Access Enforcer - Manager Approvers from LDAP

[Former Member]

Hello

We have AE tied to LDAP, from which its gets user, requester and manager information.

Today we use Customer Approver Determinator, to configure the approvers.

We would like to enable 'manager approval' in AE.

Does AE support 'Manager Approver' from LDAP.

Thanks

[Former Member · Accepted solution]

Yes, We are using the manager as a stage in our request workflow.

We have a deep heiarachy Microsoft Active Directory LDAP as our user information source.

We had to upgrade to AC 5.3 SP07 Patch 01 to get this to work properly.

-J

[Former Member · Accepted solution]

Thanks for your answer.

Like I mentioned we have LDAP as the user data source.

But in Custom Approver Determinator, there is no way to set up the LDAP manager as approver.

Can you please shed more light on this?

Thanks again.

[Former Member · Accepted solution]

This is a standard Approver determinator option. You shouldn't need a CAD for Manager.

Create a Stage and choose "Manager" from the Approver Determinator drop down

[Former Member · Accepted solution]

Prakash,

As John mentioned, manager is a standard approver and you don't have to define a custom approver determinator for this. Manager will be found from user detail source (in your case LDAP) when you login to CUP to create request. This manager information will be used to send approval notifications.

Regards,

Alpesh

[hkaur]

Hello,

Alpesh is right...Manager will be found from the user detail data source.

If you want to auto populate the manager field then that can also be done . Ensure that you have configured the LDAP mapping option in the Field Mapping of CUP configuration and mapped the Access Control Manager field to the LDAP Manager for that.

This will autopopulate the manager from LDAP to the CUP Create Request screen on selection of user id.

Harleen

SAP GRC RIG

[Former Member]

Manager approval from LDAP works.

Thanks everyone for the answer.

[Former Member]

It has been working for past 4 years so it had to work.

Cheers,

Alpesh