Is is possible to setup a connector from SAP IDM 7.2 to feed Sailpoint, We would like to use IDM as our HR source to feed Sailpoint. Not sure how to proceed , looked at setting up a VDS but no luck to get that to work to feed Sailpoint.
Setup IDM Data Feed to Sailpoint IDAM?
Question about HCM Configuration for VDS connection
Hi all,
I am trying to connect HCM to IDM as an Identity source.
(ERP is EHP7 and IDM is 8.0.)
According to the IDM configuration manual, the Prerequisites are as follows:
●The Virtual Directory Server is installed.
●The Identity Center is installed and configured.
●The SAP HCM system is installed and contains employee data.
●The user who exports the data from the SAP HCM system has the following PFCG roles assigned:
○SAP_HR_LDAP_EXTRACTION (execution of data extraction)
○SAP_HR_LDAP_PREPARE_EXTRACTION (needed for attribute mapping)
●An LDAP Connector is configured on the SAP HCM system.
here, can any one help me for the last item?
● An LDAP Connector is configured on the SAP HCM system.
What this means?
What should I ask to BC or HCM consultant for this?
thanks in advance.
dongsu
Modification of Business Role Validity
Dear All,
I am running SAP NW IDM 7.2 SP10 PL12 with MS SQL Database.
I have seen this behaviour with a lower version as well, but I am sure this was working before.
If I try to modify the validity of a Business Role assignment with SAP backend privileges.
The validity date is modified on both objects, role and privilege but the "Validate Modify validity" or "Modify validity task" is not triggered.
Is this a bug, any clues?
Best Regards,
Ridouan Taibi
Dispatcher dying in TEST environment
Hi there,
I get this issue when VM holding my test environment comes back up:
hread:IDS_DispThread-CFG_RELOAD-idmdispatcher - non-restartable thread has died
-> exiting ...
Any idea why it's happening? It's not a big deal, except that I'd like the dispatcher to be running when I bring my VM back up
Thanks,
Matt
IDM 8.0 Identity Management Database not updated properly
Hi,
Yesterday I upgraded successfully my SAP IDM 7.2 instance to 8.0.
After configuring SSL for Eclipse I recieve the error message on Login: Identity Management Database not updated properly
Before this message I got the Error message on the idmdevstudio Java Application:
ErrorCode: 0, ErrorMessage: The SELECT permission was denied on the object 'mc_dbschema', database 'mxmc_db', schema 'dbo'.
OpenSQLExceptionCategories: [], CausedBy: 0
I changed the select rights on this table to public (for testcases) and it "worked"
I re-run the mxmc_update.cmd script with no success.
The first time I ran the script all Identity Stores where updated successfully (status code 0).
There is the RDS kit installed from 7.2
It's a Windows Server 2012 with SQL Server 2012, I installed all on the same machine.
I ran the update script with user mxmc_oper and the db connection on netweaver is configured with mxmc_prov.
Any Ideas how to debug?
Or any Ideas how to fix?
Thanks, Patrick
Logon Help: "Could not connect to IDM server" Message
Hi all,
I'm implementing Logon Help with IdM 7.2 and I'm experiencing the message "Could not connect to IDM Server".
In the backend is everything set (also group policy) and connecting as well as through https.
I'm guessing that this could be a Windows Problem (here we have with w7) or certificate.
Do you guys have any thougts about it?
Thanks!
RG
SAP IDM Extension Framework
All -
To meet client requirement I need to use SAP IDM Extension Framework. As part of this framework, I try to create Enterprise Application Project (EAR) in Eclipse. While creating EAR project, we normally select runtime as "SAP Libraries" as shown in the screenshot, but I am not getting SAP Libraries from dropdown list. Could you please help me how do I get runtime as "SAP Libraries"? If I miss any configuration please correct me.
Thank You,
Nag
Identity Center Log Levels
Hello Experts,
we use IDM 7.2 and I am writing some little scripts. When I write some debugging information with uInfoor uErrMsg(1, ...) they only appears in the Execution log, not in the System or Job log. Why?? For the Job the Identity Center log level is Information/Warning/Error and in the System Log the Level is standing on Info. Is there any inconsistency with the naming or what I am missing?
My aim is not to use the warning level for writing debug information to the logs, cause they not differ from real warnings.
Thanks and Greetings,
Thomas
SAP IDM 8.0 - use of jQuery in scripts
Hi IDM Experts!
Sorry, but this might seem like a very silly question; how does one use jQuery within a script in IDM 8.0; I enabled the "Labs Features" as seen below, but I still can't use jQuery:
When trying to use jquery within an IDM script, I keep getting similar errors:
$ is not defined
or
jQuery is not defined
Would greatly appreciate your help / advice on this! How does one successfully use jQuery within IDM 8.0?
Thanks a ton in advance!
Best regards,
Sandeep
DBMS attibutes in SU01
Hello IdM developers,
has anyone of you used the DBMS tab in SU01 yet? Are these attributes supported by the ABAP connector?
I had a look at SAP Identity Management APIs document and tried the example program for the BAPIs (IAM_API_TESTFRAME) but it seems that I can’t get to the right attributes.
