Embed Size (px)
Citation preview
PUBLIC
Whats New in SAP Identity Management 80ndash and how to upgrade
2PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
This presentation outlines our general product direction and should not be relied on in making a
purchase decision This presentation is not subject to your license agreement or any other
agreement with SAP SAP has no obligation to pursue any course of business outlined in this
presentation or to develop or release any functionality mentioned in this presentation This
presentation and SAPs strategy and possible future developments are subject to change and may
be changed by SAP at any time for any reason without notice This document is provided without a
warranty of any kind either express or implied including but not limited to the implied warranties of
merchantability fitness for a particular purpose or non-infringement SAP assumes no
responsibility for errors or omissions in this document except if such damages were caused by
SAP intentionally or grossly negligent
Disclaimer
3PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Whatrsquos new in IDM 80 compared to 72
Changes in terminology and security model
Developer studio based on ldquoEclipserdquo
New connectors and supported DBs
Upgrade and installation process
The upgrade process ndash Main changes
The two possibilities to come to IDM 80 prerequisites
Tips and tricks
Agenda
Whatrsquos new in IDM 80
compared to 72
Changes in terminology and security model
Developer studio based on ldquoEclipserdquo
New connectors and supported DBs
5PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Process type
ndash Defines the usage of the process
For example Validate-Add-Process Entry-Modify-
Process
Repository type
ndash New concept
ndash Defines the parameters of a repository
Repository job
ndash A job which requires a repository to run
ndash Has a defined repository type
Form
ndash In IDM 72 it was called UI task
ndash Defines screen layout and access control
Process
ndash In IDM 72 it was called ldquoPublic Task
ndash Only processes can be
Used as event tasks
Called from other processes
Task (new definition)
ndash A component of a process workflow
ndash A task can not be called from outside the
process
Terminology
6PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
New connectors
SAP SuccessFactors
IBM Lotus Domino connector (Java based)
SAP ASE as an IDM database option
ndash Part of SAP Identity Management 80 SP1
SAP Identity Management Developer Studio as an Eclipse plug-in
ndash Replacement for the Identity Center Management Console (MS-MMC)
ndash Support for Mac and Linux for the IDM Dev Studio (one can now run
completely in a non-windows environment)
Security model for development
Provisioning framework distributed as packages
Graphical process modelling
Main changes in IDM 80 compared to IDM 72 (1 of 2)
ASE = Adaptive Server Enterprise commonly known as ASE or just Sybase DB
7PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
ndash MS SQL Server
ndash IBM DB2
ndash Oracle
ndash New SAP Adaptive Server Enterprise (ASE)
(formerly Sybase DB)
Support of SAP Adaptive Server Enterprise (ASE) database
8PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Identity Management on SAP Adaptive Server Enterprise
SAP ASE
For more info on ASE see httpswwwsapcomproductssybase-asehtml
9PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Harmonization of development
ndash JavaScript language support
ndash Development lifecycle with
revision control
ndash Graphical workflow design
SAP Identity Management 80
Eclipse-based development environment
10PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository management
ndash Introducing repository types
ndash Management in the Identity Management
administration user interface
Dispatcher management
ndash New utility
ndash New states
Global scripts and constants
bull Replaced by package scripts
and constants
New filter mechanism
ndash Switch and conditional tasks
ndash Dynamic groups
Main changes in IDM 80 compared to IDM 72 (2 of 2)
11PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Some minor changes and removals
Jobs are stored and run within an identity store
ndash Can select identity store ldquondashSelfndashrdquo
Managed in the Identity Management user interface instead of in the MMC
ndash Roles Privileges and Dynamic Groups
Managed by regular forms
The following are removed
ndash The Windows runtime engine
ndash The Identity Center Management Console (MMC)
IDM MMC
1995-2014
Upgrade and
installation process
The upgrade process ndash Main changes
The two possibilities to come to IDM 80 prerequisites
Decisions taken and upgrade path with challenges at SAP IT
Tips and tricks
13PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
72SPn 80 upgrade
ndash Install design time (MMC) obsolete
ndash Upgrade schema (mxmc_update)
ndash Upgrade runtime (setupexe)
ndash Deploy NetWeaver components User InterfaceAdmin User Interface
REST
Developer Studio REST server
Configure REST server database connection (one time)
ndash Install developer studio Install Eclipse (one time)
Install IDM Developer Studio plug-in
Configure Developer Studio (one time)
72 SPn SPn+1 upgrade
ndash Install design time (MMC)
ndash Upgrade schema (mxmc_update)
ndash Upgrade runtime (setupexe)
ndash Deploy NetWeaver components User Interface Admin User Interface
REST
IDM upgrade ndash activities step by step
Additionally
14PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Client configuration
15PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
User in SAP Identity Management 80
16PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration
17PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Identity Store
18PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Forms and Processes
19PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash other package objects
20PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
RepositoriesID
M 7
2
21PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository types
22PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Visual workflow design
23PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Provision processID
M 7
2
24PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
1 Perform a real upgrade from 72 to 80 (using an upgrade script ndash option chosen by SAP IT)
Pro Historical data will also be updated and it will be available for future audits
Con Reorganization re-work of packages scripts constants etc required to achieve simpler and understandable
package structure ndash this may involve many resources
2 Install SAP IDM 80 as a new installation
I Then import configuration and modifications from SAP IDM 72 to 80 (sample for exercises in this session)
Pro Speed of update (if IDM 7x install is not big and initial load runs fast)
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
II Recreate and simplify the business model from scratch
Pro Depending on the setup it might be easier and cleaner you can use the upgrade project to simplify your IDM
config
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
The two possible strategies to come to IDM 80 ndash pros amp cons
25PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
All configuration is in ONE package per ID store
ndash Tasks split into
Processes
Forms
Execution as before
Configuration editing
ndash Must be checked out to be edited
Revisions are stored when checking in
ndash Only one user can edit
ndash Possible to manually restructure into multiple packages
After upgradehellip (using strategy no1)
26PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
bull SAP NW AS JAVA ldquo73 SP09+rdquo ldquo73 EhP1 SP06+rdquo ldquo74 SP02+rdquo
bull Databases MS SQL Server 20082012 Oracle 112 IBM DB2 or SAP ASE bull For a complete and most current overview see the Product Availability Matrix on the SAP Service Marketplace
bull If you are currently running IDM 71 you will need to upgrade to 72 SP9 first and then to 80 bull Another option to consider Do not upgrade from 71 to 72 and then to 80 but do a fresh install of IDM 80
bull If you are running IDM 72 SP8 or lower you will need to upgrade to 72 SP9 (or higher) first
and then to IDM 80
bull However you can do all that in the same upgrade project without going live again on eg 72 SP9
bull For existing customization in IDM 72 Switch any job that uses the Windows Runtime or VB
Scripts to the Java Runtime or Java Scripts before starting the upgrade script for IDM 80
bull Since entity IDs such as task IDs and job IDs are not stable and they change much more
often in IDM 80 make sure you do not use them anywhere in your configuration
Use their GUID instead (or with version 8+ you can use their qualified name)
Prerequisites for upgrading from IDM 72 to 80 SP1 (1 of 2)
27PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
The deployment of the Eclipse-based Configuration Developer Studio (software component IDM
CONFIG LM FOR ECLIPSE 80) is done via the standard Eclipse plug-in installation functionality
using the lsquoSAP Development Tools for Eclipsersquo update site
For details and documentation see
httpstoolshanaondemandcomidm
bull Use ldquoEclipse IDE for Java EE Developersrdquo
Download and unzip eclipse-jee-luna-SR2-win32-x86_64zipldquo
Configuration of IDM connection(s)
bull Select the lsquoSAP IDM Developer Studiorsquo perspective
bull Go to lsquoWindowsrsquo -gt lsquoPreferencesrsquo and
maintain configuration parameters
Prerequisites for upgrading from IDM 72 to 80 SP1 (2 of 2)
28PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Plan the upgrade
bull Prepare yourself with training
bull Plan sufficient time for testing (double your estimates)
bull Plan enough time for the actual upgrade process
Make sure to read the documentation carefully
Get consulting with upgrade experience
Jobs that should run on specific repositories must have a certain repository assigned BEFORE the upgrade will be done
bull This will avoid job conversions later which would have to be done in the database
Make sure the export runs without errors Otherwise you may have import problemshellip
Packaging restructuring concept The initial solution offered in IDM 80 caused issues for SAP IT
bull ldquoMovingrdquo objects breaks existing references (GUIDs and other links were changed)
Tips and tricks
29PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
General product information SAP Identity Management 80ndash SAPCOM product page httpswwwsapcomproductsidentity-managementhtml
ndash SAP community (forum) for SAP IDM httpswwwsapcomcommunitytopicsidentity-managementhtml
Upgrade documentationndash Upgrading SAP Identity Management from 72 to 80 ndash on HELPSAPCOM
httpshelpsapcomviewer0a8e2a6c5dc142af85b7a1774fff2cde80en-US
ndash Community Wiki ndash link collection for IDM 80 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+80+Documentation
ndash Community Wiki ndash link collection for IDM 72 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+72+Documentation
ndash Release Info httpshelpsapcomviewerproductSAP_IDENTITY_MANAGEMENT80en-US
Quality improvements ndash For an overview of quality improvements in release 80 check the release notes starting with SP0hellip
httpshelpsapcomviewer97ae2202f05940a19211f9c5174a971c80en-US
Useful links
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
2PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
This presentation outlines our general product direction and should not be relied on in making a
purchase decision This presentation is not subject to your license agreement or any other
agreement with SAP SAP has no obligation to pursue any course of business outlined in this
presentation or to develop or release any functionality mentioned in this presentation This
presentation and SAPs strategy and possible future developments are subject to change and may
be changed by SAP at any time for any reason without notice This document is provided without a
warranty of any kind either express or implied including but not limited to the implied warranties of
merchantability fitness for a particular purpose or non-infringement SAP assumes no
responsibility for errors or omissions in this document except if such damages were caused by
SAP intentionally or grossly negligent
Disclaimer
3PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Whatrsquos new in IDM 80 compared to 72
Changes in terminology and security model
Developer studio based on ldquoEclipserdquo
New connectors and supported DBs
Upgrade and installation process
The upgrade process ndash Main changes
The two possibilities to come to IDM 80 prerequisites
Tips and tricks
Agenda
Whatrsquos new in IDM 80
compared to 72
Changes in terminology and security model
Developer studio based on ldquoEclipserdquo
New connectors and supported DBs
5PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Process type
ndash Defines the usage of the process
For example Validate-Add-Process Entry-Modify-
Process
Repository type
ndash New concept
ndash Defines the parameters of a repository
Repository job
ndash A job which requires a repository to run
ndash Has a defined repository type
Form
ndash In IDM 72 it was called UI task
ndash Defines screen layout and access control
Process
ndash In IDM 72 it was called ldquoPublic Task
ndash Only processes can be
Used as event tasks
Called from other processes
Task (new definition)
ndash A component of a process workflow
ndash A task can not be called from outside the
process
Terminology
6PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
New connectors
SAP SuccessFactors
IBM Lotus Domino connector (Java based)
SAP ASE as an IDM database option
ndash Part of SAP Identity Management 80 SP1
SAP Identity Management Developer Studio as an Eclipse plug-in
ndash Replacement for the Identity Center Management Console (MS-MMC)
ndash Support for Mac and Linux for the IDM Dev Studio (one can now run
completely in a non-windows environment)
Security model for development
Provisioning framework distributed as packages
Graphical process modelling
Main changes in IDM 80 compared to IDM 72 (1 of 2)
ASE = Adaptive Server Enterprise commonly known as ASE or just Sybase DB
7PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
ndash MS SQL Server
ndash IBM DB2
ndash Oracle
ndash New SAP Adaptive Server Enterprise (ASE)
(formerly Sybase DB)
Support of SAP Adaptive Server Enterprise (ASE) database
8PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Identity Management on SAP Adaptive Server Enterprise
SAP ASE
For more info on ASE see httpswwwsapcomproductssybase-asehtml
9PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Harmonization of development
ndash JavaScript language support
ndash Development lifecycle with
revision control
ndash Graphical workflow design
SAP Identity Management 80
Eclipse-based development environment
10PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository management
ndash Introducing repository types
ndash Management in the Identity Management
administration user interface
Dispatcher management
ndash New utility
ndash New states
Global scripts and constants
bull Replaced by package scripts
and constants
New filter mechanism
ndash Switch and conditional tasks
ndash Dynamic groups
Main changes in IDM 80 compared to IDM 72 (2 of 2)
11PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Some minor changes and removals
Jobs are stored and run within an identity store
ndash Can select identity store ldquondashSelfndashrdquo
Managed in the Identity Management user interface instead of in the MMC
ndash Roles Privileges and Dynamic Groups
Managed by regular forms
The following are removed
ndash The Windows runtime engine
ndash The Identity Center Management Console (MMC)
IDM MMC
1995-2014
Upgrade and
installation process
The upgrade process ndash Main changes
The two possibilities to come to IDM 80 prerequisites
Decisions taken and upgrade path with challenges at SAP IT
Tips and tricks
13PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
72SPn 80 upgrade
ndash Install design time (MMC) obsolete
ndash Upgrade schema (mxmc_update)
ndash Upgrade runtime (setupexe)
ndash Deploy NetWeaver components User InterfaceAdmin User Interface
REST
Developer Studio REST server
Configure REST server database connection (one time)
ndash Install developer studio Install Eclipse (one time)
Install IDM Developer Studio plug-in
Configure Developer Studio (one time)
72 SPn SPn+1 upgrade
ndash Install design time (MMC)
ndash Upgrade schema (mxmc_update)
ndash Upgrade runtime (setupexe)
ndash Deploy NetWeaver components User Interface Admin User Interface
REST
IDM upgrade ndash activities step by step
Additionally
14PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Client configuration
15PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
User in SAP Identity Management 80
16PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration
17PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Identity Store
18PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Forms and Processes
19PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash other package objects
20PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
RepositoriesID
M 7
2
21PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository types
22PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Visual workflow design
23PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Provision processID
M 7
2
24PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
1 Perform a real upgrade from 72 to 80 (using an upgrade script ndash option chosen by SAP IT)
Pro Historical data will also be updated and it will be available for future audits
Con Reorganization re-work of packages scripts constants etc required to achieve simpler and understandable
package structure ndash this may involve many resources
2 Install SAP IDM 80 as a new installation
I Then import configuration and modifications from SAP IDM 72 to 80 (sample for exercises in this session)
Pro Speed of update (if IDM 7x install is not big and initial load runs fast)
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
II Recreate and simplify the business model from scratch
Pro Depending on the setup it might be easier and cleaner you can use the upgrade project to simplify your IDM
config
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
The two possible strategies to come to IDM 80 ndash pros amp cons
25PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
All configuration is in ONE package per ID store
ndash Tasks split into
Processes
Forms
Execution as before
Configuration editing
ndash Must be checked out to be edited
Revisions are stored when checking in
ndash Only one user can edit
ndash Possible to manually restructure into multiple packages
After upgradehellip (using strategy no1)
26PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
bull SAP NW AS JAVA ldquo73 SP09+rdquo ldquo73 EhP1 SP06+rdquo ldquo74 SP02+rdquo
bull Databases MS SQL Server 20082012 Oracle 112 IBM DB2 or SAP ASE bull For a complete and most current overview see the Product Availability Matrix on the SAP Service Marketplace
bull If you are currently running IDM 71 you will need to upgrade to 72 SP9 first and then to 80 bull Another option to consider Do not upgrade from 71 to 72 and then to 80 but do a fresh install of IDM 80
bull If you are running IDM 72 SP8 or lower you will need to upgrade to 72 SP9 (or higher) first
and then to IDM 80
bull However you can do all that in the same upgrade project without going live again on eg 72 SP9
bull For existing customization in IDM 72 Switch any job that uses the Windows Runtime or VB
Scripts to the Java Runtime or Java Scripts before starting the upgrade script for IDM 80
bull Since entity IDs such as task IDs and job IDs are not stable and they change much more
often in IDM 80 make sure you do not use them anywhere in your configuration
Use their GUID instead (or with version 8+ you can use their qualified name)
Prerequisites for upgrading from IDM 72 to 80 SP1 (1 of 2)
27PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
The deployment of the Eclipse-based Configuration Developer Studio (software component IDM
CONFIG LM FOR ECLIPSE 80) is done via the standard Eclipse plug-in installation functionality
using the lsquoSAP Development Tools for Eclipsersquo update site
For details and documentation see
httpstoolshanaondemandcomidm
bull Use ldquoEclipse IDE for Java EE Developersrdquo
Download and unzip eclipse-jee-luna-SR2-win32-x86_64zipldquo
Configuration of IDM connection(s)
bull Select the lsquoSAP IDM Developer Studiorsquo perspective
bull Go to lsquoWindowsrsquo -gt lsquoPreferencesrsquo and
maintain configuration parameters
Prerequisites for upgrading from IDM 72 to 80 SP1 (2 of 2)
28PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Plan the upgrade
bull Prepare yourself with training
bull Plan sufficient time for testing (double your estimates)
bull Plan enough time for the actual upgrade process
Make sure to read the documentation carefully
Get consulting with upgrade experience
Jobs that should run on specific repositories must have a certain repository assigned BEFORE the upgrade will be done
bull This will avoid job conversions later which would have to be done in the database
Make sure the export runs without errors Otherwise you may have import problemshellip
Packaging restructuring concept The initial solution offered in IDM 80 caused issues for SAP IT
bull ldquoMovingrdquo objects breaks existing references (GUIDs and other links were changed)
Tips and tricks
29PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
General product information SAP Identity Management 80ndash SAPCOM product page httpswwwsapcomproductsidentity-managementhtml
ndash SAP community (forum) for SAP IDM httpswwwsapcomcommunitytopicsidentity-managementhtml
Upgrade documentationndash Upgrading SAP Identity Management from 72 to 80 ndash on HELPSAPCOM
httpshelpsapcomviewer0a8e2a6c5dc142af85b7a1774fff2cde80en-US
ndash Community Wiki ndash link collection for IDM 80 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+80+Documentation
ndash Community Wiki ndash link collection for IDM 72 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+72+Documentation
ndash Release Info httpshelpsapcomviewerproductSAP_IDENTITY_MANAGEMENT80en-US
Quality improvements ndash For an overview of quality improvements in release 80 check the release notes starting with SP0hellip
httpshelpsapcomviewer97ae2202f05940a19211f9c5174a971c80en-US
Useful links
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
3PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Whatrsquos new in IDM 80 compared to 72
Changes in terminology and security model
Developer studio based on ldquoEclipserdquo
New connectors and supported DBs
Upgrade and installation process
The upgrade process ndash Main changes
The two possibilities to come to IDM 80 prerequisites
Tips and tricks
Agenda
Whatrsquos new in IDM 80
compared to 72
Changes in terminology and security model
Developer studio based on ldquoEclipserdquo
New connectors and supported DBs
5PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Process type
ndash Defines the usage of the process
For example Validate-Add-Process Entry-Modify-
Process
Repository type
ndash New concept
ndash Defines the parameters of a repository
Repository job
ndash A job which requires a repository to run
ndash Has a defined repository type
Form
ndash In IDM 72 it was called UI task
ndash Defines screen layout and access control
Process
ndash In IDM 72 it was called ldquoPublic Task
ndash Only processes can be
Used as event tasks
Called from other processes
Task (new definition)
ndash A component of a process workflow
ndash A task can not be called from outside the
process
Terminology
6PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
New connectors
SAP SuccessFactors
IBM Lotus Domino connector (Java based)
SAP ASE as an IDM database option
ndash Part of SAP Identity Management 80 SP1
SAP Identity Management Developer Studio as an Eclipse plug-in
ndash Replacement for the Identity Center Management Console (MS-MMC)
ndash Support for Mac and Linux for the IDM Dev Studio (one can now run
completely in a non-windows environment)
Security model for development
Provisioning framework distributed as packages
Graphical process modelling
Main changes in IDM 80 compared to IDM 72 (1 of 2)
ASE = Adaptive Server Enterprise commonly known as ASE or just Sybase DB
7PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
ndash MS SQL Server
ndash IBM DB2
ndash Oracle
ndash New SAP Adaptive Server Enterprise (ASE)
(formerly Sybase DB)
Support of SAP Adaptive Server Enterprise (ASE) database
8PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Identity Management on SAP Adaptive Server Enterprise
SAP ASE
For more info on ASE see httpswwwsapcomproductssybase-asehtml
9PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Harmonization of development
ndash JavaScript language support
ndash Development lifecycle with
revision control
ndash Graphical workflow design
SAP Identity Management 80
Eclipse-based development environment
10PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository management
ndash Introducing repository types
ndash Management in the Identity Management
administration user interface
Dispatcher management
ndash New utility
ndash New states
Global scripts and constants
bull Replaced by package scripts
and constants
New filter mechanism
ndash Switch and conditional tasks
ndash Dynamic groups
Main changes in IDM 80 compared to IDM 72 (2 of 2)
11PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Some minor changes and removals
Jobs are stored and run within an identity store
ndash Can select identity store ldquondashSelfndashrdquo
Managed in the Identity Management user interface instead of in the MMC
ndash Roles Privileges and Dynamic Groups
Managed by regular forms
The following are removed
ndash The Windows runtime engine
ndash The Identity Center Management Console (MMC)
IDM MMC
1995-2014
Upgrade and
installation process
The upgrade process ndash Main changes
The two possibilities to come to IDM 80 prerequisites
Decisions taken and upgrade path with challenges at SAP IT
Tips and tricks
13PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
72SPn 80 upgrade
ndash Install design time (MMC) obsolete
ndash Upgrade schema (mxmc_update)
ndash Upgrade runtime (setupexe)
ndash Deploy NetWeaver components User InterfaceAdmin User Interface
REST
Developer Studio REST server
Configure REST server database connection (one time)
ndash Install developer studio Install Eclipse (one time)
Install IDM Developer Studio plug-in
Configure Developer Studio (one time)
72 SPn SPn+1 upgrade
ndash Install design time (MMC)
ndash Upgrade schema (mxmc_update)
ndash Upgrade runtime (setupexe)
ndash Deploy NetWeaver components User Interface Admin User Interface
REST
IDM upgrade ndash activities step by step
Additionally
14PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Client configuration
15PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
User in SAP Identity Management 80
16PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration
17PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Identity Store
18PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Forms and Processes
19PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash other package objects
20PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
RepositoriesID
M 7
2
21PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository types
22PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Visual workflow design
23PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Provision processID
M 7
2
24PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
1 Perform a real upgrade from 72 to 80 (using an upgrade script ndash option chosen by SAP IT)
Pro Historical data will also be updated and it will be available for future audits
Con Reorganization re-work of packages scripts constants etc required to achieve simpler and understandable
package structure ndash this may involve many resources
2 Install SAP IDM 80 as a new installation
I Then import configuration and modifications from SAP IDM 72 to 80 (sample for exercises in this session)
Pro Speed of update (if IDM 7x install is not big and initial load runs fast)
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
II Recreate and simplify the business model from scratch
Pro Depending on the setup it might be easier and cleaner you can use the upgrade project to simplify your IDM
config
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
The two possible strategies to come to IDM 80 ndash pros amp cons
25PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
All configuration is in ONE package per ID store
ndash Tasks split into
Processes
Forms
Execution as before
Configuration editing
ndash Must be checked out to be edited
Revisions are stored when checking in
ndash Only one user can edit
ndash Possible to manually restructure into multiple packages
After upgradehellip (using strategy no1)
26PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
bull SAP NW AS JAVA ldquo73 SP09+rdquo ldquo73 EhP1 SP06+rdquo ldquo74 SP02+rdquo
bull Databases MS SQL Server 20082012 Oracle 112 IBM DB2 or SAP ASE bull For a complete and most current overview see the Product Availability Matrix on the SAP Service Marketplace
bull If you are currently running IDM 71 you will need to upgrade to 72 SP9 first and then to 80 bull Another option to consider Do not upgrade from 71 to 72 and then to 80 but do a fresh install of IDM 80
bull If you are running IDM 72 SP8 or lower you will need to upgrade to 72 SP9 (or higher) first
and then to IDM 80
bull However you can do all that in the same upgrade project without going live again on eg 72 SP9
bull For existing customization in IDM 72 Switch any job that uses the Windows Runtime or VB
Scripts to the Java Runtime or Java Scripts before starting the upgrade script for IDM 80
bull Since entity IDs such as task IDs and job IDs are not stable and they change much more
often in IDM 80 make sure you do not use them anywhere in your configuration
Use their GUID instead (or with version 8+ you can use their qualified name)
Prerequisites for upgrading from IDM 72 to 80 SP1 (1 of 2)
27PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
The deployment of the Eclipse-based Configuration Developer Studio (software component IDM
CONFIG LM FOR ECLIPSE 80) is done via the standard Eclipse plug-in installation functionality
using the lsquoSAP Development Tools for Eclipsersquo update site
For details and documentation see
httpstoolshanaondemandcomidm
bull Use ldquoEclipse IDE for Java EE Developersrdquo
Download and unzip eclipse-jee-luna-SR2-win32-x86_64zipldquo
Configuration of IDM connection(s)
bull Select the lsquoSAP IDM Developer Studiorsquo perspective
bull Go to lsquoWindowsrsquo -gt lsquoPreferencesrsquo and
maintain configuration parameters
Prerequisites for upgrading from IDM 72 to 80 SP1 (2 of 2)
28PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Plan the upgrade
bull Prepare yourself with training
bull Plan sufficient time for testing (double your estimates)
bull Plan enough time for the actual upgrade process
Make sure to read the documentation carefully
Get consulting with upgrade experience
Jobs that should run on specific repositories must have a certain repository assigned BEFORE the upgrade will be done
bull This will avoid job conversions later which would have to be done in the database
Make sure the export runs without errors Otherwise you may have import problemshellip
Packaging restructuring concept The initial solution offered in IDM 80 caused issues for SAP IT
bull ldquoMovingrdquo objects breaks existing references (GUIDs and other links were changed)
Tips and tricks
29PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
General product information SAP Identity Management 80ndash SAPCOM product page httpswwwsapcomproductsidentity-managementhtml
ndash SAP community (forum) for SAP IDM httpswwwsapcomcommunitytopicsidentity-managementhtml
Upgrade documentationndash Upgrading SAP Identity Management from 72 to 80 ndash on HELPSAPCOM
httpshelpsapcomviewer0a8e2a6c5dc142af85b7a1774fff2cde80en-US
ndash Community Wiki ndash link collection for IDM 80 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+80+Documentation
ndash Community Wiki ndash link collection for IDM 72 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+72+Documentation
ndash Release Info httpshelpsapcomviewerproductSAP_IDENTITY_MANAGEMENT80en-US
Quality improvements ndash For an overview of quality improvements in release 80 check the release notes starting with SP0hellip
httpshelpsapcomviewer97ae2202f05940a19211f9c5174a971c80en-US
Useful links
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
Whatrsquos new in IDM 80
compared to 72
Changes in terminology and security model
Developer studio based on ldquoEclipserdquo
New connectors and supported DBs
5PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Process type
ndash Defines the usage of the process
For example Validate-Add-Process Entry-Modify-
Process
Repository type
ndash New concept
ndash Defines the parameters of a repository
Repository job
ndash A job which requires a repository to run
ndash Has a defined repository type
Form
ndash In IDM 72 it was called UI task
ndash Defines screen layout and access control
Process
ndash In IDM 72 it was called ldquoPublic Task
ndash Only processes can be
Used as event tasks
Called from other processes
Task (new definition)
ndash A component of a process workflow
ndash A task can not be called from outside the
process
Terminology
6PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
New connectors
SAP SuccessFactors
IBM Lotus Domino connector (Java based)
SAP ASE as an IDM database option
ndash Part of SAP Identity Management 80 SP1
SAP Identity Management Developer Studio as an Eclipse plug-in
ndash Replacement for the Identity Center Management Console (MS-MMC)
ndash Support for Mac and Linux for the IDM Dev Studio (one can now run
completely in a non-windows environment)
Security model for development
Provisioning framework distributed as packages
Graphical process modelling
Main changes in IDM 80 compared to IDM 72 (1 of 2)
ASE = Adaptive Server Enterprise commonly known as ASE or just Sybase DB
7PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
ndash MS SQL Server
ndash IBM DB2
ndash Oracle
ndash New SAP Adaptive Server Enterprise (ASE)
(formerly Sybase DB)
Support of SAP Adaptive Server Enterprise (ASE) database
8PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Identity Management on SAP Adaptive Server Enterprise
SAP ASE
For more info on ASE see httpswwwsapcomproductssybase-asehtml
9PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Harmonization of development
ndash JavaScript language support
ndash Development lifecycle with
revision control
ndash Graphical workflow design
SAP Identity Management 80
Eclipse-based development environment
10PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository management
ndash Introducing repository types
ndash Management in the Identity Management
administration user interface
Dispatcher management
ndash New utility
ndash New states
Global scripts and constants
bull Replaced by package scripts
and constants
New filter mechanism
ndash Switch and conditional tasks
ndash Dynamic groups
Main changes in IDM 80 compared to IDM 72 (2 of 2)
11PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Some minor changes and removals
Jobs are stored and run within an identity store
ndash Can select identity store ldquondashSelfndashrdquo
Managed in the Identity Management user interface instead of in the MMC
ndash Roles Privileges and Dynamic Groups
Managed by regular forms
The following are removed
ndash The Windows runtime engine
ndash The Identity Center Management Console (MMC)
IDM MMC
1995-2014
Upgrade and
installation process
The upgrade process ndash Main changes
The two possibilities to come to IDM 80 prerequisites
Decisions taken and upgrade path with challenges at SAP IT
Tips and tricks
13PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
72SPn 80 upgrade
ndash Install design time (MMC) obsolete
ndash Upgrade schema (mxmc_update)
ndash Upgrade runtime (setupexe)
ndash Deploy NetWeaver components User InterfaceAdmin User Interface
REST
Developer Studio REST server
Configure REST server database connection (one time)
ndash Install developer studio Install Eclipse (one time)
Install IDM Developer Studio plug-in
Configure Developer Studio (one time)
72 SPn SPn+1 upgrade
ndash Install design time (MMC)
ndash Upgrade schema (mxmc_update)
ndash Upgrade runtime (setupexe)
ndash Deploy NetWeaver components User Interface Admin User Interface
REST
IDM upgrade ndash activities step by step
Additionally
14PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Client configuration
15PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
User in SAP Identity Management 80
16PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration
17PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Identity Store
18PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Forms and Processes
19PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash other package objects
20PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
RepositoriesID
M 7
2
21PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository types
22PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Visual workflow design
23PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Provision processID
M 7
2
24PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
1 Perform a real upgrade from 72 to 80 (using an upgrade script ndash option chosen by SAP IT)
Pro Historical data will also be updated and it will be available for future audits
Con Reorganization re-work of packages scripts constants etc required to achieve simpler and understandable
package structure ndash this may involve many resources
2 Install SAP IDM 80 as a new installation
I Then import configuration and modifications from SAP IDM 72 to 80 (sample for exercises in this session)
Pro Speed of update (if IDM 7x install is not big and initial load runs fast)
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
II Recreate and simplify the business model from scratch
Pro Depending on the setup it might be easier and cleaner you can use the upgrade project to simplify your IDM
config
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
The two possible strategies to come to IDM 80 ndash pros amp cons
25PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
All configuration is in ONE package per ID store
ndash Tasks split into
Processes
Forms
Execution as before
Configuration editing
ndash Must be checked out to be edited
Revisions are stored when checking in
ndash Only one user can edit
ndash Possible to manually restructure into multiple packages
After upgradehellip (using strategy no1)
26PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
bull SAP NW AS JAVA ldquo73 SP09+rdquo ldquo73 EhP1 SP06+rdquo ldquo74 SP02+rdquo
bull Databases MS SQL Server 20082012 Oracle 112 IBM DB2 or SAP ASE bull For a complete and most current overview see the Product Availability Matrix on the SAP Service Marketplace
bull If you are currently running IDM 71 you will need to upgrade to 72 SP9 first and then to 80 bull Another option to consider Do not upgrade from 71 to 72 and then to 80 but do a fresh install of IDM 80
bull If you are running IDM 72 SP8 or lower you will need to upgrade to 72 SP9 (or higher) first
and then to IDM 80
bull However you can do all that in the same upgrade project without going live again on eg 72 SP9
bull For existing customization in IDM 72 Switch any job that uses the Windows Runtime or VB
Scripts to the Java Runtime or Java Scripts before starting the upgrade script for IDM 80
bull Since entity IDs such as task IDs and job IDs are not stable and they change much more
often in IDM 80 make sure you do not use them anywhere in your configuration
Use their GUID instead (or with version 8+ you can use their qualified name)
Prerequisites for upgrading from IDM 72 to 80 SP1 (1 of 2)
27PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
The deployment of the Eclipse-based Configuration Developer Studio (software component IDM
CONFIG LM FOR ECLIPSE 80) is done via the standard Eclipse plug-in installation functionality
using the lsquoSAP Development Tools for Eclipsersquo update site
For details and documentation see
httpstoolshanaondemandcomidm
bull Use ldquoEclipse IDE for Java EE Developersrdquo
Download and unzip eclipse-jee-luna-SR2-win32-x86_64zipldquo
Configuration of IDM connection(s)
bull Select the lsquoSAP IDM Developer Studiorsquo perspective
bull Go to lsquoWindowsrsquo -gt lsquoPreferencesrsquo and
maintain configuration parameters
Prerequisites for upgrading from IDM 72 to 80 SP1 (2 of 2)
28PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Plan the upgrade
bull Prepare yourself with training
bull Plan sufficient time for testing (double your estimates)
bull Plan enough time for the actual upgrade process
Make sure to read the documentation carefully
Get consulting with upgrade experience
Jobs that should run on specific repositories must have a certain repository assigned BEFORE the upgrade will be done
bull This will avoid job conversions later which would have to be done in the database
Make sure the export runs without errors Otherwise you may have import problemshellip
Packaging restructuring concept The initial solution offered in IDM 80 caused issues for SAP IT
bull ldquoMovingrdquo objects breaks existing references (GUIDs and other links were changed)
Tips and tricks
29PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
General product information SAP Identity Management 80ndash SAPCOM product page httpswwwsapcomproductsidentity-managementhtml
ndash SAP community (forum) for SAP IDM httpswwwsapcomcommunitytopicsidentity-managementhtml
Upgrade documentationndash Upgrading SAP Identity Management from 72 to 80 ndash on HELPSAPCOM
httpshelpsapcomviewer0a8e2a6c5dc142af85b7a1774fff2cde80en-US
ndash Community Wiki ndash link collection for IDM 80 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+80+Documentation
ndash Community Wiki ndash link collection for IDM 72 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+72+Documentation
ndash Release Info httpshelpsapcomviewerproductSAP_IDENTITY_MANAGEMENT80en-US
Quality improvements ndash For an overview of quality improvements in release 80 check the release notes starting with SP0hellip
httpshelpsapcomviewer97ae2202f05940a19211f9c5174a971c80en-US
Useful links
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
5PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Process type
ndash Defines the usage of the process
For example Validate-Add-Process Entry-Modify-
Process
Repository type
ndash New concept
ndash Defines the parameters of a repository
Repository job
ndash A job which requires a repository to run
ndash Has a defined repository type
Form
ndash In IDM 72 it was called UI task
ndash Defines screen layout and access control
Process
ndash In IDM 72 it was called ldquoPublic Task
ndash Only processes can be
Used as event tasks
Called from other processes
Task (new definition)
ndash A component of a process workflow
ndash A task can not be called from outside the
process
Terminology
6PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
New connectors
SAP SuccessFactors
IBM Lotus Domino connector (Java based)
SAP ASE as an IDM database option
ndash Part of SAP Identity Management 80 SP1
SAP Identity Management Developer Studio as an Eclipse plug-in
ndash Replacement for the Identity Center Management Console (MS-MMC)
ndash Support for Mac and Linux for the IDM Dev Studio (one can now run
completely in a non-windows environment)
Security model for development
Provisioning framework distributed as packages
Graphical process modelling
Main changes in IDM 80 compared to IDM 72 (1 of 2)
ASE = Adaptive Server Enterprise commonly known as ASE or just Sybase DB
7PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
ndash MS SQL Server
ndash IBM DB2
ndash Oracle
ndash New SAP Adaptive Server Enterprise (ASE)
(formerly Sybase DB)
Support of SAP Adaptive Server Enterprise (ASE) database
8PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Identity Management on SAP Adaptive Server Enterprise
SAP ASE
For more info on ASE see httpswwwsapcomproductssybase-asehtml
9PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Harmonization of development
ndash JavaScript language support
ndash Development lifecycle with
revision control
ndash Graphical workflow design
SAP Identity Management 80
Eclipse-based development environment
10PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository management
ndash Introducing repository types
ndash Management in the Identity Management
administration user interface
Dispatcher management
ndash New utility
ndash New states
Global scripts and constants
bull Replaced by package scripts
and constants
New filter mechanism
ndash Switch and conditional tasks
ndash Dynamic groups
Main changes in IDM 80 compared to IDM 72 (2 of 2)
11PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Some minor changes and removals
Jobs are stored and run within an identity store
ndash Can select identity store ldquondashSelfndashrdquo
Managed in the Identity Management user interface instead of in the MMC
ndash Roles Privileges and Dynamic Groups
Managed by regular forms
The following are removed
ndash The Windows runtime engine
ndash The Identity Center Management Console (MMC)
IDM MMC
1995-2014
Upgrade and
installation process
The upgrade process ndash Main changes
The two possibilities to come to IDM 80 prerequisites
Decisions taken and upgrade path with challenges at SAP IT
Tips and tricks
13PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
72SPn 80 upgrade
ndash Install design time (MMC) obsolete
ndash Upgrade schema (mxmc_update)
ndash Upgrade runtime (setupexe)
ndash Deploy NetWeaver components User InterfaceAdmin User Interface
REST
Developer Studio REST server
Configure REST server database connection (one time)
ndash Install developer studio Install Eclipse (one time)
Install IDM Developer Studio plug-in
Configure Developer Studio (one time)
72 SPn SPn+1 upgrade
ndash Install design time (MMC)
ndash Upgrade schema (mxmc_update)
ndash Upgrade runtime (setupexe)
ndash Deploy NetWeaver components User Interface Admin User Interface
REST
IDM upgrade ndash activities step by step
Additionally
14PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Client configuration
15PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
User in SAP Identity Management 80
16PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration
17PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Identity Store
18PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Forms and Processes
19PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash other package objects
20PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
RepositoriesID
M 7
2
21PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository types
22PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Visual workflow design
23PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Provision processID
M 7
2
24PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
1 Perform a real upgrade from 72 to 80 (using an upgrade script ndash option chosen by SAP IT)
