...
You can connect EmpowerID to SAP R/3 system two ways:
Application Server
Message Server
Each has its own set of prerequisites. Expand the drop-down for that connection method to view.
...
The SAP proxy account used for the S/4HANA connector needs to have access to the below tables as well as the ability to make the remote procedure calls listed:
SAP Table | Required Columns (Keys) |
|---|---|
ADCP | CLIENT, ADDRNUMBER, PERSNUMBER, DATE_FROM, NATION |
ADR2 | CLIENT, CLIENT, ADDRNUMBER, ADDRNUMBER, PERSNUMBER, PERSNUMBER, DATE_FROM, DATE_FROM, CONSNUMBER, CONSNUMBER, CONSNUMBER, TEL_NUMBER, TEL_NUMBER |
ADR3 | CLIENT, ADDRNUMBER, PERSNUMBER, DATE_FROM, CONSNUMBER |
ADR6 | CLIENT, ADDRNUMBER, ADDRNUMBER, PERSNUMBER, PERSNUMBER, DATE_FROM, CONSNUMBER, FLGDEFAULT, SMTP_ADDR |
ADRP | CLIENT, PERSNUMBER, PERSNUMBER, DATE_FROM, NATION, NAME_FIRST, NAME_LAST |
AGR_1016 | MANDT, AGR_NAME, AGR_NAME, COUNTER, PROFILE |
AGR_1251 | MANDT, AGR_NAME, AGR_NAME, AGR_NAME, COUNTER, OBJECT, OBJECT, FIELD, FIELD, LOW, LOW, HIGH, HIGH |
AGR_1252 | MANDT, AGR_NAME, COUNTER |
AGR_AGRS | MANDT, AGR_NAME, AGR_NAME, CHILD_AGR, CHILD_AGR |
AGR_DEFINE | MANDT, AGR_NAME |
AGR_TEXTS | MANDT, AGR_NAME, AGR_NAME, AGR_NAME, SPRAS, LINE, LINE, LINE, TEXT |
AGR_USERS | MANDT, AGR_NAME, UNAME, FROM_DAT, TO_DAT |
AUSOBT | NAME, TYPE, OBJECT, FIELD, LOW |
AUTHX | FIELDNAME |
BUT000 | CLIENT, PARTNER, TYPE |
BUT051 | CLIENT, RELNR, PARTNER1, PARTNER2, DATE_TO |
BUT100 | MANDT, PARTNER, RLTYP, DFVAL |
DD04T | ROLLNAME, DDLANGUAGE, AS4LOCAL, AS4VERS |
GRACFFCTRL | MANDT, APP_TYPE, FFOBJECT, CONNECTOR, CNTRL_ID |
GRACFFOWNER | MANDT, APP_TYPE, FFOBJECT, CONNECTOR, OWNER |
GRACFFOWNERT | MANDT, LANGU, APP_TYPE, FFOBJECT, CONNECTOR, OWNER |
GRACFFUSER | MANDT, APP_TYPE, FFOBJECT, CONNECTOR, FF_USER |
HRP1000 | MANDT, MANDT, MANDT, PLVAR, OTYPE, OTYPE, OTYPE, OBJID, OBJID, ISTAT, BEGDA, ENDDA, LANGU, SEQNR, OTJID |
HRP1001 | MANDT, MANDT, OTYPE, OBJID, OBJID, PLVAR, RSIGN, RELAT, ISTAT, PRIOX, BEGDA, ENDDA, VARYF, SEQNR, SCLAS, SOBID |
HRP1032 | MANDT, PLVAR, OTYPE, SUBTY, OBJID, ISTAT, ENDDA, BEGDA, VARYF, SEQNR |
PA0000 | MANDT, PERNR, SUBTY, OBJPS, SPRPS, ENDDA, BEGDA, SEQNR |
PA0001 | MANDT, PERNR, SUBTY, OBJPS, SPRPS, ENDDA, BEGDA, SEQNR |
PA0002 | MANDT, PERNR, SUBTY, OBJPS, SPRPS, ENDDA, BEGDA, SEQNR |
PA0006 | MANDT, PERNR, SUBTY, OBJPS, SPRPS, ENDDA, BEGDA, SEQNR |
PA0016 | MANDT, PERNR, SUBTY, OBJPS, SPRPS, ENDDA, BEGDA, SEQNR |
PA0032 | MANDT, PERNR, SUBTY, OBJPS, SPRPS, ENDDA, BEGDA, SEQNR |
