Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Related Documents
• Documentation Updates
• Conventions

What's New in Oracle Identity Manager Connector for SAP Employee Reconciliation?

• Software Updates
• Documentation-Specific Updates

1 About the Connector

• 1.1 Certified Components
• 1.2 Certified Languages
• 1.3 Connector Architecture
• 1.4 Features of the Connector
  • 1.4.1 Dedicated Support for Trusted Source Reconciliation
  • 1.4.2 IDoc-Based Reconciliation
  • 1.4.3 Configurable Attribute Mapping
  • 1.4.4 Reconciliation of Effective-Dated Lifecycle Events
  • 1.4.5 Synchronization of Employee Type Data and Reconciliation by Employee Type
  • 1.4.6 Reconciliation of the Manager ID Attribute
  • 1.4.7 Reconciliation of Person Record Deletion
• 1.5 Connector Objects Used During Reconciliation
  • 1.5.1 User Fields for Reconciliation
  • 1.5.2 Reconciliation Rule
  • 1.5.3 Reconciliation Action Rules
  • 1.5.4 Predefined Lookup Definitions
• 1.6 Roadmap for Deploying and Using the Connector

2 Deploying the Connector

• 2.1 Preinstallation
  • 2.1.1 Preinstallation on Oracle Identity Manager
    • 2.1.1.1 Files and Directories on the Installation Media
    • 2.1.1.2 Determining the Release Number of the Connector
  • 2.1.2 Preinstallation on the Target System
    • 2.1.2.1 Creating a Target System User Account for Connector Operations
    • 2.1.2.2 Using External Code Files
• 2.2 Installation
  • 2.2.1 Running the Connector Installer
• 2.3 Postinstallation
  • 2.3.1 Setting Up the Lookup.SAP.HRMS.Configuration Lookup Definition in Oracle Identity Manager
  • 2.3.2 Configuring Reconciliation of Manager ID Attribute Values
  • 2.3.3 Configuring the Target System for Generation of IDocs
    • 2.3.3.1 Checking Whether a Sender Logical System Already Exists
    • 2.3.3.2 Defining the Sending and Receiver Logical Systems
    • 2.3.3.3 Assigning a Client to the Sender Logical System
    • 2.3.3.4 Defining the Distribution Model
    • 2.3.3.5 Creating the File Port
    • 2.3.3.6 Defining the Partner Profile
    • 2.3.3.7 Registering the Listener with the SAP Gateway (TRFC)
    • 2.3.3.8 Creating the TRFC Port
    • 2.3.3.9 Activating Change Pointers
    • 2.3.3.10 Configuring Segment Filtering
    • 2.3.3.11 Configuring SAP Ports for Communication with Oracle Identity Manager
  • 2.3.4 Changing to the Required Input Locale on Oracle Identity Manager
  • 2.3.5 Refreshing the Connector Resource Bundles on Oracle Identity Manager
  • 2.3.6 Copying Resource Bundle Entries for UDFs
  • 2.3.7 Enabling Logging on Oracle Identity Manager
  • 2.3.8 Configuring Reconciliation of Effective-Dated Target System Events
  • 2.3.9 Recovering from Failed Communication Between the Target System and Oracle Identity Manager
  • 2.3.10 Configuring SNC to Secure Communication Between Oracle Identity Manager and the Target System
    • 2.3.10.1 Verifying That SNC Is Activated on the Target System Application Server
    • 2.3.10.2 Installing the Security Package
    • 2.3.10.3 Setting Up SNC
  • 2.3.11 Specifying Values for the Connection Properties (IT Resource Configuration)
    • 2.3.11.1 Mapping New Connection Properties
    • 2.3.11.2 Configuring the IT Resource
    • 2.3.11.3 Configuring the Operating System for a Load-Balancing Connection to the Target System

3 Using the Connector

• 3.1 Summary of Steps to Use the Connector
• 3.2 Configuring the Scheduled Task for Lookup Field Synchronization
• 3.3 Performing Full Reconciliation
  • 3.3.1 Generating IDocs
  • 3.3.2 Importing IDocs Into Oracle Identity Manager
    • 3.3.2.1 Limited Reconciliation
    • 3.3.2.2 Configuring the Scheduled Task for User Data Reconciliation
    • 3.3.2.3 Running the SAP HRMS Unprocessed Manager Recon Scheduled Task
• 3.4 Performing Incremental Reconciliation
  • 3.4.1 Specifying the Mode of Reconciliation in the Partner Profile
  • 3.4.2 Scheduling Jobs on the Target System for Incremental Reconciliation
  • 3.4.3 Configuring the Listener on Oracle Identity Manager
• 3.5 Resending IDocs That Are Not Received by the Listener
  • 3.5.1 Configuring the Target System to Resend IDocs
  • 3.5.2 Manually Sending IDocs
• 3.6 Configuring Scheduled Tasks

4 Extending the Functionality of the Connector

• 4.1 Removing or Adding Attributes for Reconciliation
  • 4.1.1 Removing Attributes
  • 4.1.2 Adding Attributes
• 4.2 Modifying Field Lengths on the OIM User Form
• 4.3 Configuring the Connector for Multiple Installations of the Target System

5 Testing and Troubleshooting

• 5.1 Running Test Cases
• 5.2 Troubleshooting
  • 5.2.1 Connection Errors
  • 5.2.2 Common SNC Errors

6 Known Issues

A Creating IDoc Extensions

Index