Identity Management sizing

[#1]

Hi folks,

I am looking for information on sizing the Identity Management (let's face it, Maxware) components, and people's experience with that.

I know the minimum specs: Single CPU, 512 MB RAM, 5GB Disk.

However, I am interested in the real-world applications, and experience with Identity Center on a system, versus Virtual Directory Server on a system.

Does anyone have any experience's to share on their installation (even pre-SAP purchase?)

I have heard some references on it running a minimal load, 5-6 % CPU, 800 MB Ram; but have no idea on the context of these assertions, and what size is the job that they are running (ie, 1 repository of 15 users vs 3 DB's, an LDAP, an AD OU and multiple other sources)

Thanks in advance,

Troy

[Former Member · Accepted solution]

Troy this is a great question and one that I hear about a lot!

SAP actually offers a pretty good sizing guide which can help you begin to work on sizing. I've seen an Install Overview document which nicely covers this included with SP2.

But realistically we need to consider a few things:

How many entries are you processing?

How many dispatchers will you be running?

How many sources / targets?

What database (and enterprise features) will you be using?

What Webserver, OS, etc

If you can give us some ideas of what your plans for IDM are we can give you a rough cut of what you'll need!

Cheers,

Matt

[Former Member · Accepted solution]

Thanks Matthew,

I found the information I was looking for in the guide:

SAP NetWeaver Identity Management Identity Center - Installation overview

Troy

[Former Member · Accepted solution]

Hi All,

I have also gone through the Installation overview document regarding the sizing information.

It has actually specified the minimum requirement for production installation.

I want to actually size for our production environment which has around 1000 users . How can I actually size for IDM.

Regards

Sahad.

[Former Member · Accepted solution]

You'll want to use the small case inthe Installation Overview document.

Regards,

Matt

[Former Member · Accepted solution]

Hi Sahad,

are you asking sizing for NW IDM 7.0 or 7.1?

regards

Anand.M

[Former Member · Accepted solution]

Hi Anand

I want sizing details of IDM 7.0. IDM 7.1 is still in the ramp up stage. Do you have the details?

Matt, We cannot use the small case recommendation as we have a huge landscape and it should be properly sized.

Thank you.

[Former Member · Accepted solution]

Hi Sahad,

for 7.0 (Installation Overview)

https://websmp203.sap-ag.de/~sapidb/011000358700000062312008E

for 7.1 (Installation Overview

https://websmp203.sap-ag.de/~sapidb/011000358700001749742008E

ofcourse you require Service Market place.

regards

Anand.M

[Former Member · Accepted solution]

Hi Anand

I did have the Installation overview document. It has just smal,medium, large based sizing. I am looking for a sizing document which is related with the total number of users and other standard factors like we do sizing for other modules. Also how will you decide which sizing you have to follow in small,medium and large for your landscape?

[Former Member · Accepted solution]

If you look in the guide it tells you how many users are good for each size. I believe small is good to 100000 users.

I find the small size best for test/sandbox environments. Medium is the smallest that should be used for production. Failover/HA will require additional equipment.

If you tell us how many users / SAP platform / Database type and OS I might be able to give you a better idea.

Regards,

Matt

[Former Member · Accepted solution]

Hi !

As per the product availability matrix of only oracle, mssql and windows 32 bit is available for IDM 7.0.

So I suppose, we have to use any of them.

Also the number of users will be less than 100000 . May be maximum 5000 users. But where in document of Installation overview it has specified the relationship with number of users to sizing? Can you please tell the page number?

[Former Member · Accepted solution]

In NW IDM Installation Overview.pdf, look at the Sizee S and M system landscapes, Page 10 and 11.Miniumum system requirements are here.

RT and UI components can be on the same server. Multiple RT instances will help for redundancy if needed. MC, can also be on this system.

As always, the database should be on a separate server, prefereably in a cluster.

However for 1-5000 users everything can work on one server. It would also help if you tolkd us what kinds of things are going to be done and how often (LDAP, SAP provisioing, reconcilaiton of LDAP and HR feed, etc)

Matt

[Former Member · Accepted solution]

Hi Matt

Our landscape have ADS, exchange server, GRC AC, ALL sap products, black board etc.

Also In the Installation overview page 10, 11 as you said , i didnt find any details about user based sizing

But in the page 7 , Under production set up

The following table is based upon

100 000 entries

Does it mean that production is for 100 000 users?

I did directly contacted SAP support and they have confirmed the un availability of sizing document for IDM. They did asked me to contact SAP RIG .

Meanwhile did IDM also need three system landscape? or one Instance of IDM is enough for a lanrge landscape?

Thank you very much for your answers.

[Former Member · Accepted solution]

Hi Sahad,

Luckily enough I work in the SAP NetWeaver RIG...

>Does it mean that production is for 100 000 users?

No, it means 100,000 entries. A user is an entry, of course, but so are roles, privliges, etc.

It is true that there is not more sizing information yet. It is currently in progress and will be released in the next few weeks/months.

Best Regards,

Matt

[Former Member · Accepted solution]

Hi Matt

As other matt has specified, for a large landscape with all sap products like GRC,all sap products, and approximately 4000 users, does the small dev system( as per installation overview) is enough ?. Ie just a single 32 bit windows server is enough to handle such big landscape?

[Former Member · Accepted solution]

Hi Sahad,

What system is this? Development? Production? I would say it is OK for your development enviornment, but I would do some testing there before designing the production enviornment and deciding if it meets your SLAs.

Best Regards,

Matt

[Former Member · Accepted solution]

Hi Matt

So for SAP IDM also should have 3 system landscape?. So what about production set up? Production should be like XL/ production?

Can you give a detail explanation about SAP IDM , how it shd be integrated with following products ?. how we can get SSO with EP and other sap products etc. its landscape etc..

We have ADS(ldap), portal, grc, 3rd party products like blackboard, documentum etc.

[Former Member · Accepted solution]

Hi Sahad,

>So for SAP IDM also should have 3 system landscape?

I would recommend at least a two-system landscape: one for development/test, and one for production.

Your questions are very generic. There is ample information here on SDN at https://www.sdn.sap.com/irj/sdn/nw-identitymanagement -> Information in Detail. I would recommend reading the information, as a lot of scenarios are presented there, and coming up with more specific questions.

SSO is an entirely different concept. Identity management is a provisioning tool. IdM is complementary to SSO, but it does not provide SSO services.

Best Regards,

Matt