Does anyone have a solution or do we have to implement a new function module to connect to?
Thanks in advance,
Sven
Deleted passes in a new job
Hello,
i have the following Problem.
If i create passes in a job and run the job the passes are working.
After ja few runs, if i will open the job to create new passes all other passes are deletet. (see the Picture)
Someone knows this problem and can help me?
Actually we have IDM 8.0 installed.
How to disable the UI task based on the Country of the user
Hello Experts,
We have a requirement to hide/ disable the UI task. Previously we have role based access to this task.
The UI task should be enabled to the users who has the below roles and are from BE country.
We have modified the filter in the Access Control tab with the below query.
After modifying this, the UI task is always disabled/ hidden to all the logged in users even though they have the role.
Can you please help how to fix this issue
Thanks
Jay
SAP IdM 7.2 SP9- Could not execute Task for any entry
Hi Experts,
From yesterday suddenly none of our tasks are getting executed via IdM UI, We recently upgraded from SP8 to SP9 and everything was working smoothly post upgrade also but suddenly now we are getting error for all of our UI Tasks (Change data/ lock/unlock/role assignment etc) :" Could not execute Task <Task Name> for entry <Entry Value>"
However, I am able to do assignment /changes/lock/unlock/ password reset through mass jobs in MMC and that works well.
I also tried updating database again but with no success, Can you please help and advise troubleshooting steps to resolve this error ?
Regards
Deepak Gupta
IDM UI - ToDo-Tab: Internal Server Error after upgrading IDM 7.2 SP7->SP10
Hi,
we have upgraded our IDM 7.2 SP7 installation to SP10.
In general the IDM-UI seems to work fine, but we receiving an Internal Server Error on the "Todo-Tab",
each time an approval is accepted or declined.
Has anybody experienced this problem too and can provide a solution.
BR,
Markus
UI AC Filter
Dear Community Members,
I have a requirement to restrict access to a ui based on the value in attribute MX_FS_PERSONNEL_NUMBER. I need to restrict processing on the ui to only entries who have a null value for the above attribute, Could you recommend an efficient filter for this?
IDM 8.0
Oracle DB,
Thanking you Kindly,
-A
Grant multiple roles on HANA
Hi experts,
We have an issue with our HANA connector while assigning roles (Provisioning Framework 2). As per my understanding the plugin “4. Assign user membership to SAP HANA roles or privileges” will call the HANA stored procedure GRANT_ACTIVATED_ROLE.
This procedure works only for one role per call. The IdM connector forwards all the roles to be granted separated by a , (comma). The job log throws an exception:
“Exception from Modify operation:com.sap.idm.ic.hana.encoder.HanaEncoderWhitelistException: The provided input is not valid activated role.”
The old connector executed just the SQL statement “GRANT role1,role2 TO user”. This won’t work anymore because activated roles can only be granted through the stored procedure.
Does anybody has an idea how to grant multiple roles at once?
Thanks,
Sven
How to create Dynamic Group in IDM 8?
Hi experts,
I am trying to create a Dynamic Group and assign some person to it.
I did it as follows;
1. checked person with condition as department = korea.
there are 8 persons.
2. create dynamic group and name it DG_korea
3. And add target definition as follows and save it.
4. But if I press search button in 'Assigned Users' tab, there says 'No entries returned'.
5. If I check the target filter ..
********
Can anyone tell me what did I missed or did wrong?
After create Dynamic group and assign persons to it, I planed to assign role and privileges to it.
Best regards,
dongsu
SAP IDM 8:0 on DB2: mc_job_getinfo returned error 0
Dear all,
we've encountered a strange problem with IDM 8.0 in DB2:
The modification task fails everytime on the first switch (where it checks if a password has been changed) with the error "mc_job_getinfo returned error 0". Further examination reveals that this error can only be raised if the dispatcher thinks it is running on MS SQL (or Sybase for that matter) but never on DB2 (or Oracle).
Has somebody seen this error? What is wrong here? How can this be corrected? Is anybody else runnig IDM 8.0 on DB2?
Thanks,
Sietze Roorda
SAP IDM Extension Framework
All -
To meet client requirement I need to use SAP IDM Extension Framework. As part of this framework, I try to create Enterprise Application Project (EAR) in Eclipse. While creating EAR project, we normally select runtime as "SAP Libraries" as shown in the screenshot, but I am not getting SAP Libraries from dropdown list. Could you please help me how do I get runtime as "SAP Libraries"? If I miss any configuration please correct me.
Thank You,
Nag
:F:Could not import job to Identity Center
Hi All,
I am importing a task developed in development into our production system and get this error:
:F:Could not import job to Identity Center
There are no warnings in the log, so the only two other threads here with the same error message are not the same problem as I have:
Error in Import of SAP PF Version 2 in SP9 | SCN
Error Import Provisiong Framework 2 for SP9 | SCN
Obviously I do not want to have to key it manually. I am hoping one of you can help me with the troubleshooting of this error.
Does anyone have any experience of solving this problem?
Thanks very much,
Andy
Message was edited by: andy minshull