Configuring Global IdM Settings in Customizing

VDS must have been set up correctly. For more information, see Connecting the SAP Admin Module to VDS.

To enable the interaction between the SAP Admin module and the IdM system, you need to configure the IdM settings and provide connection details (such as the name of the LDAP server).

In the Customizing section, you can configure the IdM settings for all systems in the SAP Admin module. For information on the IdM settings that are configurable for individual SAP systems, see Configuring IdM Settings for Individual Systems.

To configure global IdM settings in Customizing:

1. Open the SAP Admin module.
2. Click the Administration menu, select Customizing, and click IDM Settings.
3. On the Customizing page, provide the following information:
   • LDAP Server — Enter the name of the LDAP server that is configured in SAP.

     Example: VDS_SERVER.

   • LDAP Distinguished Name — Enter the string that is used by the LDAP function to identify the correct entry point in the LDAP directory of VDS. You must specify 'cn=* in this string. The entry point depends on the system that should be accessed.

     Example: CN=*,O=USERS,OU=ORG_UNIT,O=ORG.

   • Values updated through IDM — Select the check boxes to indicate which of the user details should be managed through IdM, that is, the values of the fields you select here are sent to IdM. The selected fields should match those of the IdM configuration. The following fields are available:
     • First Name
     • Last Name
     • User Group
     • User Type
     • Email
     • Phone
     • Accounting Number
     • Cost Center
     Cleared check boxes indicate those fields whose values are to be sent directly to the SAP systems.
     Important: To ensure that license-type recommendations and recommendations for retiring users are not overwritten by IdM, license types and Valid To dates must be managed through FlexNet Manager for SAP Applications.
4. Click Continue.