Retry failed UpdateABAPUser process - what's the best way?

[Chenyang]

Hi IdM experts,

IdM has internal function to retry failed assignments. How do we retry failed process like UpdateABAPUser. uProvision seems not working in a job.

Thanks,

Chenyang

[normann · Accepted solution]

Hi Chenyang,

have you tried the internal function uIS_RepairEntry?

Regards

Norman

[Chenyang · Accepted solution]

Hi Norman,

I tested just now and it doesn't work. The role strcuture of the user is correct. It is just execution of updateABAPUser fails (e.g. network issue). I want to collect those failed tasks and retry update at midnight.

Thanks,

Chenyang

[normann · Accepted solution]

Hi Chenyang,

then I got you wrong.

You can copy the ToSAPIdentity pass from modifyUser process of the ABAP connector into a job. In the source query you identify the users that have a failed update (e.g. by audit) and in destination you push those straight into the according ABAP system. But you would need one pass per repository (or you run the job once for every repository).

Regards

Norman

[Chenyang · Accepted solution]

Hi Norman,

Thanks for the solution. I believe your solution will work. But it will take a lot effort, won't it? It will be much better to have another function uRetryFailedUpdate ...

Thanks,

Chenyang

[Steffi_Warnecke · Accepted solution]

Hello Chenyang,

you have to create a job either way, but at least once it's created you could just schedule the job to run once a night or week (depending on how often the ABAP update fails) to synchronize your backend with IDM.

Judging by what Norman proposed, I'd say this job is created in like 10 minutes. 😉

.

Regards,

Steffi.

[devaprakash_b]

Hi Chenyang,

If i understand correctly you would like to trigger the updateABAPUser action task available under the ModifyUser Plugin task in the abap connector package. If yes, you can use uProvision() function.

1. Create a job and use to generic pass

2. Pass the below values as parameters to the script

usermskey, task id, repository id

3. Create a script which accepts the above mentioned values and call the function uProvision as below

uProvision(userMskey, ModifyUserPluginTaskid, currentAuditID, repID, "RETRY_PROVISIONING", 0);

Regards,

Deva

[Chenyang]

Have you tested this solution? It does not work for me.

[devaprakash_b]

Yes chenyang, it should work, i haven't tried for updateAbapUser task, but triggered Password reset task many times.

usually i use the below function to retrigger any task.

uProvision(userMskey, taskid, 0, repID,"", 0);

[Chenyang]

I don't know how you make it work, since SAP help clearly indicates it cannot be triggered by a job.

Note: This function is only available within the provisioning module of the Identity Center.

https://help.sap.com/http.svc/rc/a640e87c07284708928e3091950b0e6e/7.2/en-US/ICSkin/using_functions/i...