PA0105 | MANDT, PERNR, SUBTY, OBJPS, SPRPS, ENDDA, BEGDA, SEQNR |
PA2006 | MANDT, PERNR, SUBTY, OBJPS, SPRPS, ENDDA, BEGDA, SEQNR |
RSBPCE_TEAM | APPSET_ID, TEAM_ID, OBJVERS |
RSBPCE_USER_TEAM | APPSET_ID, TEAM_ID, TEAM_ID, OBJVERS, USER_ID, USER_ID |
T591S | MANDT, SPRSL, INFTY, SUBTY |
TACT | ACTVT |
TACTZ | BROBJ, ACTVT |
TADIR | PGMID, OBJECT, OBJ_NAME |
TB003 | CLIENT, ROLE |
TB003T | CLIENT, SPRAS, ROLE |
TDEVC | DEVCLASS |
TOBC | OCLSS |
TOBJ | OBJCT |
TOBJC | OBJCT, OCLSS |
TOBJT | LANGU, OBJECT |
TSAD3 | CLIENT, TITLE |
TSAD3T | CLIENT, TITLE, LANGU |
TSTC | TCODE |
TSTCT | SPRSL, TCODE |
USCOMPANY | MANDT, COMPANY |
USGRP | MANDT, USERGROUP |
USGRP_USER | MANDT, BNAME, USERGROUP, FROM_DAT, TO_DAT |
USOBT | NAME, TYPE, OBJECT, FIELD, LOW |
USOBT_C | NAME, TYPE, OBJECT, FIELD, LOW |
USOBX | NAME, TYPE, OBJECT |
USOBX_C | NAME, TYPE, OBJECT |
USORG | FIELD |
USR01 | MANDT, BNAME |
USR02 | MANDT, BNAME, BNAME, GLTGV, GLTGB, USTYP, CLASS, UFLAG, TRDAT, LTIME |
USR05 | MANDT, BNAME, PARID |
USR06 | MANDT, BNAME |
USR10 | MANDT, PROFN, PROFN, AKTPS, TYP |
USR11 | MANDT, LANGU, PROFN, PROFN, AKTPS, PTEXT |
USR21 | MANDT, BNAME |
USRACL | MANDT, BNAME |
USREFUS | MANDT, BNAME |
UST04 | MANDT, BNAME, PROFILE |
UST10C | MANDT, PROFN, PROFN, AKTPS, SUBPROF, SUBPROF |
UST10S | MANDT, PROFN, PROFN, PROFN, AKTPS, OBJCT, OBJCT, OBJCT, AUTH, AUTH, AUTH |
UST12 | MANDT, OBJCT, OBJCT, AUTH, AUTH, AKTPS, FIELD, FIELD, VON, VON, BIS, BIS |
REQUIRED REMOTE PROCEDURE CALLS |
|---|
Required Activity |
|---|
BAPI_USER_ACTGROUPS_ASSIGN |
Display |
BAPI_USER_CHANGE |
Execute |
BAPI_USER_CREATE1 |
ADR6
BAPI_USER_EXISTENCE_CHECK |
BAPI_USER_GETLIST |
AGR_1016
BAPI_USER_GET_DETAIL |
BAPI_USER_LOCK |
AGR_AGRS
BAPI_USER_UNLOCK |
PING |
RFCPING |
RFC_GET_FUNCTION_INTERFACE |
RFC_GET_NAMETAB |
TSTCT
RFC_PING |
USCOMPANY
RFC_READ_TABLE |
PING |
USR10
RFCPING |
RFC_GET_FUNCTION_INTERFACE |
RFC_GET_NAMETAB |
RFC_PING |
USREFUS
RFC_READ_TABLE |
UST04
UST10C
UST10S
UST12
REQUIRED ACTIVITY
Display
| Tip |
|---|
As each organization's implementation, practices, and procedures with SAP differs, EmpowerID uses an SAP Data Analysis Utility to ensure the necessary tables can be read and the necessary BAPI's can be invoked. The utility reads from all the same tables as the connector and copies data from those tables into the EmpowerID Identity Warehouse. This provides EmpowerID with the opportunity to review and analyze data in order to modify connector logic before setting up the connection. |
...