope of using CUA.
For example, you may want to retain CUA for pre-production access but may want to have automated Access Request Management (CUP) for the production environments. Alternatively, if you are going down the full IDM route, you may wish to have everything provisioned via GRC rather than having the additional manual assignments through CUA.
2. Yes, you can still connect to LDAP Active Directory from GRC. There is a technical change in setting up the connection as it uses an RFC destination rather than a JCo but it's still possible and actually advisable for creating a single user master source.
3. This is slightly more difficult to say without further knowledge of your organisation. Generally, IDM is focussed on a more holistic view of User Access across the enterprise estate. IDM is still of use when managing SAP and Non SAP applications and managing the roles from a business perspective. Whilst GRC is able to offer the business role concept inherently, it is still slanted towards the management of risk rather than pure Identify Management and therefore the tools do perform a separate yet integrated function.
I hope this helps.
Simon

RE: CUP and IDM

Similar Messages

Maybe you are looking for