fp_idmworks
New Member.
353 views

SAP HR 4.5 --- Importing into Identity Vault


Below is what I grabbed from the documentation. The customer was able to
get me the files, but now what?

I tried to remove the extension of the files and put it in the idocs
directory, but the shim never picks up the file.

What extension and format should the files have for it to be picked up
or how else are we supposed to import the data into the vault?



**************************
Populating the Identity Vault with Organizational Data
In order to populate the Identity Vault with the organizational data,
the existing data must be exported from SAP. To export your
organization’s hierarchical data, perform the following steps before
starting the driver:

In the SAP client, enter transaction code PFAL.

Insert the Object Type O for Organization objects.

Specify the organizations you want to export to the Identity Vault. You
can choose to export one organization, a range of organizations, or all
organizations.

If you are exporting a range of objects, go to the Parallel Processing
tab on the HR: ALE Distribution of HR Master Data page, then select a
value of 100 or less at the Number of Object per Process prompt. This
ensures that driver processing does not consume too much Java heap
space.

Click Execute. Ensure that the status is set to Passed to Port Okay.

Repeat Step 1 through Step 4 for Object Type C for Job objects.

Repeat Step 1 through Step 4 for Object Type S for Position objects.

IMPORTANT:Export the objects in the order specified above. This ensures
that the driver creates the correct relationships when users are
imported into the Identity Vault.

************************

thanks,
Fred


--
fp_IDMWORKS
------------------------------------------------------------------------
fp_IDMWORKS's Profile: https://forums.netiq.com/member.php?userid=9869
View this thread: https://forums.netiq.com/showthread.php?t=53939

Labels (1)
0 Likes
10 Replies
Knowledge Partner
Knowledge Partner

Re: SAP HR 4.5 --- Importing into Identity Vault

On 7/28/2015 2:28 PM, fp IDMWORKS wrote:
>
> Below is what I grabbed from the documentation. The customer was able to
> get me the files, but now what?
>
> I tried to remove the extension of the files and put it in the idocs
> directory, but the shim never picks up the file.
>
> What extension and format should the files have for it to be picked up
> or how else are we supposed to import the data into the vault?
>
>
>
> **************************
> Populating the Identity Vault with Organizational Data
> In order to populate the Identity Vault with the organizational data,
> the existing data must be exported from SAP. To export your
> organization�s hierarchical data, perform the following steps before
> starting the driver:
>
> In the SAP client, enter transaction code PFAL.
>
> Insert the Object Type O for Organization objects.
>
> Specify the organizations you want to export to the Identity Vault. You
> can choose to export one organization, a range of organizations, or all
> organizations.
>
> If you are exporting a range of objects, go to the Parallel Processing
> tab on the HR: ALE Distribution of HR Master Data page, then select a
> value of 100 or less at the Number of Object per Process prompt. This
> ensures that driver processing does not consume too much Java heap
> space.
>
> Click Execute. Ensure that the status is set to Passed to Port Okay.
>
> Repeat Step 1 through Step 4 for Object Type C for Job objects.
>
> Repeat Step 1 through Step 4 for Object Type S for Position objects.
>
> IMPORTANT:Export the objects in the order specified above. This ensures
> that the driver creates the correct relationships when users are
> imported into the Identity Vault.
>
> ************************


No extensions. they should be very large text files, with very long
lines. And tons of empty space. 🙂

Will they have the HR system running a Change Pointer job, so that
future changes get sent to the IDM system?

If so, then the PFAL process should have written the files to the remote
loaders iDOC directory already.

The first iDOC processed will be a bit slow, since it has to read the
entire multi-meg file. Ask them to split the iDOCs into smaller chunks.

If you are working on HR, you need to read some of my stuff on this
driver, it is not the most straight forward driver.

