UME Attribute mapping

Hi,
via the files dataSourceConfiguration....xml it is possible to map physical user store parameters to UME attributes
<attributeMapping>
  <principals>
    <principal type="user">
      <nameSpaces>
        <nameSpace name="com.sap.security.core.usermanagement">
          <attributes>
            <attribute name="firstname">
              <physicalAttribute name="givenname"/>
            </attribute>
            <attribute name="displayname">
              <physicalAttribute name="displayname"/>
            </attribute>
Is it also possible to map attributes of the physical user store to "self defined" UME attributes?
I would like to map the physical attribute persnr (employee number) to a UME attribute "persnr" and request it in my application with IUser.getAttribute("persnr").
Is this possible?
Thanks in advance
Helmut
Message was edited by: Mary Joan Hebert

Hello Helmut,
what kind of problem occurs if the administrator tries the desired form
<attribute name="persnr"> <physicalAttribute name="persnr"/> </attribute>
Does he get any error message in some log file? Is it possible to post the relevant datasourceConfig-File?
Did the administrator add an entry not only into <attributeMapping> but also into:
<principal type="user">
                         <nameSpaces>
                              <nameSpace name="com.sap.security.core.usermanagement">
                                   <attributes>
                                        <attribute name="firstname" populateInitially="true"/>
                                        <attribute name="displayname" populateInitially="true"/>
                                        <attribute name="lastname" populateInitially="true"/>
                                        <attribute name="fax"/>
                                        <attribute name="email"/>
                                        <attribute name="title"/>
                                        <attribute name="department"/>
                                        <attribute name="description"/>
                                        <attribute name="mobile"/>
                                        <attribute name="telephone"/>
                                        <attribute name="streetaddress"/>                                        
                                        <attribute name="uniquename" populateInitially="true"/>                                   
<attribute name="persnr"/>          
                         </attributes>
                              </nameSpace>
Have a nice weekend
AE

Similar Messages

  • UME attribute mapping for lastpasswordchange to AD

    We are on EP 7.0 and are using Microsoft Active Directory 2003 as our user repository.
    I am using a writeable datasource configuration file to update passwords in AD from portal (SSL configured)
    For users who had password reset done through the portal, portal has the information for "Date of Last Password Change".
    However, for users who do password resets with other mechanisms (outside of SAP portal), portal does not have this information.
    I am trying to map the UME logical attribute "lastpasswordchange" to the corresponding physical attribute on Active Directory - which I believe is "pwdLastSet".
    My XML configuration looks like the following
    <dataSource id="CORP_LDAP"
             <responsibleFor>
                  <principal type="account">
                       <nameSpace name="com.sap.security.core.usermanagement">
                            <attribute name="j_user"/>
                            <attribute name="logonalias"/>
                            <attribute name="j_password"/>
                            <attribute name="userid"/>
                            <attribute name="lastpasswordchange"/>
                       </nameSpace>
                       <nameSpace name="com.sap.security.core.authentication">
                            <attribute name="principal"/>
                            <attribute name="realm"/>
                            <attribute name="domain"/>
                       </nameSpace>
                  </principal>   
                  <principal type="user">
                  </principal>
                  <principal type="group">
                  </principal>
             </responsibleFor>
             <attributeMapping>
                  <principal type="account">
                       <nameSpace name="com.sap.security.core.usermanagement">
                            <attribute name="j_user">
                                 <physicalAttribute name="samaccountname"/>
                            </attribute>
                            <attribute name="logonalias">
                                 <physicalAttribute name="samaccountname"/>
                            </attribute>
                            <attribute name="j_password">
                                 <physicalAttribute name="unicodepwd"/>
                            </attribute>
                            <attribute name="userid">
                                 <physicalAttribute name="*null*"/>
                            </attribute>
                            <attribute name="lastpasswordchange">
                                 <physicalAttribute name="pwdLastSet"/>
                            </attribute>
                       </nameSpace>                  
                    </principal>
                  <principal type="user">
                       <nameSpace name="com.sap.security.core.usermanagement">
                            <attribute name="firstname">
                                 <physicalAttribute name="givenname"/>
                            </attribute>
                  </principal>
             </attributeMapping>
             <privateSection>              
             </privateSection>
        </dataSource>
    However the above configuration doesn't work. I am not able to read the attribute "pwdLastSet" from AD using attribute mapping.
    Can some one please suggest what I am missing ?
    Thank You,

    You may google "pwdLastSet convert" a try to find out some scripts to convert pwdLastSet to another timestamp.
    As I got from some Google's [links|http://anothersysadmin.wordpress.com/2010/10/22/convert-pwdlastset-to-a-human-readable-date/] pwdLastSet it counts time in nanoseconds.
    Consult you MS Active Diractory team for help to create the converting script of create another attribute in AD with the format that match the portal's timestamp. Then you'll map  the new AD attribute to the "lastpasswordchange" attribute of the portal.
    Regards, Mikhail.

