Skip to Content
avatar image
Former Member

Synchronization between su01 (usr02) and IdM

Hi experts,

if I assign an ABAP-system to CUA, transaction su01 in the managed system is locked. In opposition to IdM I can change or create in the managed system in t-code su01 user profiles. But if I create or change a user in su01 the change doesn't occur in IdM. Is there an abap specific task to synchronize usr02 an IdM? And is there any way to lock t-code su01?

Thanks and best regards,

Max

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

1 Answer

  • avatar image
    Former Member
    Oct 13, 2011 at 07:08 AM

    You need to run the AS ABAP update job on regular basis to get the information changed in ABAP to IdM.

    Just modify your AS ABAP update job correctly, map only the attributes that you want to update or use the "." notation in the mapping and schedule the job according to your requirements.

    You really need to define what system is the owner of which attribute and configure your provisioning tasks and jobs accordingly. If IdM is the leading system then the practice should be that nobody alters the data in SU01 anymore.

    Add comment
    10|10000 characters needed characters exceeded