Synchronize users

Good morning,
We are configuring this new system and we have noticed that there is no way to synchronize users on SRM with users on HCM system. We have a look on help provided and we have found that there is a way to create an event when HR master record change occurs. In this sense it is needed to confirm if this point also applies to user management and if this events could be also programmed through CUA.
Thanks in advance for your support.
Best regards,

Similar Messages

Job SM:SYNCHRONIZE USER DATA FOR NOTIFICATION canceled

Dear SAP Guru,
The BG job SM:SYNCHRONIZE USER DATA FOR NOTIFICATION is canceled every day and it´s
generating shortdump. Our system is SAP EHP1 for SAP Solution manager.
SAP ABA and SAP BASIS components are release 701 level 3.
ST is release 400 level 19
ST-PI is release 2008_1_700 level 1
ST-A/PI is release 01L_CRM570
Pls look on this shortdump.
Runtime Errors         RAISE_EXCEPTION*
Date and Time          22.03.2010 06:50:11
|Short text                                                                                |
|    Exception condition "CUSTOMIZING_NOT_FOUND" raised.                                           |
|What happened?                                                                                |
|    The current ABAP/4 program encountered an unexpected                                          |
|    situation.                                                                                |
|What can you do?                                                                                |
|    Note down which actions and inputs caused the error.                                          |
|                                                                                |
|                                                                                |
|    To process the problem further, contact you SAP system                                        |
|    administrator.                                                                                |
|                                                                                |
|    Using Transaction ST22 for ABAP Dump Analysis, you can look                                   |
|    at and manage termination messages, and you can also                                          |
|    keep them for a long time.                                                                    |
|Error analysis                                                                                |
|    A RAISE statement in the program "SAPLDSWP_UTILITY" raised the exception                      |
|    condition "CUSTOMIZING_NOT_FOUND".                                                            |
|    Since the exception was not intercepted by a superior                                         |
|    program, processing was terminated.                                                           |
|                                                                                |
|    Short description of exception condition:                                                     |
|                                                                                |
|                                                                                |
|    For detailed documentation of the exception condition, use                                    |
|    Transaction SE37 (Function Library). You can take the called                                  |
|    function module from the display of active calls.                                             |
|    -                                                                                |
|How to correct the error                                                                          |
|                                                                                |
|    If the error occures in a non-modified SAP program, you may be able to                        |
|    find an interim solution in an SAP Note.                                                      |
|    If you have access to SAP Notes, carry out a search with the following                        |
|    keywords:                                                                                |
|                                                                                |
|    "RAISE_EXCEPTION" " "                                                                         |
|    "SAPLDSWP_UTILITY" or "LDSWP_UTILITYU19"                                                      |
|    "DSWP_GET_GLOBAL_CUSTOMIZING"                                                                 |
|                                                                                |
|    or                                                                                |
|                                                                                |
|    "SAPLDSWP_UTILITY" "CUSTOMIZING_NOT_FOUND"                                                    |
|                                                                                |
|    or                                                                                |
|                                                                                |
|    "RDSWP_NM_SYNC_USER_DATA " "CUSTOMIZING_NOT_FOUND"                                            |
|    If you cannot solve the problem yourself and want to send an error                            |
|    notification to SAP, include the following information:                                       |
|                                                                                |
*|
|System environment                                                                                |
|    SAP-Release 701                                                                               |
|                                                                                |
|    Application server... "crsgrant"                                                              |
|    Network address...... "10.128.32.175"                                                         |
|    Operating system..... "Windows NT"                                                            |
|    Release.............. "5.2"                                                                   |
|    Hardware type........ "2x Intel 801686"                                                       |
|    Character length.... 8 Bits                                                                   |
|    Pointer length....... 32 Bits                                                                 |
|    Work process number.. 13                                                                      |
|    Shortdump setting.... "full"                                                                  |
|                                                                                |
|    Database server... "CRSGRANT"                                                                 |
|    Database type..... "ORACLE"                                                                   |
|    Database name..... "SM1"                                                                      |
|    Database user ID.. "SAPSM1"                                                                   |
|                                                                                |
|    Terminal.......... " "                                                                        |
|                                                                                |
|    Char.set.... "Czech_Czech.28592"                                                              |
|                                                                                |
|    SAP kernel....... 701                                                                         |
|    created (date)... "Apr 12 2009 22:43:15"                                                      |
|    create on........ "NT 5.2 3790 Service Pack 1 x86 MS VC++ 14.00"                              |
|    Database version. "OCI_10201_SHARE (10.2.0.4.0) "                                             |
|                                                                                |
|    Patch level. 39                                                                               |
|    Patch text.. " "                                                                              |
|                                                                                |
|    Database............. "ORACLE 9.2.0.., ORACLE 10.1.0.., ORACLE 10.2.0.."                |
|    SAP database version. 701                                                                     |
|    Operating system..... "Windows NT 5.0, Windows NT 5.1, Windows NT 5.2, Windows                |
|     NT 6.0"                                                                                |
|                                                                                |
|    Memory consumption                                                                            |
|    Roll.... 8112                                                                                |
|    EM...... 4181184                                                                              |
|    Heap.... 0                                                                                |
|    Page.... 24576                                                                                |
|    MM Used. 873664                                                                               |
|    MM Free. 170296                                                                               |
|User and Transaction                                                                              |
|                                                                                |
|    Client.............. 001                                                                      |
|    User................ "SOLMAN"                                                                 |
|    Language key........ "E"                                                                      |
|    Transaction......... " "                                                                      |
|    Transactions ID..... "C27635DF574FF121B0470050569757E9"                                       |
|                                                                                |
|    Program............. "SAPLDSWP_UTILITY"                                                       |
|    Screen.............. "SAPMSSY0 1000"                                                          |
|    Screen line......... 6                                                                        |
|Information on where terminated                                                                   |
|    Termination occurred in the ABAP program "SAPLDSWP_UTILITY" - in                              |
|     "DSWP_GET_GLOBAL_CUSTOMIZING".                                                               |
|    The main program was "RDSWP_NM_SYNC_USER_DATA ".                                              |
|                                                                                |
|    In the source code you have the termination point in line 22                                  |
|    of the (Include) program "LDSWP_UTILITYU19".                                                  |
|    The program "SAPLDSWP_UTILITY" was started as a background job.                               |
|    Job Name....... "SM:SYNCHRONIZE USER DATA FOR NOT"                                            |
|    Job Initiator.. "SOLMAN"                                                                      |
|    Job Number..... 00104000                                                                      |
Have you some solution or advice?
Best Regards
Jakub