  • Get UME Attributes through front page

    Hello All,
    Is it possible to pull UME attribute of a user like "department" through front page?
    I only know to go to custom attributes and custom attribute mapping and pull it through
    getPropertyValue but can we pull the user details like department set in UME
    Please suggest
    Thanks
    Namita

    Sorry I dont know about Curly braces whether you can do for this , But cud be done for getting roles and User using curly braces or getPropertyValue.
    I Could only suggest you to do as below as far my knowledge ,
    Create XML query.
    Configure above XML Query in Transaction, in links map (XML Query) URL like given below
    "https://Server:Port/XMII/Illuminator?service=admin&Mode=UserAttribList&Content-Type=text/xml&group=XMII Administrators&IllumLoginName=loginId&IllumLoginPassword=pwd"
    Test in Workbench You will get Attributes as Output.
    Pass this to Document and get it in Frontpage using Xacute and Grid.
    Regards,
    Padma.

  • AP_EXPENSE_REPORT_HEADERS_ALL attribute mapping to AP_INVOICES_ALL

    Hi,
    We need to have some values in AP_INVOICES_ALL in some DFF ( For example Attribute10 ) for invoices we import via expense express. When we update attribute10 of ap_expense_report_headers_all after import i dont see it in the ap_invoices_all table.
    What is the mapping of the ap_invoices_all attributes to the ap_expense_report_headers_all attributes.
    Please help.
    thanks
    Ramakrishna

    Hi,
    The Attribute Mapping must be exactly matching between AP & Iexp.
    For example, if you are having a DFF in iExpense called DFF1 (Attribute12-Expense Headers), then you need to create a Attribute in AP Invoice Headers with the same Attribute Number 12.
    If you are creating in Expenses Report Lines, the create in AP Invoice Lines category. Pls remember that Attribute No. must be same. If it is done, then data will move exactly from iExpense to AP when Expense Report Export program is run.
    The DFF Names need not be same.
    Regards,
    guru

  • XSU attribute mapping error

    I've encountered an attribute mapping problem when using the Java OracleXMLQuery class in XSU (Oracle XML Developer's Kit for PL/SQL on Windows NT - 9i 9.2.0.1.0). As an example, take a look at the following object type containing one field whose name is prefaced with "@". This should cause XSU to map the field as an attribute rather than an element:
    create or replace type testtype_t as object
    "@test_attribute" varchar2(20),
    test_element varchar2(30)
    Here's the query passed to OracleXMLQuery:
    select testtype_t('abc', 'def') "TEST1", testtype_t('ghi', 'jkl') "TEST2" from dual
    Here's the output of the getXMLString method:
    <?xml version = '1.0'?>
    <ROWSET>
    <ROW num="1">
    <TEST1 test_attribute="abc">
    <TEST_ELEMENT>def</TEST_ELEMENT>
    </TEST1>
    <TEST2>
    <test_attribute>ghi</test_attribute>
    <TEST_ELEMENT>jkl</TEST_ELEMENT>
    </TEST2>
    </ROW>
    </ROWSET>
    Notice that the output is correct for the "TEST1" element - it contains a "test_attribute" attribute. The "TEST2" element, however, does not contain a "test_attribute" attribute. Instead, the field was output as a child element of "TEST2" called "test_attribute". To get around this, I had to create another object type as follows:
    create or replace type testtype2_t as object
    "@test_attribute" varchar2(20),
    test_element varchar2(30)
    It's format is identical to the "testtype_t" object type described above. Here's the new query passed to OracleXMLQuery:
    select testtype_t('abc', 'def') "TEST1", testtype2_t('ghi', 'jkl') "TEST2" from dual
    Here's the resulting output of the getXMLString method:
    <?xml version = '1.0'?>
    <ROWSET>
    <ROW num="1">
    <TEST1 test_attribute="abc">
    <TEST_ELEMENT>def</TEST_ELEMENT>
    </TEST1>
    <TEST2 test_attribute="ghi">
    <TEST_ELEMENT>jkl</TEST_ELEMENT>
    </TEST2>
    </ROW>
    </ROWSET>
    Now, the "TEST2" element contains an attribute as it should.
    It seems that the only time attributes are mapped correctly for a particular object type is when it is first encountered in the query. The mapping fails for each subsequent occurrence. Creating additional object type definitions is a solution, but this can result in the creation of many redundant object type definitions. Is there another solution available? Thanks . . .

