cancel
Showing results for 
Search instead for 
Did you mean: 

Sync LDAP users with ECC - Mapping required field

Former Member
0 Kudos

Hello,

I want to synchronize SAP ECC users with LDAP users.

At this moment I succeed to synchronize all users existing from the LDAP to the ECC.

But I want to filter users which need to be created by a specific attribute added in the LDAP.

I changed the LDAP mapping to add the "required" check on the corresponding to the specific attribute field. But when I use the RSLDAPSYNC_USER program, this required attribute is not considered.

What can I do to synchronize user which have the specific attribute filled. And not all users ?

Thanks for regards.

Edited by: Gaetan Bourgneuf on Jun 18, 2008 11:27 AM

Accepted Solutions (1)

Accepted Solutions (1)

former_member185954
Active Contributor
0 Kudos

Hello,

You can set negative filter:

Check this link:

http://help.sap.com/saphelp_nw70/helpdata/EN/9a/f43541b9cc4c0de10000000a1550b0/frameset.htm

Regards,

Siddhesh

Former Member
0 Kudos

Hello,

Thanks for your help.

But this link talks about the UME configuration in SAP Portal.

My problem is to filter users for the ECC (ABAP) synchronization.

Regards,

Former Member
0 Kudos

Check this note

Note 790112 - RSLDAPSYNC_USER: Selecting user group and user type

former_member185954
Active Contributor
0 Kudos

Hello,

Have you check this note:

SAP Note Number: 793191 - FAQ: User master synchronization with LDAP directories

Question 6 is interesting.

Regards,

Siddhesh

Edited by: Siddhesh Ghag on Jun 18, 2008 11:59 AM

Former Member
0 Kudos

Thanks Deepak Sharma .

I am on an ECC 6.0. So this correction seems to be already applied.

Edited by: Gaetan Bourgneuf on Jun 18, 2008 12:00 PM

Former Member
0 Kudos

Note 618095 - Structure of LDAP search filter drg. user master synchroniz.

Former Member
0 Kudos

Thanks Siddhesh Ghag.

This note is very helpful and solved my problem.

I created a new mapping entry between the SAP User in ECC and the specific attibute created in the LDAP.

So if user has this specific attribute filled with is SAP username, this user is synchronized and created into the ECC.

former_member185954
Active Contributor
0 Kudos

Glad to help.

And thanks for posting what you did, all this helps in building the collective knowledge of the forum.

Please do keep visiting the forum and share your experiences here

Regards,

Siddhesh

Former Member
0 Kudos

In detailled:

- in the LDAP we have created a specific attribute name "SAP FIELD" (technical name is extensionAttribute10)

- in the LDAPMAP transaction in the ECC I modified the following entry:

" USERNAME | BAPIBNAME | sAMAccountName | X | X | X | X | | X | |"

By the following new:

" USERNAME | BAPIBNAME | extensionAttribute10 | X | X | X | X | | X | |"

So when I synchronize the LDAP, the LDAP specific extension is required (because linked to the SAP username). And if user doesn't has this specific attribute filled, it's not synchronized.

Former Member
0 Kudos

Hi,

I see thats's very old topisc.

But can you remember how you synchronized the LDAP to SAP? I want to know what you had in sAMAccountName and in extensionAttribute10?

Did the combination of this 2 parameters were combined into the USERNAME | BAPIBNAME?

I want to replicate sAMAccountName if the extensionAttribute6 is set to 1.

Answers (0)