You are viewing an earlier version of the admin guide. For the latest version, please visit EmpowerID Admin Guide v7.211.0.0.

Skip to end of banner
Go to start of banner

Connect to SAP Netweaver

Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Version 1 Current »

This guide provides detailed instructions on creating and configuring the SAPNetWeaver connector in EmpowerID. Follow these steps to ensure proper setup and synchronization of user data between EmpowerID and the SAPNetWeaver system.

Step 1: Create an SAP NetWeaver Account Store

  1. Navigate to Account Stores:

    • Go to Admin > Applications and Directories > Account Stores and Systems.

  2. Create Account Store:

    • Click on the Actions tab and select Create Account Store.

    • Search for Netweaver under System Types and select SAP NetWeaver.

  3. Enter Connection Details:

    • Fill in the following fields in the form:

      • Account Store Name: Provide a name for the account store.

      • Base URL: Enter the URL of the SAP NetWeaver system, including the port (e.g., https://YourSERVER).

      • Username: Enter the username with read and write access.

      • Password: Enter the password associated with the username.

  4. Submit: Click Submit to create the account store.

EmpowerID will create the SAPNetWeaver account store and the associated resource system.

Step 2: Verify Resource System Parameters

  1. Navigate to Account Stores:

    • Go to Admin > Applications and Directories > Account Stores and Systems.

  2. Select the SAP NetWeaver Account Store:

    • Search for the SAP NetWeaver account store created in the previous step and click the account store link.

  3. Verify Parameters:

    • Go to the Resource System tab and expand the Configuration Parameters accordion.

    • Verify the following parameters are correctly set for your system.

    • Click the Edit button for any parameter you need to change, enter the new value, and click Save.

Name

Value

SAPNetWeaver.BaseUrl

https://YourServer

SAPNetWeaver.Password

Your Password

DateTimeCulture

en-US

DateTimeFormat

yyyyMMddHHmmssZ

UserPrimaryKey

id

UserIdentifier

sapuser

IsDebugMode

FALSE

RolePrimaryKey

id

RoleIdentifier

saprole

GroupIdentifier

sapgroup

InventoryRoleAssignments

TRUE

UserSearchKey

logonname

RoleSearchKey

uniquename

GroupSearchKey

uniquename

GroupPrimaryKey

id

InventoryGroupMembership

TRUE

InventoryRole

TRUE

InventoryGroup

TRUE

InventoryGroupRoleAssignments

TRUE

InventoryNestedGroups

TRUE

UserLogonNameAttribute

logonname

RoleLogonNameAttribute

uniquename

GroupLogonNameAttribute

uniquename

InventoryUsers

TRUE

SendNotificationForUserDuplicates

TRUE

UserDuplicatesEmailMessageName

NetWeaverDuplicateUser

UserDuplicatesManagementRolesToBeNotified

F7382AE1-920E-4134-B669-7E0B75F74CD2

UserDuplicatesAttachmentFileName

DuplicateUsers

UserDuplicatesAttachmentFileListOfColumns

firstnamelastnameemailuniquename

SendNotificationForRoleDuplicates

TRUE

UserDuplicatesEmailMessageName

NetWeaverDuplicateUser

UserDuplicatesManagementRolesToBeNotified

F7382AE1-920E-4134-B669-7E0B75F74CD2

UserDuplicatesAttachmentFileName

DuplicateUsers

UserDuplicatesAttachmentFileListOfColumns

firstnamelastnameemailuniquename

SendNotificationForRoleDuplicates

TRUE

RoleDuplicatesEmailMessageName

NetWeaverDuplicateGroup

RoleDuplicatesManagementRolesToBeNotified

F7382AE1-920E-4134-B669-7E0B75F74CD2

RoleDuplicatesAttachmentFileName

DuplicateGroups

RoleDuplicatesAttachmentFileListOfColumns

uniquenameid

SendNotificationForGroupDuplicates

TRUE

GroupDuplicatesEmailMessageName

NetWeaverDuplicateGroup

GroupDuplicatesManagementRolesToBeNotified

F7382AE1-920E-4134-B669-7E0B75F74CD2

GroupDuplicatesAttachmentFileName

DuplicateGroups

GroupDuplicatesAttachmentFileListOfColumns

uniquenameid

WriteBackConfiguration

USER.PRIVATE_DATASOURCE.un:

IsLockedByAdmin

TRUE

Step 3: Enable Inventory for the Account Store

  1. Allow Provisioning and De-provisioning:

    • Configure the Resource System to allow provisioning, de-provisioning, and attribute flow.

