SAP Identity Management and the SAP Admin Module

SAP NetWeaver® Identity Management (IdM) is an SAP technology for centrally managing SAP user accounts across multiple SAP software environments.

With IdM, organizations can:

• Centrally create, maintain, and delete user accounts
• Centrally manage global user account attributes (for example, first and last name)
• Centrally manage privileges (technical roles) and business roles
• Synchronize data across several systems

IdM automatically consolidates the data held in user accounts that belong to the same user. The consolidation is usually based on the user name. This means that any user data that is changed in one account of a user will be propagated into all other accounts that this user holds.

By connecting the SAP Admin module (and, via the SAP Admin module, IT Asset Management) to IdM, you can ensure that changes made to user accounts using FlexNet Manager for SAP Applications are not subsequently overwritten by IdM. In the SAP Admin module, you can configure which changes (made, for example, through the Logon Evaluation report, the Duplicates Search report, or the Process Recommendations report) are sent to IdM and which changes are sent directly to the SAP systems.

Important: User license types and Valid To dates must be managed using FlexNet Manager for SAP Applications, and not through IdM. This ensures that the license type and Valid To date are managed individually for each account that a user holds.

For more information about IdM, refer to the relevant SAP documentation.