ZSU53 - Missing authorization assistance
A tool which lists profiles/roles containing the missing authorizations from your profile! As compared to SU53, ZSU53 (the missing authorization assistance) not only tells you which profiles/roles contain the authorization but also lists the users associated with it! Asim Rasheed Mian in ABAP, ERP, Identity Management, SAP Developer Network, Security [Nov. 10, 2009 08:56 AM | 9 Comments | Permalink]

Have you seen Crystal shining Identity Management?
Reporting from SAP NetWeaver Identity management 7.1 with Crystal Report. Hong Gun Cho in Crystal Reports, Identity Management [Nov. 06, 2009 02:21 AM | 0 Comments | Permalink]

How-to send IdM alerts to CCMS
This blog shows how to send IdM exceptions to CCMS for alerting. Craig Davis in Identity Management [Oct. 31, 2009 11:51 AM | 0 Comments | Permalink]

Identity Management - Plug and Play
One of the key challenges in such transitions is Provisioning, Managing and Revoking Access to various Business Applications with an audit-proof trail. Identity Management – Plug and Play helps you address these risks and achieve the desired levels of security with least overhead. Vinod Jose in Identity Management [Oct. 30, 2009 12:44 PM | 0 Comments | Permalink]

Podcast:: How it Works - Identity Management Reporting
New Podcast about reporting in SAP NetWeaver Identity Management. It will show you how to create a report template using SAP Business Objects Crystal Reports which retrieves data from an SAP NetWeaver Identity Management 7.1 system. This template can then be used for reporting purposes. Oliver Nocon in Crystal Reports, Identity Management, Security [Oct. 27, 2009 07:33 AM | 0 Comments | Download Media | Permalink]

Another full day for security professionals at #SAPTechEd09
There were plenty of activities and security-related sessions to keep me busy for a third day. Read on for my thoughts on my Thursday agenda at #SAPTechEd09 in Phoenix. Gretchen Lindquist in SAP TechEd, Security, Business Process Expert, Governance, Risk and Compliance, Identity Management [Oct. 15, 2009 04:43 PM | 0 Comments | Permalink]

TechEd Bangalore – Half a TechEd?
SAP TechEd in Bangalore has a lot less sessions than Vienna - why is this? Paul Tomlinson in Enhancement Packages, Enterprise Portal (EP), Governance, Risk and Compliance, Identity Management, Java Programming, Ranting, SAP TechEd, Security [Oct. 08, 2009 03:05 AM | 4 Comments | Permalink]

Security and IdM@TechEd 09: Get ready for the next generation Single Sign-On challenges!
Wondering which TechEd hands on session about security and identity management you should attend? Here is my recommendation... Martin Raepple in SAP TechEd, Service-Oriented Architecture, Security, ABAP, Application Server, Business Process Management, Business Process Modeling, ERP, Identity Management, Interoperability, Interoperability .NET, Interoperability IBM, SAP NetWeaver Platform, Standards [Oct. 05, 2009 08:25 AM | 0 Comments | Permalink]

Live Expert Session - Satisfy your Auditors: Crystal Reporting with SAP NetWeaver Identity Management (IDM)
During SAP Teched 2009 in Phoenix the SAP Intelligence Platform and NetWeaver Regional Implementation Group (RIG) will present 30 minute Live Expert Sessions (LES) on a wide variety of topics. Serge Muts in Identity Management [Sep. 28, 2009 04:48 PM | 0 Comments | Permalink]

What is SAP Influence?
What are the avenues to Influence SAP functionality? Were you aware that ASUG and other SAP User Groups globally use the voice of the customer to influence SAP solutions. This blog discusses the different ways to Influence SAP functionality and invites you to participate at SAP TechEd in a session targeted for influence of SAP Security, GRC Access Control and Netweaver identity Management. Greg Capps in Governance, Risk and Compliance, Identity Management, SAP SAPPHIRE, SAP TechEd, Security [Sep. 28, 2009 02:24 PM | 2 Comments | Permalink]

NetWeaver IdM 7.1 on Oracle and AIX
At Australia Post we are looking toward an easier and more efficient user provisioning tool for our rapidly increasing landscape. It seems that SCUA no longer cuts it for us. In this BLOG I will outline the AusPost proof on concept for the recently GA Identity Management 7.1 offering from SAP. Dave Bedford in Identity Management [Sep. 20, 2009 06:47 PM | 2 Comments | Permalink]

