Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Documentation Updates
• Conventions

1 About the Connector

• 1.1 Certified Components
• 1.2 Certified Languages
• 1.3 Connector Architecture
  • 1.3.1 Provisioning Process
  • 1.3.2 Reconciliation Process
• 1.4 Features of the Connector
  • 1.4.1 Routing of Provisioning Requests Through SAP GRC Compliant User Provisioning
  • 1.4.2 Full Reconciliation
  • 1.4.3 Limited (Filtered) Reconciliation
  • 1.4.4 Enabling and Disabling Accounts
  • 1.4.5 Specifying Accounts to Be Excluded from Reconciliation and Provisioning Operations
  • 1.4.6 Transformation and Validation of Account Data
• 1.5 Lookup Definitions Used During Connector Operations
  • 1.5.1 Lookup Definitions Synchronized with the Target System
  • 1.5.2 Preconfigured Lookup Definitions
• 1.6 Connector Objects Used During Reconciliation
  • 1.6.1 User Attributes for Reconciliation
  • 1.6.2 Reconciliation Rules
    • 1.6.2.1 Reconciliation Rule
    • 1.6.2.2 Viewing Reconciliation Rules in the Design Console
  • 1.6.3 Reconciliation Action Rules
    • 1.6.3.1 Reconciliation Action Rules for Reconciliation
    • 1.6.3.2 Viewing Reconciliation Action Rules in the Design Console
• 1.7 Connector Objects Used During Provisioning
  • 1.7.1 User Provisioning Functions
  • 1.7.2 User Attributes for Provisioning
• 1.8 Roadmap for Deploying and Using the Connector

2 Deploying the Connector

• 2.1 Preinstallation
  • 2.1.1 Preinstallation on Oracle Identity Manager
    • 2.1.1.1 Files and Directories on the Installation Media
    • 2.1.1.2 Determining the Release Number of the Connector
    • 2.1.1.3 Creating a Backup of the Existing Common.jar File
    • 2.1.1.4 Copying OpenSPML Toolkit 2.0
  • 2.1.2 Preinstallation on the Target System
    • 2.1.2.1 Creating a Target System User Account for Connector Operations
• 2.2 Installation
• 2.3 Postinstallation
  • 2.3.1 Setting Values in the Lookup.SAP.UME.Configuration Lookup Definition
  • 2.3.2 Changing to the Required Input Locale
  • 2.3.3 Clearing Content Related to Connector Resource Bundles from the Server Cache
  • 2.3.4 Enabling Logging
  • 2.3.5 Setting Up the Lookup.SAP.UME.ExclusionList Lookup Definition
  • 2.3.6 Setting Up the Lookup.SAP.UME.System Lookup Definition
  • 2.3.7 Configuring the Compliant User Provisioning Feature of the Connector
    • 2.3.7.1 Specifying Values for the SAP GRC IT Resource IT Resource
    • 2.3.7.2 Setting Up the Link with the Web Services for SAP GRC Compliant User Provisioning
    • 2.3.7.3 Configuring Request Types and Workflows on SAP GRC Compliant User Provisioning
    • 2.3.7.4 Setting Values in the Lookup.SAP.CUP.Configuration Lookup Definition
  • 2.3.8 Configuring SSL to Secure Communication Between the Target System and Oracle Identity Manager
  • 2.3.9 Configuring the IT Resource

3 Using the Connector

• 3.1 Performing Full Reconciliation
• 3.2 Scheduled Task for Lookup Field Synchronization
• 3.3 General Considerations to Be Addressed While Using the Connector
• 3.4 Guidelines on Performing Reconciliation
• 3.5 Configuring Reconciliation
  • 3.5.1 Full Reconciliation
  • 3.5.2 Limited Reconciliation
  • 3.5.3 Reconciliation Scheduled Tasks
    • 3.5.3.1 SAP UME User Recon
    • 3.5.3.2 SAP UME Delete Recon
    • 3.5.3.3 SAP CUP Status Update Recon
    • 3.5.3.4 SAP CUP Delete Recon
• 3.6 Configuring Scheduled Tasks
• 3.7 Guidelines on Performing Provisioning

4 Extending the Functionality of the Connector

• 4.1 Configuring Validation of Data During Reconciliation and Provisioning
• 4.2 Configuring Transformation of Data During User Reconciliation
• 4.3 Modifying Field Lengths on the Process Form
• 4.4 Configuring the Connector for Multiple Installations of the Target System
  • 4.4.1 Enabling the Dependent Lookup Fields Feature

5 Known Issues and Limitations

• 5.1 Known Issues
• 5.2 Connector Limitations Related to Features of the Target System

Index