    Hi,
    Please tell me when you are getting this error and please explain a bit more what exactly you want to do..
    Thanks
    --Anil                                                                                                                                                                                                                                                                       

  • Attribute mapping not working with complex searches

    Hi all,
    We are using "attribute mapping" for some attributes and that works fine as far as we don't make a complex search. We are doing the attribute mapping at the Directory proxy 6.3 so we map businessSector to businessUnit. Everything work fine if we just put businessSector in the search, but if we add something else to the search filter, it will not work.
    So, if we use filter businessSector=XXXXXXX, it will work and make all the mapping, but if we use something like "(&(pocketSizeOffice=Yes)(businessSector=XXXXXXX))", it will not work.
    We have look at the logs and we see the mapping happening in the first case, but not in the second one.
    Have somebody seem this before or is facing this problem?
    Thanks,
    Federico

    Hi Federico,
    I was not able to reproduce the problem with DPS 6.3 in my labs... so the conditions to reproduce it may be more tricky than described. Anyway, this is not a known problem.
    Feel free to contact Sun support to have a fix delivered to you.
    Thanks
    -Sylvain

  • Reading UME attributes from Webdynpro ABAP code

    Hi,
    We have a requirement in our project where we need to read the UME attributes for a logged in user in the webdynpro ABAP code. The attribute in question is "SAP Vendor Number" which is maintained as UME attribute for each user.
    Is there any standard FM or BAPI or webservice which we can leverage for this requirement?
    Else, any pointers regarding how to achieve this functionality would be helpful.
    Thanks.

    Hi kartik,
    BAPI_USER_GET_DETAIL Function module to get all the required details of the system user in one go. Here you need to give the SAP Logon Name (USerID) of the person to the function module.
    Or check if this are helpful.
    BBP_PARTNER_GET_DATA
    BAPI_PARTNER_GET_BY_IDNUMBER
    BUPA_PARTNER_GET_BY_IDNUMBER 
    BBP_PDH_GET_PARTNERS_FROM_USER

  • Attribute mapping in replication

    Hi,
    We have around 10 servers running DS5.2P4.
    Now we are building DS6.3 servers for an acquired enterprise and would like to store the new directory information in one of the old 5.2 servers for data recovery.
    The problem is that the schema in 6.3 is different compared to the old 5.2P4.
    So is attribute mapping possible in replication between 6.3 and 5.2 Directory servers.
    Thanks

    Hi,
    Please tell me when you are getting this error and please explain a bit more what exactly you want to do..
    Thanks
    --Anil                                                                                                                                                                                                                                                                       

  • Adv. Pricing: Custom Attribute mapped to Std. Volume's ITEM_QUANTITY field

    Advanced Pricing: A Custom Attribute is mapped to Std. Volume's ITEM_QUANTITY field, to be able to capture a user-defined volume onto the Standard Quantity field via. Attribute Mapping. However the expected behavior is not achieving. Still the PTE prices if off the OM/ASO's Quantity field, and not based on the number that goes into the attribute field.
    PTE= 'Order Fulfillment', Context Type = 'Pricing Context', Context = 'VOLUME', Code = 'ITEM_QUANTITY'.
    Attribute Mapping Method = ATTRIBUTE MAPPING.
    Click on Attribute Mapping button
    Application Name=Advanced Pricing
    Line Level User Source Type=PL/SQL API
    User Value String= OE_ORDER_PUB.G_LINE_REC.ATTRIBUTE10
    When I create the Sales Order in OM, at the line level after entering the item, I entered a number in attribute10, then
    also a value in the standard quantity field, and Save. The item had price
    breaks defined in the pricelist. But the price returned was based on the value
    in the standard Quantity field, not the value in attribute10. Even when I
    reprice the line (Actions-->Price Line), there is no change.
    Expected behavior is to get the Price off the Attribute that mapped to the 'ITEM_QUANTITY' field (which is a standard/seeded attribute).
    Does anyone made such expected behavior to work (without being used with a Customer Price API)?

    can someone pls reply?
    Thanks!

