User not seen in http://<host>:<port>/idm after ABAP initial load

[Former Member]

Hi,

I have done initial load from ABAP system.

It runs fine. But I have got 2 repositories - 1) Enterprise people

2) SAP_MASTER

SAP_MASTER is configured to load users and privileges from ABAP system connected. But when i log on to Java system

http://<host>:<port>/idm --> on this I can only see 2 users; the one that I maintained in JAVA UME and similary are also mainatined as MX_PERSON in Identity centre.

If I try to add any new user in IDM as MX_PERSON; it says entry already exist but I cannot see in http://<host>:<port>/idm

My provision framework tasks also doesnt appear even after performing Access Control

I am not sure how I shoudl make my ABAP system as the primary source.

Thanks,

Ritesh

Edited by: Ritesh soni on Apr 18, 2011 2:00 PM

[Former Member · Accepted solution]

Hi

It sounds as if your IDM_DataSource in VisualAdmin is not configured correctly. Please make sure you inserted the correct reopsitory-ID (probably "2" for IDStore "SAP_MASTER"). Refer to section "Configuring the JMX layer" in "Installing and configuring the Identity Management User Interface"

BR

Michael

[Former Member]

HI Michael,

1) Now I am not able to see all the links under the web-enabled tasks

--> Change own data

--> change business role

For these tasks; I have already mainatined access control for users.

-

---

Dcoument suggestions -

---

We recommend configuring the following (custom) Web-Enabled Tasks so

they appear in the Workflow user interface:

􁂑 Change User Data

􁂑 Create Business Role

􁂑 Change Business Role

􁂑 Assign/Unassign Business Role

􁂑 Change Company Address

You can also create and set up additional tasks as necessary.

3. In the Attributes tab page, adjust the attributes to display as necessary.

-

---

2) I created a new user in ABAP system. I ran the update tasks in Identity Management Console. But when I am logging with newly created user in http://<host>:<port>/idm

it says user is not aunthenticated

Regards,

Ritesh

[Former Member]

The IDM user interface uses the NetWeaver UME as user datasource.

In other words: you have to create a repository for the Java UME in IDM & run the relevant jobs for this repository type. Then you can import a user from your ABAP & assign him a Java UME privilege. If configured correctly provisioning of the user from IDM to Java UME starts and you will be able to login.

Another possibility would be to make your ABAP as UME datasource or to involve an LDAP system. see here: http://<host>:<port>/useradmin or http://<host>:<port>/nwa

Generally a user-ID must exist in the AS Java UME and in the IC database to be able to login to IDM UI

I would recommend you to read the latest SAP Provisioning Framework Architecture & Configuration guides to get an idea of it all.

BR

[Former Member]

Hi,

Any clue on whats going for issue 1 - Why i am not able to see web-enabled tasks in User Interface.

1) Now I am not able to see all the links under the web-enabled tasks

--> Change own data

--> change business role

For these tasks; I have already mainatined access control for users.

-

---

Dcoument suggestions

-

---

We recommend configuring the following (custom) Web-Enabled Tasks so

they appear in the Workflow user interface:

􁂑 Change User Data

􁂑 Create Business Role

􁂑 Change Business Role

􁂑 Assign/Unassign Business Role

􁂑 Change Company Address

You can also create and set up additional tasks as necessary.

3. In the Attributes tab page, adjust the attributes to display as necessary.

-

---

[Former Member]

I don't really understand your problem, maybe you could give a more detailed explanation & procedure if the actions below don't fix your issue.

First of all: make sure you work in the correct Identity Center configuration and Identity Store as configured in the IdM-JMX-layer. Additionally you'd like to make sure you use the latest software versions and imported the right Provisioning Framework.

1a. Add a user with manager privileges or

1b. Give your user manager privileges in IdM UI or with a Job

2. Set & validate access control settings for your web-enabled tasks (WETs) in MMC

3. Make sure the WETs are enabled (Options Tab) & public

4. Make sure the folders are enabled / active & Show folder in UI is enabled if desired

BR

Michael