afolli Absent Member.
Absent Member.
462 views

Manage additional users' info with SAP User Management drive

Hello,
we have been asked to manage additional information in SAP with the SAP User Management driver. The driver is already up and running since some year and it is working fine managing predefined user info.

Here a screenshot of the interface of SAP containing the additional info: https://ibb.co/dFO2Yp

We have tried to add the new properties to the driver but it looks like that it is simply ignoring them. Is it possible to manage additional user info rather than the predefined one?
Any suggestion will be appreciated.

We are currently using Identity Manager 4.5 with SAPUM 4.0.0.2

Thanks. Best regards,

Alessandro



[10/12/18 08:33:20.168]:SAP User ST:
<nds dtdversion="4.0" ndsversion="8.x">
<source>
<product edition="Advanced" version="4.5.0.0">DirXML</product>
<contact>NetIQ Corporation</contact>
</source>
<input>
<modify cached-time="20181012063319.520Z" class-name="US" event-id="ch91vm685#20181012063319#2#1:ae1a2363-1e2d-4142-c48b-63231aae2d1e" qualified-src-dn="O=Company\OU=Users\CN=R.Fico" src-dn="\IDV-TEST\Company\Users\R.Fico" src-entry-id="38096" timestamp="1539325999#2">
<association state="associated">\CEICLNT410\USdR.FICO</association>
<modify-attr attr-name="SUID_ST_NODE_DBMS_USER:DBMS_USER">
<remove-value>
<value timestamp="1539325902#2" type="string">R_FICO1</value>
</remove-value>
<add-value>
<value timestamp="1539325999#2" type="string">R_FICO</value>
</add-value>
</modify-attr>
</modify>
</input>
</nds>
[10/12/18 08:33:20.172]:SAP User ST:BapiDispatch: DP: Connection set to use: CEICLNT410
[10/12/18 08:33:20.172]:SAP User ST:BapiDispatch: DP: Language code for command: EN
[10/12/18 08:33:20.173]:SAP User ST:BapiDispatch: Creating client connection
[10/12/18 08:33:20.173]:SAP User ST:BapiDispatch: connection created
[10/12/18 08:33:20.174]:SAP User ST:BapiDispatch: DP: Subscriber processing 'MODIFY' command.
[10/12/18 08:33:20.174]:SAP User ST:BapiDispatch: MH: assocValue == 'USdR.FICO'
[10/12/18 08:33:20.174]:SAP User ST:XDSParse: Parsing elements in User Modify
[10/12/18 08:33:20.175]:SAP User ST:XDSParse: parseUserChange - attrName: SUID_ST_NODE_DBMS_USER:DBMS_USER, table: 'SUID_ST_NODE_DBMS_USER'
[10/12/18 08:33:20.176]:SAP User ST:XDSParse: Remove value for AttrName: SUID_ST_NODE_DBMS_USER:DBMS_USER
[10/12/18 08:33:20.176]:SAP User ST:XDSParse: Remove value: R_FICO1
[10/12/18 08:33:20.176]:SAP User ST:XDSParse: Add value for AttrName: SUID_ST_NODE_DBMS_USER:DBMS_USER
[10/12/18 08:33:20.177]:SAP User ST:XDSParse: Add value: R_FICO
[10/12/18 08:33:20.177]:SAP User ST:BapiDispatch: MH: Modify request for User 'USdR.FICO'
[10/12/18 08:33:20.178]:SAP User ST:UserModify: Modify User
[10/12/18 08:33:20.178]:SAP User ST:UserGetDetail: SAP version: 750
[10/12/18 08:33:20.178]:SAP User ST:UserGetDetail: Calling execute...
[10/12/18 08:33:20.248]:SAP User ST:UserGetDetail: Back from execute...
[10/12/18 08:33:20.248]:SAP User ST:UserGetDetail: Allocating Structure: ADDRESS
[10/12/18 08:33:20.248]:SAP User ST:UserGetDetail: Allocating Structure: ADMINDATA