Please could you check the following ?
- Please ensure that the latest version of note 1172948 has been implemented
- Please follow the recommendation in note 1314587.
- Check table 'DSWPGLOBALCUSTOM' and ensure that the entry 'DTMLOG' is available. Create the entry if missing.
These procedures will solve this issue.

Problem with synchronization users in SSM 7.5 5.0

First, sorry for my English
I have installed NWCE 7.1 (SP Stack 09) & SSM 7.5 5.0 on a windows 2003
I have read previous posts and I modified the Java Properties parameter to CPIC.
I've also tried to delete the cache from the file manager.
However synchronization does not work, gives the same error:
Error message 'error' is undefined
URL http://server.com:50000/strategy/pipadmin/pa_settings.htm
Line # 547
pipadmin and SSEL users are UME administrators
Do not use any group in the Application Server A
In defaultTrace_00.0.trc appears:
Error # # Plain # # # Remote User was not set by AuthenticationFilter! #
I think the error is on the side of the application server administrator, but I know that look ...
I would appreciate any help.
Regards.

Good to hear from you Colin!
First off, there has been some reports of using the Synchronize User Tables and not getting a pop-up that says it completed - BUT the users were sync'd. Check the Manage Application Groups section to see if the users show up there. If they did, you have sync'd. There does seem to be something in a later SP that dealt with that issue.
Secondly, when using JPIP, on the Set System Defaults area you "lose" the Cache Directory, Max # of entries, and Global Cache setting. Gone, don't need them for JPIP. So it can be a little frightening when you don't see them.
As you found. you now only see those WHEN CPIP is used.
There are a number of reasons that JPIP is a better way to go - long-term:
1) Tracing - PIP and PAS Trace - that is what you now see in the Set System Defaults window. It's very useful for troubleshooting. Default is Disable and you keep them like that until you need to do troubleshooting. You Enable them, go through the steps that created a problem and then go pick up the trace file.
2) When using JPIP, you no longer use Extended Listener or Listener (Yes, it took me a while to get used to that).
3) That means - you Don't need to be on the server to restart Services - you do that from Tools, which can be accessed from the url.
4) JPIP allows you to restart specific instances, as well as restarting the whole service. That means if you know where the trouble is, you can restart that service without restarting all the services.
5) There is a more information available using JPIP
6) Using JPIP, you could run SSM off a single UNIX box.
Hope this helps,
Bob

