The EmpowerID SAP HCM connector is read-only; EmpowerID pulls identity information from the HCM module, but does not write information back to it. This makes SAP HCM the authoritative source for user identities and attributes pulled from HCM. When you connect EmpowerID to the HCM module, it reads a list of people and the demographic information (name, work address, etc.) for each individual user, as well as the organization structure in order to associate the job functions of each user with the appropriate roles in EmpowerID.
Attribute Flow
Users in SAP HCM are inventoried as accounts in EmpowerID. The below table shows the attribute mappings of SAP HCM user attributes to EmpowerID Person attributes.
SAP User Attribute | EmpowerID Attribute | Description |
|---|---|---|
NACHN | LastName | Last name of the user |
VORNA | FirstName | First name of the user |
NAMEMIDDLE | MiddleName | Middle name of the user |
USRID_LONG | Email ID of the user | |
TELNR | Telephone | Home phone number of the user |
TITEL | Title | Title of the user |
PERNR | EmployeeID | Employee ID of the user |
PERID | EmployeeIDOther | Additional ID of the user |
WAUSW | Company | Company of the user |
ORT01 | City | City of the user |
STRAS | StreetAddress | Street Address of the user |
STATE | State | State of the user |
PSTLZ | PostalCode | Postal Code of the user |
LAND1 | Country | Country of the user |
ENDDA | TerminationDate | Date of termination |
STAT2 | Status | Status of the user |
ADR03 | StreetAddress2 | Second address information for the user |
TEL01 | BusinessPhone | Business Phone of the user |
SAP Tables Read by the HCM Connector | ||||||||
|---|---|---|---|---|---|---|---|---|
HRP1000 | HRP1001 | PA0000 | PA0001 | PA0002 | PA0006 | PA0032 | PA0105 | 591S |
As each organization's implementation, practices, and procedures with SAP differs, EmpowerID uses an SAP Data Analysis Utility to ensure the necessary tables can be read and the necessary BAPI's can be invoked. The utility reads from all the same tables as the connector and copies data from those tables into the EmpowerID Identity Warehouse. This provides EmpowerID with the opportunity to review and analyze data in order to modify connector logic before setting up the connection.