on 02-18-2016 6:31 AM
Hi All,
Currently in the SAP IDM 8.0 Active Directory connector the attribute mapping for MSKEYVALUE points to the userid field in Active Directory. Is there any way that the MSKEYVALUE in the connector can be pointed to another field in Active Directory?
Your thoughts are greatly appreciated.
Regards,
Akhil
Can anyone confirm if this can be done in the initial load job for AD , by replacing the "source" column field for the "userid" attribute in the "target" column?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi Akhil,
You should be able to change the value, however if you're using the provisioning framework, there will be a value called ACCOUNTDN which is mapped to MSKEYVALUE. That's the value you need to change.
What attribute did you want to use? Please keep in mind whatever value you use it must be unique for any given MX_PERSON.
Matt
Thank you Matt for your reply.
I will have to check with AD administration to see what fields are available and unreserved for other IDM attributes. Yes I am using the provisioning framework.
Some context to my situation: Currently the customer's naming conventions for SAP usernames and AD usernames are unaligned. An exercise needs to be done to tie SAP & AD usernames to a single MSKEYVALUE, changing the "userid" in AD and/or "username" in SAP is not an option. HCM will be the leading system in this use case. Any Ideas from your side on how to approach this?
Thanks again,
Akhil
Hi Akhil,
Not an uncommon scenario.
Best option is to find some field that is common to both or one that you can at least generate in both. The format firstname.lastname is not uncommon along with variations there in. Email address is perfect since it is guaranteed to be unique. Really it all depends on you and your organization.
Matt
User | Count |
---|---|
89 | |
10 | |
9 | |
9 | |
9 | |
6 | |
6 | |
5 | |
5 | |
4 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.