Click here to load reader

SAP Cloud Platform Identity Provisioning Service · PDF file1 SAP Cloud Platform Identity Provisioning Service ... SAP Identity Management, used as the on-premise system. Source systems

  • View
    370

  • Download
    14

Embed Size (px)

Text of SAP Cloud Platform Identity Provisioning Service · PDF file1 SAP Cloud Platform Identity...

  • PUBLIC

    2018-06-19

    SAP Cloud Platform Identity Provisioning Service

  • Content

    1 SAP Cloud Platform Identity Provisioning Service. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .31.1 What's New for Identity Provisioning. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

    Release Notes 2017. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6Release Notes 2016. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

    1.2 Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 201.3 Getting Started. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

    Access the Identity Provisioning (Trial). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23Purchase the Identity Provisioning (Standalone). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25Purchase the Identity Provisioning (Bundles). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .29

    1.4 Operations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32Transformations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33Systems. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56Properties. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65Manage Jobs and Job Logs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98Manage Job Notifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .102Access Audit Logs (Bundles). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103Manage Authorizations (Bundles). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .104Reset Identity Provisioning Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105

    1.5 Scenarios. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106Source Systems. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107Target Systems. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153Proxy Systems. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 209Local Identity Directory. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 243Hybrid Scenario: SAP Identity Management. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 246

    1.6 Identity Directory (Beta). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .248Enabling Identity Directory. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 250Managing Resources. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 251Requesting Audit Logs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .278Security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 279

    1.7 Security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 280Communication Security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 281Customer Data. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 281Authentication and Roles. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .283Job Logs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 283Data Protection and Privacy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .284

    1.8 Support. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 288

    2 P U B L I CSAP Cloud Platform Identity Provisioning Service

    Content

  • 1 SAP Cloud Platform Identity Provisioning Service

    Get Started What's New

    Overview [page 20]

    Getting Started [page 22]

    Release Notes 2018 [page 4]

    Release Notes 2017 [page 6]

    Release Notes 2016 [page 17]

    Scenarios Resources

    SAP Cloud Platform Identity Provisioning ServiceSAP Cloud Platform Identity Provisioning Service P U B L I C 3

  • Local Identity Directory [page 243]

    SAP Analytics Cloud (Beta) [page 163]

    SAP Application Server ABAP [page 114]

    SAP Cloud Platform Identity Authentication [page 156]

    SAP Cloud Platform Java/HTML5 Apps [page 154]

    SAP Document Center [page 179]

    SAP HANA Database (Beta) [page 172]

    SAP Hybris Cloud for Customer [page 165]

    Hybrid Scenario: SAP Identity Management [page 246]

    SAP Jam [page 181]

    SAP SuccessFactors [page 120]

    Concur [page 193]

    CloudFoundry UAA Server [page 201]

    Microsoft Active Directory [page 145]

    Microsoft Azure Active Directory [page 204]

    Google G Suite [page 185]

    SSH Server (Beta) [page 197]

    SCIM System [page 190]

    LDAP Server [page 133]

    Identity Directory (Beta) [page 248]

    Operations [page 32]

    Security [page 280]

    Support [page 288]

    Video

    Disclaimer

    Legal Disclosure

    Copyright and Trademarks

    1.1 What's New for Identity Provisioning

    Archive [page 6]

    4 P U B L I CSAP Cloud Platform Identity Provisioning Service

    SAP Cloud Platform Identity Provisioning Service

    http://help.sap.com/disclaimer?site=https%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DRdY0kkikQcIhttp://help.sap.com/disclaimer-fullhttp://help.sap.com/disclaimer?site=http%3A%2F%2Fwww.sap.com%2Fcorporate-en%2Fabout%2Flegal%2Fimpressum.htmlhttp://help.sap.com/disclaimer?site=http%3A%2F%2Fwww.sap.com%2Fcorporate-en%2Fabout%2Flegal%2Fcopyright%2Findex.html

  • 25 May 2018 Identity Provisioning

    New

    Audit logs (bundle accounts)

    You can now access audit logs to track changes made in your Identity Provisioning account. See: Access Audit Logs (Bundles) [page 103]

    New

    Bundle scenarios (documentation)

    As you know, Identity Provisioning can be consumed either as a standalone service or as part of another product SAP Jam and SAP SuccessFactors. Now you can learn more about these "bundle" cases. See:

    Purchase the Identity Provisioning (Bundles) [page 29]

    Access the Identity Provisioning (Bundles) [page 30]

    Manage Authorizations (Bundles) [page 104]

    5 March 2018 Identity Provisioning

    New

    Subaccounts

    You can enable the Identity Provisioning service on a certain number of subaccounts for your global account. This information is now available in the Support section of the service user interface.

    To learn more, see: Support [page 288]

    Change

    JSON functions

    The manipulateDate function can now convert Unix Time Stamp date format (integer number) into standard Java ones (like YYYY-MM-DD). That means, if the source system stores a date as a number of milliseconds, after the transformations this number will be converted and written in the target system as a date in a human readable format.

    See: JSON Functions [page 47] manipulateDate

    SAP Cloud Platform Identity Provisioning ServiceSAP Cloud Platform Identity Provisioning Service P U B L I C 5

  • 14 February 2018 Identity Provisioning

    New

    Properties

    Two new properties help you control the notification e-mails sent when a provisioning job fails:

    ips.job.notification.ignored.consecutive.failures ips.job.notification.repeat.on.failure

    Find them on page: List of Properties [page 67]

    See also: Manage Job Notifications [page 102]

    Archived Release Notes

    2017 [page 6] 2016 [page 17]

    1.1.1 Release Notes 2017

    Date Function Type of Change Description

    2017 12 28 SAP Analytics Cloud (beta) New A new provisioning system is available for both reading and writing entities.

    See: SAP Analytics Cloud (Beta) [page 163]

    6 P U B L I CSAP Cloud Platform Identity Provisioning Service

    SAP Cloud Platform Identity Provisioning Service

  • Date Function Type of Change Description

    Properties New Four new properties have been created, as follows:

    SSH properties for reading users and groups in SSH Server (Beta) source systems: ssh.read.groups.command and ssh.read.users.command

    SCIM properties, currently applicable only to SAP Analytics Cloud (Beta) source systems: scim.api.csrf.protection and csrf.token.path

    See: List of Properties [page 67]

    SSH Server (beta) Enhancement You can now use the

Search related