Synchronization between su01 (usr02) and IdM

[Former Member]

Hi experts,

if I assign an ABAP-system to CUA, transaction su01 in the managed system is locked. In opposition to IdM I can change or create in the managed system in t-code su01 user profiles. But if I create or change a user in su01 the change doesn't occur in IdM. Is there an abap specific task to synchronize usr02 an IdM? And is there any way to lock t-code su01?

Thanks and best regards,

Max

[Former Member]

You need to run the AS ABAP update job on regular basis to get the information changed in ABAP to IdM.

Just modify your AS ABAP update job correctly, map only the attributes that you want to update or use the "." notation in the mapping and schedule the job according to your requirements.

You really need to define what system is the owner of which attribute and configure your provisioning tasks and jobs accordingly. If IdM is the leading system then the practice should be that nobody alters the data in SU01 anymore.