Error in Synchronize User Tables through LDAP

Hello Guys, we have SSM 7.5 SP9 with HPUX/DB2, we change the UME authenticate method access to LDAP, but we get an error message when trying to "Synchronize User Tables" (User Syncronization error, check the log for details), the log did not find much information:
#2.0 #2011 08 03 17:34:00:196#0-300#Info#/Applications/UMECache# #CPM-TM#sap.com/xappscpmsmstrategymanagement#00215E83AD48072F00000007001A8012#825514250000007571#sap.com/xappscpmsmstrategymanagement#com.sap.cpm.sm.auth.UMECache#pipadmin#0#SAP J2EE Engine JTA Transaction : [313459a002dffffffca]#39070320BD0211E0A63600215E83AD48#39070320bd0211e0a63600215e83ad48#39070320bd0211e0a63600215e83ad48#0#Thread[Managed_Application_Thread_17,5,Managed_Application_Thread]#Plain##
Retrieved child groups of: strategy#
It also deleted the cache in File Manager: / memorycache / syncstat.
I believe it's necessary to do some change in the authentication method for NWCE, but where is this change made?
Rgrds, Vitoriano

Vitoriano,
I recommend you consult the SSM installation guide again. There are Java System Properties you have to modify in NetWeaver CE -
CMSAuth
GroupUniqueKey
And some other configuration changes you may need to make as well.
Regards,
Bob

SAP SSM Administrator Interface - Synchronize User Tables - Update Failed

Hello,
I have this error when i try synchronize user tables:
[img]http://img156.imageshack.us/img156/5777/updatefailed.jpg[/img]
Apparently all is ok. Because even showing the error, users are updated.
Best Regards

Nosscire,
I'm sorry, I should have been more specific. The most confusing area with SSM is the web services user/password. If you have installed on a Windows server. The web services connection will be with the created Windows user and the password for that user. This Windows user is not a user of the system, it is your connection user.
The recommendation is to create a Windows user that can be recognized like pasuser or passervice - some other name than pipadmin or SSM user, since it is too common for each to have a different password.
That is the first thing to check.
Regards,
Bob

SSM Admin - Synchronize User Tables

Hi,
I'm having some problems with the option "Synchronize User Tables" in the SSM Administration. I just created a new user in the AD. Then I open the NetWeaver Identity Management and the new user appears there (NetWeaver is connected to Active Directory). Then in SSM Administration I do the Synchronize User Tables but even after the message box saying "Update completed" I don't have my new user available to add to the Application Groups !!!!
What can be the reason for this? The only way I have to really update the user information in SSM is doing a restart of the "SAP Management Console", but this make no sense, or it makes !?!?!?
What can be the problem?
Thanks in advance for any help
Pedro

Chamnap,
Are you using both Active Directory and LDAP? Check your Java System Properties settings in NetWeaver CE to make sure that they conform to the settings recommended in the Installation Guide. CMSAuth specifies which user authentication system you are using. GroupUniqueKey might be required if using LDAP and carefully review that since it provides information about changes to the Java System Property StrategyGroup in certain situations described there. You can find the installation guide on the Service Marketplace.
You may also have to create a Strategy group in your authentication systems and include SSM users into that as well. The installation guide will provide the clarity depending on which authentication system you use.
If you still encounter problems, you should work with support by opening a ticket.
Regards,
Bob

Synchronize user accounts

Hi!
I am now in Solaris cluster.
I am running two Solaris machines clustered with Veritas. I would like to ask how to synchronize user accounts between these two Solaris machines? Is it possible to done this by share the passwd, group and shadow in the shared storage (A1000)?
Thanks you all in advance.
Alan

Hi Alan,
it is psossible, but you will have no possibility to login to your machine if you loose the connection to your shared storage.
Yout should use NIS or somthing like that to share your user,groups and passwd between the cluster nodes.
Thorsten

"Property Mapping for Synchronization" User profile export to AD issue - Sharepoint 2013

Trying to map user properties to AD Mapped Attributes.
I map the property "SPS-JobTitle" to AD Attribute "title" with direction "export" click add and then ok to save and everything is fine, I then Map "WorkPhone" with Ad Property "telephoneNumber" with direction
"Export" and click add then ok and now property mapping on both "SPS-JobTitle" and "WorkPhone" show two mappings.
If i go into the propertied it will show two mappings under "Property Mapping for Synchronization" both the title and work phone mappings.
If i remove it from one it removes from both
flavio

It´s a bug in Sharpoint 2013, confirmed by MS.
I reported it in January but its still not fixed :(
The bug can be reproduced just as you mention by enabling export on several AD properties, the property will get duplicated on the previous propery you enabled export on.
This makes it impossible to use the AD export functionality in Sharepoint 2013 until the bug is fixed.
karl

