34
Engineering Your Success Maximize the return on your SAP Investment Automating User Provisioning with SAP NetWeaver BPM Incture Technologies July 21, 2011

Automating user provisioning with SAP NW BPM

Embed Size (px)

DESCRIPTION

Automating user provisioning with SAP NW BPM

Citation preview

Page 1: Automating user provisioning with SAP NW BPM

Engineering Your Success

Maximize the return on your SAP Investment

Automating User Provisioning with SAP NetWeaver

BPM

Incture Technologies

July 21, 2011

Page 2: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 2 Engineering Your Success

About the Speaker

• BPM Architect

• Developed and implemented multiple large scale multi million dollar BPM projects

• Conducted several BPM workshops in Asia

• Frequent blogger and active contributor in SCN

Page 3: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 3 Engineering Your Success

About Incture Led by a strong team of ex-SAP employees with singular focus on SOA-BPM driven innovation for SAP customers. • Largest BPM implementation partner in Asia – Most complex projects including 5 major SAP NW BPM implementations in Asia • Enabling BPM adoption by customers with BPM Workshops for Business and IT teams with over 30 customers and partners in APJ (BPM Jump Start Kit) • Thought leadership in SOA-BPM with large investments on solution and technology assets in SAP BPM • Agility and dedicated efforts on BPM adoption with all engagements being supported by highest level of management • Located close to SAP Labs and SAP Global Delivery Centre in Bangalore and has strong multi year collaboration (over 2000 man months) with SAP Development teams • Combined advantage of deep skills and competitive cost (100+ delivery team is centred in Bangalore), Member of SAP Design Partner Council – Advisor to SAP BPM, BRMS, CE, Java technology teams on product roadmap, development and benchmarking and also participate in design, build and early testing SOA-BPM products

Page 4: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 4 Engineering Your Success

• About the customer

• As Is Process and Business Pain Points

• BPM Orchestrated Process

• Roadmap & Future Improvements

Agenda

Page 5: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 5 Engineering Your Success

India's largest fast moving conglomerate. In India since: 1933 Employee strength:

• Over 15,000 employees (> 6000 SAP users) • Contributes to indirect employment of over 52,000 people

Distribution coverage:

• Over 1 million retail outlets across India directly and its products are available in over 6.3 million outlets in the country,

• Nearly 80% of all retail outlets in India.

• Two out of three Indians use its many home and personal care products, food and beverages.

About the customer

Page 6: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 6 Engineering Your Success

• About the customer

• As Is Process and Business Pain Points

• BPM Orchestrated Process

• Roadmap & Future Improvements

Agenda

Page 7: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 7 Engineering Your Success

As Is Process – Paper based

SAP ERP

SAP Solution Manager

SAP APO

SAP CUA

SAP GRC

SAP Java systems

SAP ICH

Other Satellite Systems

End users (Employees, Customers,

Vendors, Contractors,

Transporters)

Business & IT managers

1

3

2

IT helpdesk

/ SSC

Department head

Update parameter

Update parameter

Update parameter

Create business partner, Manage change requests

Create/modify user access, lock/unlock, Password reset

Do SoD compliance checks

Do required role assignments

Generate reports, account lock / unlock

Pain points • People Integration • Business agility • Process exceptions • Auditing

Pain points • User experience • Process visibility • Process quality • System integration

Pain points • Security and Risk mitigation • Compliance (GRC and SoX) • License cost assignment to cost centers • License asset management

Page 8: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 8 Engineering Your Success

• About the customer

• As Is Process and Business Pain Points

• BPM Orchestrated Process

• Roadmap & Future Improvements

Agenda

Page 9: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 9 Engineering Your Success

ERP

SAP Solution Manager

APO

SAP CUA SAP GRC

ICH

Satellite System 1

End users Recommender On demand

IT Help desk / SSC

BPM Orchestrated Process

Approver

SAP NW BPM 7.11

Satellite System 2 Satellite System N

CE EP Parameters Role assignment

SoD simulation Business Partner Creation CR Status update

Provisioning

Propagation

Page 10: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 10 Engineering Your Success

• User Creation Self Service (ESS/MSS)

• User profile update

• Bulk User Creation / Deletion, User de-provisioning

• Provision/Revoke Additional System Access/Revoke System access

• Provision/Revoke Role/TCode Request

• User Password Reset

• User Lock and Unlock (Timed + Manual)

• New Role / System creation

• Change in designation / location

Key processes that were automated

Page 11: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 11 Engineering Your Success

• Increased Operational Efficiency and SLA’s • Enablement of Security and Risk mitigation • Adherence to Compliance • Improved Auditing • Automated License cost assignment and asset

management

• Improved Process Visibility • Better People Integration • Greater Business Agility • Process Exceptions Handling • Enhanced User Experience • Improved Process Quality • Enhanced System Integration

Break through in Business KPI‘s with BPM Orchestrated Process

IT Process Average Process Cycle Time

Without BPM With BPM

User / access provisioning 7 – 15 days Almost Instantaneous

User / access de-provisioning 10 days Almost Instantaneous

User license auditing 11 days Approx . 1 -4 hours

System reporting 13 days Approx . 1 -4 hours

Page 12: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 12 Engineering Your Success

Activities Activity type Access type Requisition form Manual End user (Web UI)

Bulk user creation (Excel upload) Manual Help desk (Web UI) Default systems / roles determination Automated

