Previous Topic: Acquire a SAP System Using the User Console

Next Topic: Changed Passwords are Expired


Acquire a SAP Endpoint Using the Provisioning Manager

SAP must be installed on the machine that you want to administer through the CA IdentityMinder SAP connector.

From the Endpoint type task view

  1. Register the SAP system as a SAP/R3 endpoint.

    Use the SAP Endpoint property sheet to register a SAP system. During the registration process, the Provisioning Manager identifies the SAP system you want to administer and gathers information about it.

    Note: You must provide a SAP user/password with administrator rights when registering a SAP system.

    More information:

    Create a New User and SAP Role with Minimum Rights to Administer SAP

  2. Explore the objects that exist on the endpoint.

    After registering the system in CA IdentityMinder, you can explore its contents. Use the Explore and Correlate Endpoint dialog. The Exploration process finds all SAP Accounts, SAP Roles (except Generated Roles), and SAP Profiles (except Generated Profiles). You can correlate the accounts with global users at this time or later.

  3. Correlate the explored accounts with global users.

    When you correlate accounts, CA IdentityMinder creates or links the accounts on an endpoint with global users, as follows:

    1. CA IdentityMinder attempts to match the eTSAPAccountName with each existing global user name. If a match is found, CA IdentityMinder associates the SAP account with the global user. If a match is not found, CA IdentityMinder performs the next step.
    2. CA IdentityMinder attempts to match the eTSAPLastName with each existing global user's full name. If a match is found, CA IdentityMinder associates the SAP account with the global user. If a match is not found, CA IdentityMinder performs the next step.
    3. CA IdentityMinder associates the SAP account with the default user object.