Previous Topic: Acquire a SAP System Using the User Console

Next Topic: Changed Passwords are Expired

Acquire a SAP Endpoint Using the Provisioning Manager

SAP must be installed on the machine that you want to administer through the CA Identity Manager SAP connector.

From the Endpoint type task view

  1. Register the SAP system as a SAP/R3 endpoint.

    Use the SAP Endpoint property sheet to register a SAP system. During the registration process, the Provisioning Manager identifies the SAP system you want to administer and gathers information about it.

    Note: You must provide a SAP user/password with administrator rights when registering a SAP system.

    More information:

    Create a New User and SAP Role with Minimum Rights to Administer SAP

  2. Explore the objects that exist on the endpoint.

    After registering the system in CA Identity Manager, you can explore its contents. Use the Explore and Correlate Endpoint dialog. The Exploration process finds all SAP Accounts, SAP Roles (except Generated Roles), and SAP Profiles (except Generated Profiles). You can correlate the accounts with global users at this time or later.

  3. Correlate the explored accounts with global users.

    When you correlate accounts, CA Identity Manager creates or links the accounts on an endpoint with global users, as follows:

    1. CA Identity Manager attempts to match the eTSAPAccountName with each existing global user name. If a match is found, CA Identity Manager associates the SAP account with the global user. If a match is not found, CA Identity Manager performs the next step.
    2. CA Identity Manager attempts to match the eTSAPLastName with each existing global user's full name. If a match is found, CA Identity Manager associates the SAP account with the global user. If a match is not found, CA Identity Manager performs the next step.
    3. CA Identity Manager associates the SAP account with the default user object.