Informing the Basis Through Mails About Not-Logged Users.
This blog helps reader design a report program to send mail to Basis informing about the not-logged users for specified period of time. Zahack in ABAP, Application Server, Beginner, Emerging Technologies, ERP, Identity Management [Sep. 14, 2009 01:25 AM | 10 Comments | Permalink]

Coming to TechEd 2009 Vienna? Looking for Details & Best Practices about SAP NetWeaver Identity Management
You are visiting TechEd 2009 in Vienna and want to learn details about SAP NetWeaver Identity Management. Here you find a condensed collection of sessions which may interest you. Oliver Nocon in Identity Management, SAP NetWeaver Platform, Security [Sep. 07, 2009 02:12 AM | 0 Comments | Permalink]

The two-edged sword of security automation
An exchange I had recently with one of our end users brought home to me the fact that the automation of security role assignments has both plusses and minuses in respect to controls and quality. How to emphasize the upside and minimize the downside is the million dollar question. Gretchen Lindquist in Business Process Expert, Governance, Risk and Compliance, Identity Management, Security [Aug. 03, 2009 10:23 AM | 8 Comments | Permalink]

Using YubiKey OTP to secure your Portal
This blog describes a quick proof of concept I did to enable secure access to the SAP Enterprise Portal using the Yubico YubiKey One Time Password generator. I also discuss some of the pros and cons of implementing such a system. Simon Kemp in Emerging Technologies, Enterprise Portal (EP), Identity Management, Java Programming, Security [Jul. 23, 2009 12:02 AM | 0 Comments | Permalink]

We are open for OpenID!
SCN is becoming an OpenID provider, read all about it Maya Bahar in Community Projects, Emerging Technologies, Identity Management, Open Source, SAP Developer Network [Jul. 21, 2009 07:19 AM | 14 Comments | Permalink]

What's ahead in SAP security, identity management, and compliance?
If you work in SAP security, identity management, or compliance at an ASUG member organization, don't miss these upcoming opportunities to learn about the road ahead for SAP solutions. Gretchen Lindquist in Security, Identity Management, Governance, Risk and Compliance, Business Process Expert [Jul. 17, 2009 08:31 AM | 1 Comments | Permalink]

IDM Connector Overview Presentation is now available
A comprehensive descritpion about the existing IDM connectors to other systems is now available Kristian Lehment in Identity Management, Integration and Certification, Business Suite 7, ERP, Governance, Risk and Compliance, SAP NetWeaver Platform, Security [Jun. 30, 2009 05:26 AM | 0 Comments | Permalink]

SAP NetWeaver Identity Management 7.1 Enters Unrestricted Shipment
SAP NetWeaver Identity Management 7.1 has successfully completed the ramp-up phase and entered unrestricted shipment last week. Martina Kirschenmann provides us with some first customer feedback and recaps the highlights of this release. Martina Kirschenmann in Business Suite 7, Governance, Risk and Compliance, Identity Management, SAP NetWeaver Platform, Security [Jun. 29, 2009 11:52 PM | 4 Comments | Permalink]

Configure BOBJ AC 5.3 CUP that workflows only appear if violations detected
Objective is to explain the configuration steps in BusinessObjects Access Control Compliant User Provisioning (CUP) to have a workflow which only need manual approval if the risk analysis found violations for the request. All other requests will be approved automatically. Frank Bannert in Business Objects, Business Process Expert, Governance, Risk and Compliance, Identity Management, Interoperability [Jun. 19, 2009 09:44 AM | 0 Comments | Permalink]

Should SAP join Google´s Wave?
Google Wave is a new product which should combine eMail, Instant Messaging and Wikis. This blog discusses the impact and exciting opportunities for the SAP world. Bernhard Escherich in Alloy, Knowledge Management (KM), Identity Management, Governance, Risk and Compliance, ERP, Enterprise Portal (EP), Emerging Technologies, Duet, Business Process Expert, Business Objects, Business Intelligence (BI), Beyond SAP, Analytics, SAP NetWeaver Platform [Jun. 01, 2009 04:18 AM | 10 Comments | Permalink]