Pro Historical data will also be updated and it will be available for future audits
Con Reorganization re-work of packages scripts constants etc required to achieve simpler and understandable
package structure ndash this may involve many resources
2 Install SAP IDM 80 as a new installation
I Then import configuration and modifications from SAP IDM 72 to 80 (sample for exercises in this session)
Pro Speed of update (if IDM 7x install is not big and initial load runs fast)
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
II Recreate and simplify the business model from scratch
Pro Depending on the setup it might be easier and cleaner you can use the upgrade project to simplify your IDM
config
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
The two possible strategies to come to IDM 80 ndash pros amp cons
25PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
All configuration is in ONE package per ID store
ndash Tasks split into
Processes
Forms
Execution as before
Configuration editing
ndash Must be checked out to be edited
Revisions are stored when checking in
ndash Only one user can edit
ndash Possible to manually restructure into multiple packages
After upgradehellip (using strategy no1)
26PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
bull SAP NW AS JAVA ldquo73 SP09+rdquo ldquo73 EhP1 SP06+rdquo ldquo74 SP02+rdquo
bull Databases MS SQL Server 20082012 Oracle 112 IBM DB2 or SAP ASE bull For a complete and most current overview see the Product Availability Matrix on the SAP Service Marketplace
bull If you are currently running IDM 71 you will need to upgrade to 72 SP9 first and then to 80 bull Another option to consider Do not upgrade from 71 to 72 and then to 80 but do a fresh install of IDM 80
bull If you are running IDM 72 SP8 or lower you will need to upgrade to 72 SP9 (or higher) first
and then to IDM 80
bull However you can do all that in the same upgrade project without going live again on eg 72 SP9
bull For existing customization in IDM 72 Switch any job that uses the Windows Runtime or VB
Scripts to the Java Runtime or Java Scripts before starting the upgrade script for IDM 80
bull Since entity IDs such as task IDs and job IDs are not stable and they change much more
often in IDM 80 make sure you do not use them anywhere in your configuration
Use their GUID instead (or with version 8+ you can use their qualified name)
Prerequisites for upgrading from IDM 72 to 80 SP1 (1 of 2)
27PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
The deployment of the Eclipse-based Configuration Developer Studio (software component IDM
CONFIG LM FOR ECLIPSE 80) is done via the standard Eclipse plug-in installation functionality
using the lsquoSAP Development Tools for Eclipsersquo update site
For details and documentation see
httpstoolshanaondemandcomidm
bull Use ldquoEclipse IDE for Java EE Developersrdquo
Download and unzip eclipse-jee-luna-SR2-win32-x86_64zipldquo
Configuration of IDM connection(s)
bull Select the lsquoSAP IDM Developer Studiorsquo perspective
bull Go to lsquoWindowsrsquo -gt lsquoPreferencesrsquo and
maintain configuration parameters
Prerequisites for upgrading from IDM 72 to 80 SP1 (2 of 2)
28PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Plan the upgrade
bull Prepare yourself with training
bull Plan sufficient time for testing (double your estimates)
bull Plan enough time for the actual upgrade process
Make sure to read the documentation carefully
Get consulting with upgrade experience
Jobs that should run on specific repositories must have a certain repository assigned BEFORE the upgrade will be done
bull This will avoid job conversions later which would have to be done in the database
Make sure the export runs without errors Otherwise you may have import problemshellip
Packaging restructuring concept The initial solution offered in IDM 80 caused issues for SAP IT
bull ldquoMovingrdquo objects breaks existing references (GUIDs and other links were changed)
Tips and tricks
29PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
General product information SAP Identity Management 80ndash SAPCOM product page httpswwwsapcomproductsidentity-managementhtml
ndash SAP community (forum) for SAP IDM httpswwwsapcomcommunitytopicsidentity-managementhtml
Upgrade documentationndash Upgrading SAP Identity Management from 72 to 80 ndash on HELPSAPCOM
httpshelpsapcomviewer0a8e2a6c5dc142af85b7a1774fff2cde80en-US
ndash Community Wiki ndash link collection for IDM 80 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+80+Documentation
ndash Community Wiki ndash link collection for IDM 72 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+72+Documentation
ndash Release Info httpshelpsapcomviewerproductSAP_IDENTITY_MANAGEMENT80en-US
Quality improvements ndash For an overview of quality improvements in release 80 check the release notes starting with SP0hellip
httpshelpsapcomviewer97ae2202f05940a19211f9c5174a971c80en-US
Useful links
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
6PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
New connectors
SAP SuccessFactors
IBM Lotus Domino connector (Java based)
SAP ASE as an IDM database option
ndash Part of SAP Identity Management 80 SP1
SAP Identity Management Developer Studio as an Eclipse plug-in
ndash Replacement for the Identity Center Management Console (MS-MMC)
ndash Support for Mac and Linux for the IDM Dev Studio (one can now run
completely in a non-windows environment)
Security model for development
Provisioning framework distributed as packages
Graphical process modelling
Main changes in IDM 80 compared to IDM 72 (1 of 2)
ASE = Adaptive Server Enterprise commonly known as ASE or just Sybase DB
7PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
ndash MS SQL Server
ndash IBM DB2
ndash Oracle
ndash New SAP Adaptive Server Enterprise (ASE)
(formerly Sybase DB)
Support of SAP Adaptive Server Enterprise (ASE) database
8PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Identity Management on SAP Adaptive Server Enterprise
SAP ASE
For more info on ASE see httpswwwsapcomproductssybase-asehtml
9PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Harmonization of development
ndash JavaScript language support
ndash Development lifecycle with
revision control
ndash Graphical workflow design
SAP Identity Management 80
Eclipse-based development environment
10PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository management
ndash Introducing repository types
ndash Management in the Identity Management
administration user interface
Dispatcher management
ndash New utility
ndash New states
Global scripts and constants
bull Replaced by package scripts
and constants
New filter mechanism
ndash Switch and conditional tasks
ndash Dynamic groups
Main changes in IDM 80 compared to IDM 72 (2 of 2)
11PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Some minor changes and removals
Jobs are stored and run within an identity store
ndash Can select identity store ldquondashSelfndashrdquo
Managed in the Identity Management user interface instead of in the MMC
ndash Roles Privileges and Dynamic Groups
Managed by regular forms
The following are removed
ndash The Windows runtime engine
ndash The Identity Center Management Console (MMC)
IDM MMC
1995-2014
Upgrade and
installation process
The upgrade process ndash Main changes
The two possibilities to come to IDM 80 prerequisites
Decisions taken and upgrade path with challenges at SAP IT
Tips and tricks
13PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
72SPn 80 upgrade
ndash Install design time (MMC) obsolete
ndash Upgrade schema (mxmc_update)
ndash Upgrade runtime (setupexe)
ndash Deploy NetWeaver components User InterfaceAdmin User Interface
REST
Developer Studio REST server
Configure REST server database connection (one time)
ndash Install developer studio Install Eclipse (one time)
Install IDM Developer Studio plug-in
Configure Developer Studio (one time)
72 SPn SPn+1 upgrade
ndash Install design time (MMC)
ndash Upgrade schema (mxmc_update)
ndash Upgrade runtime (setupexe)
ndash Deploy NetWeaver components User Interface Admin User Interface
REST
IDM upgrade ndash activities step by step
Additionally
14PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Client configuration
15PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
User in SAP Identity Management 80
16PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration
17PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Identity Store
18PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Forms and Processes
19PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash other package objects
20PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
RepositoriesID
M 7
2
21PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository types
22PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Visual workflow design
23PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Provision processID
M 7
2
24PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
1 Perform a real upgrade from 72 to 80 (using an upgrade script ndash option chosen by SAP IT)
Pro Historical data will also be updated and it will be available for future audits
Con Reorganization re-work of packages scripts constants etc required to achieve simpler and understandable
package structure ndash this may involve many resources
2 Install SAP IDM 80 as a new installation
I Then import configuration and modifications from SAP IDM 72 to 80 (sample for exercises in this session)
Pro Speed of update (if IDM 7x install is not big and initial load runs fast)
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
II Recreate and simplify the business model from scratch
Pro Depending on the setup it might be easier and cleaner you can use the upgrade project to simplify your IDM
config
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
The two possible strategies to come to IDM 80 ndash pros amp cons
25PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
All configuration is in ONE package per ID store
ndash Tasks split into
Processes
Forms
Execution as before
Configuration editing
ndash Must be checked out to be edited
Revisions are stored when checking in
ndash Only one user can edit
ndash Possible to manually restructure into multiple packages
After upgradehellip (using strategy no1)
26PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
bull SAP NW AS JAVA ldquo73 SP09+rdquo ldquo73 EhP1 SP06+rdquo ldquo74 SP02+rdquo
bull Databases MS SQL Server 20082012 Oracle 112 IBM DB2 or SAP ASE bull For a complete and most current overview see the Product Availability Matrix on the SAP Service Marketplace
bull If you are currently running IDM 71 you will need to upgrade to 72 SP9 first and then to 80 bull Another option to consider Do not upgrade from 71 to 72 and then to 80 but do a fresh install of IDM 80
bull If you are running IDM 72 SP8 or lower you will need to upgrade to 72 SP9 (or higher) first
and then to IDM 80
bull However you can do all that in the same upgrade project without going live again on eg 72 SP9
bull For existing customization in IDM 72 Switch any job that uses the Windows Runtime or VB
Scripts to the Java Runtime or Java Scripts before starting the upgrade script for IDM 80
bull Since entity IDs such as task IDs and job IDs are not stable and they change much more
often in IDM 80 make sure you do not use them anywhere in your configuration
Use their GUID instead (or with version 8+ you can use their qualified name)
Prerequisites for upgrading from IDM 72 to 80 SP1 (1 of 2)
27PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
The deployment of the Eclipse-based Configuration Developer Studio (software component IDM
CONFIG LM FOR ECLIPSE 80) is done via the standard Eclipse plug-in installation functionality
using the lsquoSAP Development Tools for Eclipsersquo update site
For details and documentation see
httpstoolshanaondemandcomidm
bull Use ldquoEclipse IDE for Java EE Developersrdquo
Download and unzip eclipse-jee-luna-SR2-win32-x86_64zipldquo
Configuration of IDM connection(s)
bull Select the lsquoSAP IDM Developer Studiorsquo perspective
bull Go to lsquoWindowsrsquo -gt lsquoPreferencesrsquo and
maintain configuration parameters
Prerequisites for upgrading from IDM 72 to 80 SP1 (2 of 2)
28PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Plan the upgrade
bull Prepare yourself with training
bull Plan sufficient time for testing (double your estimates)
bull Plan enough time for the actual upgrade process
Make sure to read the documentation carefully
Get consulting with upgrade experience
Jobs that should run on specific repositories must have a certain repository assigned BEFORE the upgrade will be done
bull This will avoid job conversions later which would have to be done in the database
Make sure the export runs without errors Otherwise you may have import problemshellip
Packaging restructuring concept The initial solution offered in IDM 80 caused issues for SAP IT
bull ldquoMovingrdquo objects breaks existing references (GUIDs and other links were changed)
Tips and tricks
29PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
General product information SAP Identity Management 80ndash SAPCOM product page httpswwwsapcomproductsidentity-managementhtml
ndash SAP community (forum) for SAP IDM httpswwwsapcomcommunitytopicsidentity-managementhtml
Upgrade documentationndash Upgrading SAP Identity Management from 72 to 80 ndash on HELPSAPCOM
httpshelpsapcomviewer0a8e2a6c5dc142af85b7a1774fff2cde80en-US
ndash Community Wiki ndash link collection for IDM 80 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+80+Documentation
ndash Community Wiki ndash link collection for IDM 72 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+72+Documentation
ndash Release Info httpshelpsapcomviewerproductSAP_IDENTITY_MANAGEMENT80en-US
Quality improvements ndash For an overview of quality improvements in release 80 check the release notes starting with SP0hellip
httpshelpsapcomviewer97ae2202f05940a19211f9c5174a971c80en-US
Useful links
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
7PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
ndash MS SQL Server
ndash IBM DB2
ndash Oracle
ndash New SAP Adaptive Server Enterprise (ASE)
(formerly Sybase DB)
Support of SAP Adaptive Server Enterprise (ASE) database
8PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Identity Management on SAP Adaptive Server Enterprise
SAP ASE
For more info on ASE see httpswwwsapcomproductssybase-asehtml
9PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Harmonization of development
ndash JavaScript language support
ndash Development lifecycle with
revision control
ndash Graphical workflow design
SAP Identity Management 80
Eclipse-based development environment
10PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository management
ndash Introducing repository types
ndash Management in the Identity Management
administration user interface
Dispatcher management
ndash New utility
ndash New states
Global scripts and constants
bull Replaced by package scripts
and constants
New filter mechanism
ndash Switch and conditional tasks
ndash Dynamic groups
Main changes in IDM 80 compared to IDM 72 (2 of 2)
11PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Some minor changes and removals
Jobs are stored and run within an identity store
ndash Can select identity store ldquondashSelfndashrdquo
Managed in the Identity Management user interface instead of in the MMC
ndash Roles Privileges and Dynamic Groups
Managed by regular forms
The following are removed
ndash The Windows runtime engine
ndash The Identity Center Management Console (MMC)
IDM MMC
1995-2014
Upgrade and
installation process
The upgrade process ndash Main changes
The two possibilities to come to IDM 80 prerequisites
Decisions taken and upgrade path with challenges at SAP IT
Tips and tricks
13PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
72SPn 80 upgrade
ndash Install design time (MMC) obsolete
ndash Upgrade schema (mxmc_update)
ndash Upgrade runtime (setupexe)
ndash Deploy NetWeaver components User InterfaceAdmin User Interface
REST
Developer Studio REST server
Configure REST server database connection (one time)
ndash Install developer studio Install Eclipse (one time)
Install IDM Developer Studio plug-in
Configure Developer Studio (one time)
72 SPn SPn+1 upgrade
ndash Install design time (MMC)
ndash Upgrade schema (mxmc_update)
ndash Upgrade runtime (setupexe)
ndash Deploy NetWeaver components User Interface Admin User Interface
REST
IDM upgrade ndash activities step by step
Additionally
14PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Client configuration
15PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
User in SAP Identity Management 80
16PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration
17PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Identity Store
18PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Forms and Processes
19PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash other package objects
20PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
RepositoriesID
M 7
2
21PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository types
22PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Visual workflow design
23PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Provision processID
M 7
2
24PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
1 Perform a real upgrade from 72 to 80 (using an upgrade script ndash option chosen by SAP IT)
Pro Historical data will also be updated and it will be available for future audits
Con Reorganization re-work of packages scripts constants etc required to achieve simpler and understandable
package structure ndash this may involve many resources
2 Install SAP IDM 80 as a new installation
I Then import configuration and modifications from SAP IDM 72 to 80 (sample for exercises in this session)
Pro Speed of update (if IDM 7x install is not big and initial load runs fast)
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
II Recreate and simplify the business model from scratch
Pro Depending on the setup it might be easier and cleaner you can use the upgrade project to simplify your IDM
config
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
The two possible strategies to come to IDM 80 ndash pros amp cons
25PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
All configuration is in ONE package per ID store
ndash Tasks split into
Processes
Forms
Execution as before
Configuration editing
ndash Must be checked out to be edited
Revisions are stored when checking in
ndash Only one user can edit
ndash Possible to manually restructure into multiple packages
After upgradehellip (using strategy no1)
26PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
bull SAP NW AS JAVA ldquo73 SP09+rdquo ldquo73 EhP1 SP06+rdquo ldquo74 SP02+rdquo
bull Databases MS SQL Server 20082012 Oracle 112 IBM DB2 or SAP ASE bull For a complete and most current overview see the Product Availability Matrix on the SAP Service Marketplace
bull If you are currently running IDM 71 you will need to upgrade to 72 SP9 first and then to 80 bull Another option to consider Do not upgrade from 71 to 72 and then to 80 but do a fresh install of IDM 80
bull If you are running IDM 72 SP8 or lower you will need to upgrade to 72 SP9 (or higher) first
and then to IDM 80
bull However you can do all that in the same upgrade project without going live again on eg 72 SP9
bull For existing customization in IDM 72 Switch any job that uses the Windows Runtime or VB
Scripts to the Java Runtime or Java Scripts before starting the upgrade script for IDM 80
bull Since entity IDs such as task IDs and job IDs are not stable and they change much more
often in IDM 80 make sure you do not use them anywhere in your configuration
Use their GUID instead (or with version 8+ you can use their qualified name)
Prerequisites for upgrading from IDM 72 to 80 SP1 (1 of 2)
27PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
The deployment of the Eclipse-based Configuration Developer Studio (software component IDM
CONFIG LM FOR ECLIPSE 80) is done via the standard Eclipse plug-in installation functionality
using the lsquoSAP Development Tools for Eclipsersquo update site
For details and documentation see
httpstoolshanaondemandcomidm
bull Use ldquoEclipse IDE for Java EE Developersrdquo
Download and unzip eclipse-jee-luna-SR2-win32-x86_64zipldquo
Configuration of IDM connection(s)
bull Select the lsquoSAP IDM Developer Studiorsquo perspective
bull Go to lsquoWindowsrsquo -gt lsquoPreferencesrsquo and
maintain configuration parameters
Prerequisites for upgrading from IDM 72 to 80 SP1 (2 of 2)
28PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Plan the upgrade
bull Prepare yourself with training
bull Plan sufficient time for testing (double your estimates)
bull Plan enough time for the actual upgrade process
Make sure to read the documentation carefully
Get consulting with upgrade experience
Jobs that should run on specific repositories must have a certain repository assigned BEFORE the upgrade will be done
bull This will avoid job conversions later which would have to be done in the database
Make sure the export runs without errors Otherwise you may have import problemshellip
Packaging restructuring concept The initial solution offered in IDM 80 caused issues for SAP IT
bull ldquoMovingrdquo objects breaks existing references (GUIDs and other links were changed)
Tips and tricks
29PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
General product information SAP Identity Management 80ndash SAPCOM product page httpswwwsapcomproductsidentity-managementhtml
ndash SAP community (forum) for SAP IDM httpswwwsapcomcommunitytopicsidentity-managementhtml
Upgrade documentationndash Upgrading SAP Identity Management from 72 to 80 ndash on HELPSAPCOM
httpshelpsapcomviewer0a8e2a6c5dc142af85b7a1774fff2cde80en-US
ndash Community Wiki ndash link collection for IDM 80 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+80+Documentation
ndash Community Wiki ndash link collection for IDM 72 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+72+Documentation
ndash Release Info httpshelpsapcomviewerproductSAP_IDENTITY_MANAGEMENT80en-US
Quality improvements ndash For an overview of quality improvements in release 80 check the release notes starting with SP0hellip
httpshelpsapcomviewer97ae2202f05940a19211f9c5174a971c80en-US
Useful links
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
8PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Identity Management on SAP Adaptive Server Enterprise
SAP ASE
For more info on ASE see httpswwwsapcomproductssybase-asehtml
9PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Harmonization of development
ndash JavaScript language support
ndash Development lifecycle with
revision control
ndash Graphical workflow design
SAP Identity Management 80
Eclipse-based development environment
10PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository management
ndash Introducing repository types
ndash Management in the Identity Management
administration user interface
Dispatcher management
ndash New utility
ndash New states
Global scripts and constants
bull Replaced by package scripts
and constants
New filter mechanism
ndash Switch and conditional tasks
ndash Dynamic groups
Main changes in IDM 80 compared to IDM 72 (2 of 2)
11PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Some minor changes and removals
Jobs are stored and run within an identity store
ndash Can select identity store ldquondashSelfndashrdquo
Managed in the Identity Management user interface instead of in the MMC
ndash Roles Privileges and Dynamic Groups
Managed by regular forms
The following are removed
ndash The Windows runtime engine
ndash The Identity Center Management Console (MMC)
IDM MMC
1995-2014
Upgrade and
