SNC String Disappear

[Former Member]

Hi All,

Currently I am facing a strange issue with SNC string in SU01 record.

2 jobs are scheduled as per below:

1) RSUSR300 - to update SNC name for users where it is blank

2) IDM Initial load job (scheduled to run after RSUSR300)

Whenever a new user is created, RSUSR300 job will update SNC name for the user.

However IDM initial load job is run later and removes SNC name for user.

IDM initial load job removes SNC only for newly created user (existing users - no change)

We are not able to figure out why the SNC string is overwritten by IDM job.

We have also disabled parameter for SNC name and SNC flag in all "Read user" and "Write user" passes in out Initial load job.

With SNC string overwritten by Intial Load job and making it blank causes us to manually update SNC name everyday 4 times a day.

Any suggestions on rectifying this issue?

Thanks & Regards,

V!

[Steffi_Warnecke]

Hello V,

have you checked the create and update tasks for ABAP users, too? Those are the onces that write to the backend. The initial load jobs just load the information into IDM (as the job name already hints at).

It doesn't help you to stop IDM from reading that data in, you have to stop it from writing it back to the SAP backend.

Regards,

Steffi.

[Former Member]

Hi Steffi,

Yes, I have checked all the pass related to ABAP users and disabled the SNC Name and SNC Flag parameter

We need Initial load job to write (in case of new users created in the system)

This job is removing SNC only for newly created users

Thanks & Regards,

V!

[Steffi_Warnecke]

Hello V,

could you share screenshots of your "CreateABAPUser" and "UpdateABAPUser" destination passes?

Regards,

Steffi.

[Former Member]

Hi Steffi,

[Steffi_Warnecke]

Those are the initial load passes. I'd like to see the provisioning passes for create and update ABAP accounts from the provisioning framework.

There you need to deactivate the lines for the SNC attrbutes.

Regards,

Steffi.

[Former Member]

Hi Steffi,

There are many hooks within the provisioning framework.

I checked every pass within. The parameter for SNC is not maintained at any pass

I have also raised an OSS incident with SAP to find a resolution to this issue.

Moreover, i tried to replicate this scenrio in Dev, Test and UAT, but couldnt.

IDM is not removing SNC string in any environment.

This issue is occuring only in Production

Thanks & Regards,

V!

[Steffi_Warnecke]

You only have to check in the ABAP connectors in the two tasks I mentioned, not in any hooks. There I can find this in the passes:

Regards,

Steffi.

[former_member2987]

V,

You don't mention what version of IDM you are using, but you might want to consider creating a test user and running through the load with the TRACE option turned on.  That could give you some useful clues.

Regards,

Matt

[Former Member]

Hi Matt,

We are using IDM version 7.0

tracing looks a good option. How can i turn the Trace option "on" on Initial load?

Thanks & Regards,

V!

[Former Member]

Hi Steffi,

I checked the connectors and can see these two options are enabled for both create and update.

I will change the settings and see if SNC string disappears or not.

Thanks & Regards,

V!

[former_member2987]

Hi V,

IDM 7 doesn't have that option, it only comes with IDM 7.2.

Will you be upgrading soon? I believe 7.0 is going to be hitting end of life soon.

Regards,

Matt

[Former Member]

ohhh

Nope, our project does not have any plans of upgrading to 7.2

Thanks & Regards,

V!

[Former Member]

Hi Matt,

Can you advice how can we use the Trace option in IDM 7.2?

Thanks & Regards,

V!

[Former Member]

Hi Steffi,

We tried to replicate this scneario in Test environment (keeping SNC Name and Flag enabled at CreateABAPUser and UpdateABAPUser)

SNC name is not removed for users which we created manually in Test environment.

I thus believe, disabling this parameter in production will resolve this issue.

This is also strange as last week SNC name was removed for 3 new users, after we maintained manually, IDM did not over write.

However this week, this is specific for 2 new users where it is becoming blank even ater maintained manually.

Any thoughts on what might be causing this issue?

Thanks & Regards,

V!

[former_member2987]

V,

It's pretty well documented.  You can turn it on from the Admin Web UI, (http://HOSTNAME/idm/admin) and then specify the MSKEYVALUE of the entry you want to track.

I can't recall which document it's referenced in, I want to say the solution landscape guide.

Matt