MASTER project - Compliance Facilitator
SOA brings flexibility and agility to the business in order to address new market opportunities. In the cloudiness of those new business processes, entrepreneurs, in addition to prove their businesses are lucrative, will have to prove that their businesses are sustainable. MASTER will facilitate this demonstration. Emmanuel Pigout in Banking, Service-Oriented Architecture, Security, SAP Solution Manager, SAP Research, SAP NetWeaver Platform, Public Sector, International Financial Reporting Standard (IFRS), Identity Management, Healthcare, Governance, Risk and Compliance, Business Process Modeling, Business Process Management, Business Process Expert, Sustainability [May. 19, 2009 07:19 AM | 2 Comments | Permalink]

My Green day at the ASUG and SAPPHIRE Conferences
Wednesday was another day of juggling multiple time commitments due to the wealth of opportunities at #ASUG09 and #SAPPHIRE09. A big focus for me today was sustainability, in addition to my continued focus on SAP Security. Read on to learn more of my day in Orlando at #ASUG09 and #SAPPHIRE09. Gretchen Lindquist in Identity Management, SAP SAPPHIRE, Security, Sustainability [May. 13, 2009 08:56 PM | 1 Comments | Permalink]

Reporting on Tuesday in Orlando
Follow along with my information-packed day in Orlando at #ASUG09 and #SAPPHIRE09. Gretchen Lindquist in Identity Management, SAP SAPPHIRE, Security [May. 12, 2009 01:39 PM | 2 Comments | Permalink]

Is SAP security the magic bullet?
When staffing reductions result in gaps in processes and controls, it might be time to remind the business users of the costs and risks in expecting SAP security to do all the heavy lifting in the controls environment. Gretchen Lindquist in Business Process Expert, Governance, Risk and Compliance, Identity Management [Apr. 22, 2009 11:35 AM | 2 Comments | Permalink]

PrimeLife project: Bringing Sustainable Privacy and Identity Management to Future Networks and Services
Primelife, which we present in this blog entry, will resolve the core privacy and trust issues pertaining to these challenges Slim TRABELSI in SAP Research, Identity Management, Community Projects, Business Process Management [Apr. 06, 2009 10:16 AM | 0 Comments | Permalink]

NEW blog-topic-name available: Security
The new BLOG-TOPIC-NAME called Security is now available to all people that post about SECURITY... Kristian Lehment in Beginner, ERP, Governance, Risk and Compliance, Identity Management, SAP Developer Network, SAP NetWeaver Platform, Security [Apr. 02, 2009 12:50 AM | 0 Comments | Permalink]

How mature is your authorization concept?
Increased compliance and security regulations need mature authorization concepts to fulfil them. We think that the authorization maturity model we propose can help here. Bernhard Escherich in Business Process Expert, Governance, Risk and Compliance, Identity Management, SAP NetWeaver Platform [Mar. 25, 2009 06:29 AM | 2 Comments | Permalink]

Renaming the NW IDM MSKEYVALUE Attribute
A short discussion of how to rename the MSKEYVALUE attribute in NetWeaver Identity Manager 7.0. Includes JavaScript coding examples. Matthew Pollicove in Identity Management, JavaScript, SAP NetWeaver Platform, Scripting Languages [Mar. 19, 2009 09:51 AM | 0 Comments | Permalink]

Configuring SSL between Microsoft Active directory and Enterprise portal
This article gives the step-by-step procedure to configure SSL between Microsoft Active directory (LDAP) and Enterprise Portal (UME ) Gowrinadh Challagundla in Enterprise Portal (EP), Identity Management [Mar. 17, 2009 08:12 AM | 0 Comments | Permalink]

Configuring SPNego with ABAP datasource -- Part 2
After my previous blog Configuring SPNego with ABAP datasource several questions were raised. This time I focus on three possible scenarioas and on questions that were raised to me. Holger Bruchelt in ABAP, Enterprise Portal (EP), Identity Management, Application Server, SAP NetWeaver Platform [Mar. 02, 2009 07:25 AM | 13 Comments | Permalink]