installation process
The upgrade process ndash Main changes
The two possibilities to come to IDM 80 prerequisites
Decisions taken and upgrade path with challenges at SAP IT
Tips and tricks
13PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
72SPn 80 upgrade
ndash Install design time (MMC) obsolete
ndash Upgrade schema (mxmc_update)
ndash Upgrade runtime (setupexe)
ndash Deploy NetWeaver components User InterfaceAdmin User Interface
REST
Developer Studio REST server
Configure REST server database connection (one time)
ndash Install developer studio Install Eclipse (one time)
Install IDM Developer Studio plug-in
Configure Developer Studio (one time)
72 SPn SPn+1 upgrade
ndash Install design time (MMC)
ndash Upgrade schema (mxmc_update)
ndash Upgrade runtime (setupexe)
ndash Deploy NetWeaver components User Interface Admin User Interface
REST
IDM upgrade ndash activities step by step
Additionally
14PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Client configuration
15PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
User in SAP Identity Management 80
16PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration
17PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Identity Store
18PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Forms and Processes
19PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash other package objects
20PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
RepositoriesID
M 7
2
21PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository types
22PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Visual workflow design
23PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Provision processID
M 7
2
24PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
1 Perform a real upgrade from 72 to 80 (using an upgrade script ndash option chosen by SAP IT)
Pro Historical data will also be updated and it will be available for future audits
Con Reorganization re-work of packages scripts constants etc required to achieve simpler and understandable
package structure ndash this may involve many resources
2 Install SAP IDM 80 as a new installation
I Then import configuration and modifications from SAP IDM 72 to 80 (sample for exercises in this session)
Pro Speed of update (if IDM 7x install is not big and initial load runs fast)
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
II Recreate and simplify the business model from scratch
Pro Depending on the setup it might be easier and cleaner you can use the upgrade project to simplify your IDM
config
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
The two possible strategies to come to IDM 80 ndash pros amp cons
25PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
All configuration is in ONE package per ID store
ndash Tasks split into
Processes
Forms
Execution as before
Configuration editing
ndash Must be checked out to be edited
Revisions are stored when checking in
ndash Only one user can edit
ndash Possible to manually restructure into multiple packages
After upgradehellip (using strategy no1)
26PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
bull SAP NW AS JAVA ldquo73 SP09+rdquo ldquo73 EhP1 SP06+rdquo ldquo74 SP02+rdquo
bull Databases MS SQL Server 20082012 Oracle 112 IBM DB2 or SAP ASE bull For a complete and most current overview see the Product Availability Matrix on the SAP Service Marketplace
bull If you are currently running IDM 71 you will need to upgrade to 72 SP9 first and then to 80 bull Another option to consider Do not upgrade from 71 to 72 and then to 80 but do a fresh install of IDM 80
bull If you are running IDM 72 SP8 or lower you will need to upgrade to 72 SP9 (or higher) first
and then to IDM 80
bull However you can do all that in the same upgrade project without going live again on eg 72 SP9
bull For existing customization in IDM 72 Switch any job that uses the Windows Runtime or VB
Scripts to the Java Runtime or Java Scripts before starting the upgrade script for IDM 80
bull Since entity IDs such as task IDs and job IDs are not stable and they change much more
often in IDM 80 make sure you do not use them anywhere in your configuration
Use their GUID instead (or with version 8+ you can use their qualified name)
Prerequisites for upgrading from IDM 72 to 80 SP1 (1 of 2)
27PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
The deployment of the Eclipse-based Configuration Developer Studio (software component IDM
CONFIG LM FOR ECLIPSE 80) is done via the standard Eclipse plug-in installation functionality
using the lsquoSAP Development Tools for Eclipsersquo update site
For details and documentation see
httpstoolshanaondemandcomidm
bull Use ldquoEclipse IDE for Java EE Developersrdquo
Download and unzip eclipse-jee-luna-SR2-win32-x86_64zipldquo
Configuration of IDM connection(s)
bull Select the lsquoSAP IDM Developer Studiorsquo perspective
bull Go to lsquoWindowsrsquo -gt lsquoPreferencesrsquo and
maintain configuration parameters
Prerequisites for upgrading from IDM 72 to 80 SP1 (2 of 2)
28PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Plan the upgrade
bull Prepare yourself with training
bull Plan sufficient time for testing (double your estimates)
bull Plan enough time for the actual upgrade process
Make sure to read the documentation carefully
Get consulting with upgrade experience
Jobs that should run on specific repositories must have a certain repository assigned BEFORE the upgrade will be done
bull This will avoid job conversions later which would have to be done in the database
Make sure the export runs without errors Otherwise you may have import problemshellip
Packaging restructuring concept The initial solution offered in IDM 80 caused issues for SAP IT
bull ldquoMovingrdquo objects breaks existing references (GUIDs and other links were changed)
Tips and tricks
29PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
General product information SAP Identity Management 80ndash SAPCOM product page httpswwwsapcomproductsidentity-managementhtml
ndash SAP community (forum) for SAP IDM httpswwwsapcomcommunitytopicsidentity-managementhtml
Upgrade documentationndash Upgrading SAP Identity Management from 72 to 80 ndash on HELPSAPCOM
httpshelpsapcomviewer0a8e2a6c5dc142af85b7a1774fff2cde80en-US
ndash Community Wiki ndash link collection for IDM 80 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+80+Documentation
ndash Community Wiki ndash link collection for IDM 72 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+72+Documentation
ndash Release Info httpshelpsapcomviewerproductSAP_IDENTITY_MANAGEMENT80en-US
Quality improvements ndash For an overview of quality improvements in release 80 check the release notes starting with SP0hellip
httpshelpsapcomviewer97ae2202f05940a19211f9c5174a971c80en-US
Useful links
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
9PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Harmonization of development
ndash JavaScript language support
ndash Development lifecycle with
revision control
ndash Graphical workflow design
SAP Identity Management 80
Eclipse-based development environment
10PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository management
ndash Introducing repository types
ndash Management in the Identity Management
administration user interface
Dispatcher management
ndash New utility
ndash New states
Global scripts and constants
bull Replaced by package scripts
and constants
New filter mechanism
ndash Switch and conditional tasks
ndash Dynamic groups
Main changes in IDM 80 compared to IDM 72 (2 of 2)
11PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Some minor changes and removals
Jobs are stored and run within an identity store
ndash Can select identity store ldquondashSelfndashrdquo
Managed in the Identity Management user interface instead of in the MMC
ndash Roles Privileges and Dynamic Groups
Managed by regular forms
The following are removed
ndash The Windows runtime engine
ndash The Identity Center Management Console (MMC)
IDM MMC
1995-2014
Upgrade and
installation process
The upgrade process ndash Main changes
The two possibilities to come to IDM 80 prerequisites
Decisions taken and upgrade path with challenges at SAP IT
Tips and tricks
13PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
72SPn 80 upgrade
ndash Install design time (MMC) obsolete
ndash Upgrade schema (mxmc_update)
ndash Upgrade runtime (setupexe)
ndash Deploy NetWeaver components User InterfaceAdmin User Interface
REST
Developer Studio REST server
Configure REST server database connection (one time)
ndash Install developer studio Install Eclipse (one time)
Install IDM Developer Studio plug-in
Configure Developer Studio (one time)
72 SPn SPn+1 upgrade
ndash Install design time (MMC)
ndash Upgrade schema (mxmc_update)
ndash Upgrade runtime (setupexe)
ndash Deploy NetWeaver components User Interface Admin User Interface
REST
IDM upgrade ndash activities step by step
Additionally
14PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Client configuration
15PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
User in SAP Identity Management 80
16PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration
17PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Identity Store
18PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Forms and Processes
19PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash other package objects
20PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
RepositoriesID
M 7
2
21PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository types
22PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Visual workflow design
23PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Provision processID
M 7
2
24PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
1 Perform a real upgrade from 72 to 80 (using an upgrade script ndash option chosen by SAP IT)
Pro Historical data will also be updated and it will be available for future audits
Con Reorganization re-work of packages scripts constants etc required to achieve simpler and understandable
package structure ndash this may involve many resources
2 Install SAP IDM 80 as a new installation
I Then import configuration and modifications from SAP IDM 72 to 80 (sample for exercises in this session)
Pro Speed of update (if IDM 7x install is not big and initial load runs fast)
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
II Recreate and simplify the business model from scratch
Pro Depending on the setup it might be easier and cleaner you can use the upgrade project to simplify your IDM
config
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
The two possible strategies to come to IDM 80 ndash pros amp cons
25PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
All configuration is in ONE package per ID store
ndash Tasks split into
Processes
Forms
Execution as before
Configuration editing
ndash Must be checked out to be edited
Revisions are stored when checking in
ndash Only one user can edit
ndash Possible to manually restructure into multiple packages
After upgradehellip (using strategy no1)
26PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
bull SAP NW AS JAVA ldquo73 SP09+rdquo ldquo73 EhP1 SP06+rdquo ldquo74 SP02+rdquo
bull Databases MS SQL Server 20082012 Oracle 112 IBM DB2 or SAP ASE bull For a complete and most current overview see the Product Availability Matrix on the SAP Service Marketplace
bull If you are currently running IDM 71 you will need to upgrade to 72 SP9 first and then to 80 bull Another option to consider Do not upgrade from 71 to 72 and then to 80 but do a fresh install of IDM 80
bull If you are running IDM 72 SP8 or lower you will need to upgrade to 72 SP9 (or higher) first
and then to IDM 80
bull However you can do all that in the same upgrade project without going live again on eg 72 SP9
bull For existing customization in IDM 72 Switch any job that uses the Windows Runtime or VB
Scripts to the Java Runtime or Java Scripts before starting the upgrade script for IDM 80
bull Since entity IDs such as task IDs and job IDs are not stable and they change much more
often in IDM 80 make sure you do not use them anywhere in your configuration
Use their GUID instead (or with version 8+ you can use their qualified name)
Prerequisites for upgrading from IDM 72 to 80 SP1 (1 of 2)
27PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
The deployment of the Eclipse-based Configuration Developer Studio (software component IDM
CONFIG LM FOR ECLIPSE 80) is done via the standard Eclipse plug-in installation functionality
using the lsquoSAP Development Tools for Eclipsersquo update site
For details and documentation see
httpstoolshanaondemandcomidm
bull Use ldquoEclipse IDE for Java EE Developersrdquo
Download and unzip eclipse-jee-luna-SR2-win32-x86_64zipldquo
Configuration of IDM connection(s)
bull Select the lsquoSAP IDM Developer Studiorsquo perspective
bull Go to lsquoWindowsrsquo -gt lsquoPreferencesrsquo and
maintain configuration parameters
Prerequisites for upgrading from IDM 72 to 80 SP1 (2 of 2)
28PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Plan the upgrade
bull Prepare yourself with training
bull Plan sufficient time for testing (double your estimates)
bull Plan enough time for the actual upgrade process
Make sure to read the documentation carefully
Get consulting with upgrade experience
Jobs that should run on specific repositories must have a certain repository assigned BEFORE the upgrade will be done
bull This will avoid job conversions later which would have to be done in the database
Make sure the export runs without errors Otherwise you may have import problemshellip
Packaging restructuring concept The initial solution offered in IDM 80 caused issues for SAP IT
bull ldquoMovingrdquo objects breaks existing references (GUIDs and other links were changed)
Tips and tricks
29PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
General product information SAP Identity Management 80ndash SAPCOM product page httpswwwsapcomproductsidentity-managementhtml
ndash SAP community (forum) for SAP IDM httpswwwsapcomcommunitytopicsidentity-managementhtml
Upgrade documentationndash Upgrading SAP Identity Management from 72 to 80 ndash on HELPSAPCOM
httpshelpsapcomviewer0a8e2a6c5dc142af85b7a1774fff2cde80en-US
ndash Community Wiki ndash link collection for IDM 80 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+80+Documentation
ndash Community Wiki ndash link collection for IDM 72 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+72+Documentation
ndash Release Info httpshelpsapcomviewerproductSAP_IDENTITY_MANAGEMENT80en-US
Quality improvements ndash For an overview of quality improvements in release 80 check the release notes starting with SP0hellip
httpshelpsapcomviewer97ae2202f05940a19211f9c5174a971c80en-US
Useful links
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
10PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository management
ndash Introducing repository types
ndash Management in the Identity Management
administration user interface
Dispatcher management
ndash New utility
ndash New states
Global scripts and constants
bull Replaced by package scripts
and constants
New filter mechanism
ndash Switch and conditional tasks
ndash Dynamic groups
Main changes in IDM 80 compared to IDM 72 (2 of 2)
11PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Some minor changes and removals
Jobs are stored and run within an identity store
ndash Can select identity store ldquondashSelfndashrdquo
Managed in the Identity Management user interface instead of in the MMC
ndash Roles Privileges and Dynamic Groups
Managed by regular forms
The following are removed
ndash The Windows runtime engine
ndash The Identity Center Management Console (MMC)
IDM MMC
1995-2014
Upgrade and
installation process
The upgrade process ndash Main changes
The two possibilities to come to IDM 80 prerequisites
Decisions taken and upgrade path with challenges at SAP IT
Tips and tricks
13PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
72SPn 80 upgrade
ndash Install design time (MMC) obsolete
ndash Upgrade schema (mxmc_update)
ndash Upgrade runtime (setupexe)
ndash Deploy NetWeaver components User InterfaceAdmin User Interface
REST
Developer Studio REST server
Configure REST server database connection (one time)
ndash Install developer studio Install Eclipse (one time)
Install IDM Developer Studio plug-in
Configure Developer Studio (one time)
72 SPn SPn+1 upgrade
ndash Install design time (MMC)
ndash Upgrade schema (mxmc_update)
ndash Upgrade runtime (setupexe)
ndash Deploy NetWeaver components User Interface Admin User Interface
REST
IDM upgrade ndash activities step by step
Additionally
14PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Client configuration
15PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
User in SAP Identity Management 80
16PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration
17PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Identity Store
18PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Forms and Processes
19PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash other package objects
20PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
RepositoriesID
M 7
2
21PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository types
22PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Visual workflow design
23PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Provision processID
M 7
2
24PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
1 Perform a real upgrade from 72 to 80 (using an upgrade script ndash option chosen by SAP IT)
Pro Historical data will also be updated and it will be available for future audits
Con Reorganization re-work of packages scripts constants etc required to achieve simpler and understandable
package structure ndash this may involve many resources
2 Install SAP IDM 80 as a new installation
I Then import configuration and modifications from SAP IDM 72 to 80 (sample for exercises in this session)
Pro Speed of update (if IDM 7x install is not big and initial load runs fast)
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
II Recreate and simplify the business model from scratch
Pro Depending on the setup it might be easier and cleaner you can use the upgrade project to simplify your IDM
config
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
The two possible strategies to come to IDM 80 ndash pros amp cons
25PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
All configuration is in ONE package per ID store
ndash Tasks split into
Processes
Forms
Execution as before
Configuration editing
ndash Must be checked out to be edited
Revisions are stored when checking in
ndash Only one user can edit
ndash Possible to manually restructure into multiple packages
After upgradehellip (using strategy no1)
26PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
bull SAP NW AS JAVA ldquo73 SP09+rdquo ldquo73 EhP1 SP06+rdquo ldquo74 SP02+rdquo
bull Databases MS SQL Server 20082012 Oracle 112 IBM DB2 or SAP ASE bull For a complete and most current overview see the Product Availability Matrix on the SAP Service Marketplace
bull If you are currently running IDM 71 you will need to upgrade to 72 SP9 first and then to 80 bull Another option to consider Do not upgrade from 71 to 72 and then to 80 but do a fresh install of IDM 80
bull If you are running IDM 72 SP8 or lower you will need to upgrade to 72 SP9 (or higher) first
and then to IDM 80
bull However you can do all that in the same upgrade project without going live again on eg 72 SP9
bull For existing customization in IDM 72 Switch any job that uses the Windows Runtime or VB
Scripts to the Java Runtime or Java Scripts before starting the upgrade script for IDM 80
bull Since entity IDs such as task IDs and job IDs are not stable and they change much more
often in IDM 80 make sure you do not use them anywhere in your configuration
Use their GUID instead (or with version 8+ you can use their qualified name)
Prerequisites for upgrading from IDM 72 to 80 SP1 (1 of 2)
27PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
The deployment of the Eclipse-based Configuration Developer Studio (software component IDM
CONFIG LM FOR ECLIPSE 80) is done via the standard Eclipse plug-in installation functionality
using the lsquoSAP Development Tools for Eclipsersquo update site
For details and documentation see
httpstoolshanaondemandcomidm
bull Use ldquoEclipse IDE for Java EE Developersrdquo
Download and unzip eclipse-jee-luna-SR2-win32-x86_64zipldquo
Configuration of IDM connection(s)
bull Select the lsquoSAP IDM Developer Studiorsquo perspective
bull Go to lsquoWindowsrsquo -gt lsquoPreferencesrsquo and
maintain configuration parameters
Prerequisites for upgrading from IDM 72 to 80 SP1 (2 of 2)
28PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Plan the upgrade
bull Prepare yourself with training
bull Plan sufficient time for testing (double your estimates)
bull Plan enough time for the actual upgrade process
Make sure to read the documentation carefully
Get consulting with upgrade experience
Jobs that should run on specific repositories must have a certain repository assigned BEFORE the upgrade will be done
bull This will avoid job conversions later which would have to be done in the database
Make sure the export runs without errors Otherwise you may have import problemshellip
Packaging restructuring concept The initial solution offered in IDM 80 caused issues for SAP IT
bull ldquoMovingrdquo objects breaks existing references (GUIDs and other links were changed)
Tips and tricks
29PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
General product information SAP Identity Management 80ndash SAPCOM product page httpswwwsapcomproductsidentity-managementhtml
ndash SAP community (forum) for SAP IDM httpswwwsapcomcommunitytopicsidentity-managementhtml
Upgrade documentationndash Upgrading SAP Identity Management from 72 to 80 ndash on HELPSAPCOM
httpshelpsapcomviewer0a8e2a6c5dc142af85b7a1774fff2cde80en-US
ndash Community Wiki ndash link collection for IDM 80 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+80+Documentation
ndash Community Wiki ndash link collection for IDM 72 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+72+Documentation
ndash Release Info httpshelpsapcomviewerproductSAP_IDENTITY_MANAGEMENT80en-US
Quality improvements ndash For an overview of quality improvements in release 80 check the release notes starting with SP0hellip
httpshelpsapcomviewer97ae2202f05940a19211f9c5174a971c80en-US
Useful links
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
11PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Some minor changes and removals
Jobs are stored and run within an identity store
ndash Can select identity store ldquondashSelfndashrdquo
Managed in the Identity Management user interface instead of in the MMC
ndash Roles Privileges and Dynamic Groups
Managed by regular forms
The following are removed
ndash The Windows runtime engine
ndash The Identity Center Management Console (MMC)
IDM MMC
1995-2014
Upgrade and
installation process
The upgrade process ndash Main changes
The two possibilities to come to IDM 80 prerequisites
Decisions taken and upgrade path with challenges at SAP IT
Tips and tricks
13PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
72SPn 80 upgrade
ndash Install design time (MMC) obsolete
ndash Upgrade schema (mxmc_update)
ndash Upgrade runtime (setupexe)
ndash Deploy NetWeaver components User InterfaceAdmin User Interface
REST
Developer Studio REST server
Configure REST server database connection (one time)
ndash Install developer studio Install Eclipse (one time)
Install IDM Developer Studio plug-in
Configure Developer Studio (one time)
72 SPn SPn+1 upgrade
ndash Install design time (MMC)
ndash Upgrade schema (mxmc_update)
ndash Upgrade runtime (setupexe)