Organizational Unit Synchronization & User Movement with Active Direct

Hi All,
Can anybody put some light on (Organizational Unit Synchronization) or can ref some doc links.
Anticipating Help from you folks.
Thanks
Randhir Singh

I'm assuming you want to synchronize Active Directory with either another LDAP directory or another repoisitory such as a relational database or a flat file.
If you just want to export or import objects from Active Directory using an industry standard interchange format, you may want to investigate the use of LDAP Data Interchange Format (LDIF). The tool included with Active Directory to import and export LDIF files is called LDIFDE.EXE
You may want to investigate directory synchronization products such as Microsoft Identity Lifecycle Manager. (refer to http://www.microsoft.com/windowsserver2008/en/us/ida-identity-lifecycle-management.aspx)

Synchronization user profile error

The LDAP server is unavailabale
pls gave me ans

First verify you have entered correct domain information. Read Jack's reply in below thread for further details.
https://social.msdn.microsoft.com/Forums/sharepoint/en-US/cf487b70-d7f2-413b-a9ba-522ed722e674/sharepoint-user-profile-sync-issue-the-ldap-server-is-unavailable-over-adfs?forum=sharepointgeneralprevious
Amit

Synchronize users from IDM Idenity Store to UME

Hi experts
I would like to synchroznize my users from IDM Identity Store to UME Java, I read this document "User management for the Identity
Management User Interface" but it is only for version 7.1, I use IDM 7.2 Sp8. I can't find job templates to ume.
I would like to provide users able to access portal:5000/idm, now only administrator can logon to the portal.
I looking forward for your reply

Hello Bartosz
For logging to IDM UI , IDM would match the MX_PESON with the UME user and allow the user to access IDM UI if both matches.
Please give idm.authenticated action access via any UME Role or group to users, You can add this action to Everyone group in UME.
For creating users in JAVA UME, You need to create one repository for UME as AS JAVA and choose standard job Create AS JAVA users from SAP Provisioning framework to create users.
Let me know in case any further information is required, I am also on IDM 7.2 SP8
Regards
Deepak Gupta

LDAP user synchronization using scheduler

hello,
Is there any OOTB functionality available to synchronize users from LDAP into CQ5?
If not, please help me to proceed in below scenario.
I have written a scheduler, which will pull the user details from LDAP and create the user into CQ using UserManager. This process is not creating the user same as system creates when user logs in. I am finding difficulty in setting attribute rep:principalName and process is throwing below given exception.
com.wem.ldap.ScheduledPeriodicJob RepositoryException while getting session javax.jcr.nodetype.ConstraintViolationException: Attempt to modify protected property rep:principalName of User 'xxxx'
        at org.apache.jackrabbit.core.security.user.AuthorizableImpl.checkProtectedProperty(Authoriz ableImpl.java:447)
        at org.apache.jackrabbit.core.security.user.AuthorizableImpl.setProperty(AuthorizableImpl.ja va:174)
        at org.apache.jackrabbit.core.security.user.UserImpl.setProperty(UserImpl.java:38)
        at com.wem.ldap.ScheduledPeriodicJob.run(ScheduledPeriodicJob.java:136)
        at org.apache.sling.commons.scheduler.impl.QuartzJobExecutor.execute(QuartzJobExecutor.java: 56)
        at org.quartz.core.JobRunShell.run(JobRunShell.java:213)
        at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908)
        at java.lang.Thread.run(Thread.java:662)
here is the code I have written
resourceResolver = resourceResolverFactory.getAdministrativeResourceResolver(null);
session = resourceResolver.adaptTo(Session.class);
JackrabbitSession jackrabbitSession = (JackrabbitSession) session;
UserManager manager = jackrabbitSession.getUserManager();
user = manager.createUser("xxxx", "xxxxx");
value = valueFactory.createValue("xxxx");
user.setProperty("cq:first-name", value);
value = valueFactory.createValue("xxxx");
user.setProperty("cq:last-name", value);
value = valueFactory.createValue("[email protected]");
user.setProperty("rep:e-mail", value);
value = valueFactory.createValue("CN=xxxx,OU=Users,DC=company,DC=com");
user.setProperty("rep:principalName", value);
jackrabbitSession.save();
can you please provide the code block to create user, which needs to get authenticated against ldap password.
Thanks,
Sastry

Hi Sastry,
For earlier cq5 you can use [1].   For cq5.5 please install the latest update1 and then you can sync using jmx by following[2].
[1]    http://dev.day.com/docs/en/crx/2-2/administering/ldap_authentication.html#LDAP%20User%20Sy nchronization
[2]
*    Go to /system/console/jmx and login as admin
*    Search for com.adobe.granite.ldap and click on it
*    You will see two methods. syncuser & syncuserlist. Supply the necessary parameter as in 5.4.
Thanks,
Sham

User synchronization SUS-BW issue.

