SAP HCM Connector

The EmpowerID SAP HCM connector is read-only; EmpowerID pulls identity information from the HCM module but does not write information back to it. This makes SAP HCM the authoritative source for user identities and attributes pulled from HCM. When you connect EmpowerID to the HCM module, it reads a list of people and the demographic information (name, work address, etc.) for each individual user, as well as the organization structure in order to associate the job functions of each user with the appropriate roles in EmpowerID. The connector inventories role and location information from the HRP1001 table.

Attribute Flow
Users in SAP HCM are inventoried as accounts in EmpowerID. The below table shows the attribute mappings of SAP HCM user attributes to EmpowerID Person attributes.

SAP User Attribute	EmpowerID Attribute	Description

SAP User Attribute	EmpowerID Attribute	Description
NACHN	LastName	Last name of the user
VORNA	FirstName	First name of the user
NAMEMIDDLE	MiddleName	Middle name of the user
USRID_LONG	Email	Email ID of the user
TELNR	Telephone	Home phone number of the user
TITEL	Title	Title of the user
PERNR	EmployeeID	Employee ID of the user
PERID	EmployeeIDOther	Additional ID of the user
WAUSW	Company	Company of the user
ORT01	City	City of the user
STRAS	StreetAddress	Street Address of the user
STATE	State	State of the user
PSTLZ	PostalCode	Postal Code of the user
LAND1	Country	Country of the user
ENDDA	TerminationDate	Date of termination
STAT2	Status	Status of the user
ADR03	StreetAddress2	Second address information for the user
TEL01	BusinessPhone	Business Phone of the user
GESCH	Gender	Gender key
GBDAT	DateOfBirth	Date Of Birth
GBLND	CountryOfBirth	Country of Birth
BEGDA	ExpectedHireDate	ValidFrom / HireDate
COUNC	County	County Code
LOCAT	StreetAddress3	2nd Address line
TEL02	HomePhone	Home Phone
SNAME	FriendlyName	Employee Name
PERSG	EmployeeType	Employee Group
GSBER	BusinessUnit	Business Area
ORGEH	OrgUnit	Organizational Unit, OrgUnit
PLANS	PositionCode	PositionID, PositionCode
STELL	JobCode	job, JobCode
KOSTL	CostCenter	Cost Center, CostCenter

SAP Tables Read by the HCM Connector

SAP Tables Read by the HCM Connector
HRP1000	HRP1001	PA0000	PA0001	PA0002	PA0006	PA0032	PA0105	591S

To connect EmpowerID to SAP, you need an SAP account, and you need to install SAP GUI Server on your EmpowerID Server.

You also need the following from SAP to create your Account Store.

Host Name of the BAPI endpoint
Username that is authorized to read from and write to the BAPI
Password
App server FQDN
Instance number
System ID

Additionally, each EmpowerID server used to run workflows or perform inventory functions must have the librfc32.dll assembly copied into the C:\Windows\System32 folder. EmpowerID uses the assembly to perform various SAP processes (inventory, workflows, etc.). You can download the assembly from EmpowerID at the following link: https://dl.empowerid.com/SAP/librfc32_x64.zip

As each organization's implementation, practices, and procedures with SAP differs, EmpowerID uses an SAP Data Analysis Utility to ensure the necessary tables can be read and the necessary BAPI's can be invoked. The utility reads from all the same tables as the connector and copies data from those tables into the EmpowerID Identity Warehouse. This provides EmpowerID with the opportunity to review and analyze data in order to modify connector logic before setting up the connection.

Next Steps

Connect to SAP HCM