ndash Deploy NetWeaver components User Interface Admin User Interface
REST
IDM upgrade ndash activities step by step
Additionally
14PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Client configuration
15PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
User in SAP Identity Management 80
16PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration
17PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Identity Store
18PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Forms and Processes
19PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash other package objects
20PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
RepositoriesID
M 7
2
21PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository types
22PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Visual workflow design
23PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Provision processID
M 7
2
24PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
1 Perform a real upgrade from 72 to 80 (using an upgrade script ndash option chosen by SAP IT)
Pro Historical data will also be updated and it will be available for future audits
Con Reorganization re-work of packages scripts constants etc required to achieve simpler and understandable
package structure ndash this may involve many resources
2 Install SAP IDM 80 as a new installation
I Then import configuration and modifications from SAP IDM 72 to 80 (sample for exercises in this session)
Pro Speed of update (if IDM 7x install is not big and initial load runs fast)
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
II Recreate and simplify the business model from scratch
Pro Depending on the setup it might be easier and cleaner you can use the upgrade project to simplify your IDM
config
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
The two possible strategies to come to IDM 80 ndash pros amp cons
25PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
All configuration is in ONE package per ID store
ndash Tasks split into
Processes
Forms
Execution as before
Configuration editing
ndash Must be checked out to be edited
Revisions are stored when checking in
ndash Only one user can edit
ndash Possible to manually restructure into multiple packages
After upgradehellip (using strategy no1)
26PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
bull SAP NW AS JAVA ldquo73 SP09+rdquo ldquo73 EhP1 SP06+rdquo ldquo74 SP02+rdquo
bull Databases MS SQL Server 20082012 Oracle 112 IBM DB2 or SAP ASE bull For a complete and most current overview see the Product Availability Matrix on the SAP Service Marketplace
bull If you are currently running IDM 71 you will need to upgrade to 72 SP9 first and then to 80 bull Another option to consider Do not upgrade from 71 to 72 and then to 80 but do a fresh install of IDM 80
bull If you are running IDM 72 SP8 or lower you will need to upgrade to 72 SP9 (or higher) first
and then to IDM 80
bull However you can do all that in the same upgrade project without going live again on eg 72 SP9
bull For existing customization in IDM 72 Switch any job that uses the Windows Runtime or VB
Scripts to the Java Runtime or Java Scripts before starting the upgrade script for IDM 80
bull Since entity IDs such as task IDs and job IDs are not stable and they change much more
often in IDM 80 make sure you do not use them anywhere in your configuration
Use their GUID instead (or with version 8+ you can use their qualified name)
Prerequisites for upgrading from IDM 72 to 80 SP1 (1 of 2)
27PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
The deployment of the Eclipse-based Configuration Developer Studio (software component IDM
CONFIG LM FOR ECLIPSE 80) is done via the standard Eclipse plug-in installation functionality
using the lsquoSAP Development Tools for Eclipsersquo update site
For details and documentation see
httpstoolshanaondemandcomidm
bull Use ldquoEclipse IDE for Java EE Developersrdquo
Download and unzip eclipse-jee-luna-SR2-win32-x86_64zipldquo
Configuration of IDM connection(s)
bull Select the lsquoSAP IDM Developer Studiorsquo perspective
bull Go to lsquoWindowsrsquo -gt lsquoPreferencesrsquo and
maintain configuration parameters
Prerequisites for upgrading from IDM 72 to 80 SP1 (2 of 2)
28PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Plan the upgrade
bull Prepare yourself with training
bull Plan sufficient time for testing (double your estimates)
bull Plan enough time for the actual upgrade process
Make sure to read the documentation carefully
Get consulting with upgrade experience
Jobs that should run on specific repositories must have a certain repository assigned BEFORE the upgrade will be done
bull This will avoid job conversions later which would have to be done in the database
Make sure the export runs without errors Otherwise you may have import problemshellip
Packaging restructuring concept The initial solution offered in IDM 80 caused issues for SAP IT
bull ldquoMovingrdquo objects breaks existing references (GUIDs and other links were changed)
Tips and tricks
29PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
General product information SAP Identity Management 80ndash SAPCOM product page httpswwwsapcomproductsidentity-managementhtml
ndash SAP community (forum) for SAP IDM httpswwwsapcomcommunitytopicsidentity-managementhtml
Upgrade documentationndash Upgrading SAP Identity Management from 72 to 80 ndash on HELPSAPCOM
httpshelpsapcomviewer0a8e2a6c5dc142af85b7a1774fff2cde80en-US
ndash Community Wiki ndash link collection for IDM 80 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+80+Documentation
ndash Community Wiki ndash link collection for IDM 72 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+72+Documentation
ndash Release Info httpshelpsapcomviewerproductSAP_IDENTITY_MANAGEMENT80en-US
Quality improvements ndash For an overview of quality improvements in release 80 check the release notes starting with SP0hellip
httpshelpsapcomviewer97ae2202f05940a19211f9c5174a971c80en-US
Useful links
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
Upgrade and
installation process
The upgrade process ndash Main changes
The two possibilities to come to IDM 80 prerequisites
Decisions taken and upgrade path with challenges at SAP IT
Tips and tricks
13PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
72SPn 80 upgrade
ndash Install design time (MMC) obsolete
ndash Upgrade schema (mxmc_update)
ndash Upgrade runtime (setupexe)
ndash Deploy NetWeaver components User InterfaceAdmin User Interface
REST
Developer Studio REST server
Configure REST server database connection (one time)
ndash Install developer studio Install Eclipse (one time)
Install IDM Developer Studio plug-in
Configure Developer Studio (one time)
72 SPn SPn+1 upgrade
ndash Install design time (MMC)
ndash Upgrade schema (mxmc_update)
ndash Upgrade runtime (setupexe)
ndash Deploy NetWeaver components User Interface Admin User Interface
REST
IDM upgrade ndash activities step by step
Additionally
14PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Client configuration
15PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
User in SAP Identity Management 80
16PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration
17PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Identity Store
18PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Forms and Processes
19PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash other package objects
20PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
RepositoriesID
M 7
2
21PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository types
22PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Visual workflow design
23PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Provision processID
M 7
2
24PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
1 Perform a real upgrade from 72 to 80 (using an upgrade script ndash option chosen by SAP IT)
Pro Historical data will also be updated and it will be available for future audits
Con Reorganization re-work of packages scripts constants etc required to achieve simpler and understandable
package structure ndash this may involve many resources
2 Install SAP IDM 80 as a new installation
I Then import configuration and modifications from SAP IDM 72 to 80 (sample for exercises in this session)
Pro Speed of update (if IDM 7x install is not big and initial load runs fast)
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
II Recreate and simplify the business model from scratch
Pro Depending on the setup it might be easier and cleaner you can use the upgrade project to simplify your IDM
config
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
The two possible strategies to come to IDM 80 ndash pros amp cons
25PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
All configuration is in ONE package per ID store
ndash Tasks split into
Processes
Forms
Execution as before
Configuration editing
ndash Must be checked out to be edited
Revisions are stored when checking in
ndash Only one user can edit
ndash Possible to manually restructure into multiple packages
After upgradehellip (using strategy no1)
26PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
bull SAP NW AS JAVA ldquo73 SP09+rdquo ldquo73 EhP1 SP06+rdquo ldquo74 SP02+rdquo
bull Databases MS SQL Server 20082012 Oracle 112 IBM DB2 or SAP ASE bull For a complete and most current overview see the Product Availability Matrix on the SAP Service Marketplace
bull If you are currently running IDM 71 you will need to upgrade to 72 SP9 first and then to 80 bull Another option to consider Do not upgrade from 71 to 72 and then to 80 but do a fresh install of IDM 80
bull If you are running IDM 72 SP8 or lower you will need to upgrade to 72 SP9 (or higher) first
and then to IDM 80
bull However you can do all that in the same upgrade project without going live again on eg 72 SP9
bull For existing customization in IDM 72 Switch any job that uses the Windows Runtime or VB
Scripts to the Java Runtime or Java Scripts before starting the upgrade script for IDM 80
bull Since entity IDs such as task IDs and job IDs are not stable and they change much more
often in IDM 80 make sure you do not use them anywhere in your configuration
Use their GUID instead (or with version 8+ you can use their qualified name)
Prerequisites for upgrading from IDM 72 to 80 SP1 (1 of 2)
27PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
The deployment of the Eclipse-based Configuration Developer Studio (software component IDM
CONFIG LM FOR ECLIPSE 80) is done via the standard Eclipse plug-in installation functionality
using the lsquoSAP Development Tools for Eclipsersquo update site
For details and documentation see
httpstoolshanaondemandcomidm
bull Use ldquoEclipse IDE for Java EE Developersrdquo
Download and unzip eclipse-jee-luna-SR2-win32-x86_64zipldquo
Configuration of IDM connection(s)
bull Select the lsquoSAP IDM Developer Studiorsquo perspective
bull Go to lsquoWindowsrsquo -gt lsquoPreferencesrsquo and
maintain configuration parameters
Prerequisites for upgrading from IDM 72 to 80 SP1 (2 of 2)
28PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Plan the upgrade
bull Prepare yourself with training
bull Plan sufficient time for testing (double your estimates)
bull Plan enough time for the actual upgrade process
Make sure to read the documentation carefully
Get consulting with upgrade experience
Jobs that should run on specific repositories must have a certain repository assigned BEFORE the upgrade will be done
bull This will avoid job conversions later which would have to be done in the database
Make sure the export runs without errors Otherwise you may have import problemshellip
Packaging restructuring concept The initial solution offered in IDM 80 caused issues for SAP IT
bull ldquoMovingrdquo objects breaks existing references (GUIDs and other links were changed)
Tips and tricks
29PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
General product information SAP Identity Management 80ndash SAPCOM product page httpswwwsapcomproductsidentity-managementhtml
ndash SAP community (forum) for SAP IDM httpswwwsapcomcommunitytopicsidentity-managementhtml
Upgrade documentationndash Upgrading SAP Identity Management from 72 to 80 ndash on HELPSAPCOM
httpshelpsapcomviewer0a8e2a6c5dc142af85b7a1774fff2cde80en-US
ndash Community Wiki ndash link collection for IDM 80 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+80+Documentation
ndash Community Wiki ndash link collection for IDM 72 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+72+Documentation
ndash Release Info httpshelpsapcomviewerproductSAP_IDENTITY_MANAGEMENT80en-US
Quality improvements ndash For an overview of quality improvements in release 80 check the release notes starting with SP0hellip
httpshelpsapcomviewer97ae2202f05940a19211f9c5174a971c80en-US
Useful links
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
13PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
72SPn 80 upgrade
ndash Install design time (MMC) obsolete
ndash Upgrade schema (mxmc_update)
ndash Upgrade runtime (setupexe)
ndash Deploy NetWeaver components User InterfaceAdmin User Interface
REST
Developer Studio REST server
Configure REST server database connection (one time)
ndash Install developer studio Install Eclipse (one time)
Install IDM Developer Studio plug-in
Configure Developer Studio (one time)
72 SPn SPn+1 upgrade
ndash Install design time (MMC)
ndash Upgrade schema (mxmc_update)
ndash Upgrade runtime (setupexe)
ndash Deploy NetWeaver components User Interface Admin User Interface
REST
IDM upgrade ndash activities step by step
Additionally
14PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Client configuration
15PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
User in SAP Identity Management 80
16PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration
17PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Identity Store
18PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Forms and Processes
19PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash other package objects
20PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
RepositoriesID
M 7
2
21PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository types
22PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Visual workflow design
23PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Provision processID
M 7
2
24PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
1 Perform a real upgrade from 72 to 80 (using an upgrade script ndash option chosen by SAP IT)
Pro Historical data will also be updated and it will be available for future audits
Con Reorganization re-work of packages scripts constants etc required to achieve simpler and understandable
package structure ndash this may involve many resources
2 Install SAP IDM 80 as a new installation
I Then import configuration and modifications from SAP IDM 72 to 80 (sample for exercises in this session)
Pro Speed of update (if IDM 7x install is not big and initial load runs fast)
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
II Recreate and simplify the business model from scratch
Pro Depending on the setup it might be easier and cleaner you can use the upgrade project to simplify your IDM
config
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
The two possible strategies to come to IDM 80 ndash pros amp cons
25PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
All configuration is in ONE package per ID store
ndash Tasks split into
Processes
Forms
Execution as before
Configuration editing
ndash Must be checked out to be edited
Revisions are stored when checking in
ndash Only one user can edit
ndash Possible to manually restructure into multiple packages
After upgradehellip (using strategy no1)
26PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
bull SAP NW AS JAVA ldquo73 SP09+rdquo ldquo73 EhP1 SP06+rdquo ldquo74 SP02+rdquo
bull Databases MS SQL Server 20082012 Oracle 112 IBM DB2 or SAP ASE bull For a complete and most current overview see the Product Availability Matrix on the SAP Service Marketplace
bull If you are currently running IDM 71 you will need to upgrade to 72 SP9 first and then to 80 bull Another option to consider Do not upgrade from 71 to 72 and then to 80 but do a fresh install of IDM 80
bull If you are running IDM 72 SP8 or lower you will need to upgrade to 72 SP9 (or higher) first
and then to IDM 80
bull However you can do all that in the same upgrade project without going live again on eg 72 SP9
bull For existing customization in IDM 72 Switch any job that uses the Windows Runtime or VB
Scripts to the Java Runtime or Java Scripts before starting the upgrade script for IDM 80
bull Since entity IDs such as task IDs and job IDs are not stable and they change much more
often in IDM 80 make sure you do not use them anywhere in your configuration
Use their GUID instead (or with version 8+ you can use their qualified name)
Prerequisites for upgrading from IDM 72 to 80 SP1 (1 of 2)
27PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
The deployment of the Eclipse-based Configuration Developer Studio (software component IDM
CONFIG LM FOR ECLIPSE 80) is done via the standard Eclipse plug-in installation functionality
using the lsquoSAP Development Tools for Eclipsersquo update site
For details and documentation see
httpstoolshanaondemandcomidm
bull Use ldquoEclipse IDE for Java EE Developersrdquo
Download and unzip eclipse-jee-luna-SR2-win32-x86_64zipldquo
Configuration of IDM connection(s)
bull Select the lsquoSAP IDM Developer Studiorsquo perspective
bull Go to lsquoWindowsrsquo -gt lsquoPreferencesrsquo and
maintain configuration parameters
Prerequisites for upgrading from IDM 72 to 80 SP1 (2 of 2)
28PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Plan the upgrade
bull Prepare yourself with training
bull Plan sufficient time for testing (double your estimates)
bull Plan enough time for the actual upgrade process
Make sure to read the documentation carefully
Get consulting with upgrade experience
Jobs that should run on specific repositories must have a certain repository assigned BEFORE the upgrade will be done
bull This will avoid job conversions later which would have to be done in the database
Make sure the export runs without errors Otherwise you may have import problemshellip
Packaging restructuring concept The initial solution offered in IDM 80 caused issues for SAP IT
bull ldquoMovingrdquo objects breaks existing references (GUIDs and other links were changed)
Tips and tricks
29PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
General product information SAP Identity Management 80ndash SAPCOM product page httpswwwsapcomproductsidentity-managementhtml
ndash SAP community (forum) for SAP IDM httpswwwsapcomcommunitytopicsidentity-managementhtml
Upgrade documentationndash Upgrading SAP Identity Management from 72 to 80 ndash on HELPSAPCOM
httpshelpsapcomviewer0a8e2a6c5dc142af85b7a1774fff2cde80en-US
ndash Community Wiki ndash link collection for IDM 80 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+80+Documentation
ndash Community Wiki ndash link collection for IDM 72 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+72+Documentation
ndash Release Info httpshelpsapcomviewerproductSAP_IDENTITY_MANAGEMENT80en-US
Quality improvements ndash For an overview of quality improvements in release 80 check the release notes starting with SP0hellip
httpshelpsapcomviewer97ae2202f05940a19211f9c5174a971c80en-US
Useful links
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
14PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Client configuration
15PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
User in SAP Identity Management 80
16PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration
17PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Identity Store
18PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Forms and Processes
19PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash other package objects
20PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
RepositoriesID
M 7
2
21PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository types
22PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Visual workflow design
23PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Provision processID
M 7
2
24PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
1 Perform a real upgrade from 72 to 80 (using an upgrade script ndash option chosen by SAP IT)
Pro Historical data will also be updated and it will be available for future audits
Con Reorganization re-work of packages scripts constants etc required to achieve simpler and understandable
package structure ndash this may involve many resources
2 Install SAP IDM 80 as a new installation
I Then import configuration and modifications from SAP IDM 72 to 80 (sample for exercises in this session)
Pro Speed of update (if IDM 7x install is not big and initial load runs fast)
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
II Recreate and simplify the business model from scratch
Pro Depending on the setup it might be easier and cleaner you can use the upgrade project to simplify your IDM
config
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
The two possible strategies to come to IDM 80 ndash pros amp cons
25PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
All configuration is in ONE package per ID store
ndash Tasks split into
Processes
Forms
Execution as before
Configuration editing
ndash Must be checked out to be edited
Revisions are stored when checking in
ndash Only one user can edit
ndash Possible to manually restructure into multiple packages
After upgradehellip (using strategy no1)
26PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
bull SAP NW AS JAVA ldquo73 SP09+rdquo ldquo73 EhP1 SP06+rdquo ldquo74 SP02+rdquo
bull Databases MS SQL Server 20082012 Oracle 112 IBM DB2 or SAP ASE bull For a complete and most current overview see the Product Availability Matrix on the SAP Service Marketplace
bull If you are currently running IDM 71 you will need to upgrade to 72 SP9 first and then to 80 bull Another option to consider Do not upgrade from 71 to 72 and then to 80 but do a fresh install of IDM 80
bull If you are running IDM 72 SP8 or lower you will need to upgrade to 72 SP9 (or higher) first
and then to IDM 80
bull However you can do all that in the same upgrade project without going live again on eg 72 SP9
bull For existing customization in IDM 72 Switch any job that uses the Windows Runtime or VB
Scripts to the Java Runtime or Java Scripts before starting the upgrade script for IDM 80
bull Since entity IDs such as task IDs and job IDs are not stable and they change much more
often in IDM 80 make sure you do not use them anywhere in your configuration
Use their GUID instead (or with version 8+ you can use their qualified name)
Prerequisites for upgrading from IDM 72 to 80 SP1 (1 of 2)
27PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
The deployment of the Eclipse-based Configuration Developer Studio (software component IDM
CONFIG LM FOR ECLIPSE 80) is done via the standard Eclipse plug-in installation functionality
using the lsquoSAP Development Tools for Eclipsersquo update site
For details and documentation see
httpstoolshanaondemandcomidm
bull Use ldquoEclipse IDE for Java EE Developersrdquo
Download and unzip eclipse-jee-luna-SR2-win32-x86_64zipldquo
Configuration of IDM connection(s)
bull Select the lsquoSAP IDM Developer Studiorsquo perspective
bull Go to lsquoWindowsrsquo -gt lsquoPreferencesrsquo and
maintain configuration parameters
Prerequisites for upgrading from IDM 72 to 80 SP1 (2 of 2)
28PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Plan the upgrade
bull Prepare yourself with training
bull Plan sufficient time for testing (double your estimates)
bull Plan enough time for the actual upgrade process