Hello Experts,
Your help is required for the following issue.
One of our clients is implementing SRM-SUS 7.02 and would like to synchronize users (and information regarding BP) to their BW system 7.3
Configuration so far is as follows: SPRO -> SAP SRM -> Supplier Self-Services -> Master Data -> Maintain systems for Synchronization of User Data.
Parameters:
System Name: BW DEV
FM BPID: RS_BW_BCT_SRM_SUS_USER_BPID
Role: <blank>
F Mod.: Create User: BAPI_USER_CREATE
F Mod.: Change User: BAPI_USER_CHANGE
F Mod.: Delete User: BAPI_USER_DELETE
"Roles in external system" have been mapped.
Now, when a user (vendor contact person) is created in SUS, it's SU01 user is created correctly in BW. No problems here.
However, when I check table SRM_USER_SUPBPID in BW system, there are ZERO entries.
I guess I am missing something here.
I checked BADI SMUM_USR_CREATE_POST, and implementation RSSBR_SMUM_CRM_SUS is Active.
Should an entry exist in table SMUM_BSAPP? If so, what should I type in "BSID" field.
Any light on this matter is greatly appreciated.
Regards,
Gilberto Gallardo

Did you ever get this resolved? having a similar issue

User list synchronization and Unique userid questions

I am new to Oracle portal and LDAP and learning more and more about Portal every day.
Hi
I am using Oracle 9iAS portal 3.0.9 version. I have a requirement to integrate 3rd party LDAP with Oracle Portal Single Sign On. I have white paper on Configuring Oracle9iAS Portal for LDAP authentication. I have following questions
Paragraph from white paper (Background information):
When using LDAP authentication or any other external repository, for that matter- the list of users for authentication is held on the external repository. However, there is also a list of users held on the Login server, which is used to associate privileges to the user. Ideally, this list is maintained transparently and automatically. In fact, if a user account is created on LDAP and a user attempts to log in, the login will succeed, and an entry is automatically created on the login server for that user, after a successful login.
Questions:
1.     What privileges user will be granted when synchronization process create new portal user on login server automatically?
2.     Is it possible to customize whatever default privileges new portal user gets? If yes, how? Please provide some forum link or documentation or example.
Unique user Id scenario.
Our LDAP repository is setup for customers from different companies. We have requirement to integrate LDAP users with Oracle 9iAS portal 3.0.9 Single Sign On. I have two userid with same name on the LDAP from different company. For example userid jsmith from company A and jsmith from company B. Both user id do not exist on Portal Login Server. Both userids will be created automatically in Login server when LDAP and Portal synchronize user list.
1.     How oracle portal will handle such scenario when portal requires unique userid?
2.     Can I customize portal login screen? For example when they login they can provide userid, passwd and domain name. Where domain name could be company name.
Let me know if you need more information. Feel free to send direct e-mail also.

Dumlu,
For 1, you can have the user removed from OUL in OOB scenarios, but behind IP phones it's difficult since we won't know when the PC is offline from there. Only way to know that is when CAM receives a MAC-Notification of a new MAC address being learnt. In IB, you can use heartbeat timers to log them out
For 2, when a new MAC address is seen on the port, the MAC-Notification is sent out, and depending on your port profile the switchport will change or not. Check your port profile settings for more details on how you have it setup.
HTH,
Faisal

Can not synchronize the SAP NW UME users and system groups with SSM

We have created a demo enviroment for a client demo.
In SAP NW UME:
1. Create the system group.
2. Asing the goup created to the admin user (pipadmin).
In Administrator's user interface:
3. Acces to Administration > Set System Defaults in order to synchronize user tables. The data informed in the fields are:
SSM Administrator = pipadmin
Cache directory = C:Program FilesSAPSSMInternetPubcache
Global cache setting = Enable
End point = <IP:port>
User name = pipadmin
pasword = ······
cache = Enable
Then we click on syncronize tables (Administration > Set System Defaults). The "Update compled" message is showed but users and application group don't appear in the Administration > Manages Application Groups.
Note: We tried to syncronize yesterday and we recieved the message: restart the SSM Extended listener.

Thank you for your answer Bob.
Yes, I restarted the SSM Extended listener after all the steps.
Do you know if there is another missing step?
Regards,
Santiago

Synchronize users

Similar Messages

Maybe you are looking for