How to disable a user from SAPwhen in AD dele./lock./restri. user validity

[Former Member]

Hello

We would like to achieve functionality that a user when deleted/locked/restricted user validity from Microsoft active directory is not allowed to log on to SAP anymore.

I have in mind to use single sign on. The other possibility would be connecton via LDAP(but I am not sure about possibilities to lock user that way. Maybe an idea would be to map user validity)..

I wander how to configure easyest such a functionality (is there any made easy guide?)

[Former Member · Accepted solution]

We do not have Enterprise portal. At SAP side we are using ECC6. We are using only ABAP stack

[Former Member · Accepted solution]

Hi,

Check the link given in CUA with Active directory in the above post.

Regards,

Gowrinadh

[Former Member]

Hi Jan

Please check if the following links are of some good to you:

http://download.oracle.com/docs/cd/B32342_01/generic.902/b32173.pdf

and

https://www.nsm.stat.no/Documents/Veiledninger/SAP%20Security%20Guidance%20v%201.01.pdf

and

https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/bc72b890-0201-0010-3a8d-e31e3e26...

i hope they help

Regards

Chen

[Former Member]

Hi,

You can configure the same in easy steps from enterprise portal. Check the below blogs and sap links.

Configurating Enterprise portal with Active directory

https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/c07649af-0dd8-2b10-c3a0-9417b7bb...

Configuring SSL between Microsoft Active directory and Enterprise portal

/people/gowrinadh.challagundla/blog/2009/03/17/configuring-ssl-between-microsoft-active-directory-and-enterprise-portal

CUA with Active directory

https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/8302a929-0501-0010-05b5-d48f544b...

Regards,

Gowrinadh