Make sure to read the documentation carefully
Get consulting with upgrade experience
Jobs that should run on specific repositories must have a certain repository assigned BEFORE the upgrade will be done
bull This will avoid job conversions later which would have to be done in the database
Make sure the export runs without errors Otherwise you may have import problemshellip
Packaging restructuring concept The initial solution offered in IDM 80 caused issues for SAP IT
bull ldquoMovingrdquo objects breaks existing references (GUIDs and other links were changed)
Tips and tricks
29PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
General product information SAP Identity Management 80ndash SAPCOM product page httpswwwsapcomproductsidentity-managementhtml
ndash SAP community (forum) for SAP IDM httpswwwsapcomcommunitytopicsidentity-managementhtml
Upgrade documentationndash Upgrading SAP Identity Management from 72 to 80 ndash on HELPSAPCOM
httpshelpsapcomviewer0a8e2a6c5dc142af85b7a1774fff2cde80en-US
ndash Community Wiki ndash link collection for IDM 80 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+80+Documentation
ndash Community Wiki ndash link collection for IDM 72 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+72+Documentation
ndash Release Info httpshelpsapcomviewerproductSAP_IDENTITY_MANAGEMENT80en-US
Quality improvements ndash For an overview of quality improvements in release 80 check the release notes starting with SP0hellip
httpshelpsapcomviewer97ae2202f05940a19211f9c5174a971c80en-US
Useful links
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
15PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
User in SAP Identity Management 80
16PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration
17PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Identity Store
18PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Forms and Processes
19PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash other package objects
20PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
RepositoriesID
M 7
2
21PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository types
22PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Visual workflow design
23PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Provision processID
M 7
2
24PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
1 Perform a real upgrade from 72 to 80 (using an upgrade script ndash option chosen by SAP IT)
Pro Historical data will also be updated and it will be available for future audits
Con Reorganization re-work of packages scripts constants etc required to achieve simpler and understandable
package structure ndash this may involve many resources
2 Install SAP IDM 80 as a new installation
I Then import configuration and modifications from SAP IDM 72 to 80 (sample for exercises in this session)
Pro Speed of update (if IDM 7x install is not big and initial load runs fast)
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
II Recreate and simplify the business model from scratch
Pro Depending on the setup it might be easier and cleaner you can use the upgrade project to simplify your IDM
config
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
The two possible strategies to come to IDM 80 ndash pros amp cons
25PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
All configuration is in ONE package per ID store
ndash Tasks split into
Processes
Forms
Execution as before
Configuration editing
ndash Must be checked out to be edited
Revisions are stored when checking in
ndash Only one user can edit
ndash Possible to manually restructure into multiple packages
After upgradehellip (using strategy no1)
26PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
bull SAP NW AS JAVA ldquo73 SP09+rdquo ldquo73 EhP1 SP06+rdquo ldquo74 SP02+rdquo
bull Databases MS SQL Server 20082012 Oracle 112 IBM DB2 or SAP ASE bull For a complete and most current overview see the Product Availability Matrix on the SAP Service Marketplace
bull If you are currently running IDM 71 you will need to upgrade to 72 SP9 first and then to 80 bull Another option to consider Do not upgrade from 71 to 72 and then to 80 but do a fresh install of IDM 80
bull If you are running IDM 72 SP8 or lower you will need to upgrade to 72 SP9 (or higher) first
and then to IDM 80
bull However you can do all that in the same upgrade project without going live again on eg 72 SP9
bull For existing customization in IDM 72 Switch any job that uses the Windows Runtime or VB
Scripts to the Java Runtime or Java Scripts before starting the upgrade script for IDM 80
bull Since entity IDs such as task IDs and job IDs are not stable and they change much more
often in IDM 80 make sure you do not use them anywhere in your configuration
Use their GUID instead (or with version 8+ you can use their qualified name)
Prerequisites for upgrading from IDM 72 to 80 SP1 (1 of 2)
27PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
The deployment of the Eclipse-based Configuration Developer Studio (software component IDM
CONFIG LM FOR ECLIPSE 80) is done via the standard Eclipse plug-in installation functionality
using the lsquoSAP Development Tools for Eclipsersquo update site
For details and documentation see
httpstoolshanaondemandcomidm
bull Use ldquoEclipse IDE for Java EE Developersrdquo
Download and unzip eclipse-jee-luna-SR2-win32-x86_64zipldquo
Configuration of IDM connection(s)
bull Select the lsquoSAP IDM Developer Studiorsquo perspective
bull Go to lsquoWindowsrsquo -gt lsquoPreferencesrsquo and
maintain configuration parameters
Prerequisites for upgrading from IDM 72 to 80 SP1 (2 of 2)
28PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Plan the upgrade
bull Prepare yourself with training
bull Plan sufficient time for testing (double your estimates)
bull Plan enough time for the actual upgrade process
Make sure to read the documentation carefully
Get consulting with upgrade experience
Jobs that should run on specific repositories must have a certain repository assigned BEFORE the upgrade will be done
bull This will avoid job conversions later which would have to be done in the database
Make sure the export runs without errors Otherwise you may have import problemshellip
Packaging restructuring concept The initial solution offered in IDM 80 caused issues for SAP IT
bull ldquoMovingrdquo objects breaks existing references (GUIDs and other links were changed)
Tips and tricks
29PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
General product information SAP Identity Management 80ndash SAPCOM product page httpswwwsapcomproductsidentity-managementhtml
ndash SAP community (forum) for SAP IDM httpswwwsapcomcommunitytopicsidentity-managementhtml
Upgrade documentationndash Upgrading SAP Identity Management from 72 to 80 ndash on HELPSAPCOM
httpshelpsapcomviewer0a8e2a6c5dc142af85b7a1774fff2cde80en-US
ndash Community Wiki ndash link collection for IDM 80 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+80+Documentation
ndash Community Wiki ndash link collection for IDM 72 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+72+Documentation
ndash Release Info httpshelpsapcomviewerproductSAP_IDENTITY_MANAGEMENT80en-US
Quality improvements ndash For an overview of quality improvements in release 80 check the release notes starting with SP0hellip
httpshelpsapcomviewer97ae2202f05940a19211f9c5174a971c80en-US
Useful links
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
16PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration
17PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Identity Store
18PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Forms and Processes
19PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash other package objects
20PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
RepositoriesID
M 7
2
21PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository types
22PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Visual workflow design
23PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Provision processID
M 7
2
24PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
1 Perform a real upgrade from 72 to 80 (using an upgrade script ndash option chosen by SAP IT)
Pro Historical data will also be updated and it will be available for future audits
Con Reorganization re-work of packages scripts constants etc required to achieve simpler and understandable
package structure ndash this may involve many resources
2 Install SAP IDM 80 as a new installation
I Then import configuration and modifications from SAP IDM 72 to 80 (sample for exercises in this session)
Pro Speed of update (if IDM 7x install is not big and initial load runs fast)
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
II Recreate and simplify the business model from scratch
Pro Depending on the setup it might be easier and cleaner you can use the upgrade project to simplify your IDM
config
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
The two possible strategies to come to IDM 80 ndash pros amp cons
25PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
All configuration is in ONE package per ID store
ndash Tasks split into
Processes
Forms
Execution as before
Configuration editing
ndash Must be checked out to be edited
Revisions are stored when checking in
ndash Only one user can edit
ndash Possible to manually restructure into multiple packages
After upgradehellip (using strategy no1)
26PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
bull SAP NW AS JAVA ldquo73 SP09+rdquo ldquo73 EhP1 SP06+rdquo ldquo74 SP02+rdquo
bull Databases MS SQL Server 20082012 Oracle 112 IBM DB2 or SAP ASE bull For a complete and most current overview see the Product Availability Matrix on the SAP Service Marketplace
bull If you are currently running IDM 71 you will need to upgrade to 72 SP9 first and then to 80 bull Another option to consider Do not upgrade from 71 to 72 and then to 80 but do a fresh install of IDM 80
bull If you are running IDM 72 SP8 or lower you will need to upgrade to 72 SP9 (or higher) first
and then to IDM 80
bull However you can do all that in the same upgrade project without going live again on eg 72 SP9
bull For existing customization in IDM 72 Switch any job that uses the Windows Runtime or VB
Scripts to the Java Runtime or Java Scripts before starting the upgrade script for IDM 80
bull Since entity IDs such as task IDs and job IDs are not stable and they change much more
often in IDM 80 make sure you do not use them anywhere in your configuration
Use their GUID instead (or with version 8+ you can use their qualified name)
Prerequisites for upgrading from IDM 72 to 80 SP1 (1 of 2)
27PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
The deployment of the Eclipse-based Configuration Developer Studio (software component IDM
CONFIG LM FOR ECLIPSE 80) is done via the standard Eclipse plug-in installation functionality
using the lsquoSAP Development Tools for Eclipsersquo update site
For details and documentation see
httpstoolshanaondemandcomidm
bull Use ldquoEclipse IDE for Java EE Developersrdquo
Download and unzip eclipse-jee-luna-SR2-win32-x86_64zipldquo
Configuration of IDM connection(s)
bull Select the lsquoSAP IDM Developer Studiorsquo perspective
bull Go to lsquoWindowsrsquo -gt lsquoPreferencesrsquo and
maintain configuration parameters
Prerequisites for upgrading from IDM 72 to 80 SP1 (2 of 2)
28PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Plan the upgrade
bull Prepare yourself with training
bull Plan sufficient time for testing (double your estimates)
bull Plan enough time for the actual upgrade process
Make sure to read the documentation carefully
Get consulting with upgrade experience
Jobs that should run on specific repositories must have a certain repository assigned BEFORE the upgrade will be done
bull This will avoid job conversions later which would have to be done in the database
Make sure the export runs without errors Otherwise you may have import problemshellip
Packaging restructuring concept The initial solution offered in IDM 80 caused issues for SAP IT
bull ldquoMovingrdquo objects breaks existing references (GUIDs and other links were changed)
Tips and tricks
29PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
General product information SAP Identity Management 80ndash SAPCOM product page httpswwwsapcomproductsidentity-managementhtml
ndash SAP community (forum) for SAP IDM httpswwwsapcomcommunitytopicsidentity-managementhtml
Upgrade documentationndash Upgrading SAP Identity Management from 72 to 80 ndash on HELPSAPCOM
httpshelpsapcomviewer0a8e2a6c5dc142af85b7a1774fff2cde80en-US
ndash Community Wiki ndash link collection for IDM 80 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+80+Documentation
ndash Community Wiki ndash link collection for IDM 72 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+72+Documentation
ndash Release Info httpshelpsapcomviewerproductSAP_IDENTITY_MANAGEMENT80en-US
Quality improvements ndash For an overview of quality improvements in release 80 check the release notes starting with SP0hellip
httpshelpsapcomviewer97ae2202f05940a19211f9c5174a971c80en-US
Useful links
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
17PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Identity Store
18PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Forms and Processes
19PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash other package objects
20PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
RepositoriesID
M 7
2
21PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository types
22PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Visual workflow design
23PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Provision processID
M 7
2
24PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
1 Perform a real upgrade from 72 to 80 (using an upgrade script ndash option chosen by SAP IT)
Pro Historical data will also be updated and it will be available for future audits
Con Reorganization re-work of packages scripts constants etc required to achieve simpler and understandable
package structure ndash this may involve many resources
2 Install SAP IDM 80 as a new installation
I Then import configuration and modifications from SAP IDM 72 to 80 (sample for exercises in this session)
Pro Speed of update (if IDM 7x install is not big and initial load runs fast)
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
II Recreate and simplify the business model from scratch
Pro Depending on the setup it might be easier and cleaner you can use the upgrade project to simplify your IDM
config
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
The two possible strategies to come to IDM 80 ndash pros amp cons
25PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
All configuration is in ONE package per ID store
ndash Tasks split into
Processes
Forms
Execution as before
Configuration editing
ndash Must be checked out to be edited
Revisions are stored when checking in
ndash Only one user can edit
ndash Possible to manually restructure into multiple packages
After upgradehellip (using strategy no1)
26PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
bull SAP NW AS JAVA ldquo73 SP09+rdquo ldquo73 EhP1 SP06+rdquo ldquo74 SP02+rdquo
bull Databases MS SQL Server 20082012 Oracle 112 IBM DB2 or SAP ASE bull For a complete and most current overview see the Product Availability Matrix on the SAP Service Marketplace
bull If you are currently running IDM 71 you will need to upgrade to 72 SP9 first and then to 80 bull Another option to consider Do not upgrade from 71 to 72 and then to 80 but do a fresh install of IDM 80
bull If you are running IDM 72 SP8 or lower you will need to upgrade to 72 SP9 (or higher) first
and then to IDM 80
bull However you can do all that in the same upgrade project without going live again on eg 72 SP9
bull For existing customization in IDM 72 Switch any job that uses the Windows Runtime or VB
Scripts to the Java Runtime or Java Scripts before starting the upgrade script for IDM 80
bull Since entity IDs such as task IDs and job IDs are not stable and they change much more
often in IDM 80 make sure you do not use them anywhere in your configuration
Use their GUID instead (or with version 8+ you can use their qualified name)
Prerequisites for upgrading from IDM 72 to 80 SP1 (1 of 2)
27PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
The deployment of the Eclipse-based Configuration Developer Studio (software component IDM
CONFIG LM FOR ECLIPSE 80) is done via the standard Eclipse plug-in installation functionality
using the lsquoSAP Development Tools for Eclipsersquo update site
For details and documentation see
httpstoolshanaondemandcomidm
bull Use ldquoEclipse IDE for Java EE Developersrdquo
Download and unzip eclipse-jee-luna-SR2-win32-x86_64zipldquo
Configuration of IDM connection(s)
bull Select the lsquoSAP IDM Developer Studiorsquo perspective
bull Go to lsquoWindowsrsquo -gt lsquoPreferencesrsquo and
maintain configuration parameters
Prerequisites for upgrading from IDM 72 to 80 SP1 (2 of 2)
28PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Plan the upgrade
bull Prepare yourself with training
bull Plan sufficient time for testing (double your estimates)
bull Plan enough time for the actual upgrade process
Make sure to read the documentation carefully
Get consulting with upgrade experience
Jobs that should run on specific repositories must have a certain repository assigned BEFORE the upgrade will be done
bull This will avoid job conversions later which would have to be done in the database
Make sure the export runs without errors Otherwise you may have import problemshellip
Packaging restructuring concept The initial solution offered in IDM 80 caused issues for SAP IT
bull ldquoMovingrdquo objects breaks existing references (GUIDs and other links were changed)
Tips and tricks
29PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
General product information SAP Identity Management 80ndash SAPCOM product page httpswwwsapcomproductsidentity-managementhtml
ndash SAP community (forum) for SAP IDM httpswwwsapcomcommunitytopicsidentity-managementhtml
Upgrade documentationndash Upgrading SAP Identity Management from 72 to 80 ndash on HELPSAPCOM
httpshelpsapcomviewer0a8e2a6c5dc142af85b7a1774fff2cde80en-US
ndash Community Wiki ndash link collection for IDM 80 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+80+Documentation
ndash Community Wiki ndash link collection for IDM 72 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+72+Documentation
ndash Release Info httpshelpsapcomviewerproductSAP_IDENTITY_MANAGEMENT80en-US
Quality improvements ndash For an overview of quality improvements in release 80 check the release notes starting with SP0hellip
httpshelpsapcomviewer97ae2202f05940a19211f9c5174a971c80en-US
Useful links
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
18PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash Forms and Processes
19PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash other package objects
20PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
RepositoriesID
M 7
2
21PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository types
22PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Visual workflow design
23PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Provision processID
M 7
2
24PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
1 Perform a real upgrade from 72 to 80 (using an upgrade script ndash option chosen by SAP IT)
Pro Historical data will also be updated and it will be available for future audits
Con Reorganization re-work of packages scripts constants etc required to achieve simpler and understandable
package structure ndash this may involve many resources
2 Install SAP IDM 80 as a new installation
I Then import configuration and modifications from SAP IDM 72 to 80 (sample for exercises in this session)
Pro Speed of update (if IDM 7x install is not big and initial load runs fast)
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
II Recreate and simplify the business model from scratch
Pro Depending on the setup it might be easier and cleaner you can use the upgrade project to simplify your IDM
config
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
The two possible strategies to come to IDM 80 ndash pros amp cons
25PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
All configuration is in ONE package per ID store
ndash Tasks split into
Processes
Forms
Execution as before
Configuration editing
ndash Must be checked out to be edited
Revisions are stored when checking in
ndash Only one user can edit
ndash Possible to manually restructure into multiple packages
After upgradehellip (using strategy no1)
26PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
bull SAP NW AS JAVA ldquo73 SP09+rdquo ldquo73 EhP1 SP06+rdquo ldquo74 SP02+rdquo
bull Databases MS SQL Server 20082012 Oracle 112 IBM DB2 or SAP ASE bull For a complete and most current overview see the Product Availability Matrix on the SAP Service Marketplace
bull If you are currently running IDM 71 you will need to upgrade to 72 SP9 first and then to 80 bull Another option to consider Do not upgrade from 71 to 72 and then to 80 but do a fresh install of IDM 80
bull If you are running IDM 72 SP8 or lower you will need to upgrade to 72 SP9 (or higher) first
and then to IDM 80
bull However you can do all that in the same upgrade project without going live again on eg 72 SP9
bull For existing customization in IDM 72 Switch any job that uses the Windows Runtime or VB
Scripts to the Java Runtime or Java Scripts before starting the upgrade script for IDM 80
bull Since entity IDs such as task IDs and job IDs are not stable and they change much more
often in IDM 80 make sure you do not use them anywhere in your configuration
Use their GUID instead (or with version 8+ you can use their qualified name)
Prerequisites for upgrading from IDM 72 to 80 SP1 (1 of 2)
27PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
The deployment of the Eclipse-based Configuration Developer Studio (software component IDM
CONFIG LM FOR ECLIPSE 80) is done via the standard Eclipse plug-in installation functionality
using the lsquoSAP Development Tools for Eclipsersquo update site
For details and documentation see
httpstoolshanaondemandcomidm
bull Use ldquoEclipse IDE for Java EE Developersrdquo
Download and unzip eclipse-jee-luna-SR2-win32-x86_64zipldquo
Configuration of IDM connection(s)
bull Select the lsquoSAP IDM Developer Studiorsquo perspective
bull Go to lsquoWindowsrsquo -gt lsquoPreferencesrsquo and
maintain configuration parameters
Prerequisites for upgrading from IDM 72 to 80 SP1 (2 of 2)
28PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Plan the upgrade
bull Prepare yourself with training
bull Plan sufficient time for testing (double your estimates)
bull Plan enough time for the actual upgrade process
Make sure to read the documentation carefully
Get consulting with upgrade experience
Jobs that should run on specific repositories must have a certain repository assigned BEFORE the upgrade will be done
bull This will avoid job conversions later which would have to be done in the database
Make sure the export runs without errors Otherwise you may have import problemshellip
Packaging restructuring concept The initial solution offered in IDM 80 caused issues for SAP IT
bull ldquoMovingrdquo objects breaks existing references (GUIDs and other links were changed)
Tips and tricks
29PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
General product information SAP Identity Management 80ndash SAPCOM product page httpswwwsapcomproductsidentity-managementhtml
ndash SAP community (forum) for SAP IDM httpswwwsapcomcommunitytopicsidentity-managementhtml
Upgrade documentationndash Upgrading SAP Identity Management from 72 to 80 ndash on HELPSAPCOM