Step-by-Step SAP BI Security
Step by Step Document of SAP BI Security Kamaljeet in Business Intelligence (BI), Beginner, Identity Management [Feb. 26, 2009 05:32 PM | 15 Comments | Permalink]

Usermapping with J2EE Engine
When you have different user IDs in your J2EE engine and in your ABAP system you can use usermapping in order to include both IDs in your SAP Logon Ticket. In this blog I want to take a look at two possibilites to perfom this kind of mapping: either direct in the LDAP system or in the UME. Holger Bruchelt in Duet, ABAP, Identity Management, SAP NetWeaver Platform [Feb. 09, 2009 05:42 AM | 8 Comments | Permalink]

Using SAP Business Suite 7.0 for Public Security?
The blog is about using SAP Business Suite 7.0 for Public Security and specifically, it describes the fit of the new solution of Investigative Case Management with the new technology. The new Business Suite 7.0 can be used in several instances where ultimate flexibility and agility is needed, but whwre untill now no business platform would fit. albert kuiper in Public Sector, Business Suite 7, Analytics, Business Process Expert, Defense, Identity Management [Feb. 04, 2009 07:52 AM | 4 Comments | Permalink]

Bringing a business process perspective to user provisioning
In this post, Gretchen shares lessons learned in bringing the business process perspective to her ongoing user provisioning initiative. Gretchen Lindquist in Business Process Expert, Identity Management [Jan. 27, 2009 06:23 PM | 0 Comments | Permalink]

AddOns for SAP NW IdM: Part II - Realising Async Requests for Identity Services
Developing Java-AddOns for SAP IdM is a mighty instrument to enhance the usability and the functionality of SAP NetWeaver Identity Management. In this blog series we will show how to connect to SAP IdM out of a java application. There will be two parts in this series. The first part provides a view on the java application and the connection to the SAP Virtual Directory Server (VDS) via SPML. The second part will provide a detailed view on the necessary configuration of the SAP Identity Center and Virtual Directory Server. Nils Sibold in Identity Management [Dec. 23, 2008 02:18 AM | 0 Comments | Permalink]

Buy 1 Take Unlimited Free System's Master/Identity Data
This blog starts on lighter side of business benefit in terms of efforts for maintaining Master/Identity Data. Ankur Ramkumar Goel in Identity Management, Master Data Management (MDM) [Dec. 22, 2008 09:07 AM | 1 Comments | Permalink]

Simplifying Authorizations handling with MDM ( Idendity Management ) {reloaded April 09 2008}
discusses to explore possibilities of using MDM for managing authorizations.... Ankur Ramkumar Goel in Identity Management, Master Data Management (MDM) [Dec. 19, 2008 07:53 AM | 1 Comments | Permalink]

AddOns for SAP NW IdM: Part I - Creating a java connection to the identity store via SPML
Developing Java-AddOns for SAP IdM is a mighty instrument to enhance the usability and the functionality of SAP NetWeaver Identity Management. In this blog series we will show how to connect to SAP IdM out of a java application. There will be two parts in this series. The first part provides a view on the java application and the connection to the SAP Virtual Directory Server (VDS) via SPML. The second part will provide a detailed view on the necessary configuration of the SAP Identity Center and Virtual Directory Server. Felix Weyde in Identity Management, Java Programming [Dec. 19, 2008 07:52 AM | 2 Comments | Permalink]

Optimism in the SAP communities for 2009? Yes - Healthcare and higher education can help!
The SAP comminities have very good reasons for optimism now. Bad news are boring. Healthcare and higher education and research could help a lot. Bernhard Escherich in Business Process Expert, SAP Process Integration (PI), Interoperability, Identity Management, Higher Education, Healthcare, Governance, Risk and Compliance, ERP, Enterprise Portal (EP), Service-Oriented Architecture [Dec. 12, 2008 12:48 AM | 0 Comments | Permalink]

How techies and non-HR SAP experts can master HR process analysis
Learn how technical consultants and non HR experts could quickly analyze HR processes for their projects (e.g. portal projects, identity management projects). Bernhard Escherich in Business Process Expert, Business Process Management, Business Process Modeling, Enterprise Portal (EP), ERP, Identity Management [Nov. 30, 2008 06:53 AM | 0 Comments | Permalink]

