Introduction

The SAP System Connector enables you to manage the identity and access lifecycle of users within a SAP system. Like any other CoreOne Suite System Connector this includes functionality to create, read, update and delete users as well as the assignment of various access rights such as the assignment of single roles, collection roles and profiles.

System Identity Types

The following system identity types are supported:

Identity Type	Description

Identity Type	Description
`SAP User`	A regular SAP User

SAP User

The following user attributes can be manged by default:

Attribute	Description

Attribute	Description
ACCOUNT_ID	The unique id of the user
BUILDING	The building of the user
`DEPARTMENT`	The department of the user
`FAX_NUMBER`	The fax number of the user
`FIRST_NAME`	The first name of the user
`FLOOR`	The floor of the user
`FUNCTION`	The function of the user
`LANGUAGE`	The language of the user
`LAST_NAME`	The last name of the user
`MOB_NUMBER`	The mobile number of the user
`ROOMNUMBER`	The room number of the user
`SMTP_ADDR`	The mail address of the user
`TEL_NUMBER`	The phone number of the user
`TIME_ZONE`	The time zone of the user
`USER_GROUP`	The default user group of the user
`USERNAME`	The user name of the user
`VALID_FROM`	The valid from of the user
`VALID_TO`	The valid to of the user

Those defaults attributes can be extended if needed using the system identity type attributes UI masks

System Resource Types

The following system resource types are supported:

Identity Type	Description

Identity Type	Description
Single Roles	SAP delivers a wide range of default roles and customers have the ability to create their own.
Collective Roles	Role collections group together different roles that can be applied to the application users.
Profile	SAP supports different type of user profiles that can be assigned to an user.

Properties

Whenever you connect a SAP system to the CoreOne Suite you will need to specify the following properties.

Property	Mandatory	Example	Description

Property	Example	Description
Host	SAPHOST01	The SAP host
System Number	00	The system number
`System ID`	ERP	The system ID
`User`	cos_sap_service	The user to connect with
`Password`	* * * * * * * *	The user's password
`Client`	800	The client to be used
`Language`	DE	The language to connect with Some of the return values of some of the data will depend on the language that you choose here.

Installation

Unlike other connectors, for the SAP System Connector to be working, you need to actually install something on the SAP System. Please follow the following instructions:

How-to Install the CoreOne SAP Module on a SAP system

Identity features

The following identity functions are supported:

System Connector task features	Supported
Create / delete identities
Provisioning identities
Update identities
Provisioning identity updates
Deprovision identities
Cleanup of inactive identities active
Check password changed active

Resources features

The following resource functions are supported:

System Connector task features	Supported
Create/delete resources
Provision resources
Update resources	-
Provisioning resource changes	-
Deprovisioning resources	-
Provisioning resource allocations	-
Deprovisioning resource allocations	-
Provisioning resources-resource allocations	-
Deprovisioning resource resource allocations	-

Cleanup features

The following cleanup functions are supported:

System Connector task features	Supported
In the should-actual Log available
Should be - Actually is - cleanup
Read back account properties
Resource identity member target system clean up	-
Resource resource member target system clean up	-