Application Development and Automation Discussions
Join the discussions or start your own on all things application development, including tools and APIs, programming models, and keeping your skills sharp.
cancel
Showing results for 
Search instead for 
Did you mean: 
Read only

Limit the filter value in LDAPMAP

Former Member
0 Likes
550

Hi,

When mapping the fields in LDAPMAP, is anyone aware of a way that I can limit the range of values for my filter field?

I have taken a look to see if there is a function module that can cater for this but can't seem to find anything.

The filter field that I am using is the user id, however I would only like to import users that fall within specified name ranges - since there are a number of system/admin accounts on the Active Directory which I don't want to create on the SAP system.

Would a range of user ids maintained in the RSLDAPSYNC_USER program limit which user ids are imported?

Thanks in advance.

Regards

Sujeet

1 ACCEPTED SOLUTION
Read only

RainerKunert
Active Participant
0 Likes
481

Hello,

it is not possible to filter the users in Active Directory. The only way is to create a new mapping field in AD (f.e. SAPUSERNAME) and to synchronize all users with the SAPUSERNAME. AD users without SAPUSERNAME (admins etc.) will not be synchronized.

Alternatively you may use ADAM (Active Directory Application Mode). This is a separate AD, that is synchronized with AD. You can reduce the users, that are synchronized with ADAM (ask your AD staff). Then you do not need a filter in the LDAPMAP.

Kind regards

Rainer

Hi,

When mapping the fields in LDAPMAP, is anyone aware of a way that I can limit the range of values for my filter field?

I have taken a look to see if there is a function module that can cater for this but can't seem to find anything.

The filter field that I am using is the user id, however I would only like to import users that fall within specified name ranges - since there are a number of system/admin accounts on the Active Directory which I don't want to create on the SAP system.

Would a range of user ids maintained in the RSLDAPSYNC_USER program limit which user ids are imported?

Thanks in advance.

Regards

Sujeet

1 REPLY 1
Read only

RainerKunert
Active Participant
0 Likes
482

Hello,

it is not possible to filter the users in Active Directory. The only way is to create a new mapping field in AD (f.e. SAPUSERNAME) and to synchronize all users with the SAPUSERNAME. AD users without SAPUSERNAME (admins etc.) will not be synchronized.

Alternatively you may use ADAM (Active Directory Application Mode). This is a separate AD, that is synchronized with AD. You can reduce the users, that are synchronized with ADAM (ask your AD staff). Then you do not need a filter in the LDAPMAP.

Kind regards

Rainer