Packages and Add-ons for SAP IdM

academy.ibsolution.de © IBsolution GmbH1

Packages and Add–ons for SAP IdM

17.11.2015, Simona Lincheva, IBsolution Bulgaria

academy.ibsolution.de © IBsolution GmbH2 academy.ibsolution.de © IBsolution GmbH2

For whom is this Webinar?

• Security people

• Administrators

• Managers


In this webinar you will learn

• the functionalities of the new add-ons


IBsolution Academy Success Certificate

Personal certificate for every participant:

• View webinar

• Take multiple-choice test

• Takes a few minutes


Use-Cases: Max – manager & Hans - admin

Max, manager - needs the data urgently and consistently . The standard approach takes very long.

Hans, Admin –needs a quick solution in order to provide the requested data

the solution to both problems ->IBsolution IdM Add-ons


Agenda

• Available IdM Add-ons:

• Authorization Matrix

• Self Service

• External Users

• Notification

• Integrity Check Report

• Password Change/Reset

• Mass User Data Administration

• BPM connector for IdM

• Generic Web Service Integration


Your speaker

Simona Lincheva

SAP Consultant

• IdM Consultant


Authorization Matrix

• The Authorization Matrix allows you to control the Business Roles within IdM. This tool provides validation rules, easily roll back to a previous version and automatic user access update after BR modification.

• IdM processes the submitted Matrix and updates the changed business roles, after that the user’s access is updated according the new Matrix.

IdM BRs update and

user’s access update

Back-end systems access update


Authorization Matrix - WD

Easy way to define keys and properties for the matrix.

Based on the key columns the IdM assigns the correct BR to the users


Authorization Matrix – SAPUI5

..\Videos\IdMAdd-ons Webinar\Autorization Matrix UI\Authorization Matrix UI -webinar.avi

https://www.youtube.com/watch?v=XuH-kkUGJqg

https://www.youtube.com/watch?v=XuH-kkUGJqg

../Videos/IdM Add-ons Webinar/Autorization Matrix UI/Authorization Matrix UI - webinar.avi


Self Service

• The Self Service UI provides rich functionality and context based actions to the end users. Easier assignment of business roles and privileges with validity dates.

• Simplified selection for manual privileges and some of the most used automatic privileges (e.g. Internet Access, Citrix (AD Groups)). Automatic resolve of approvals, partial request approvals, manual assignment of approvers based only on comments.

• Rework capabilities – send back for clarification. Lock/Unlock capabilities.

IdM custom requests and

workflow

Back-end systems

access update


Self Service - WD

Selection of request access (manual and automatic applications)

Next step

..\Videos\IdMAdd-ons Webinar\SeflService UI\SeflService UI -webinar.avi

../Videos/IdM Add-ons Webinar/Sefl Service UI/Sefl Service UI - webinar.avi


External Users

• An all-in-one management UI for external users, which are neither HR relevant, nor in any other way connected to the sources systems currently used within IdM. User friendly and easy to handle, fast and intelligent. Complex search criteria to find exactly the people you are looking for.

• Easily extendable and transparent for maintenance. Auto generation of user ids (following a certain logic).

• Permission based access to certain functions.

standard IdM

workflow

Back-end systems

access update


External Users - WD

..\Videos\IdMAdd-ons Webinar\External Users UI\External Users UI -webinar.avi

../Videos/IdM Add-ons Webinar/External Users UI/External Users UI - webinar.avi


Notification

• This tool extends the standard IdM notification capabilities and provides a custom friendly UI for Notification management.

• Notifications are send based on the users action/origin and system.

• The logic is easier for maintenance and customization

Custom Notification Add-on SAPUI5:

• Languages/Organisations UI (1)• Receivers UI (2)• Translations UI (3)


Integrity Check Report

• This tool can run a report between all available systems in IdM and IdM itself, as well the report can be made across two or more systems(depends on the customers needs).

• Custom friendly and easy for configuration UI, enabling the end user to perform identities integrity check across the systems.

• The integrity check report can be executed couple of times in a day


Integrity Check Report – SAPUI5

•..\Videos\IdM Add-ons Webinar\IC\IC -webinar.avi

../Videos/IdM Add-ons Webinar/IC/IC - webinar.avi


Password Change/Reset

• This Add-on dynamically generates the available systems based on the logged user information and allows to select only the systems you want for password change. As well, we have added a progress status and system status, so in case the password provisioning fails in IdM/back-end you will have UI error state for the failed systems.

• The users can also log in from a mobile phone/tablet and change their password from there.

Back-end system

password change / reset

Progress bar and system status:

•Progress bar – allows to monitor the password change/reset progress

• System status - status update from the back-end system(monitor the final password reset/change result)

..\Videos\IdMAdd-ons Webinar\PWR\PWR Webinar.avi

../Videos/IdM Add-ons Webinar/PWR/PWR Webinar.avi


Mass User Data Administration

• Mass User Data Administration UI will provide - role based access for Administrators and Managers. UI-s used for user master data & access maintenance. Load of user’s data directly from IdM or from file. Easy way for export of user’s data.

• This tool will solve a lot of the difficulties in managing mass number of identities and identity’s master data/access across the company systems. Maintaining access permissions and authorization during mass employees internal movements and company changes.

• Back-end systems are updated.

IdMuser’s master data & access update

Back-end systems

access update


MUDA – SAPUI5

• The available attributes for modification are listed in the UI dropdown – after selected, the fields are automatically generated/listed in the UI table.

• Additional filters– all of the IdM attributes can be used as filters.

• 1 – UI used for mass update of user’s master data

• 2 – UI used for mass access change

• Step 1 - select the users for mass access update

• Step 2 - filter the access and choose the actionwe want to perform


MUDA – SAPUI5

• On submit – additional validations are executed – all of the errors are listed and colored in red.

• 1 - UI used for mass lock/unlock of users - filtered by a specific criteria.

• 2 - UI used to perform mass actions - scv. file additionally prepared and imported into the UI.


MUDA – SAPUI5

• 3 – depending on the changed users/attributes one parent request can have a number of child requests(each child request is keeping information for the made change).

• 1 - Custom MUDA parent request created for the submitted UI mass change.

• 2 - Used for auditing purposes

..\Videos\IdMAdd-ons Webinar\MUDA\MUDA -webinar.avi

../Videos/IdM Add-ons Webinar/MUDA/MUDA - webinar.avi


• This tool will let the business have a quick and an easy user creation and authorizations approval process.

• The connector allows to start BPM approval processes directly from IdM and informs IdM when there is an obstacle for a successful execution of a request.

• The goal of this Add-on is to ease communication between IdM and BPM and this way extend approval process in IdM and make it more flexible and easy to customize.

BPM Connector for IdM


• The goal here is to ease communication between IdMand external applications.

• Allows an easy integration of any SOAP web service with IdM

Generic Web Service Integration


IBsolution Academy

Are there any questions


IBsolution Academy Success Certificate

Personal certificate for every participant:

• Watch the webinar

• Take the multiple choice test

• Get 8 out of 9 questions correctly

To the Test http://bit.ly/1MbyI1f


IBsolution Academy

Here you can find a recording of this webinar, many more webinars and current information.

academy.ibsolution.de

Technology

Packages and Add-ons for SAP IdM