Identity Management Service › Connectors Guide › Connecting to Endpoints › SAP R/3 Connector › Connector-Specific Features › Managing SAP Central User Administration (CUA) Environments › Distribution Settings in SAP CUA

Distribution Settings in SAP CUA

Some distribution settings in your CUA environment can cause unexpected results.

If you use the SAP connector to change an attribute in a way that conflicts with the CUA distribution model, the modification attempted by the connector may be ignored. In some cases, SAP returns an error. However, in other cases you receive no notification that your change was ignored.

In addition, the User Console may not give a visual indication that the attribute change is permitted under the current distribution settings.

With the exception of password management, we recommend that where possible, the distribution settings be set to "Global".

Use the following advice to design your system:

• When the distribution model for an attribute has been set to "Global", this attribute must be managed by the connector using the endpoint connecting to the CUA master system.
• When the distribution model for an attribute has been set to "Local", the attribute can only be managed from the endpoint(s) connecting directly to each individual member system, regardless of its status within the CUA.
• Passwords cannot be managed as "Global", regardless of the distribution settings. Any changes applied to the password on a CUA master system are not distributed to the child systems by design.

Note: For further details on the distribution parameters for fields within transaction SCUM, refer to the SAP Central User Administration documentation available at http://service.sap.com.