SAP NetWeaver Identity Management

Public

2013 SAP AG. All rights reserved. 2 Public

:

:

E-Mail

:

E-Mail

CRM

()

()

-

:

E-Mail

CRM

()

()

:

()

2013 SAP AG. All rights reserved. 3 Public

,

-

,

2013 SAP AG. All rights reserved. 5 Public

SAP NetWeaver Identity Management

,

,

2013 SAP AG. All rights reserved. 6 Public

, : , ,

..

-

-

HR

SAP HR AD SAP FI E-Mail SAP

Portal

E-mail AD

-

/

, : HR

-

2013 SAP AG. All rights reserved. 7 Public

-

-

-

-

SAP ERP HCM

SAP NetWeaver

Identity Management

SAP CRM

SAP IPC

SAP SCM

1 3 2

2013 SAP AG. All rights reserved. 8 Public

7.2

: , , ,

..

, :

1 000 , 20

IDM 7.1: 20 000

IDM 7.2: 1 020

2013 SAP AG. All rights reserved. 9 Public

SAP NetWeaver IDM

Identity Store

-

Identity

Store

-

1 5

2 3

4

Identity

Center

2013 SAP AG. All rights reserved. 12 Public

SAP NetWeaver IDM SAP ERP HCM

, :

.

1

3 4

HCM

-

-

2

.

, SAP FI, ..

SAP NetWeaver Identity Management

2013 SAP AG. All rights reserved. 13 Public

SAP NetWeaver IDM SAP ERP HCM

SAP NetWeaver Identity Management

- .

.

, :

.

1

3

.

.

2

2013 SAP AG. All rights reserved. 14 Public

SAP NetWeaver IDM SAP ERP HCM

SAP NetWeaver Identity Management

, :

.

1

3 SAP NetWeaver Identity Management

2

.

.

.

2013 SAP AG. All rights reserved. 16 Public

. .

.

-

, ,

/ , ,

/

2013 SAP AG. All rights reserved. 17 Public

SAP BW

SAP BW

,

,

:

(, ,

)

Business Explorer

2013 SAP AG. All rights reserved. 22 Public

SAP NetWeaver

Identity

Management

?

/ ?

:

2013 SAP AG. All rights reserved. 23 Public

SPML

SPML LDAP

LDAP JDBC

Virtual Directory Server

LDAP,

SPML

LDAP

2013 SAP AG. All rights reserved. 24 Public

SAP NetWeaver Identity Management

SAP Business Suite

SAP Access Control (GRC)

Lotus Domino / Notes

SAP Application Server

Microsoft Windows NT

Unix/Linux

Shell-

Java

Microsoft SQL Server

Microsoft Access

Oracle database

SPML

LDAP

ODBC / JDBC / OLE-DB

RFC

LDIF-

XML-

CSV-

Microsoft Active Directory

IBM Tivoli Directory

Novell eDirectory

SunONE Java Directory

Oracle Internet Directory

Microsoft Active Directory

Application Mode (ADAM)

Siemens DirX

OpenLDAP

eB2Bcom View500 Directory Server

CA eTrust Directory

SAP NetWeaver IDM Virtual

Directory Server

LDAP v3

IBM UDB (DB2)

MySQL

Sybase

Microsoft Exchange

RSA ClearTrust

RSA SecurID

2013 SAP AG. All rights reserved. 25 Public

SAP Access Control

SAP NetWeaver

Single Sign-On

SAP NetWeaver

Identity Management

,

,

2013 SAP AG. All rights reserved. 26 Public

Status: Summer 2007

http://www.thalesgroup.com/http://www.t-online.de/c/00/00/04/46.html

2013 SAP AG. All rights reserved. 31 Public

SAP NetWeaver Identity Management

Identity Store

,

SAP NetWeaver IDM

Identity Center

(AS Java)

/

SA

P

GR

C

-

Virtu

al D

irec

tory

Se

rve

r

E-Mail AD SAP

Portal

SAP

ERP

Virtual Directory Server

2013 SAP AG. All rights reserved. 32 Public

Identity Center

-

Identity Store

HR

E-mail CA

: + 47 73934649

Email: jensen@example.com Identity

Store

2013 SAP AG. All rights reserved. 33 Public

Identity Store

,

MS SQL Server Oracle DB

Identity Store

2013 SAP AG. All rights reserved. 34 Public

Virtual Directory Server

LDAP Extensible Transformation

Framework

Virtual Directory

-

LDAP DB API SPML DSML SAP Sales

Force

Java

GUI

2013 SAP AG. All rights reserved. 35 Public

,

Windows / Java

2013 SAP AG. All rights reserved. 36 Public

LDAP

2013 SAP AG. All rights reserved. 37 Public

2013 SAP AG. All rights reserved. 38 Public

2013 SAP AG. All rights reserved. 39 Public

2013 SAP AG. All rights reserved. 40 Public

2013 SAP AG. All rights reserved. 41 Public

MS Management Console

2013 SAP AG. All rights reserved. 42 Public

MS Management Console

2013 SAP AG. All rights reserved. 48 Public

Web Dynpro

2013 SAP AG. All rights reserved. 49 Public

SAP IDM c Open API RESTful -

REST (Representational State Transfer)

JSON (Java Script Object Notation)

(Java)

Identity Store

RESTful -

2013 SAP AG. All rights reserved. 50 Public

REST API / /

2013 SAP AG. All rights reserved. 51 Public

REST API

2013 SAP AG. All rights reserved. 52 Public

2013 SAP AG. All rights reserved. 53 Public

ModifyUser ( )

MX_PERSON

:

: sap_modifyUser

A D

B C

MX_PERSON

sap_modifyUser

,

,

,

D

2013 SAP AG. All rights reserved. 54 Public

ABAP

Identity Store

2013 SAP AG. All rights reserved. 55 Public

ABAP

: Provision / Deprovision /

Modify, ,

2013 SAP AG. All rights reserved. 56 Public

Clean IS MS-SQL with Delta

Clean IS Oracle with Delta

Clean Provisioning Queue MS-SQL

Clean Provisioning Queue Oracle

ABAP

AS ABAP Initial Load

AS ABAP Reset Delta MS-SQL

AS ABAP Reset Delta Oracle

AS ABAP Initial Provisioning

AS ABAP Update

HCM

HCM - Read Employees

2013 SAP AG. All rights reserved. 57 Public

Java

AS Java (Database) Initial Load

AS Java (Database) Reset Delta MS-SQL

AS Java (Database) Reset Delta Oracle

AS Java (Database) Initial Provisioning

AS Java (LDAP) Reset Delta MS-SQL

AS Java (LDAP) Reset Delta Oracle AS Java (Database) Update

AS Java (LDAP) Initial Load

AS Java (LDAP) Initial Provisioning

AS Java (LDAP) Update

2013 SAP AG. All rights reserved. 58 Public

LDAP

LDAP (SUNONE) Initial Load

LDAP (SUNONE) Reset Delta MS-SQL

LDAP (SUNONE) Reset Delta Oracle

LDAP (SUNONE) Initial Provisioning

LDAP (SUNONE) Update All

LDAP (SUNONE) Update Groups

2013 SAP AG. All rights reserved. 59 Public

MS AD