Provision users & roles in ABAP from Active Directory

[sam_venkat]

Hello: I'm trying to figure out if it is possible to provision User-Role mapping to ABAP system based on Active Directory. It is clear Active Directory can be used as a leading user store. What is not clear from the documentation is whether AD can be used as a repository for ABAP roles as well. Would like to know if there is a native integration between ABAP and AD whereby not only users but user-role mapping can be provisioned. In AS Java this is accomplished by mapping AD groups to Java UME roles. Looking for a similar function. I realize SAP IDM and Access Control (GRC) can be used as provisioning engines but want to try the AD approach. Any suggestions would be appreciated.

[Steffi_Warnecke]

Hello Sam,

I'm not sure I understand your goal here.

You want to provision ABAP roles based on AD attributes, but without something like IDM or Access Control? Instead you want to find a connection directly between AD and ABAP system to do this?

.

Regards,

Steffi.

[sam_venkat]

Correct Steffi. We want to be able to sync user, user-role mapping from AD directly to ABAP without using an "IDM" solution in between.

Thanks

-Sam