[10/12/18 08:33:20.249]:SAP User ST:UserGetDetail: Allocating Structure: ALIAS
[10/12/18 08:33:20.249]:SAP User ST:UserGetDetail: Allocating Structure: COMPANY
[10/12/18 08:33:20.250]:SAP User ST:UserGetDetail: Allocating Structure: DEFAULTS
[10/12/18 08:33:20.250]:SAP User ST:UserGetDetail: Allocating Structure: DESCRIPTION
[10/12/18 08:33:20.250]:SAP User ST:UserGetDetail: Allocating Structure: IDENTITY
[10/12/18 08:33:20.251]:SAP User ST:UserGetDetail: Allocating Structure: ISLOCKED
[10/12/18 08:33:20.251]:SAP User ST:UserGetDetail: Allocating Structure: LASTMODIFIED
[10/12/18 08:33:20.252]:SAP User ST:UserGetDetail: Allocating Structure: LOGONDATA
[10/12/18 08:33:20.252]:SAP User ST:UserGetDetail: Allocating Structure: REF_USER
[10/12/18 08:33:20.252]:SAP User ST:UserGetDetail: Allocating Structure: SNC
[10/12/18 08:33:20.253]:SAP User ST:UserGetDetail: Allocating Structure: UCLASS
[10/12/18 08:33:20.253]:SAP User ST:UserGetDetail: Allocating Table: ACTIVITYGROUPS
[10/12/18 08:33:20.254]:SAP User ST:UserGetDetail: Allocating Table: ADDCOMREM
[10/12/18 08:33:20.254]:SAP User ST:UserGetDetail: Allocating Table: ADDFAX
[10/12/18 08:33:20.254]:SAP User ST:UserGetDetail: Allocating Table: ADDPAG
[10/12/18 08:33:20.255]:SAP User ST:UserGetDetail: Allocating Table: ADDPRT
[10/12/18 08:33:20.255]:SAP User ST:UserGetDetail: Allocating Table: ADDRFC
[10/12/18 08:33:20.255]:SAP User ST:UserGetDetail: Allocating Table: ADDRML
[10/12/18 08:33:20.256]:SAP User ST:UserGetDetail: Allocating Table: ADDSMTP
[10/12/18 08:33:20.257]:SAP User ST:UserGetDetail: Allocating Table: ADDSSF
[10/12/18 08:33:20.257]:SAP User ST:UserGetDetail: Allocating Table: ADDTEL
[10/12/18 08:33:20.258]:SAP User ST:UserGetDetail: Allocating Table: ADDTLX
[10/12/18 08:33:20.259]:SAP User ST:UserGetDetail: Allocating Table: ADDTTX
[10/12/18 08:33:20.259]:SAP User ST:UserGetDetail: Allocating Table: ADDURI
[10/12/18 08:33:20.260]:SAP User ST:UserGetDetail: Allocating Table: ADDX400
[10/12/18 08:33:20.260]:SAP User ST:UserGetDetail: Allocating Table: EXTIDHEAD
[10/12/18 08:33:20.261]:SAP User ST:UserGetDetail: Allocating Table: EXTIDPART
[10/12/18 08:33:20.262]:SAP User ST:UserGetDetail: Allocating Table: GROUPS
[10/12/18 08:33:20.262]:SAP User ST:UserGetDetail: Allocating Table: PARAMETER
[10/12/18 08:33:20.263]:SAP User ST:UserGetDetail: Allocating Table: PARAMETER1
[10/12/18 08:33:20.264]:SAP User ST:UserGetDetail: Allocating Table: PROFILES
[10/12/18 08:33:20.264]:SAP User ST:UserGetDetail: Allocating Table: RETURN
[10/12/18 08:33:20.265]:SAP User ST:UserGetDetail: Allocating Table: SYSTEMS
[10/12/18 08:33:20.265]:SAP User ST:UserGetDetail: Allocating Table: UCLASSSYS
[10/12/18 08:33:20.266]:SAP User ST:UserGetDetail: queryOrig: 'SUID_ST_NODE_DBMS_USER:DBMS_USER', queryTable: 'SUID_ST_NODE_DBMS_USER', queryField: 'DBMS_USER'
[10/12/18 08:33:20.267]:SAP User ST:UserGetDetail: queryOrig: 'ADDCOMREM', queryTable: 'ADDCOMREM', queryField: ''
[10/12/18 08:33:20.268]:SAP User ST:UserGetDetail: In setTableData, tableName: ADDCOMREM
[10/12/18 08:33:20.269]:SAP User ST:UserGetDetail: TABLE: Getting table field names and data.
[10/12/18 08:33:20.270]:SAP User ST:UserGetDetail: TABLE: field name: 'COMM_TYPE', data: 'INT'
