SAP HCM/Active Directory synchronization

[Former Member]

Hi,

I am trying to integrate SAP R/3 (master database) to Active Directory.

And Active Directory will be used by rest all systems.Adding of new employee is done at SAP HCM and the same data should be created in Active Directory.

I went through couple of forum threads but did not get the solution,

http://forums.sdn.sap.com/click.jspa?searchID=47039448&messageID=7577288

Please le me know how can achieve this.Your help is greatly appreciated...

Regards,

Rudradev Devulapelli

[rudradev_devulapalli3]

yes

[former_member671224]

Hi,

Im having similar requirement to sync HCM data with MS AD; user creation, change in HCM to be updated in MS AD;

Can you please let me know how to achieve this.

Thanks

Amal

[Former Member]

Have you considered using SAP NetWeaver Identity Management?

http://www.sdn.sap.com/irj/sdn/nw-identitymanagement

It looks like you can use it to create/delete users in your AD based on changes in HCM.

[rudradev_devulapalli3]

Hi Dragoljub,

Thanks for the reply,

I have gone through the below link but could not understood where exactly IDM can be placed in order to achieve this.

Client has already SAP HCM Server all data populated in it. And Active Directoty is now they are adding to the environment.

AD will be used as a Central Point of repository to the entire landscape where all systems in landscape will be using AD as UME.How can we do the integration between the HCM,IDM and AD so that all relevent data from HCM can be made available on AD at the same time based on the change in SAP HCM.

Please sugguest.

Regards,

Rudradev Devulapelli.

[Former Member]

It is a tool for user data synchronization, provisioning, compliance etc. It is an Java application so it is installed on AS Java.

I have played with it only for a few days and I was able to use it to synchronize some data from AD and ERP. So I guess your scenario would be something like this:

- HR adds new employee,

- IDM synchronizes data between HCM and AD ie. it creates new user in AD,

- user uses AD to authenticate to access, for example, file share.

But IDM can do a lot of things besides this simple example. So I suggest you to go through "Technical Overview Presentation":

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/7037d982-40aa-2a10-e283-a76a9dfc9...

and "Working with Microsoft Active Directory":

http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/40bba5aa-50f7-2a10-739d-e48e40730...

[Farid]

Hello,

I have seen dozens of posts like this with similar concerns : trying to synchronize SAP HCM employee data from SAP to Active Directory. Unfortunatly, none of those posts haven't been updated over the years.

Is there anyone who managed to implement such synchronization and could tell us a bit more on how he/she achieved this ?

Thank you very much.