This is probably most helpful for you:
http://www.novell.com/communities/node/4144/decoding-idocs-idm-sap-driver

The rest is here.


http://www.novell.com/communities/node/4562/troubleshooting-idoc-issues-sap-hr-driver-identity-manager

http://www.novell.com/communities/node/2792/idm-sap-hr-driver-where-get-jconnect-libraries
http://www.novell.com/communities/node/6351/sap-hr-driver-and-organizational-management-part-1
http://www.novell.com/communities/node/4144/decoding-idocs-idm-sap-driver
http://www.novell.com/communities/node/4482/using-sap-hr-driver-idm-a-64-bit-os
http://www.novell.com/communities/node/9271/error-codes-sap-hr-driver-identity-manager-part-1
http://www.novell.com/communities/node/9512/sap-hr-cmp-integration-driver
http://www.novell.com/communities/node/9537/sap-hr-cmp-integration-driver-walkthough-part-1
http://www.novell.com/communities/node/9547/sap-hr-cmp-integration-driver-walkthough-part-2
http://www.novell.com/communities/node/9556/sap-hr-cmp-integration-driver-walkthough-part-3
http://www.novell.com/communities/node/10001/sap-hr-cmp-integration-driver-walkthrough-part-4
http://www.novell.com/communities/node/11274/sap-hr-cmp-integration-driver-walkthrough-part-5
http://www.novell.com/communities/node/11313/sap-hr-cmp-integration-driver-walkthrough-part-6
http://www.novell.com/communities/node/11481/sap-hr-cmp-integration-driver-walkthrough-part-7
http://www.novell.com/communities/node/11517/sap-hr-cmp-integration-driver-walkthrough-part-8
http://www.novell.com/communities/node/11518/sap-hr-cmp-integration-driver-walkthrough-part-9

0 Likes
fp_idmworks
New Member.

Re: SAP HR 4.5 --- Importing into Identity Vault


we are getting a message" no IDocs.... I turned trace up to 5 and saw a
socket error, and reentered the RL and Driver Object passwords and the
socket error went away, but it still doesn't see the idoc files....
maybe a permission issue, but nothing real evident at this point.

I am pointing the idoc folder to be c:\NetIQ\SAP\idocs and placing the
files in there.

The RL trace log is at 5 and we see the sleeping for 10 seconds repeat.
no other errors seen.


--
fp_IDMWORKS
------------------------------------------------------------------------
fp_IDMWORKS's Profile: https://forums.netiq.com/member.php?userid=9869
View this thread: https://forums.netiq.com/showthread.php?t=53939

0 Likes
Knowledge Partner
Knowledge Partner

Re: SAP HR 4.5 --- Importing into Identity Vault

fp IDMWORKS wrote:

> I am pointing the idoc folder to be c:\NetIQ\SAP\idocs and placing the
> files in there.


fp IDMWORKS wrote:

> +----------------------------------------------------------------------+
> > Filename: Screen Shot 2015-07-29 at 8.44.25 AM.png |
> > Download: https://forums.netiq.com/attachment.php?attachmentid=317 |

> +----------------------------------------------------------------------+


Take a look at the screenshot and which path you gave earlier. Does that help?
0 Likes
mlabit Absent Member.
Absent Member.

Re: SAP HR 4.5 --- Importing into Identity Vault


I just want to respond to this thread so it has closure and a
resolution.

The problem was with the client number. There is a place in the SAP HR
Driver to specify the SAP User Client Number. The number is a three
digit number that must match the second segment in the name of an IDOC.

If this is the name of the IDOC: "O_100_111_20111210", and those are
the IDOCs that need to be processed by the driver, then the Client
Number in the driver parameters must be "100".

In this case, the Client Number was "10" but the IDOC name at the second
segment was "010".


--
mlabit
------------------------------------------------------------------------
mlabit's Profile: https://forums.netiq.com/member.php?userid=1066
View this thread: https://forums.netiq.com/showthread.php?t=53939

0 Likes
Knowledge Partner
Knowledge Partner

Re: SAP HR 4.5 --- Importing into Identity Vault

fp IDMWORKS wrote:

> I tried to remove the extension of the files and put it in the idocs
> directory, but the shim never picks up the file.


What was the extension you removed? .zip by any chance...? 😉

IDocs are named something like O_010_0000000123456789 without any extension
when written by SAP. "O" is for outbound, followed by the system number "010"
in the example, followed by a 16-digit running number.

