Generate user Ids in ECC in specific numeric format

[Former Member]

Hi experts,

Is it possible to create user IDs ( say 12 character numeric ID) in SAP ECC 6.0? If so, what is the tcode?

We are implementing SSO and we would be using first name and last name to identify the users in ECC and create unique accounts by letting the system generate the ID. For any new account request, the system should create increment this numeric ID and create a unique user ID in the ECC system. This ID is used only for technical purposes as the user would always use his AD account to login.

Appreciate if anyone can provide some thoughts in this area..

Thanks

Kee

[Former Member]

> ( say 12 character numeric ID)

That would be your limit as well.

> This ID is used only for technical purposes as the user would always use his AD account to login.

So you are using Singe-Sign-On, but need to generate the ABAP UMR record name for them.

First off: There are advantages from keeping the UID names the same, just as there are disadvantages from making them cryptic on the ABAP side because the UID name (system field sy-uname) is used in many many applications as the identifier of the creator, or whatever, of data records.

Okay, that is not scalable for huge systems. But it is still better than nothing (e.g. the first name / last name is not displayed)

If you want to go for the sequential numbered user ID option, then the most obvious way to me is to create a number range object (transaction SNRO) for draw the number from there as they are registering. It would be advisable to not activate any number buffering for the range (to avoid gaps) and you might want to ensure that user interfaces to create UIDs where the number range is not forced are protected.

Can be done, but sounds a bit messy to be honest. At least it is not the way things have been done historically in SAP. For example, how would you do a synchronization between the AD and the ABAP system? Or an audit of it? I think that you would have to always go via the mail a ddress only.

Of course, a mail box is something which is quite dear to a person... probably more so than their SAP password....

Interesting question!

Cheers,

Julius

[g_srivastava]

SNRO can be used to generate the Numbers.To create user you need to use SU01 tcode.you need to provide few basic details in SU01 and user is created.After it has been created we can authorize him for services he will be using.Hope it might help you.

Have a best day ahead.

[Former Member]

To create a user in SU01, the user ID field is mandatory even to proceed to the SU01 - detailed screen.

Should we manually specify the number in User ID or can it be automated?

Appreciate if you can pass on some documents on this approach.

Thanks

Kee

[Former Member]

You can do this programmatically using function module BAPI_USER_CREATE1. You can (from your own application) export the generated UID name to the import parameter NAME_IN.

See the documentation in transaction BAPI for more details.

Needless to say, your own application should be secured, because it has the ability to create users in the system by exposing this function module to it...

Cheers,

Julius