User not provisioned from SAP IdM into SAP EP

[Former Member]

Hi,

I am trying to provision users created in SAP IdM to SAP EP by the standard SAP provisioning framework task 'Provision Java' (which is defined as provisioning task for the SAP EP repository). The task is triggered whenever a business role (which in turn is linked to an SAP EP privilege) is assigned to a user.

This works fine as long as the users exist already in SAP EP.

However, when they do not yet exist there, they are not created and the task fails. Here is what the SAP EP and SAP IdM logs tell:

SAP IdM:

Error putNextEntry failed storingSPML.SAPUSER.58111922

Exception from Add operation:com.sap.idm.ic.ToPassException: Exception when creating user

Exception from Modify operation:com.sap.idm.ic.ToPassException: SPML exception: Unexpected error when processing modify request Unsupported ID found null

SAP EP:

Unexpected error when processing modify request java.lang.Exception: Unsupported ID found null

Exception when creating user java.lang.ArrayIndexOutOfBoundsException: 0

at com.sap.security.core.spml.UMERequestProcessor.createUser(UMERequestProcessor.java:3386)

at com.sap.security.core.spml.UMERequestProcessor.processAddRequest(UMERequestProcessor.java:3075)

at com.sap.security.core.spml.RequestProcessor.processAddRequest(RequestProcessor.java:42)

at com.sap.security.core.spml.SPMLConsumer.doPost(SPMLConsumer.java:152)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)

at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)

at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)

at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)

at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)

at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)

at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)

at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)

at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)

at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)

at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)

at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)

at java.security.AccessController.doPrivileged(Native Method)

at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)

at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)

Any ideas what's going wrong here?

Thanks in advance,

Elmar

[former_member197255 · Accepted solution]

Hi Sonja,

I pretty sure the error is coming from the java script in trying to set the SPML date.

- sap_checkSPMLValidToDate

- sap_checkSPMLValidFromDate

Please take a look at note: 1444444

Or if you want to take a quick look to ensure it is the SPML then just temporary modify the create pass to comment out the date setting attribute and re-run the provision task again.

[Former Member · Accepted solution]

Great, thanks a lot for that! I commented out the 2 related attributes in the destination tab and it worked.

Btw, do you maybe have a customized version of that script which works?

Br,

Elmar (logged in with my manager's account )

[Former Member · Accepted solution]

You can find the fixed script in the mentioned SAP Note.