Open one fie in a text editor, it should contain readable text, mostly numbers
and start with a header line like (removed some space chars for readbility):

EDI_DC40_U2000000000000123456789 3012 HRMD_A07 HRMD_A SAPJ11 LS
J11CLNT200 SAPHR2IDM LS IDMCLNT200
20140217152828 20140217152827

specifying the IDoc type ("HRMD_A07", meaning HR Master Data, variant A,
version 07), sending SAP system ID ("J11") some details about the distribution
model and creation time.

Make sure you hace set the same system ID in your driver settings that is
specified in the IDocs, otherwise the driver will ignore the IDoc (kind of
clever, right?).
0 Likes
fp_idmworks
New Member.

Re: SAP HR 4.5 --- Importing into Identity Vault


We are using the HRMD_A07 type in the driver and the idocs we are
attempting to import also include the type HRMD_A07 on the first line.

I am able to use the HRIDocDecode, from a coolsolution, against it.

I renamed the file to O_010_0000000123456789 with no luck.

The extension was .txt previously

I tried moving the idocs location to be located at c:\NetIQ\idocs in
case the file name and path caused an issue being too long, but that
didn't make a difference either.

The RL service for SAP HR is running as local system, so file rights
shouldn't be an issue.317

315

316


+----------------------------------------------------------------------+
|Filename: Screen Shot 2015-07-29 at 8.44.25 AM.png |
|Download: https://forums.netiq.com/attachment.php?attachmentid=317 |
+----------------------------------------------------------------------+

--
fp_IDMWORKS
------------------------------------------------------------------------
fp_IDMWORKS's Profile: https://forums.netiq.com/member.php?userid=9869
View this thread: https://forums.netiq.com/showthread.php?t=53939

0 Likes
Knowledge Partner
Knowledge Partner

Re: SAP HR 4.5 --- Importing into Identity Vault

fp IDMWORKS wrote:

>
> +----------------------------------------------------------------------+
> > Filename: Screen Shot 2015-07-29 at 8.44.25 AM.png |
> > Download: https://forums.netiq.com/attachment.php?attachmentid=317 |

> +----------------------------------------------------------------------+


Do you have the publisher channel enabled on the "Driver Options" tab as well?
Kind of silly not having that option on the publisher tab, but, well...
0 Likes
fp_idmworks
New Member.

Re: SAP HR 4.5 --- Importing into Identity Vault


yeah, the Driver options shows that publish only is selected. The other
option is for publish and subscriber.

I noticed 9046 errors. I believe they are bogus. If I change the driver
object or RL passwords to something they shouldn't be, at different
times, the RL has different startup problems. When I change it back, RL
doesn't show any issues, just can't find the idocs. Not sure why the
driver trace level would show 9046 and not the RL having issues....
After the 9046 errors we see everything else after that as being with no
errors. The Heartbeats return a success.

Other than that, everything seems normal to me other than it can't find
the idocs. I tried to turn on "publish History" and that didn't help.


--
fp_IDMWORKS
------------------------------------------------------------------------
fp_IDMWORKS's Profile: https://forums.netiq.com/member.php?userid=9869
View this thread: https://forums.netiq.com/showthread.php?t=53939

0 Likes
fp_idmworks
New Member.

Re: SAP HR 4.5 --- Importing into Identity Vault


this was due to the problem that the client id didn't match the three
digit setting. We were using 10 rather than 010.

We do have a problem of Jobs and Positions not processing even though
the client id is right and the filter and schema contain them... Not
picking up the file at all.


--
fp_IDMWORKS
------------------------------------------------------------------------
fp_IDMWORKS's Profile: https://forums.netiq.com/member.php?userid=9869
View this thread: https://forums.netiq.com/showthread.php?t=53939

0 Likes
Knowledge Partner
Knowledge Partner

Re: SAP HR 4.5 --- Importing into Identity Vault

On 8/3/2015 3:34 PM, fp IDMWORKS wrote:
>
> this was due to the problem that the client id didn't match the three
> digit setting. We were using 10 rather than 010.
>
> We do have a problem of Jobs and Positions not processing even though
> the client id is right and the filter and schema contain them... Not
> picking up the file at all.


Ah SAP and leading zeros. Welcome to integer hell.


0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.