    • Configure the Account Store to allow RET provisioning and de-provisioning.

  2. Run the Inventory:

    • Once the account store is set up, enable the inventory for the newly created account store.

  3. Reset IIS and Restart Services:

    • Reset IIS and restart web roles and worker services to ensure the settings are applied.

Step 4: SQL Configuration Scripts

Run the CreateSecurityBoundaryAttribute SQL script in the below dropdown to create necessary attributes and configurations in the database.

 View Script
--**************************** Create SecurityBoundaryAttribute ************************************

IF NOT EXISTS( SELECT * FROM [SecurityBoundaryAttribute] WHERE ObjectAttributeID = (SELECT TOP 1 [ObjectAttributeID] FROM [ObjectAttribute] WHERE Name = N'CustomAttribute26')  AND SecurityBoundaryTypeID = (SELECT TOP 1 [SecurityBoundaryTypeID] FROM [SecurityBoundaryType] WHERE Name = N'SAPNetWeaver') )  
INSERT INTO [SecurityBoundaryAttribute](
  [ObjectAttributeID],
  [SecurityBoundaryTypeID],
  [FriendlyName],
  [Name],
  [AttributeType],
  [BackLinkAttribute],
  [DirectoryDataType],
  [MaxLength],
  [MultipleValue],
  [AttributeFlowType],
  [AttributeFlowAssembly],
  [IsSearchable],
  [ConfigurationXml],
  [ModifiedDate],
  [CreatedDate],
  [DoNotAllowDelete],
  [ExtensionAttribute1],
  [ExtensionAttribute2],
  [ExtensionAttribute3],
  [ExtensionAttribute4],
  [ExtensionAttribute5],
  [ExtensionAttribute6],
  [ExtensionAttribute7],
  [ExtensionAttribute8],
  [ExtensionAttribute9],
  [ExtensionAttribute10],
  [ExtensionAttribute11],
  [ExtensionAttribute12],
  [ExtensionAttribute13],
  [ExtensionAttribute14],
  [ExtensionAttribute15],
  [SearchTerms])
VALUES(
  (SELECT TOP 1 [ObjectAttributeID] FROM [ObjectAttribute] WHERE Name = N'CustomAttribute26'),
  (SELECT TOP 1 [SecurityBoundaryTypeID] FROM [SecurityBoundaryType] WHERE Name = N'SAPNetWeaver'),
  N'salutation',
  N'salutation',
  N'string',
  NULL,
  N'DirectoryString',
  NULL,
  0,
  N'TheDotNetFactory.Framework.ClassLibrary.SalutationHandler',
  N'SNCNameAttributeHandler Version=4.0.180.1 Culture=neutral PublicKeyToken=2d2253f74d4496ef',
  0,
  NULL,
  CONVERT(DATETIME, '2022-03-29 14:14:43.407', 121),
  CONVERT(DATETIME, '2022-03-17 14:35:21.790', 121),
  0,
  NULL,
  NULL,
  NULL,
  NULL,
  NULL,
  NULL,
  NULL,
  NULL,
  NULL,
  NULL,
  NULL,
  NULL,
  NULL,
  NULL,
  NULL,
  N'salutation salutation Name_salutation salutation salutation FriendlyName_salutation')

-- Repeat for other attributes

Inventory Configuration

After configuring the account store and resource system parameters, enable the inventory to start synchronizing data between SAP NetWeaver and EmpowerID.

  1. Enable Inventory:

    • Go to the SAP NetWeaver account store page.

    • Select the Inventory tab and enable inventory for user accounts, groups, and group memberships.

  2. Full Inventory Sync:

    • The connector supports full inventory sync. During each inventory run, the connector will synchronize all user accounts, groups, and group memberships from SAP NetWeaver to EmpowerID.

  3. Monitor Inventory Jobs:

    • Navigate to Admin > Operations > Job Monitor to monitor the progress and status of inventory jobs.

  • No labels