Contents

List of Figures

List of Tables

Title and Copyright Information

Preface

• Audience
• Documentation Accessibility
• Documentation Updates
• Related Documents
• Documentation Updates
• Conventions

What's New in Oracle Identity Manager Connector for SAP Employee Reconciliation?

• Software Updates
• Documentation-Specific Updates

1 About the Connector

• 1.1 Certified Components
• 1.2 Certified Languages
• 1.3 Connector Architecture
• 1.4 Features of the Connector
  • 1.4.1 Dedicated Support for Trusted Source Reconciliation
  • 1.4.2 IDoc-Based Reconciliation
  • 1.4.3 Configurable Attribute Mapping
  • 1.4.4 Reconciliation of Effective-Dated Lifecycle Events
  • 1.4.5 Setting the Start Date and End Date Values Based on the Life Cycle Events of the Target System User Record
  • 1.4.6 Synchronization of Employee Type Data and Reconciliation by Employee Type
  • 1.4.7 Reconciliation of the Manager ID Attribute
  • 1.4.8 Reconciliation of Person Record Deletion
  • 1.4.9 Support for Both Unicode and Non-Unicode Modes
  • 1.4.10 Validation and Transformation of User Data
• 1.5 Connector Objects Used During Reconciliation
  • 1.5.1 User Fields for Reconciliation
  • 1.5.2 Reconciliation Rule
  • 1.5.3 Reconciliation Action Rules
  • 1.5.4 Predefined Lookup Definitions
• 1.6 Roadmap for Deploying and Using the Connector

2 Deploying the Connector

• 2.1 Preinstallation
  • 2.1.1 Preinstallation on Oracle Identity Manager
    • 2.1.1.1 Files and Directories on the Installation Media
    • 2.1.1.2 Determining the Release Number of the Connector
    • 2.1.1.3 Creating a Backup of the Existing Common.jar File
  • 2.1.2 Preinstallation on the Target System
    • 2.1.2.1 Creating a Target System User Account for Connector Operations
    • 2.1.2.2 Downloading and Installing the SAP JCo
• 2.2 Installation
  • 2.2.1 Running the Connector Installer
• 2.3 Postinstallation
  • 2.3.1 Setting Up the Lookup.SAP.HRMS.Configuration Lookup Definition in Oracle Identity Manager
  • 2.3.2 Verifying Segment Details in Lookup Definitions
  • 2.3.3 Configuring Reconciliation of Manager ID Attribute Values
  • 2.3.4 Configuring the Target System for Generation of IDocs
    • 2.3.4.1 Checking Whether a Sender Logical System Already Exists
    • 2.3.4.2 Defining the Sending and Receiver Logical Systems
    • 2.3.4.3 Assigning a Client to the Sender Logical System
    • 2.3.4.4 Defining the Distribution Model
    • 2.3.4.5 Creating the File Port
    • 2.3.4.6 Defining the Partner Profile
    • 2.3.4.7 Registering the Listener with the SAP Gateway (tRFC)
    • 2.3.4.8 Creating the tRFC Port
    • 2.3.4.9 Activating Change Pointers
    • 2.3.4.10 Configuring Segment Filtering
    • 2.3.4.11 Configuring SAP Ports for Communication with Oracle Identity Manager
  • 2.3.5 Changing to the Required Input Locale on Oracle Identity Manager
  • 2.3.6 Clearing Content Related to Connector Resource Bundles from the Server Cache
  • 2.3.7 Copying Resource Bundle Entries for UDFs
  • 2.3.8 Enabling Logging on Oracle Identity Manager
    • 2.3.8.1 Enabling Logging on Oracle Identity Manager Release 9.1.0.x
    • 2.3.8.2 Enabling Logging on Oracle Identity Manager Release 11.1.1
  • 2.3.9 Configuring Reconciliation of Effective-Dated Target System Events
  • 2.3.10 Recovering from Failed Communication Between the Target System and Oracle Identity Manager
  • 2.3.11 Configuring SNC to Secure Communication Between Oracle Identity Manager and the Target System
    • 2.3.11.1 Verifying That SNC Is Activated on the Target System Application Server
    • 2.3.11.2 Installing the Security Package
    • 2.3.11.3 Setting Up SNC
  • 2.3.12 Specifying Values for the Connection Properties (IT Resource Configuration)
    • 2.3.12.1 Mapping New Connection Properties
    • 2.3.12.2 Configuring the IT Resource
    • 2.3.12.3 Parameters for Enabling the Use of a Logon Group
  • 2.3.13 Creating an Authorization Policy

3 Using the Connector

• 3.1 Summary of Steps to Use the Connector
• 3.2 Configuring the Scheduled Task for Lookup Field Synchronization
• 3.3 Guidelines on Performing Reconciliation
• 3.4 Performing Full Reconciliation
  • 3.4.1 Generating IDocs
  • 3.4.2 Importing IDocs Into Oracle Identity Manager
    • 3.4.2.1 Limited Reconciliation
    • 3.4.2.2 Configuring the Scheduled Task for User Data Reconciliation
    • 3.4.2.3 Running the SAP HRMS Update Manager Scheduled Task
• 3.5 Performing Incremental Reconciliation
  • 3.5.1 Specifying the Mode of Reconciliation in the Partner Profile
  • 3.5.2 Scheduling Jobs on the Target System for Incremental Reconciliation
  • 3.5.3 Configuring the Listener on Oracle Identity Manager
  • 3.5.4 Configuring Incremental Reconciliation of Manager ID Attribute Values
• 3.6 Resending IDocs That Are Not Received by the Listener
  • 3.6.1 Configuring the Target System to Resend IDocs
  • 3.6.2 Manually Sending IDocs
• 3.7 Configuring Scheduled Tasks

4 Extending the Functionality of the Connector

• 4.1 Removing or Adding Attributes for Reconciliation
  • 4.1.1 Removing Attributes
  • 4.1.2 Adding Attributes
• 4.2 Modifying Field Lengths on the OIM User Form
• 4.3 Configuring the Connector for Multiple Installations of the Target System
• 4.4 Configuring Validation of Data During Reconciliation
• 4.5 Configuring Transformation of Data During User Reconciliation

5 Testing and Troubleshooting

• 5.1 Running Test Cases
• 5.2 Troubleshooting
  • 5.2.1 Connection Errors
  • 5.2.2 Common SNC Errors

6 Known Issues

A Creating IDoc Extensions

B Structure of a Sample IDoc

Index