Implementing the Integrated Windows Authentication (IWA) & Identity Management Solution for HR Shared Services delivery: Challenges
Enterprises are transforming their HR functions and moving from traditional way of HR services delivery to a new model i.e. shared services delivery. Part of this solution is to build a HR portal which not only acts as Tier Zero agent of the HR service center and primary tool for HR customers like employees and manager for access to HR information but it is also used by Service center staff to connect to the call management system. This service delivery model uses a technology framework comprising various different systems like a System of records (SAP HR), Call & Case Management system (SAP CRM), Portal (SAP Netweaver Portal), Analytics system (SAP BW), Knowledge base (SAP KM) and corporate LDAPs. Imagine here, how many systems are supporting the functions of HR service centers and all of these systems have there own authentication and authorization mechanism. Dharamvir Yadav in Beginner, Business Process Expert, Business Process Management, Enterprise Portal (EP), Identity Management, Organizational Change Management, SAP Developer Network, Shared Service Center [Nov. 27, 2008 05:49 AM | 2 Comments | Permalink]

Wondering what is down the road for SAP Identity Management?
If your organization is a member of Americas' SAP User Group (ASUG), consider joining the Security SIG members for a virtual focus group session on SAP's Identity Management solution, including a discussion of how it complements the GRC solution. Interested? Read on. Gretchen Lindquist in Business Process Expert, Governance, Risk and Compliance, Identity Management [Nov. 21, 2008 07:55 AM | 0 Comments | Permalink]

How to use custom classes in the SAP NetWeaver Identity Management
Begin your journey to implement your own classes using the IdM's possibility to extend the access to any system that cannot be reached by the standard functionalities of the Identity Center or Virtual Directory Server, but has an API to access the needed data. This is achieved using the FromCustom and ToCustom passes and classes. Domink Trui in Identity Management [Nov. 17, 2008 04:31 PM | 0 Comments | Permalink]

Creating Unique MSKEYVALUES in Netweaver Identity Manager
A method for creating unique MSKEYVALUES in Netweaver Identity Manager Matthew Pollicove in Identity Management, JavaScript [Nov. 17, 2008 04:27 PM | 3 Comments | Permalink]

IDM/GRC can inspire CMDM Scenario/Solution for Organizations
IDM/GRC can be inspiration for CMDM ! Ankur Ramkumar Goel in Identity Management, Master Data Management (MDM), Governance, Risk and Compliance [Nov. 03, 2008 10:26 AM | 0 Comments | Permalink]

Creating a Read Only User Admin Role
UME Actions provide a way for portal administrators to restrict or grants specific actions for users to take action on users. This blog will outline how to create a read only version of the user admin role. Marty McCormick in Enterprise Portal (EP), Identity Management, SAP NetWeaver Platform [Oct. 31, 2008 08:34 AM | 2 Comments | Permalink]

SAP NetWeaver Identity Management: Delegate Access in Workflows via Referrals at runtime
The responsible manager or administrator for each employee can be set to access different types of workflows on behalf of his employee. Instead of using the access controls in the Identity Center, we will set access controls directly in workflows at runtime. Therefore we set a referral attribute for persons which points to another person. You can reuse this attribute in several workflows or set different responsibilities for different types of workflows. Nils Sibold in Identity Management [Oct. 14, 2008 08:06 PM | 0 Comments | Permalink]

Rule-based assignment of the company address to
The blog shows how persons belonging to an organizational unit (as one example for an organisational assignment attribute), get their company address assigned automatically based on maintainable assignment rules. The organisational Assignment is resolved during import of persons (initial import or update jobs) from an HR system into the SAP NW IdM system. Philipp Meder in Identity Management [Sep. 20, 2008 01:10 PM | 0 Comments | Permalink]

SAP TechEd '08: Web Services SSO in a heterogeneous SOA landscape
Here are the session details for SIM207 and the download link to the code archive of the demo that my colleage Stefanie Garcia-Laule and I will show in Las Vegas and Berlin. Martin Raepple in ABAP, SAP TechEd, SAP NetWeaver Platform, Interoperability .NET, Interoperability, Identity Management, Service-Oriented Architecture, Enhancement Packages, Beyond SAP, Application Server, Standards [Aug. 26, 2008 07:46 AM | 0 Comments | Permalink]