  • Custom UME attribute with pre-defined values

    All,
    Is it possible to define a custom UME attribute which will have pre-defined values so that it appears as dropdown select when the admin creates a user?
    Your help is appreciated.
    Thanks

    Hi Aakash,
    I am not a software developer so I cannot really give you details. I can point you to our documentation: [SAP NetWeaver Developer's Guide|http://help.sap.com/saphelp_nw70ehp1/helpdata/en/8b/0b674240449c60e10000000a1550b0/frameset.htm]
    This guide should point you in the right direction. The UME has a public API with which you access the attributes in question programmatically. What you do from there depends what you as a programmer want to do.
    -Michael

  • RE: Attributes mapping

    Hi,
    I think it is the later case, that is, the current object is being altered
    by SetValue. Maybe you can trace the action by creating a DomainClass from
    TextNullable and run it in debug.
    Regards,
    Peter Sham.
    -----Original Message-----
    From: Dimitar Gospodinov [SMTP:[email protected]]
    Sent: Tuesday, March 23, 1999 3:01 PM
    To: Forte Users Mail List
    Subject: Attributes mapping
    Does anyone know what mechanism Forte uses when performs an
    attribute
    mapping in the window classes.
    For example if we have a DataField widget named MyDataField that
    maps to
    TextData. Let assume also that you have created an instance of the
    TextData class that is referenced by the MyDataField variable.
    Then the question is what will happen when you change the value in
    the
    DataField?
    A new object will be created or the current object will be altered
    by
    invoking the method SetValue?
    Regards,
    Dimitar Gospodinov
    Dimitar Gospodinov
    Consultant
    International Business Corporation
    e-mail: [email protected] << File: Card for Dimitar Gospodinov >>
    To unsubscribe, email '[email protected]' with
    'unsubscribe forte-users' as the body of the message.
    Searchable thread archive <URL:http://pinehurst.sageit.com/listarchive/>

    Try to use rework warehouse as a location for rework and if you want it recorded in a specific/certain GL, you must define it in COA firsts. using good issue and good receipts and do not forget to record PO no. in the remarks (comments field). So, when rework happens, receipt it in the rework warehouse using good receipts and issuing it from production warehouse and vice versa.
    BTw, what type of company you are currently facing ? Is it assembly type ? steel manufacturing or what ? You must also provide info whether you use backflush or manual.
    Rgds,

  • UIXInclude getAttribute Illegal access of the include attribute map out

    Using JDeveloper 11.1.1.6.0
    I've been digging into the reason why I've been getting this in my logs. At first, I thought it was because of a declarative component, but after further digging, it was actually the region which I'm using inside a declarative region's facet.
    <UIXInclude> <getAttribute> Illegal access of the include attribute map outside of the include context
    Searching google only gets me to this link:
    [ Oracle® Fusion Middleware Error Messages Reference|http://docs.oracle.com/cd/E16162_01/core.1112/e22506/chapter_adf_faces_messages.htm]
    Has anyone encountered this same log? If you have, can you share what is causing it?
    Thanks.
    -Marvin

    Found the issue.
    Too bad I had to realize it the hard way. When the declarative component is trying to point to an attribute that doesn't exist, then you get this message in your log. Feel bad for the af:region for getting blamed... (but hey the documentation said contact support so that didn't help as well).
    Killed the unneeded and anonymous attribute element and everything is back to normal.
    -Marvin

  • Export Custom Attribute Mapping

    Hello Gurus!
    I'm migrating a xMII 11.5 project to MII 12.1 and the migration tool was fine on creating the Custom Attributes and Custom Attribute Mapping. However, what I need now is to export Custom Attribute and Custom Attribute Mapping from MII 12.1 DEV to QAS and PRD.
    My question is: When exporting Custom Attributes from Configurations menu, it will export Custom Attribute Mapping too? How can I export and import Custom Attribute Mapping from DEV to QAS and PRD?
    Thanks

    Manoel,
    have you tried the following:
    - open System Management / Configurations
    - unmark the "Select All" and only mark the "Custom Attributes"
    - click export and save the zip file
    The exported zip file should include all the settings. In your follow up systems QAS and PRD you can import the zip file.
    See also SAP Help on [MII 12.1 Configuration|http://help.sap.com/saphelp_mii121/helpdata/en/43/e80b59ad40719ae10000000a1553f6/frameset.htm]
    Michael