httpshelpsapcomviewer0a8e2a6c5dc142af85b7a1774fff2cde80en-US
ndash Community Wiki ndash link collection for IDM 80 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+80+Documentation
ndash Community Wiki ndash link collection for IDM 72 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+72+Documentation
ndash Release Info httpshelpsapcomviewerproductSAP_IDENTITY_MANAGEMENT80en-US
Quality improvements ndash For an overview of quality improvements in release 80 check the release notes starting with SP0hellip
httpshelpsapcomviewer97ae2202f05940a19211f9c5174a971c80en-US
Useful links
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
19PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
IDM configuration ndash other package objects
20PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
RepositoriesID
M 7
2
21PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository types
22PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Visual workflow design
23PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Provision processID
M 7
2
24PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
1 Perform a real upgrade from 72 to 80 (using an upgrade script ndash option chosen by SAP IT)
Pro Historical data will also be updated and it will be available for future audits
Con Reorganization re-work of packages scripts constants etc required to achieve simpler and understandable
package structure ndash this may involve many resources
2 Install SAP IDM 80 as a new installation
I Then import configuration and modifications from SAP IDM 72 to 80 (sample for exercises in this session)
Pro Speed of update (if IDM 7x install is not big and initial load runs fast)
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
II Recreate and simplify the business model from scratch
Pro Depending on the setup it might be easier and cleaner you can use the upgrade project to simplify your IDM
config
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
The two possible strategies to come to IDM 80 ndash pros amp cons
25PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
All configuration is in ONE package per ID store
ndash Tasks split into
Processes
Forms
Execution as before
Configuration editing
ndash Must be checked out to be edited
Revisions are stored when checking in
ndash Only one user can edit
ndash Possible to manually restructure into multiple packages
After upgradehellip (using strategy no1)
26PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
bull SAP NW AS JAVA ldquo73 SP09+rdquo ldquo73 EhP1 SP06+rdquo ldquo74 SP02+rdquo
bull Databases MS SQL Server 20082012 Oracle 112 IBM DB2 or SAP ASE bull For a complete and most current overview see the Product Availability Matrix on the SAP Service Marketplace
bull If you are currently running IDM 71 you will need to upgrade to 72 SP9 first and then to 80 bull Another option to consider Do not upgrade from 71 to 72 and then to 80 but do a fresh install of IDM 80
bull If you are running IDM 72 SP8 or lower you will need to upgrade to 72 SP9 (or higher) first
and then to IDM 80
bull However you can do all that in the same upgrade project without going live again on eg 72 SP9
bull For existing customization in IDM 72 Switch any job that uses the Windows Runtime or VB
Scripts to the Java Runtime or Java Scripts before starting the upgrade script for IDM 80
bull Since entity IDs such as task IDs and job IDs are not stable and they change much more
often in IDM 80 make sure you do not use them anywhere in your configuration
Use their GUID instead (or with version 8+ you can use their qualified name)
Prerequisites for upgrading from IDM 72 to 80 SP1 (1 of 2)
27PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
The deployment of the Eclipse-based Configuration Developer Studio (software component IDM
CONFIG LM FOR ECLIPSE 80) is done via the standard Eclipse plug-in installation functionality
using the lsquoSAP Development Tools for Eclipsersquo update site
For details and documentation see
httpstoolshanaondemandcomidm
bull Use ldquoEclipse IDE for Java EE Developersrdquo
Download and unzip eclipse-jee-luna-SR2-win32-x86_64zipldquo
Configuration of IDM connection(s)
bull Select the lsquoSAP IDM Developer Studiorsquo perspective
bull Go to lsquoWindowsrsquo -gt lsquoPreferencesrsquo and
maintain configuration parameters
Prerequisites for upgrading from IDM 72 to 80 SP1 (2 of 2)
28PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Plan the upgrade
bull Prepare yourself with training
bull Plan sufficient time for testing (double your estimates)
bull Plan enough time for the actual upgrade process
Make sure to read the documentation carefully
Get consulting with upgrade experience
Jobs that should run on specific repositories must have a certain repository assigned BEFORE the upgrade will be done
bull This will avoid job conversions later which would have to be done in the database
Make sure the export runs without errors Otherwise you may have import problemshellip
Packaging restructuring concept The initial solution offered in IDM 80 caused issues for SAP IT
bull ldquoMovingrdquo objects breaks existing references (GUIDs and other links were changed)
Tips and tricks
29PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
General product information SAP Identity Management 80ndash SAPCOM product page httpswwwsapcomproductsidentity-managementhtml
ndash SAP community (forum) for SAP IDM httpswwwsapcomcommunitytopicsidentity-managementhtml
Upgrade documentationndash Upgrading SAP Identity Management from 72 to 80 ndash on HELPSAPCOM
httpshelpsapcomviewer0a8e2a6c5dc142af85b7a1774fff2cde80en-US
ndash Community Wiki ndash link collection for IDM 80 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+80+Documentation
ndash Community Wiki ndash link collection for IDM 72 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+72+Documentation
ndash Release Info httpshelpsapcomviewerproductSAP_IDENTITY_MANAGEMENT80en-US
Quality improvements ndash For an overview of quality improvements in release 80 check the release notes starting with SP0hellip
httpshelpsapcomviewer97ae2202f05940a19211f9c5174a971c80en-US
Useful links
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
20PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
RepositoriesID
M 7
2
21PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository types
22PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Visual workflow design
23PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Provision processID
M 7
2
24PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
1 Perform a real upgrade from 72 to 80 (using an upgrade script ndash option chosen by SAP IT)
Pro Historical data will also be updated and it will be available for future audits
Con Reorganization re-work of packages scripts constants etc required to achieve simpler and understandable
package structure ndash this may involve many resources
2 Install SAP IDM 80 as a new installation
I Then import configuration and modifications from SAP IDM 72 to 80 (sample for exercises in this session)
Pro Speed of update (if IDM 7x install is not big and initial load runs fast)
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
II Recreate and simplify the business model from scratch
Pro Depending on the setup it might be easier and cleaner you can use the upgrade project to simplify your IDM
config
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
The two possible strategies to come to IDM 80 ndash pros amp cons
25PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
All configuration is in ONE package per ID store
ndash Tasks split into
Processes
Forms
Execution as before
Configuration editing
ndash Must be checked out to be edited
Revisions are stored when checking in
ndash Only one user can edit
ndash Possible to manually restructure into multiple packages
After upgradehellip (using strategy no1)
26PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
bull SAP NW AS JAVA ldquo73 SP09+rdquo ldquo73 EhP1 SP06+rdquo ldquo74 SP02+rdquo
bull Databases MS SQL Server 20082012 Oracle 112 IBM DB2 or SAP ASE bull For a complete and most current overview see the Product Availability Matrix on the SAP Service Marketplace
bull If you are currently running IDM 71 you will need to upgrade to 72 SP9 first and then to 80 bull Another option to consider Do not upgrade from 71 to 72 and then to 80 but do a fresh install of IDM 80
bull If you are running IDM 72 SP8 or lower you will need to upgrade to 72 SP9 (or higher) first
and then to IDM 80
bull However you can do all that in the same upgrade project without going live again on eg 72 SP9
bull For existing customization in IDM 72 Switch any job that uses the Windows Runtime or VB
Scripts to the Java Runtime or Java Scripts before starting the upgrade script for IDM 80
bull Since entity IDs such as task IDs and job IDs are not stable and they change much more
often in IDM 80 make sure you do not use them anywhere in your configuration
Use their GUID instead (or with version 8+ you can use their qualified name)
Prerequisites for upgrading from IDM 72 to 80 SP1 (1 of 2)
27PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
The deployment of the Eclipse-based Configuration Developer Studio (software component IDM
CONFIG LM FOR ECLIPSE 80) is done via the standard Eclipse plug-in installation functionality
using the lsquoSAP Development Tools for Eclipsersquo update site
For details and documentation see
httpstoolshanaondemandcomidm
bull Use ldquoEclipse IDE for Java EE Developersrdquo
Download and unzip eclipse-jee-luna-SR2-win32-x86_64zipldquo
Configuration of IDM connection(s)
bull Select the lsquoSAP IDM Developer Studiorsquo perspective
bull Go to lsquoWindowsrsquo -gt lsquoPreferencesrsquo and
maintain configuration parameters
Prerequisites for upgrading from IDM 72 to 80 SP1 (2 of 2)
28PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Plan the upgrade
bull Prepare yourself with training
bull Plan sufficient time for testing (double your estimates)
bull Plan enough time for the actual upgrade process
Make sure to read the documentation carefully
Get consulting with upgrade experience
Jobs that should run on specific repositories must have a certain repository assigned BEFORE the upgrade will be done
bull This will avoid job conversions later which would have to be done in the database
Make sure the export runs without errors Otherwise you may have import problemshellip
Packaging restructuring concept The initial solution offered in IDM 80 caused issues for SAP IT
bull ldquoMovingrdquo objects breaks existing references (GUIDs and other links were changed)
Tips and tricks
29PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
General product information SAP Identity Management 80ndash SAPCOM product page httpswwwsapcomproductsidentity-managementhtml
ndash SAP community (forum) for SAP IDM httpswwwsapcomcommunitytopicsidentity-managementhtml
Upgrade documentationndash Upgrading SAP Identity Management from 72 to 80 ndash on HELPSAPCOM
httpshelpsapcomviewer0a8e2a6c5dc142af85b7a1774fff2cde80en-US
ndash Community Wiki ndash link collection for IDM 80 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+80+Documentation
ndash Community Wiki ndash link collection for IDM 72 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+72+Documentation
ndash Release Info httpshelpsapcomviewerproductSAP_IDENTITY_MANAGEMENT80en-US
Quality improvements ndash For an overview of quality improvements in release 80 check the release notes starting with SP0hellip
httpshelpsapcomviewer97ae2202f05940a19211f9c5174a971c80en-US
Useful links
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
21PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Repository types
22PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Visual workflow design
23PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Provision processID
M 7
2
24PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
1 Perform a real upgrade from 72 to 80 (using an upgrade script ndash option chosen by SAP IT)
Pro Historical data will also be updated and it will be available for future audits
Con Reorganization re-work of packages scripts constants etc required to achieve simpler and understandable
package structure ndash this may involve many resources
2 Install SAP IDM 80 as a new installation
I Then import configuration and modifications from SAP IDM 72 to 80 (sample for exercises in this session)
Pro Speed of update (if IDM 7x install is not big and initial load runs fast)
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
II Recreate and simplify the business model from scratch
Pro Depending on the setup it might be easier and cleaner you can use the upgrade project to simplify your IDM
config
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
The two possible strategies to come to IDM 80 ndash pros amp cons
25PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
All configuration is in ONE package per ID store
ndash Tasks split into
Processes
Forms
Execution as before
Configuration editing
ndash Must be checked out to be edited
Revisions are stored when checking in
ndash Only one user can edit
ndash Possible to manually restructure into multiple packages
After upgradehellip (using strategy no1)
26PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
bull SAP NW AS JAVA ldquo73 SP09+rdquo ldquo73 EhP1 SP06+rdquo ldquo74 SP02+rdquo
bull Databases MS SQL Server 20082012 Oracle 112 IBM DB2 or SAP ASE bull For a complete and most current overview see the Product Availability Matrix on the SAP Service Marketplace
bull If you are currently running IDM 71 you will need to upgrade to 72 SP9 first and then to 80 bull Another option to consider Do not upgrade from 71 to 72 and then to 80 but do a fresh install of IDM 80
bull If you are running IDM 72 SP8 or lower you will need to upgrade to 72 SP9 (or higher) first
and then to IDM 80
bull However you can do all that in the same upgrade project without going live again on eg 72 SP9
bull For existing customization in IDM 72 Switch any job that uses the Windows Runtime or VB
Scripts to the Java Runtime or Java Scripts before starting the upgrade script for IDM 80
bull Since entity IDs such as task IDs and job IDs are not stable and they change much more
often in IDM 80 make sure you do not use them anywhere in your configuration
Use their GUID instead (or with version 8+ you can use their qualified name)
Prerequisites for upgrading from IDM 72 to 80 SP1 (1 of 2)
27PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
The deployment of the Eclipse-based Configuration Developer Studio (software component IDM
CONFIG LM FOR ECLIPSE 80) is done via the standard Eclipse plug-in installation functionality
using the lsquoSAP Development Tools for Eclipsersquo update site
For details and documentation see
httpstoolshanaondemandcomidm
bull Use ldquoEclipse IDE for Java EE Developersrdquo
Download and unzip eclipse-jee-luna-SR2-win32-x86_64zipldquo
Configuration of IDM connection(s)
bull Select the lsquoSAP IDM Developer Studiorsquo perspective
bull Go to lsquoWindowsrsquo -gt lsquoPreferencesrsquo and
maintain configuration parameters
Prerequisites for upgrading from IDM 72 to 80 SP1 (2 of 2)
28PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Plan the upgrade
bull Prepare yourself with training
bull Plan sufficient time for testing (double your estimates)
bull Plan enough time for the actual upgrade process
Make sure to read the documentation carefully
Get consulting with upgrade experience
Jobs that should run on specific repositories must have a certain repository assigned BEFORE the upgrade will be done
bull This will avoid job conversions later which would have to be done in the database
Make sure the export runs without errors Otherwise you may have import problemshellip
Packaging restructuring concept The initial solution offered in IDM 80 caused issues for SAP IT
bull ldquoMovingrdquo objects breaks existing references (GUIDs and other links were changed)
Tips and tricks
29PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
General product information SAP Identity Management 80ndash SAPCOM product page httpswwwsapcomproductsidentity-managementhtml
ndash SAP community (forum) for SAP IDM httpswwwsapcomcommunitytopicsidentity-managementhtml
Upgrade documentationndash Upgrading SAP Identity Management from 72 to 80 ndash on HELPSAPCOM
httpshelpsapcomviewer0a8e2a6c5dc142af85b7a1774fff2cde80en-US
ndash Community Wiki ndash link collection for IDM 80 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+80+Documentation
ndash Community Wiki ndash link collection for IDM 72 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+72+Documentation
ndash Release Info httpshelpsapcomviewerproductSAP_IDENTITY_MANAGEMENT80en-US
Quality improvements ndash For an overview of quality improvements in release 80 check the release notes starting with SP0hellip
httpshelpsapcomviewer97ae2202f05940a19211f9c5174a971c80en-US
Useful links
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
22PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Visual workflow design
23PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Provision processID
M 7
2
24PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
1 Perform a real upgrade from 72 to 80 (using an upgrade script ndash option chosen by SAP IT)
Pro Historical data will also be updated and it will be available for future audits
Con Reorganization re-work of packages scripts constants etc required to achieve simpler and understandable
package structure ndash this may involve many resources
2 Install SAP IDM 80 as a new installation
I Then import configuration and modifications from SAP IDM 72 to 80 (sample for exercises in this session)
Pro Speed of update (if IDM 7x install is not big and initial load runs fast)
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
II Recreate and simplify the business model from scratch
Pro Depending on the setup it might be easier and cleaner you can use the upgrade project to simplify your IDM
config
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
The two possible strategies to come to IDM 80 ndash pros amp cons
25PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
All configuration is in ONE package per ID store
ndash Tasks split into
Processes
Forms
Execution as before
Configuration editing
ndash Must be checked out to be edited
Revisions are stored when checking in
ndash Only one user can edit
ndash Possible to manually restructure into multiple packages
After upgradehellip (using strategy no1)
26PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
bull SAP NW AS JAVA ldquo73 SP09+rdquo ldquo73 EhP1 SP06+rdquo ldquo74 SP02+rdquo
bull Databases MS SQL Server 20082012 Oracle 112 IBM DB2 or SAP ASE bull For a complete and most current overview see the Product Availability Matrix on the SAP Service Marketplace
bull If you are currently running IDM 71 you will need to upgrade to 72 SP9 first and then to 80 bull Another option to consider Do not upgrade from 71 to 72 and then to 80 but do a fresh install of IDM 80
bull If you are running IDM 72 SP8 or lower you will need to upgrade to 72 SP9 (or higher) first
and then to IDM 80
bull However you can do all that in the same upgrade project without going live again on eg 72 SP9
bull For existing customization in IDM 72 Switch any job that uses the Windows Runtime or VB
Scripts to the Java Runtime or Java Scripts before starting the upgrade script for IDM 80
bull Since entity IDs such as task IDs and job IDs are not stable and they change much more
often in IDM 80 make sure you do not use them anywhere in your configuration
Use their GUID instead (or with version 8+ you can use their qualified name)
Prerequisites for upgrading from IDM 72 to 80 SP1 (1 of 2)
27PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
The deployment of the Eclipse-based Configuration Developer Studio (software component IDM
CONFIG LM FOR ECLIPSE 80) is done via the standard Eclipse plug-in installation functionality
using the lsquoSAP Development Tools for Eclipsersquo update site
For details and documentation see
httpstoolshanaondemandcomidm
bull Use ldquoEclipse IDE for Java EE Developersrdquo
Download and unzip eclipse-jee-luna-SR2-win32-x86_64zipldquo
Configuration of IDM connection(s)
bull Select the lsquoSAP IDM Developer Studiorsquo perspective
bull Go to lsquoWindowsrsquo -gt lsquoPreferencesrsquo and
maintain configuration parameters
Prerequisites for upgrading from IDM 72 to 80 SP1 (2 of 2)
28PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Plan the upgrade
bull Prepare yourself with training
bull Plan sufficient time for testing (double your estimates)
bull Plan enough time for the actual upgrade process
Make sure to read the documentation carefully
Get consulting with upgrade experience
Jobs that should run on specific repositories must have a certain repository assigned BEFORE the upgrade will be done
bull This will avoid job conversions later which would have to be done in the database
Make sure the export runs without errors Otherwise you may have import problemshellip
Packaging restructuring concept The initial solution offered in IDM 80 caused issues for SAP IT
bull ldquoMovingrdquo objects breaks existing references (GUIDs and other links were changed)
Tips and tricks
29PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
General product information SAP Identity Management 80ndash SAPCOM product page httpswwwsapcomproductsidentity-managementhtml
ndash SAP community (forum) for SAP IDM httpswwwsapcomcommunitytopicsidentity-managementhtml
Upgrade documentationndash Upgrading SAP Identity Management from 72 to 80 ndash on HELPSAPCOM
httpshelpsapcomviewer0a8e2a6c5dc142af85b7a1774fff2cde80en-US
ndash Community Wiki ndash link collection for IDM 80 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+80+Documentation
ndash Community Wiki ndash link collection for IDM 72 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+72+Documentation
ndash Release Info httpshelpsapcomviewerproductSAP_IDENTITY_MANAGEMENT80en-US
Quality improvements ndash For an overview of quality improvements in release 80 check the release notes starting with SP0hellip
httpshelpsapcomviewer97ae2202f05940a19211f9c5174a971c80en-US
Useful links
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
23PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Provision processID
M 7
2
24PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
1 Perform a real upgrade from 72 to 80 (using an upgrade script ndash option chosen by SAP IT)
Pro Historical data will also be updated and it will be available for future audits
Con Reorganization re-work of packages scripts constants etc required to achieve simpler and understandable
package structure ndash this may involve many resources
2 Install SAP IDM 80 as a new installation
I Then import configuration and modifications from SAP IDM 72 to 80 (sample for exercises in this session)
Pro Speed of update (if IDM 7x install is not big and initial load runs fast)
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
II Recreate and simplify the business model from scratch
Pro Depending on the setup it might be easier and cleaner you can use the upgrade project to simplify your IDM
config
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
The two possible strategies to come to IDM 80 ndash pros amp cons
25PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
All configuration is in ONE package per ID store
ndash Tasks split into
Processes
Forms
Execution as before
Configuration editing
ndash Must be checked out to be edited
Revisions are stored when checking in
ndash Only one user can edit
ndash Possible to manually restructure into multiple packages
After upgradehellip (using strategy no1)
26PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
bull SAP NW AS JAVA ldquo73 SP09+rdquo ldquo73 EhP1 SP06+rdquo ldquo74 SP02+rdquo
bull Databases MS SQL Server 20082012 Oracle 112 IBM DB2 or SAP ASE bull For a complete and most current overview see the Product Availability Matrix on the SAP Service Marketplace
bull If you are currently running IDM 71 you will need to upgrade to 72 SP9 first and then to 80 bull Another option to consider Do not upgrade from 71 to 72 and then to 80 but do a fresh install of IDM 80
bull If you are running IDM 72 SP8 or lower you will need to upgrade to 72 SP9 (or higher) first
and then to IDM 80
bull However you can do all that in the same upgrade project without going live again on eg 72 SP9
bull For existing customization in IDM 72 Switch any job that uses the Windows Runtime or VB
Scripts to the Java Runtime or Java Scripts before starting the upgrade script for IDM 80
bull Since entity IDs such as task IDs and job IDs are not stable and they change much more
often in IDM 80 make sure you do not use them anywhere in your configuration
Use their GUID instead (or with version 8+ you can use their qualified name)
Prerequisites for upgrading from IDM 72 to 80 SP1 (1 of 2)
27PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
The deployment of the Eclipse-based Configuration Developer Studio (software component IDM
CONFIG LM FOR ECLIPSE 80) is done via the standard Eclipse plug-in installation functionality
using the lsquoSAP Development Tools for Eclipsersquo update site
For details and documentation see
httpstoolshanaondemandcomidm
bull Use ldquoEclipse IDE for Java EE Developersrdquo
Download and unzip eclipse-jee-luna-SR2-win32-x86_64zipldquo
Configuration of IDM connection(s)
bull Select the lsquoSAP IDM Developer Studiorsquo perspective
bull Go to lsquoWindowsrsquo -gt lsquoPreferencesrsquo and
maintain configuration parameters
Prerequisites for upgrading from IDM 72 to 80 SP1 (2 of 2)
28PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Plan the upgrade
bull Prepare yourself with training
bull Plan sufficient time for testing (double your estimates)
bull Plan enough time for the actual upgrade process
Make sure to read the documentation carefully
Get consulting with upgrade experience
Jobs that should run on specific repositories must have a certain repository assigned BEFORE the upgrade will be done
bull This will avoid job conversions later which would have to be done in the database
Make sure the export runs without errors Otherwise you may have import problemshellip
Packaging restructuring concept The initial solution offered in IDM 80 caused issues for SAP IT
bull ldquoMovingrdquo objects breaks existing references (GUIDs and other links were changed)
Tips and tricks
29PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
General product information SAP Identity Management 80ndash SAPCOM product page httpswwwsapcomproductsidentity-managementhtml
ndash SAP community (forum) for SAP IDM httpswwwsapcomcommunitytopicsidentity-managementhtml
Upgrade documentationndash Upgrading SAP Identity Management from 72 to 80 ndash on HELPSAPCOM
httpshelpsapcomviewer0a8e2a6c5dc142af85b7a1774fff2cde80en-US
ndash Community Wiki ndash link collection for IDM 80 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+80+Documentation
ndash Community Wiki ndash link collection for IDM 72 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+72+Documentation
ndash Release Info httpshelpsapcomviewerproductSAP_IDENTITY_MANAGEMENT80en-US
Quality improvements ndash For an overview of quality improvements in release 80 check the release notes starting with SP0hellip
httpshelpsapcomviewer97ae2202f05940a19211f9c5174a971c80en-US
Useful links
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
24PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
1 Perform a real upgrade from 72 to 80 (using an upgrade script ndash option chosen by SAP IT)
Pro Historical data will also be updated and it will be available for future audits
Con Reorganization re-work of packages scripts constants etc required to achieve simpler and understandable
package structure ndash this may involve many resources
2 Install SAP IDM 80 as a new installation
I Then import configuration and modifications from SAP IDM 72 to 80 (sample for exercises in this session)
Pro Speed of update (if IDM 7x install is not big and initial load runs fast)
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
II Recreate and simplify the business model from scratch
Pro Depending on the setup it might be easier and cleaner you can use the upgrade project to simplify your IDM
config
Con In your new IDM environment you will not retain the historical data from IDM 72 and before
The two possible strategies to come to IDM 80 ndash pros amp cons
25PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
All configuration is in ONE package per ID store
ndash Tasks split into
Processes
Forms
Execution as before
Configuration editing
ndash Must be checked out to be edited
Revisions are stored when checking in
ndash Only one user can edit
ndash Possible to manually restructure into multiple packages
After upgradehellip (using strategy no1)
26PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
bull SAP NW AS JAVA ldquo73 SP09+rdquo ldquo73 EhP1 SP06+rdquo ldquo74 SP02+rdquo
bull Databases MS SQL Server 20082012 Oracle 112 IBM DB2 or SAP ASE bull For a complete and most current overview see the Product Availability Matrix on the SAP Service Marketplace
bull If you are currently running IDM 71 you will need to upgrade to 72 SP9 first and then to 80 bull Another option to consider Do not upgrade from 71 to 72 and then to 80 but do a fresh install of IDM 80
bull If you are running IDM 72 SP8 or lower you will need to upgrade to 72 SP9 (or higher) first
and then to IDM 80
bull However you can do all that in the same upgrade project without going live again on eg 72 SP9
bull For existing customization in IDM 72 Switch any job that uses the Windows Runtime or VB
Scripts to the Java Runtime or Java Scripts before starting the upgrade script for IDM 80
bull Since entity IDs such as task IDs and job IDs are not stable and they change much more
often in IDM 80 make sure you do not use them anywhere in your configuration
Use their GUID instead (or with version 8+ you can use their qualified name)
Prerequisites for upgrading from IDM 72 to 80 SP1 (1 of 2)
27PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
The deployment of the Eclipse-based Configuration Developer Studio (software component IDM
CONFIG LM FOR ECLIPSE 80) is done via the standard Eclipse plug-in installation functionality
using the lsquoSAP Development Tools for Eclipsersquo update site
For details and documentation see
httpstoolshanaondemandcomidm
bull Use ldquoEclipse IDE for Java EE Developersrdquo
Download and unzip eclipse-jee-luna-SR2-win32-x86_64zipldquo
Configuration of IDM connection(s)
bull Select the lsquoSAP IDM Developer Studiorsquo perspective
bull Go to lsquoWindowsrsquo -gt lsquoPreferencesrsquo and
maintain configuration parameters
Prerequisites for upgrading from IDM 72 to 80 SP1 (2 of 2)
28PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Plan the upgrade
bull Prepare yourself with training
bull Plan sufficient time for testing (double your estimates)
bull Plan enough time for the actual upgrade process
Make sure to read the documentation carefully
Get consulting with upgrade experience
Jobs that should run on specific repositories must have a certain repository assigned BEFORE the upgrade will be done
bull This will avoid job conversions later which would have to be done in the database
Make sure the export runs without errors Otherwise you may have import problemshellip
Packaging restructuring concept The initial solution offered in IDM 80 caused issues for SAP IT
bull ldquoMovingrdquo objects breaks existing references (GUIDs and other links were changed)
Tips and tricks
29PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
General product information SAP Identity Management 80ndash SAPCOM product page httpswwwsapcomproductsidentity-managementhtml
ndash SAP community (forum) for SAP IDM httpswwwsapcomcommunitytopicsidentity-managementhtml
Upgrade documentationndash Upgrading SAP Identity Management from 72 to 80 ndash on HELPSAPCOM
httpshelpsapcomviewer0a8e2a6c5dc142af85b7a1774fff2cde80en-US
ndash Community Wiki ndash link collection for IDM 80 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+80+Documentation
ndash Community Wiki ndash link collection for IDM 72 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+72+Documentation
ndash Release Info httpshelpsapcomviewerproductSAP_IDENTITY_MANAGEMENT80en-US
Quality improvements ndash For an overview of quality improvements in release 80 check the release notes starting with SP0hellip
httpshelpsapcomviewer97ae2202f05940a19211f9c5174a971c80en-US
Useful links
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
25PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
All configuration is in ONE package per ID store
ndash Tasks split into
Processes
Forms
Execution as before
Configuration editing
ndash Must be checked out to be edited
Revisions are stored when checking in
ndash Only one user can edit
ndash Possible to manually restructure into multiple packages
After upgradehellip (using strategy no1)
26PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
bull SAP NW AS JAVA ldquo73 SP09+rdquo ldquo73 EhP1 SP06+rdquo ldquo74 SP02+rdquo
bull Databases MS SQL Server 20082012 Oracle 112 IBM DB2 or SAP ASE bull For a complete and most current overview see the Product Availability Matrix on the SAP Service Marketplace
bull If you are currently running IDM 71 you will need to upgrade to 72 SP9 first and then to 80 bull Another option to consider Do not upgrade from 71 to 72 and then to 80 but do a fresh install of IDM 80
bull If you are running IDM 72 SP8 or lower you will need to upgrade to 72 SP9 (or higher) first
and then to IDM 80
bull However you can do all that in the same upgrade project without going live again on eg 72 SP9
bull For existing customization in IDM 72 Switch any job that uses the Windows Runtime or VB
Scripts to the Java Runtime or Java Scripts before starting the upgrade script for IDM 80
bull Since entity IDs such as task IDs and job IDs are not stable and they change much more
often in IDM 80 make sure you do not use them anywhere in your configuration
Use their GUID instead (or with version 8+ you can use their qualified name)
Prerequisites for upgrading from IDM 72 to 80 SP1 (1 of 2)
27PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
The deployment of the Eclipse-based Configuration Developer Studio (software component IDM
CONFIG LM FOR ECLIPSE 80) is done via the standard Eclipse plug-in installation functionality
using the lsquoSAP Development Tools for Eclipsersquo update site
For details and documentation see
httpstoolshanaondemandcomidm
bull Use ldquoEclipse IDE for Java EE Developersrdquo
Download and unzip eclipse-jee-luna-SR2-win32-x86_64zipldquo
Configuration of IDM connection(s)
bull Select the lsquoSAP IDM Developer Studiorsquo perspective
bull Go to lsquoWindowsrsquo -gt lsquoPreferencesrsquo and
maintain configuration parameters
Prerequisites for upgrading from IDM 72 to 80 SP1 (2 of 2)
28PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Plan the upgrade
bull Prepare yourself with training
bull Plan sufficient time for testing (double your estimates)
bull Plan enough time for the actual upgrade process
Make sure to read the documentation carefully
Get consulting with upgrade experience
Jobs that should run on specific repositories must have a certain repository assigned BEFORE the upgrade will be done
bull This will avoid job conversions later which would have to be done in the database
Make sure the export runs without errors Otherwise you may have import problemshellip
Packaging restructuring concept The initial solution offered in IDM 80 caused issues for SAP IT
bull ldquoMovingrdquo objects breaks existing references (GUIDs and other links were changed)
Tips and tricks
29PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
General product information SAP Identity Management 80ndash SAPCOM product page httpswwwsapcomproductsidentity-managementhtml
ndash SAP community (forum) for SAP IDM httpswwwsapcomcommunitytopicsidentity-managementhtml
Upgrade documentationndash Upgrading SAP Identity Management from 72 to 80 ndash on HELPSAPCOM
httpshelpsapcomviewer0a8e2a6c5dc142af85b7a1774fff2cde80en-US
ndash Community Wiki ndash link collection for IDM 80 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+80+Documentation
ndash Community Wiki ndash link collection for IDM 72 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+72+Documentation
ndash Release Info httpshelpsapcomviewerproductSAP_IDENTITY_MANAGEMENT80en-US
Quality improvements ndash For an overview of quality improvements in release 80 check the release notes starting with SP0hellip
httpshelpsapcomviewer97ae2202f05940a19211f9c5174a971c80en-US
Useful links
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
26PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
bull SAP NW AS JAVA ldquo73 SP09+rdquo ldquo73 EhP1 SP06+rdquo ldquo74 SP02+rdquo
bull Databases MS SQL Server 20082012 Oracle 112 IBM DB2 or SAP ASE bull For a complete and most current overview see the Product Availability Matrix on the SAP Service Marketplace
bull If you are currently running IDM 71 you will need to upgrade to 72 SP9 first and then to 80 bull Another option to consider Do not upgrade from 71 to 72 and then to 80 but do a fresh install of IDM 80
bull If you are running IDM 72 SP8 or lower you will need to upgrade to 72 SP9 (or higher) first
and then to IDM 80
bull However you can do all that in the same upgrade project without going live again on eg 72 SP9
bull For existing customization in IDM 72 Switch any job that uses the Windows Runtime or VB
Scripts to the Java Runtime or Java Scripts before starting the upgrade script for IDM 80
bull Since entity IDs such as task IDs and job IDs are not stable and they change much more
often in IDM 80 make sure you do not use them anywhere in your configuration
Use their GUID instead (or with version 8+ you can use their qualified name)
Prerequisites for upgrading from IDM 72 to 80 SP1 (1 of 2)
27PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
The deployment of the Eclipse-based Configuration Developer Studio (software component IDM
CONFIG LM FOR ECLIPSE 80) is done via the standard Eclipse plug-in installation functionality
using the lsquoSAP Development Tools for Eclipsersquo update site
For details and documentation see
httpstoolshanaondemandcomidm
bull Use ldquoEclipse IDE for Java EE Developersrdquo
Download and unzip eclipse-jee-luna-SR2-win32-x86_64zipldquo
Configuration of IDM connection(s)
bull Select the lsquoSAP IDM Developer Studiorsquo perspective
bull Go to lsquoWindowsrsquo -gt lsquoPreferencesrsquo and
maintain configuration parameters
Prerequisites for upgrading from IDM 72 to 80 SP1 (2 of 2)
28PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Plan the upgrade
bull Prepare yourself with training
bull Plan sufficient time for testing (double your estimates)
bull Plan enough time for the actual upgrade process
Make sure to read the documentation carefully
Get consulting with upgrade experience
Jobs that should run on specific repositories must have a certain repository assigned BEFORE the upgrade will be done
bull This will avoid job conversions later which would have to be done in the database
Make sure the export runs without errors Otherwise you may have import problemshellip
Packaging restructuring concept The initial solution offered in IDM 80 caused issues for SAP IT
bull ldquoMovingrdquo objects breaks existing references (GUIDs and other links were changed)
Tips and tricks
29PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
General product information SAP Identity Management 80ndash SAPCOM product page httpswwwsapcomproductsidentity-managementhtml
ndash SAP community (forum) for SAP IDM httpswwwsapcomcommunitytopicsidentity-managementhtml
Upgrade documentationndash Upgrading SAP Identity Management from 72 to 80 ndash on HELPSAPCOM
httpshelpsapcomviewer0a8e2a6c5dc142af85b7a1774fff2cde80en-US
ndash Community Wiki ndash link collection for IDM 80 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+80+Documentation
ndash Community Wiki ndash link collection for IDM 72 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+72+Documentation
ndash Release Info httpshelpsapcomviewerproductSAP_IDENTITY_MANAGEMENT80en-US
Quality improvements ndash For an overview of quality improvements in release 80 check the release notes starting with SP0hellip
httpshelpsapcomviewer97ae2202f05940a19211f9c5174a971c80en-US
Useful links
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
27PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
The deployment of the Eclipse-based Configuration Developer Studio (software component IDM
CONFIG LM FOR ECLIPSE 80) is done via the standard Eclipse plug-in installation functionality
using the lsquoSAP Development Tools for Eclipsersquo update site
For details and documentation see
httpstoolshanaondemandcomidm
bull Use ldquoEclipse IDE for Java EE Developersrdquo
Download and unzip eclipse-jee-luna-SR2-win32-x86_64zipldquo
Configuration of IDM connection(s)
bull Select the lsquoSAP IDM Developer Studiorsquo perspective
bull Go to lsquoWindowsrsquo -gt lsquoPreferencesrsquo and
maintain configuration parameters
Prerequisites for upgrading from IDM 72 to 80 SP1 (2 of 2)
28PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Plan the upgrade
bull Prepare yourself with training
bull Plan sufficient time for testing (double your estimates)
bull Plan enough time for the actual upgrade process
Make sure to read the documentation carefully
Get consulting with upgrade experience
Jobs that should run on specific repositories must have a certain repository assigned BEFORE the upgrade will be done
bull This will avoid job conversions later which would have to be done in the database
Make sure the export runs without errors Otherwise you may have import problemshellip
Packaging restructuring concept The initial solution offered in IDM 80 caused issues for SAP IT
bull ldquoMovingrdquo objects breaks existing references (GUIDs and other links were changed)
Tips and tricks
29PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
General product information SAP Identity Management 80ndash SAPCOM product page httpswwwsapcomproductsidentity-managementhtml
ndash SAP community (forum) for SAP IDM httpswwwsapcomcommunitytopicsidentity-managementhtml
Upgrade documentationndash Upgrading SAP Identity Management from 72 to 80 ndash on HELPSAPCOM
httpshelpsapcomviewer0a8e2a6c5dc142af85b7a1774fff2cde80en-US
ndash Community Wiki ndash link collection for IDM 80 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+80+Documentation
ndash Community Wiki ndash link collection for IDM 72 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+72+Documentation
ndash Release Info httpshelpsapcomviewerproductSAP_IDENTITY_MANAGEMENT80en-US
Quality improvements ndash For an overview of quality improvements in release 80 check the release notes starting with SP0hellip
httpshelpsapcomviewer97ae2202f05940a19211f9c5174a971c80en-US
Useful links
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
28PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
Plan the upgrade
bull Prepare yourself with training
bull Plan sufficient time for testing (double your estimates)
bull Plan enough time for the actual upgrade process
Make sure to read the documentation carefully
Get consulting with upgrade experience
Jobs that should run on specific repositories must have a certain repository assigned BEFORE the upgrade will be done
bull This will avoid job conversions later which would have to be done in the database
Make sure the export runs without errors Otherwise you may have import problemshellip
Packaging restructuring concept The initial solution offered in IDM 80 caused issues for SAP IT
bull ldquoMovingrdquo objects breaks existing references (GUIDs and other links were changed)
Tips and tricks
29PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
General product information SAP Identity Management 80ndash SAPCOM product page httpswwwsapcomproductsidentity-managementhtml
ndash SAP community (forum) for SAP IDM httpswwwsapcomcommunitytopicsidentity-managementhtml
Upgrade documentationndash Upgrading SAP Identity Management from 72 to 80 ndash on HELPSAPCOM
httpshelpsapcomviewer0a8e2a6c5dc142af85b7a1774fff2cde80en-US
ndash Community Wiki ndash link collection for IDM 80 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+80+Documentation
ndash Community Wiki ndash link collection for IDM 72 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+72+Documentation
ndash Release Info httpshelpsapcomviewerproductSAP_IDENTITY_MANAGEMENT80en-US
Quality improvements ndash For an overview of quality improvements in release 80 check the release notes starting with SP0hellip
httpshelpsapcomviewer97ae2202f05940a19211f9c5174a971c80en-US
Useful links
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
29PUBLICcopy 2018 SAP SE or an SAP affiliate company All rights reserved ǀ
General product information SAP Identity Management 80ndash SAPCOM product page httpswwwsapcomproductsidentity-managementhtml
ndash SAP community (forum) for SAP IDM httpswwwsapcomcommunitytopicsidentity-managementhtml
Upgrade documentationndash Upgrading SAP Identity Management from 72 to 80 ndash on HELPSAPCOM
httpshelpsapcomviewer0a8e2a6c5dc142af85b7a1774fff2cde80en-US
ndash Community Wiki ndash link collection for IDM 80 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+80+Documentation
ndash Community Wiki ndash link collection for IDM 72 documentationhttpswikiscnsapcomwikidisplaySecuritySAP+Identity+Management+72+Documentation
ndash Release Info httpshelpsapcomviewerproductSAP_IDENTITY_MANAGEMENT80en-US
Quality improvements ndash For an overview of quality improvements in release 80 check the release notes starting with SP0hellip
httpshelpsapcomviewer97ae2202f05940a19211f9c5174a971c80en-US
Useful links
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
copy 2018 SAP SE or an SAP affiliate company All rights reserved
No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company
The information contained herein may be changed without prior notice Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors National product specifications may vary
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only without representation or
warranty of any kind and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services if any Nothing herein should be construed as constituting an additional
warranty
In particular SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation or to develop or release any functionality mentioned therein This document or any related presentation
and SAP SErsquos or its affiliated companiesrsquo strategy and possible future developments products andor platforms directions and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice The information in this document is not a commitment promise or legal obligation to deliver any material code or
functionality All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations Readers are cautioned not to place undue reliance on these forward-looking statements and they
should not be relied upon in making purchasing decisions
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries All other product and service names
mentioned are the trademarks of their respective companies
See wwwsapcomcopyright for additional trademark information and notices
wwwsapcomcontactsap
Follow us
