SAP ECC EHP5 integration with Windows AD

[Former Member]

Hello experts

We are in the process of integrating our existing SAP ECC system with Windows AD environment. I had a query regarding the existing user database in ECC.

1. When we integrate with AD can the AD be used as a user database for ECC.

2. If we can use the AD as a user database can new users be created in AD and will they be automatically available in ECC.

3. What about the existing users in the ECC system.

Highly appreciate your inputs

Thanks

SAP user

[Former Member · Accepted solution]

Hello Deepak,

Please take a look at below thread.

http://forums.sdn.sap.com/thread.jspa?threadID=1960676

Thanks,

Siva Kumar

[Former Member · Accepted solution]

Hello Siva,

Thank you for the response, but my query is more around the existing, new users and the mapping to the AD accounts. Our AD account and SAP login id's are the same and currently our ECC system is live so our user database resides in ECC. Now when we integrate it with AD, does AD become our new user database? If so when new users are created in AD will they automatically be available in SAP?

Also if the AD becomes the new user database what happens to the existing users in ECC, will there be a conflict since now the same users are available in ECC as well as AD.

Thanks

Deepak

[Former Member · Accepted solution]

Hi Deepak,

1). does AD become our new user database?

AD is your user DataSource, Advantage - User's don't have to remember their SAP passwords, since their WIndows AD and SAP login password's are same, if SSO enabled for AD and SAP, system logs in automatically.

2). If so when new users are created in AD will they automatically be available in SAP?

Yes, user's will be reflected in SAP, SAP pulls the AD user's through job .

When you get chance check IDM, IDM is upcoming product to sync AD and SAP user's and passwords.

Also if the AD becomes the new user database what happens to the existing users in ECC, will there be a conflict since now the same users are available in ECC as well as AD.

AD password gets synced with ECC and uses the same password to login both ECC and AD.

if user has different user ID or want to maintain different in AD and ECC

1). User has to reset his password in ECC and AD both places.

2). SSO with AD might not work.

Regards,

Arjun

[Former Member · Accepted solution]

Thanks Arjun,

That solves my queries.

Regards

Deepak