License type determination Automated Actual user creation + license type update Automated

Business Partner creation in Solution Manager Automated Parameter update – R/3 Automated Parameter update – ICH Automated Parameter update – APO Automated

SAP Java systems role mapping Automated User notification Automated End user (Email)

Approval Manual Approval (Email) Approval Manual Approval (Web UI)

User request status check form Manual End user (Web UI) Customer creation Workbench Manual Help desk (Web UI)

Transporter creation Workbench Manual Help desk (Web UI) Vendor creation Workbench Manual Help desk (Web UI)

License quota check / adjustment Automated Approver escalation Automated

BPM Orchestrated User Creation Process

Page 13: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 13 Engineering Your Success

User Creation Dashboard

Page 14: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 14 Engineering Your Success

One click approval from Manager‘s Inbox

Page 15: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 15 Engineering Your Success

Request status & User provisioning in CUA

Page 16: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 16 Engineering Your Success

BPM Orchestrated User Creation Process

Page 17: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 17 Engineering Your Success

Bulk User Creation Dashboard

Page 18: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 18 Engineering Your Success

Activities Activity type Access type

Requisition form Manual End user (Web UI) User notification Automated End user (Email)

Segregation of Duties (SoD) check in GRC Automated Change Request creation in Solution Manager Automated

Bi-directional BPM Solution manager status update Automated

Approval / Recommendation Automated User request status check form Automated

Approver escalation Automated

BPM Orchestrated TCode Addition Process

Page 19: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 19 Engineering Your Success

Addtional TCode Requisition Dashboard

Page 20: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 20 Engineering Your Success

Self Service Request Status Check

Page 21: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 21 Engineering Your Success

SoD (GRC) report + mitigation controls automatically generated and attached to email

One click approval from Manager‘s Inbox

Page 22: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 22 Engineering Your Success

Email carrying multi level approval details

Page 23: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 23 Engineering Your Success

Change Request in Solution Manager

Page 24: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 24 Engineering Your Success

Realtime Request Status Monitoring Console

Page 25: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 25 Engineering Your Success

Change Request Processing in Soln Manager

Page 26: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 26 Engineering Your Success

BPM Soln Manager Bi-directional status updates

Page 27: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 27 Engineering Your Success

Change Request Lifecycle in Soln Manager

Page 28: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 28 Engineering Your Success

Change Request Completion in Soln Manager

Page 29: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 29 Engineering Your Success

BPM Process Flow Completion

Page 30: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 30 Engineering Your Success

BPM Orchestrated TCode Addition Process

Page 31: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 31 Engineering Your Success

I had a request for an urgent role change for Payment Run, since the existing user was going on leave. This request came to me at 2:13 PM. Call was logged at 2.33 PM and the role change was affected

immediately on Approval. This has happened within an hour, proving

the full functionality of User provisioning. Our sincere thanks to BPM Team for the effort put into

to making this happen. Best Wishes!

– End User

Customer quote

Page 32: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 32 Engineering Your Success

• About the customer

• As Is Process and Business Pain Points

• BPM Orchestrated Process

• Roadmap & Future Improvements

Agenda

Page 33: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 33 Engineering Your Success

• Integration with HR systems to automate the user creation/de-provisioning

• Organization structure based authorization

• License Cost assignment to departments

• User/License usage analytics based de-provisioning processes

• SAP NW IDM based User Provisioning

• Further Integration with GRC Services

Further Improvements in the Roadmap

Page 34: Automating user provisioning with SAP NW BPM

INCTURE 2011 / 34 Engineering Your Success

•This publication has been prepared for the Incture Technologies Pvt Ltd. All rights reserved. All copyright in this publication and related works is owned by Incture. No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of Incture. The information contained herein may be changed without prior notice.

• This document is a preliminary version and not subject to your license agreement or any other agreement with Incture. This document contains only intended strategies, developments, and functionalities of the Incture products and services and is not intended to be binding upon Incture to any particular course of business, product strategy, and/or development.

• Incture assumes no responsibility for errors or omissions in this document. Incture does not warrant the accuracy or completeness of the information, text, graphics, links, or other items contained within this material. This document is provided without a warranty of any kind, either express or implied, including but not limited to the implied warranties of merchantability, fitness for a particular purpose, or non infringement.

• Incture shall have no liability for damages of any kind including without limitation direct, special, indirect, or consequential damages that may result from the use of these materials. This limitation shall not apply in cases of intent or gross negligence.

• Some software products marketed by Incture and its distributors contain proprietary software components of other software vendors.

• All product and service names mentioned are the trademarks of their respective companies. Data contained in this document serves informational purposes only. National product specifications may vary.

•This publication is for information purposes only. While due care has been taken during the compilation of this publication to ensure that the information is accurate to the best of Incture’s knowledge and belief, the content is not to be construed in any manner whatsoever as a substitute for professional advice.

•Incture neither recommends nor endorses any specific products or services that may have been mentioned in this publication and nor does it assume any liability or responsibility for the outcome of decisions taken as a result of any reliance placed on this publication. The statutory liability for personal injury and defective products is not affected. Incture has no control over the information that you may access through the use of hot links contained in these materials and does not endorse your use of third-party Web pages nor provide any warranty whatsoever relating to third-party Web pages.

Copyright 2011 Incture Technologies