Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Documentation Updates
• Conventions

What's New in Oracle Identity Manager Connector for SAP CUA?

• Software Updates
• Documentation-Specific Updates

1 About the Connector

• 1.1 Certified Components
• 1.2 Certified Languages
• 1.3 Connector Architecture
• 1.4 Features of the Connector
  • 1.4.1 SoD Validation of Entitlement Requests
  • 1.4.2 Full and Incremental Reconciliation
  • 1.4.3 Limited (Filtered) Reconciliation
  • 1.4.4 Batched Reconciliation
  • 1.4.5 SNC Communication Between the Target System and Oracle Identity Manager
• 1.5 Lookup Definitions Used During Connector Operations
• 1.6 Connector Objects Used During Reconciliation
  • 1.6.1 User Attributes for Reconciliation
  • 1.6.2 Reconciliation Rules
    • 1.6.2.1 Reconciliation Rule for Target Resource Reconciliation
    • 1.6.2.2 Viewing Reconciliation Rules in the Design Console
  • 1.6.3 Reconciliation Action Rules
    • 1.6.3.1 Reconciliation Action Rules for Target Resource Reconciliation
    • 1.6.3.2 Viewing Reconciliation Action Rules in the Design Console
• 1.7 Connector Objects Used During Provisioning
  • 1.7.1 User Provisioning Functions
  • 1.7.2 User Fields for Provisioning
• 1.8 Roadmap for Deploying and Using the Connector

2 Deploying the Connector

• 2.1 Preinstallation
  • 2.1.1 Preinstallation on Oracle Identity Manager
    • 2.1.1.1 Files and Directories on the Installation Media
    • 2.1.1.2 Determining the Release Number of the Connector
  • 2.1.2 Preinstallation on the Target System
    • 2.1.2.1 Creating a Target System User Account for Connector Operations
    • 2.1.2.2 Using External Code Files
• 2.2 Installation
• 2.3 Postinstallation
  • 2.3.1 Postinstallation on Oracle Identity Manager
    • 2.3.1.1 Enabling Request-Based Provisioning
    • 2.3.1.2 Modifying Dependent Lookup Query Properties for Lookup Fields on Microsoft SQL Server
    • 2.3.1.3 Changing to the Required Input Locale
    • 2.3.1.4 Clearing Content Related to Connector Resource Bundles from the Server Cache
    • 2.3.1.5 Enabling Logging
  • 2.3.2 Postinstallation on the Target System
    • 2.3.2.1 Creating a Target System User Account for Connector Operations
    • 2.3.2.2 Creating an Entry in the BAPIF4T Table
    • 2.3.2.3 Importing the Request
    • 2.3.2.4 Configuring SAP Ports for Communication with Oracle Identity Manager
  • 2.3.3 Configuring SoD
    • 2.3.3.1 Configuring the SAP GRC As the SoD Engine
    • 2.3.3.2 Specifying Values for SoD-Related Entries in the Lookup.SAP.CUA.Configuration Lookup Definition
    • 2.3.3.3 Specifying the System Name in the Lookup.SAP.CUA.Systems Lookup Definition
    • 2.3.3.4 Specifying a Value for the TopologyName IT Resource Parameter
    • 2.3.3.5 Disabling and Enabling SoD
  • 2.3.4 Configuring SNC to Secure Communication Between Oracle Identity Manager and the Target System
    • 2.3.4.1 Prerequisites for Configuring the Connector to Use SNC
    • 2.3.4.2 Installing the Security Package
    • 2.3.4.3 Configuring SNC
  • 2.3.5 Configuring the IT Resource

3 Using the Connector

• 3.1 Scheduled Task for Lookup Field Synchronization
• 3.2 Configuring Reconciliation
  • 3.2.1 Full Reconciliation vs. Incremental Reconciliation
  • 3.2.2 Limited Reconciliation vs. Regular Reconciliation
  • 3.2.3 Batched Reconciliation
  • 3.2.4 Reconciliation Scheduled Tasks
• 3.3 Configuring Scheduled Tasks
• 3.4 Provisioning Operations Performed in an SoD-Enabled Environment
  • 3.4.1 Overview of the Provisioning Process in an SoD-Enabled Environment
  • 3.4.2 Direct Provisioning in an SoD-Enabled Environment
  • 3.4.3 Request-Based Provisioning in an SoD-Enabled Environment

4 Extending the Functionality of the Connector

• 4.1 Modifying Existing Field Mappings
• 4.2 Modifying Field Lengths on the Process Form

5 Known Issues

6 Testing and Troubleshooting

• 6.1 Testing the Connector
  • 6.1.1 Testing Provisioning
  • 6.1.2 Testing Limited Reconciliation
  • 6.1.3 Testing Batched Reconciliation
• 6.2 Troubleshooting
  • 6.2.1 Connection Errors
  • 6.2.2 Common SNC Errors
  • 6.2.3 Create User Errors
  • 6.2.4 Delete User Errors
  • 6.2.5 Modify User Errors
  • 6.2.6 Child Data Errors

Index