MS-LDAP usernames are 15 char long SAP only allows 12 Char

[Former Member]

I have a customer that has a MS-Active Directory consolidation project going on as well as an SAP implementation. There will need to be new standards set for the Active Directory and there will be a large data cleanup. I am not sure if they will use portal but it is an ECC, BI and PI implementation at least. They wish to set up Single sign on with LDAP. The issue is some of their LDAP user names are 15 charcters long but SAP only accepts 12 characters - what will happen when we connect this up?

Is there any way around it?

Thanks in advance.

[former_member2987]

Matt,

Generally you just use the first 12 characters.

Matt

[Former Member]

Hello,

but I would not cut off the username without searching for duplicates.

A good way to solve this could be to introduce an IdM username based upon numbers, like A00001, A00002 and so on. And then join in the usernames from AD and SAP storing their usernames in the ACCOUNT attributes or something.

For the duplicate check you could use the fields firstname, lastname, mail address, personal number, ... It can be a bit tricky though and you may need to manually synchronize some users, but this is worth it.

Regards

Dominik