[10/12/18 08:33:20.270]:SAP User ST:UserGetDetail: TABLE: field name: 'LANGU', data: 'E'
[10/12/18 08:33:20.271]:SAP User ST:UserGetDetail: TABLE: field name: 'LANGU_ISO', data: ''
[10/12/18 08:33:20.272]:SAP User ST:UserGetDetail: TABLE: field name: 'COMM_NOTES', data: 'Modified by Identity Manager'
[10/12/18 08:33:20.273]:SAP User ST:UserGetDetail: TABLE: field name: 'CONSNUMBER', data: '001'
[10/12/18 08:33:20.274]:SAP User ST:UserGetDetail: TABLE: field name: 'ERRORFLAG', data: ''
[10/12/18 08:33:20.274]:SAP User ST:UserGetDetail: ADD table row Hashdata to m_dataVector: ADDCOMREM
[10/12/18 08:33:20.275]:SAP User ST:UserModify: Current object data
[10/12/18 08:33:20.276]:SAP User ST:UserModify: String Data
[10/12/18 08:33:20.276]:SAP User ST:UserModify: -------------------------
[10/12/18 08:33:20.277]:SAP User ST:UserModify:
[10/12/18 08:33:20.277]:SAP User ST:UserModify: HashMap Data
[10/12/18 08:33:20.278]:SAP User ST:UserModify: -------------------------
[10/12/18 08:33:20.278]:SAP User ST:UserModify: Name: ADDCOMREM
[10/12/18 08:33:20.279]:SAP User ST:UserModify: Value:
[10/12/18 08:33:20.279]:SAP User ST:UserModify: Component: LANGU, value: E
[10/12/18 08:33:20.280]:SAP User ST:UserModify: Component: LANGU_ISO, value:
[10/12/18 08:33:20.281]:SAP User ST:UserModify: Component: COMM_TYPE, value: INT
[10/12/18 08:33:20.281]:SAP User ST:UserModify: Component: ERRORFLAG, value:
[10/12/18 08:33:20.282]:SAP User ST:UserModify: Component: CONSNUMBER, value: 001
[10/12/18 08:33:20.282]:SAP User ST:UserModify: Component: COMM_NOTES, value: Modified by Identity Manager
[10/12/18 08:33:20.283]:SAP User ST:UserModify:
[10/12/18 08:33:20.284]:SAP User ST:UserModify: Calling BAPI_USER_CHANGE
[10/12/18 08:33:20.284]:SAP User ST:UserChange: SAP version: 750
[10/12/18 08:33:20.285]:SAP User ST:UserChange: Change key: SUID_ST_NODE_DBMS_USER:DBMS_USER, Value: REMOVE|R_FICO1
[10/12/18 08:33:20.286]:SAP User ST:UserChange: setStringChangeParams: Structure: SUID_ST_NODE_DBMS_USER, field: DBMS_USER
[10/12/18 08:33:20.287]:SAP User ST:UserChange: Change key: SUID_ST_NODE_DBMS_USER:DBMS_USER, Value: R_FICO
[10/12/18 08:33:20.288]:SAP User ST:UserChange: setStringChangeParams: Structure: SUID_ST_NODE_DBMS_USER, field: DBMS_USER
[10/12/18 08:33:20.324]:SAP User ST:UserChange: Change return TYPE: S
[10/12/18 08:33:20.325]:SAP User ST:UserChange: Change return MESSAGE: No changes were made to user R.FICO
[10/12/18 08:33:20.326]:SAP User ST:UserModify: BAPI_USER_CHANGE finished
[10/12/18 08:33:20.326]:SAP User ST:BapiDispatch: m_disableRetry value: false
[10/12/18 08:33:20.347]:SAP User ST:SubscriptionShim.execute() returned:
[10/12/18 08:33:20.347]:SAP User ST:
<nds dtdversion="1.0" ndsversion="8.5">
<source>
<product build="20141001_0729" instance="SAP User" version="4.0.0.2">Identity Manager Driver for User Management of SAP Software</product>
<contact>NetIQ Corporation</contact>
</source>
<output>
<status event-id="ch91vm685#20181012063319#2#1:ae1a2363-1e2d-4142-c48b-63231aae2d1e" level="success" type="app-general">
<description>No changes were made to user R.FICO</description>
</status>
</output>
</nds>


