C4C Cloud for Customer - User Provisioning

[former_member204634]

Hi All

We are implementing C4C at a customer, where OIM and GRC are access provisioning tools in production, right now from the information we have got and consider project scoping, GRC doesn't have a std. connector consumer web services in C4C and OIM also doesnt have a std. functionality to integrate with C4C, so we are using CRM on prem to push Identity and access mangement data pertaining to C4C users to C4C, so that OIM and GRC will talk with CRM on prem as a intermediate system which will then relay the required information to C4C. BP replication from CRM on prem takes care of employee and users (tied automatically to employe record) creation in C4C. What we require are update functionality on user in C4C.

We understand, there are no independent user records in C4C for business users, and they are rather Identity Business Object tied up to a employee id.

Requirement is to assign roles to this identity, and set its status (active/inactive - based on HR process trigger i.e employee creation/change/inactivation) and valid to dates.

As per std. documentation referred by CRM development team in project, Identity business object only allows for reading a user's role assignment, it doesn't allow updating user's role assignment, I havent checked with development team on other requirements related to changing user id status and valid to dates right now.

What we want is to understand/find a way of updating the required fields in C4C via a PI/PO interface which will send user access data from CRM on prem and update these fields in C4C accordingly. Has anyone worked on a similar requirement in past or now, can you please share you method, documentation, approach, anything that may be helpful. We would have more than 60K+ users in production environment and it would be high impractical to do manual administration of these users just because we dont have a method/utility that allows updating of user role assignment in C4C.

Additionally, I hope SAP will not leave user provisioning in lurch, are there any developments coming up  in C4C from SAP in terms of integration with GRC/IDM? or at least with regards to publishing code for identity object's update functions because if we can manually assign role to an user in C4C it should be possible via code and I dont know how to put it but we just need it or find an alternate, manual administration is not an option.

Thanks

Prashant

[former_member201939]

Hi:

Cloud for customer (C4C) offers 2 separate SOAP APIs.

1. Replication of Business Role definitions from any external system to C4C. This API can be used to integrate with your Business Role definition work-flow, wherein you can invoke the API from your GRC system (project specific development) to provision and manage business roles into C4C system.
2. Replication of Employees from any external system to C4C. In C4C, as you mentioned, the employee has an associated user / identity record that is used for logon and enforcing access control. This API allows you to manage the Employee data (e.g. employee biographical data with validity periods), Identity information (e.g. User id for logon to C4C system) together with the Business Role assignments for the employee / identity. Using this you can set the employee status (e.g. active / inactive) with validity dates and also add new Business Role, remove existing Business Role assignments for the employee (and consequently to the Identity), there by enabling you to manage the complete life-cycle of the Employee, Identity and Role assignment data for the identity from your On Premise systems.

Hope this clarifies.

Venki

[former_member204634]

Hi Venki

Many thanks for your response, considering point 2 for now, can you please provide further details on the "Replication of Employees from any external system to C4C", we are using BP replication functionality from CRM on prem but it only creates users on C4C, it doesn't assign roles or sets active/inactive status, if you can provide documentation, would appreciate any helpful link to for us to deep dive further.

Thanks

Prashant

[MichaelKatai]

Hello Venki!

Thanks for sharing this information. We currently use C4C Version 1505. Has anything changed in the process of user provisioning in the meantime?

Kind regards,

Michael

[MichaelKatai]

Hello Prashant!

I was searching for helpful information but wasn't successful yet. Have you found any documentation which you could share with me?

Kind regards,

Michael