  • HCM / VDS / IDM Attribute Mapping

    Hi folks!
    So we have a bunch of attributes in SAP that start with SYHR, and we have a couple of questions about them.
    1. How are these fields mapped to IDM? We've found some information in Identity Management for SAP System Landscapes: Configuration Guide, but we are looking for something more.  It seems attributes mapped in the PNP database (or tables?) is not shown that clearly.  Our Business Analysts want more information.
    2. It seems most of these fields are calculated somehow. As a bonus, we'd like to know how these fields are calculated in the first place.
    Thanks for any help you can provide,
    Matt

    I am not sure how well the document reflects the attribute mapping in the transfer event task in the Staging Id Store. I guess that you need to both look at the document and the event task in Staging Id Store that moves the data to Productive Id Store to see all the attribute mappings.
    The real question is how would you need to map them between HCM and IdM. It's pretty normal requirement analysis work to figure out what to export. You should only export relevant attributes.
    I am not sure about "calculated attributes" and I am not an ABAP'per, but if you have HCM-consultants on site have them analyze the query definition shipped with HCM. Any transformation that takes place should be in the query and it's data mappings.
    I wrote this while ago, won't give you any technical tips etc but more of what I've faced in HCM-integration: Considerations in connecting SAP IdM with Leading Identity System(s)
    regards, Tero

  • Reg: Retreiving Custom UME attributes

    How to retrieve custom UME attributes in webdynpro. Should i add any imports or jar files for that.

    Hi,
    add the com.sap.security.api.jar in build path.
    try {
         wdComponentAPI.getMessageManager().reportSuccess("** user attributes***");
         IWDClientUser wdUser = WDClientUser.getCurrentUser();
        IUserFactory fact=UMFactory.getUserFactory();
        IUser user=wdUser.getSAPUser();
        IUserAccount acc=user.getUserAccounts()[0];
       //user attribute
       String[] attNamesapces=user.getAttributeNamespaces();
       for(int i=0;i<attNamesapces.length;i++){
           String attrib[]=user.getAttributeNames(attNamesapces<i>);
           for(int j=0;j<attrib.length;j++){
               String h[]=user.getAttribute(attNamesapces<i>,attrib[j]);
                if(h!=null)
                  for(int k=0;k<h.length;k++)
          wdComponentAPI.getMessageManager().reportSuccess(attNamesapces<i>+"."+attrib[j]
    +"="+h[k]);
    //user account attributes
    wdComponentAPI.getMessageManager().reportSuccess("** user account attributes***");
    attNamesapces=acc.getAttributeNamespaces();
    for(int i=0;i<attNamesapces.length;i++){
       String attrib[]=acc.getAttributeNames(attNamesapces<i>);
       for(int j=0;j<attrib.length;j++){
           String h[]=acc.getAttribute(attNamesapces<i>,attrib[j]);
           if(h!=null)
              for(int k=0;k<h.length;k++)
             wdComponentAPI.getMessageManager().reportSuccess(attNamesapces<i>+"."+attrib[j]+"="+h[k]);
    } catch (Exception e) {}
    Regards,
    Naga

Maybe you are looking for

  • Process of purchasing subscription reloads HTML banner in the library tab.

    Hi there! Finally I finished my first HTML banner for the library tab. I have a collection of banners with different types: - subscribe - buy/download issue - itunes link - go to another tab - watch video fullscreen etc. Everything works fine. Only o

  • HashMap and reference

    Hi, In HashMap or any other collection framework in general, when I look up something, in order for that something to be in the collection, I need to look it up by an object with the same reference, not an object that is "equal" by "equals()" method.

  • Calling RFCs in Java WebDynpro

    Hello Experts, I'm new to WebDynpro. I'm a novice at best and have just learned the basics. I'll probably be asking a lot of questions about this soon. Here is one problem I recently encountered: I managed to call RFCs from R/3 using a user input and

  • Mailboxes offline

    When my computer comes out of sleep mode, my mailboxes are offline and I can't get them back online.  The only way I can get my mail is to close Mail and re-open it.  Then it retrieves my mail and all accounts are online.  I have 5 different mail acc

  • ECS and Shecess in TAXINN

    Dear Guru's     In taxinn procedure i have done the setting and upto billing the values are picking up properly ie Base value BED Ecess+ Shecess, but when i do J1iin only BED is getting copied and not ECess and Shecess. Even BED utilization is Happen