Labels (1)
0 Likes
3 Replies
afolli Absent Member.
Absent Member.

Re: Manage additional users' info with SAP User Management d

Taking a deeper look to the driver behaviour I'm wondering if we need to extend the standard BAPI functions in SAP in order to handle those information as well.
Is this the right way to go? Has anyone done it?

Thanks. Best regards,

Alessandro



function bapi_user_get_detail.
*"----------------------------------------------------------------------
*"*"Lokale Schnittstelle:
*" IMPORTING
*" VALUE(USERNAME) LIKE BAPIBNAME-BAPIBNAME
*" VALUE(CACHE_RESULTS) TYPE FLAG_X DEFAULT 'X'
*" EXPORTING
*" VALUE(LOGONDATA) LIKE BAPILOGOND STRUCTURE BAPILOGOND
*" VALUE(DEFAULTS) LIKE BAPIDEFAUL STRUCTURE BAPIDEFAUL
*" VALUE(ADDRESS) LIKE BAPIADDR3 STRUCTURE BAPIADDR3
*" VALUE(COMPANY) LIKE BAPIUSCOMP STRUCTURE BAPIUSCOMP
*" VALUE(SNC) LIKE BAPISNCU STRUCTURE BAPISNCU
*" VALUE(REF_USER) LIKE BAPIREFUS STRUCTURE BAPIREFUS
*" VALUE(ALIAS) LIKE BAPIALIAS STRUCTURE BAPIALIAS
*" VALUE(UCLASS) TYPE BAPIUCLASS
*" VALUE(LASTMODIFIED) TYPE BAPIMODDAT
*" VALUE(ISLOCKED) TYPE BAPISLOCKD
*" VALUE(IDENTITY) TYPE BAPIIDENTITY
*" VALUE(ADMINDATA) TYPE BAPIUSERADMIN
*" VALUE(DESCRIPTION) TYPE BAPIUSDESC
*" TABLES
*" PARAMETER STRUCTURE BAPIPARAM OPTIONAL
*" PROFILES STRUCTURE BAPIPROF OPTIONAL
*" ACTIVITYGROUPS STRUCTURE BAPIAGR OPTIONAL
*" RETURN STRUCTURE BAPIRET2
*" ADDTEL STRUCTURE BAPIADTEL OPTIONAL
*" ADDFAX STRUCTURE BAPIADFAX OPTIONAL
*" ADDTTX STRUCTURE BAPIADTTX OPTIONAL
*" ADDTLX STRUCTURE BAPIADTLX OPTIONAL
*" ADDSMTP STRUCTURE BAPIADSMTP OPTIONAL
*" ADDRML STRUCTURE BAPIADRML OPTIONAL
*" ADDX400 STRUCTURE BAPIADX400 OPTIONAL
*" ADDRFC STRUCTURE BAPIADRFC OPTIONAL
*" ADDPRT STRUCTURE BAPIADPRT OPTIONAL
*" ADDSSF STRUCTURE BAPIADSSF OPTIONAL
*" ADDURI STRUCTURE BAPIADURI OPTIONAL
*" ADDPAG STRUCTURE BAPIADPAG OPTIONAL
*" ADDCOMREM STRUCTURE BAPICOMREM OPTIONAL
*" PARAMETER1 STRUCTURE BAPIPARAM1 OPTIONAL
*" GROUPS STRUCTURE BAPIGROUPS OPTIONAL
*" UCLASSSYS STRUCTURE BAPIUCLASSSYS OPTIONAL
*" EXTIDHEAD STRUCTURE BAPIUSEXTIDHEAD OPTIONAL
*" EXTIDPART STRUCTURE BAPIUSEXTIDPART OPTIONAL
*" SYSTEMS STRUCTURE BAPIRCVSYS OPTIONAL
*"----------------------------------------------------------------------






