Currently Being Moderated

SAP NetWeaver Identity Management FAQ

The following are frequently asked questions related to the SAP NetWeaver Identity Management product.

 

Customers

 

Pricing & Licensing

 

Partners

 

Product

 

Connectivity

 

Central User Administration (CUA)

 

Training & Documentation


Customers

How does the SAP NetWeaver Identity Management solution provide value to SAP customers?

Identity management is an integral part of SAP NetWeaver and SAP's business process platform. It offers easy-to-use identity management capabilities for heterogeneous landscapes, and can be closely aligned with company-specific business processes. This translates into higher efficiency, a more secure landscape, and a lower cost of ownership.

SAP NetWeaver Identity Management

  • Unifies identity management in the SAP landscape
  • Supports the integration of non-SAP systems into SAP-based identity management
  • Offers close integration of user identities from business processes with technical identities in different systems
  • Provides centralized management capabilities for a business process platform
  • Allows identity-related business processes to be executed smoothly
  • Reduces TCO through central management processes and a high degree of automation, bridging the gap between identity management on a business level and system level
  • Increases employee productivity
  • Enables companies to leverage their existing SAP infrastructure (such as SAP ERP HCM)
  • Integrates with SAP Business Suite and SAP BusinessObjects Access Control (GRC) for end-to-end, compliant, role-based control


How does SAP NetWeaver Identity Management tie in with the SAP BusinessObjects Governance, Risk and Compliance (GRC) solution?

The functionality provided by SAP NetWeaver Identity Management complements the SAP BusinessObjects Access Control solution. SAP NetWeaver Identity Management enables companies to centrally manage and provision identity information in SAP and heterogeneous environments. SAP BusinessObjects Access Control delivers business value through its rich capabilities and content that support end-to-end compliance, from risk identification and remediation to sustainable and ongoing prevention.

 

How do SAP's identity management capabilities compare with other security offerings on the market?

SAP offers its identity management capabilities as an integral part of the SAP NetWeaver technology platform. The intention is to enable customers to manage their business processes in a more effective manner. The solution can be deployed in SAP system landscapes as well as in heterogeneous landscapes that include SAP and non-SAP systems. SAP puts a clear focus on providing an identity management solution that is driven by business processes and events. The tight integration with SAP Business Suite (as of SAP NetWeaver IDM release 7.1) demonstrates SAP's commitment to a business-centered identity administration.

 

How can SAP customers obtain the software and how should customers proceed today with their identity management project planning?

The SAP NetWeaver Identity Management product is available for download in the download area of the SAP Service Marketplace (http://service.sap.com/swdc). Customers who are interested in this product should contact their SAP account executive for more information. Use the quick link /swdc and click -> Download -> Installation and Upgrades -> Entry by Application Group -> SAP NetWeaver -> SAP NetWeaver Identity Management.

 

Pricing & Licensing

How is the pricing of the SAP NetWeaver Identity Management solution?

All pricing and licensing issues are handled by the account management at SAP. Please contact your SAP account executive about licensing and pricing information regarding SAP NetWeaver Identity Management.

 

Partners

SAP has certified some solutions from SAP partners that can manage identities, provision roles and manage access control of system users using SAP's open interfaces. What is SAP’s guidance to customers who use these certified solutions?

SAP NetWeaver is an open platform. SAP NetWeaver offers open interfaces to integrate with other solutions. SAP will continue to offer these interfaces. Customers can keep their existing identity management solution, or switch to SAP NetWeaver Identity Management to take advantage of its unique capabilities, such as the SAP Business Suite integration.

 

Does SAP plan to support integration with other partners?

Customer choice and flexibility are paramount for SAP. SAP will offer identity management as part of SAP NetWeaver, but remain open and flexible regarding customer investments in other identity management solutions. SAP will continue to support the certifiable identity management interfaces of SAP NetWeaver.

A new connector development kit and guidelines are planned for Q4/2009 to enable third party vendors to create SAP NetWeaver Identity Management connectors for third party applications in order to integrate these applications into the SAP NetWeaver Identity Management landscape.

 

Product

What is the product roadmap for SAP NetWeaver Identity Management?

SAP NetWeaver Identity Management is embedded into SAP NetWeaver to offer a comprehensive identity management solution for the technology platform. Please contact your SAP account executive to receive more information about the current product roadmap.

