Can a "user lockout" from the AD be synched with SAP?

[Former Member]

Dear All,

For a customer I have configured the synchronisation of users from the Active Directory to SAP. This works fine, however we wonder if it is also possible to synchronise the field : "locked" from the LDAP. So, if a user is locked in the LDAP we also want this user to be locked in SAP.

It seems this is not possible but maybe someone can confirm this.

Thanks in advance and best regards,

Joris.

[former_member185954 · Accepted solution]

Hello Joris,

I searched on help.sap.com and found the following link, it provides the constraints LDAP and UME sync has.

http://help.sap.com/saphelp_nw70/helpdata/EN/48/d1d13f7fb44c21e10000000a1550b0/frameset.htm

Regards,

Siddhesh

[Former Member]

Hai,

Once the configuration of the Active Directory with SAP is done you can see the userslist in SAP.If the user is locked in SAP,the same user is also got locked in AD.

Thanks and Regards,

[Former Member]

Thanks for the help, but I want it the other way around. So if a user is locked in LDAP, it must be also locked in SAP. We have a read-only connection in the LDAP.

Regards,

Joris

[Former Member]

Thanks for the help, but this link is about configuring LDAP connection to the UME. We want it to connect to the ABAP stack, not a UME.

and even with a UME it seems not to be possible to synchronise the userlock.