function bapi_user_change.
*"----------------------------------------------------------------------
*"*"Lokale Schnittstelle:
*" IMPORTING
*" VALUE(USERNAME) LIKE BAPIBNAME-BAPIBNAME
*" VALUE(LOGONDATA) LIKE BAPILOGOND STRUCTURE BAPILOGOND OPTIONAL
*" VALUE(LOGONDATAX) LIKE BAPILOGONX STRUCTURE BAPILOGONX
*" OPTIONAL
*" VALUE(DEFAULTS) LIKE BAPIDEFAUL STRUCTURE BAPIDEFAUL OPTIONAL
*" VALUE(DEFAULTSX) LIKE BAPIDEFAX STRUCTURE BAPIDEFAX OPTIONAL
*" VALUE(ADDRESS) LIKE BAPIADDR3 STRUCTURE BAPIADDR3 OPTIONAL
*" VALUE(ADDRESSX) LIKE BAPIADDR3X STRUCTURE BAPIADDR3X OPTIONAL
*" VALUE(PARAMETERX) LIKE BAPIPARAMX STRUCTURE BAPIPARAMX
*" OPTIONAL
*" VALUE(COMPANY) LIKE BAPIUSCOMP STRUCTURE BAPIUSCOMP OPTIONAL
*" VALUE(COMPANYX) LIKE BAPIUSCOMX STRUCTURE BAPIUSCOMX OPTIONAL
*" VALUE(SNC) LIKE BAPISNCU STRUCTURE BAPISNCU OPTIONAL
*" VALUE(SNCX) LIKE BAPISNCUX STRUCTURE BAPISNCUX OPTIONAL
*" VALUE(BACK_DISTRIBUTION) LIKE BAPIFLAG STRUCTURE BAPIFLAG
*" DEFAULT SPACE
*" VALUE(PASSWORD) LIKE BAPIPWD STRUCTURE BAPIPWD OPTIONAL
*" VALUE(PASSWORDX) LIKE BAPIPWDX STRUCTURE BAPIPWDX OPTIONAL
*" VALUE(ADDCOMX) LIKE BAPIADCOMX STRUCTURE BAPIADCOMX OPTIONAL
*" VALUE(REF_USER) LIKE BAPIREFUS STRUCTURE BAPIREFUS OPTIONAL
*" VALUE(REF_USERX) LIKE BAPIREFUSX STRUCTURE BAPIREFUSX OPTIONAL
*" VALUE(ALIAS) TYPE BAPIALIAS OPTIONAL
*" VALUE(ALIASX) LIKE BAPIALIASX STRUCTURE BAPIALIASX OPTIONAL
*" VALUE(GROUPSX) LIKE BAPIGROUPX STRUCTURE BAPIGROUPX OPTIONAL
*" VALUE(UCLASS) TYPE BAPIUCLASS OPTIONAL
*" VALUE(UCLASSX) TYPE BAPIUCLASSX OPTIONAL
*" VALUE(EXTIDSX) TYPE BAPIUSEXTIDX OPTIONAL
*" VALUE(PRODUCTIVE_PWD) TYPE BAPIFLAG-BAPIFLAG DEFAULT SPACE
*" VALUE(GENERATE_PWD) TYPE BAPIFLAG-BAPIFLAG DEFAULT SPACE
*" VALUE(DESCRIPTION) TYPE BAPIUSDESC OPTIONAL
*" VALUE(DESCRIPTIONX) TYPE BAPIUSDESCX OPTIONAL
*" EXPORTING
*" VALUE(GENERATED_PASSWORD) TYPE BAPIPWD
*" TABLES
*" PARAMETER STRUCTURE BAPIPARAM OPTIONAL
*" RETURN STRUCTURE BAPIRET2
*" ADDTEL STRUCTURE BAPIADTEL OPTIONAL
*" ADDFAX STRUCTURE BAPIADFAX OPTIONAL
*" ADDTTX STRUCTURE BAPIADTTX OPTIONAL
*" ADDTLX STRUCTURE BAPIADTLX OPTIONAL
*" ADDSMTP STRUCTURE BAPIADSMTP OPTIONAL
*" ADDRML STRUCTURE BAPIADRML OPTIONAL
*" ADDX400 STRUCTURE BAPIADX400 OPTIONAL
*" ADDRFC STRUCTURE BAPIADRFC OPTIONAL
*" ADDPRT STRUCTURE BAPIADPRT OPTIONAL
*" ADDSSF STRUCTURE BAPIADSSF OPTIONAL
*" ADDURI STRUCTURE BAPIADURI OPTIONAL
*" ADDPAG STRUCTURE BAPIADPAG OPTIONAL
*" ADDCOMREM STRUCTURE BAPICOMREM OPTIONAL
*" GROUPS STRUCTURE BAPIGROUPS OPTIONAL
*" PARAMETER1 STRUCTURE BAPIPARAM1 OPTIONAL
*" UCLASSSYS STRUCTURE BAPIUCLASSSYS OPTIONAL
*" EXTIDHEAD STRUCTURE BAPIUSEXTIDHEAD OPTIONAL
*" EXTIDPART STRUCTURE BAPIUSEXTIDPART OPTIONAL
*"----------------------------------------------------------------------