 

Which SAP NetWeaver version(s) will support the SAP NetWeaver Identity Management solution?

SAP NetWeaver Identity Management is not tied to a specific SAP NetWeaver release or version.

 

What languages are supported?

For the supported languages please refer to the Product Availability Matrix on SAP Service Marketplace:


Where can I find the product compatibility information?

For product compatibility information please refer to the Product Availability Matrix on SAP Service Marketplace:


Connectivity

How does SAP NetWeaver Identity Management integrate with SAP Business Suite?

SAP NetWeaver Identity Management offers more than identity provisioning in heterogeneous landscapes. With Release 7.1, it is capable of integrating seamlessly into the business processes of SAP Business Suite, simplifying tasks such as linking to employee data and creating or assigning users to Business Partners. In SAP NetWeaver Identity Management 7.1, all use cases involving employees are supported.

 

How will the SAP BusinessObjects solution for Governance, Risk, and Compliance (GRC) be connected to SAP NetWeaver Identity Management?

SAP BusinessObjects Access Control provides Web services (open APIs) that can be called / consumed by SAP NetWeaver Identity Management and IDM solutions from other vendors in order to achieve compliance with identity management. These Web services are available with SAP BusinessObjects Access Control 5.2 SP4 (Q3/07), and were extended with SAP BusinessObjects Access Control 5.3. The Web services enable identity management solutions to exchange data and information with SAP BusinessObjects Access Control and provide compliance capabilities such as risk analysis and remediation as well as compliant user provisioning to ERP and non-ERP systems.

 

Central User Administration (CUA)

What is the relationship between SAP NetWeaver Identity Management and the Central User Administration (CUA)?

SAP NetWeaver Identity Management is the strategic solution for managing identities in SAP and non-SAP environments. SAP will continue to support CUA in its current functionality according to SAP maintenance rules. SAP NetWeaver Identity Management can be connected and used in combination with an existing CUA.

 

Should I install a new CUA?

It depends on the scope of your project and your current stage: You can quickly and easily connect ABAP-based systems to a new CUA. This enables you to manage several thousand users and their individual role assignments.

However, if you require automatic cross-system rule-based access management, workflow support, or connectivity for a heterogeneous system landscape, you should consider using SAP NetWeaver Identity Management.

SAP recommends using SAP NetWeaver Identity Management for any new identity management project. If you are already using CUA and want to use any of the new features of SAP NetWeaver Identity Management, you should plan for a migration path.

 

Why should I migrate from CUA to SAP NetWeaver Identity Management?

In the past, CUA was SAP's solution for managing users and roles in a typical large ABAP-based SAP system landscape. The solution has significantly reduced the complexity of managing such landscapes compared to a separate user administration in each system.

Moving to the SAP NetWeaver Identity Management component from CUA offers the following advantages:

  • Supports all relevant systems, including SAP and third-party software
  • Supports sophisticated business roles definition and management
  • Provides self-service password resets, reducing the workload for help-desk staff
  • Enables workflow-based requests for approvals, automating user provisioning in multiple back-end systems
  • Supports LDAP directories and databases, as well as standards such as SPML
  • Supports tight integration with SAP Business Suite 7.0


How do I migrate from CUA to SAP NetWeaver Identity Management?

Because SAP NetWeaver Identity Management is designed to work with CUA, moving to the new solution is relatively straightforward. For the migration from CUA to SAP NetWeaver Identity Management, we recommend the following approach:

1. Manage CUA from SAP NetWeaver Identity Management. This way you can introduce the benefits of SAP NetWeaver Identity Management without disrupting your current landscape.

2. Start connecting the ABAP systems to SAP NetWeaver Identity Management and disconnecting them from CUA.

3. When you have disconnected the last ABAP system from CUA, the CUA can be shut down and you have completed a successful migration.

 

Training & Documentation

Where do I find information material such as an overview presentation or white papers?

For more detailed product information on SAP NetWeaver Identity Management see the SAP NetWeaver Identity Management page on SDN.

 

Where can I get training on SAP NetWeaver Identity Management?

Training classes and eLearning on SAP NetWeaver Identity Management is being offered by SAP Education. You can find more information on the SAP NetWeaver Identity Management page on SDN.

Delete Document

Are you sure you want to delete this document?

Actions