Microsoft Active Directory Integration

[former_member397702]

Hi experts

We have two issue for our customer:

1-Integration of SAP User Administration into Microsoft Active Directory: Our customer wants to synchronize their SAP users and passwords with Microsoft Active Directory but they dont want to use Single Sign-on.

2-Creating and Synchronize Users in Active Directory from Employee Data Stored in SAP HR

We found two document related with this issue but their version is very old. Is there any new version of this document or we have to use different technology (for example Netweaver Identity Management)?

Related links are:

Best Regards....

[former_member2987]

Hello Hande,

Well you reference old documents, but you don't mention what version of IDM is to be used.  If it's 7.2, then the documents should be fairly relevant, but you might need to make a few tweaks.  If it's version 8, then it's anybody's game.  Documentation is coming at a slow, but steady pace.  Your best bet in that case is to do your research and ask questions here.

Password management is pretty much the same.  I'd suggest looking at and for the best information.

Finally, from a consulting point of view, I would want to understand why they don't want to use SSO (Several excellent reasons exist, but it's good to understand) SSO in some way, shape, or form should be a part of any long range Identity and Access Management plan.

Hope this helps!

Cheers,

Matt

[former_member397702]

Hi Matt

Thanks for your reply.

Netweaver IDentity Management is not used. We are trying to integrate AD an ERP directly.

They don't want to use SSO because most of users use same terminal server or pc.

Best Regards...

Hande

[tim_alsop]

To solve this you need to use a product that can authenticate users on shared workstations using AD credentials. See my answer left on Jun 7th.

Thanks

Tim

[former_member397702]

Hi Tim

Many thanks for your reply. But i want to know is there any way to synchronize users, passwords and synchronize personel data without using any product.

Best Regards...

Hande

[tim_alsop]

I am not aware of any way you can sync users and passwords between AD and a SAP ABAP System. However, you can sync the user data (e.g. job title, email address) using the LDAP connector.

[former_member2987]

Hande,

Thanks for letting us know.  You might want to move this conversation to another forum then, unless you are speaking of SAP SSO.

Matt