Looking up ABAP lock values

[former_member2987]

Hello Experts!

Working on a synchronization task for ABAP/IDM.  There is a requirement that we do not synchronize users who:

Have a ValidTo date in the past.

If their "Lock Value" is other than 128 or 0 as seen in the USR02 table via SE16.

So based on the above example only A008421 (no lock) and A009018 (128 lock) would be synced.

So the question is, can I get this lock value when reading from an ABAP system? I'm currently using a To Custom pass to read from the ABAP system?

Thanks,

Matt

[former_member2987 · Accepted solution]

We went another way on this and used Filters in the ABAP connector to get the unlocked dialog users.

[terovirta]

Hi Matt,

If you cannot get the data via the normal Initial Load template then I guess the best way would be reading the whole table to IdM and process it from there..

regards, Tero

[former_member2987]

Tero,

How would I go about accessing that table? I've never done a direct connection to SAP before.

Thanks,

Matt

[Former Member]

Hi Matt,

You can use a FromCustom pass. (FromSAP class)

Set the repository to point to SAP System.

Pass the parameters:

ENTRYTYPE: TABLE
TABLE: TABLE NAME
COLUMNS: COLUNMS TO BE READED, (separated by | )

The destination as:

And then, you can customize the select statement to join the tables with the LOGONUID as the key and filter just users that have 0 or 128 lock code (UFLAG field).

Hope it helps!