Portal Roles Intial load and Provisioning through IDM UI

[Former Member]

Dear All,

I am trying to assign portal roles to Users in IDM 7.1 SP5.

For this two activities needs to be performed:

1) Portal roles Initial load in IDM Identity store

2) Provisioning of Portal roles to Users through IDM UI

Please suggest about the configuration guide or steps required for both points mentioned above.

Thanks

Honey

[Former Member]

Dear All,

I am able to load all the Users and Roles from EP using SAP provisioning task.

Also Now when I am assigning a portal role (IDM priviledge) to a user through IDM UI, it is assigning the priviledge to user successfully.

But when I am checking the same user in EP UME, the role is not assigned to user yet.

Can anyone suggest how can I trouble shoot this scenario.

Thanks

Honey

[Former Member]

Hello Honey,

this is very easy to troubleshoot:

Check in the job-log if the provisioning task started after the UME-role has been assinged to the user.

YES: Check why the provisioning task does not work.

NO: Assign the Provisioning task to the Privilege or Repository and do the UME-role-assignment again.

Best regards,

Christoph Reckers

Edited by: Christoph Reckers on Oct 6, 2010 12:22 AM

[Former Member]

Dear Christoph,

Thanks for the reply.

Now I am able to assign Role / Privileges to Users from IDM to UME.

Require one clarification on User / Identity creation:

Where can I can set initial password for all the new user created from IDM UI ?

I am able to create new User and assign roles as well from IDM UI and all is available in EP UME also.

But when I am logging in with new user it is not taking the default password mentioned in Global Constant in IS.

Do I need to mention the password somewhere else.

Pls suggest.

Thanks

Honey

Edited by: Honey Gyanani on Oct 6, 2010 9:10 AM

[Former Member]

Hi Honey,

you can check the task in the SAP Provisioning Framework for AS Java:

SAP Provisioning Framework -> System Specific Tasks -> AS Java Tasks (Database) -> Create Java User.

In the pass that provisions the user you will find the following entry:

password $FUNCTION.sap_getPassword(%MX_ENCRYPTED_PASSWORD%)$$

So you can either make sure that the MX_ENCRYPTED_PASSWORD is set or you can hardcode it in the pass if you want all the users to have the same inital password.

Best reagrds

Holger

[Former Member]

Dear Holger,

HardCode password is working fine and now new users are getting Initial password.

Can you please suggest if i need to set the value of MX_ENCRYPTED_PASSWORD, where can I set it.

Thanks

Honey

Edited by: Honey Gyanani on Oct 6, 2010 9:52 AM

Edited by: Honey Gyanani on Oct 6, 2010 9:53 AM

[Former Member]

Hi Honey,

you can set the password using the JScript function sap_encryptPassword. I would recommend setting this to a random value when you import your user data e.g. from HR and inform the user or his manager via email about tis password.

Best regards

Holger