Enable Now Undeletable Users

[former_member766335]

Hi everyone,

I have a question about Enable Now users. Assume that some of employees quit job however their Enable Now account still active. It may cause some sort of security issue (ex: Payroll or Financial contents shouldn't be reachable)

Is there any way to cut the access of employees quit the job to Enable Now? Any SSO integration?

Feel free to contribute..

Thank you..

[MichaelSzmrtits]

Hi Sinan,

there are some possibilities which you will have. Unfortunately the Manager can't delete or deactivate users automatically if a user is no longer part of the Companies Active Directory. If SSO is implemented then the authentication should not be possible but the user is technically "active". If you have not implemented SSO for SEN then you have in any case to deactivate users which have left the company manually. The easiest way is to deactivate users regardless if SSO is implemented or not manually via an Excel export and import.

First export all existing users by clicking from the SAP Enable Now - Manager on "Administration / Users

Select "Root" on the left side and click then on "Export..." under the table where you see all the users to trigger the xls export.

If you open the xls file you will see in column "J" the active status. Please change the value from 1 to 0 to all users which are no longer with your company.

After this you do an import of this file by clicking from the SAP Enable Now - Manager on "Administration / User Import. Select Excel and choose the file and click then finally on Import Excel file. This will start the import and apply all the changes you have made.

The deletion of users is also possible please see the housekeeping section in this Manager Operations Guide: https://help.sap.com/doc/763c471ca5f74a9d993c6944114f6367/2105/en-US/Manager_Operations_Guide_en-US....

Before a user can be deleted he needs to be in status "deactivated" and all historical user data needs be purged.

Otherwise the deletion will fail. To purge the data of user clicking from the SAP Enable Now - Manager on "Administration / User. Hover with the mouse over a user and you will see the option "Purge Data" next to the Pen symbol on the right side. If you don't see this Purge Data option the "Enable Data Protection Feature" is unchecked under Administration / Server Settings.

To perform all this steps you need in any case Admin Rights for your SAP Enable Now Tenant.

Maybe the automatic user deactivation after a certain time of inactivity could be also interesting for you: https://help.sap.com/doc/763c471ca5f74a9d993c6944114f6367/2105/en-US/Manager_Operations_Guide_en-US....

I hope that helps you in this topic,

Best regards, Michael