Question Re: Provision users & roles in ABAP from Active Directory in Financial Management Q&A

Provision users & roles in ABAP from Active Directory

sam_venkat — Wed, 30 Oct 2019 21:30:21 GMT

Hello: I'm trying to figure out if it is possible to provision User-Role mapping to ABAP system based on Active Directory. It is clear Active Directory can be used as a leading user store. What is not clear from the documentation is whether AD can be used as a repository for ABAP roles as well. Would like to know if there is a native integration between ABAP and AD whereby not only users but user-role mapping can be provisioned. In AS Java this is accomplished by mapping AD groups to Java UME roles. Looking for a similar function. I realize SAP IDM and Access Control (GRC) can be used as provisioning engines but want to try the AD approach. Any suggestions would be appreciated.

Re: Provision users & roles in ABAP from Active Directory

Steffi_Warnecke — Fri, 01 Nov 2019 11:40:01 GMT

Hello Sam,

I'm not sure I understand your goal here.

You want to provision ABAP roles based on AD attributes, but without something like IDM or Access Control? Instead you want to find a connection directly between AD and ABAP system to do this?

Regards,

Steffi.

Re: Provision users & roles in ABAP from Active Directory

sam_venkat — Fri, 01 Nov 2019 14:43:14 GMT

Correct Steffi. We want to be able to sync user, user-role mapping from AD directly to ABAP without using an "IDM" solution in between.

Thanks

-Sam