0 Likes
Micro Focus Expert
Micro Focus Expert

Re: Manage additional users' info with SAP User Management drive

Hi Alessandro,

On 2018-10-12 10:04, afolli wrote:
>
> Taking a deeper look to the driver behaviour I'm wondering if we need to
> extend the standard BAPI functions in SAP in order to handle those
> information as well.
> Is this the right way to go? Has anyone done it?


You'd need a remote callable BAPI on your SAP system. That might be
provided out-of-the box
(https://blogs.sap.com/2014/10/21/dbms-users-in-sap-netweaver-as-abap-740/)
or needs to be custom implemented. Once it is available, you can use SAP
JCo to call it from an IDM driver.
Micro Foucs Consulting has done that for a number of customer use cases.

--
Norbert
--
Norbert
0 Likes
afolli Absent Member.
Absent Member.

Re: Manage additional users' info with SAP User Management d

Hello Norbert,
thank you really much for the clarification.

Best regards,

Alessandro

klasen;2488781 wrote:
Hi Alessandro,

You'd need a remote callable BAPI on your SAP system. That might be
provided out-of-the box
(https://blogs.sap.com/2014/10/21/dbms-users-in-sap-netweaver-as-abap-740/)
or needs to be custom implemented. Once it is available, you can use SAP
JCo to call it from an IDM driver.
Micro Foucs Consulting has done that for a number of customer use cases.

--
Norbert
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.