CUP: Provision to MS Active Directory without SAP NW IDM?

[Former Member]

Hi All,

I'd like to provision MS Active Directory (AD) groups or domains to users directly from CUP. However, the customer does not appear to be using SAP NW IDM. I've read on some posts that this may still be possible through the connector, but I don't see how this can be done...

The customer is already using MS AD to authenticate GRC users and to pull in user info (first, last, manager, email, etc).

Any experience from your side?

The scenario is that the customer would like to provision LDAP admin groups on a temporary basis (similar to FF in SAP).

Best Regards, Dylan

Edited by: Dylan Hack on Jun 14, 2010 9:03 PM

[koehntopp]

Hi Dylan,

this is definitely not possible.

What I have not tried yet: if AD is connected to a portal UME in read/write mode and you create a portal user using EPRTA, will that go through to AD?

Something to try...

Frank.

[Former Member]

Hello Frank,

Thanks for the suggestion. We do have the UME connected to AD so we don't have to create UME users. I'll check into the EPRTA to see if it fits.

Best Regards, Dylan

[koehntopp]

Creating UME users was just an additional topic to think of.

For AD groups, you might try linking AD groups to ume roles and see if it works the other way around.

Let us know how it goes.

Frank.