Need To Reconcile Only SAP Composite Roles, But Connector User Recon Reconciles All Roles Granted To A User
(Doc ID 2460487.1)
Last updated on OCTOBER 22, 2020
Applies to:Identity Manager Connector - Version 220.127.116.11.0 and later
Information in this document applies to any platform.
Need to Reconcile only SAP Composite Roles, but connector reconciles all roles granted to a User?
1) Setup on SAP:
There are some composite roles and single roles in SAP.
2) Setup on OIM:
Modified Lookup.SAPAC10ABAP.Configuration and set
3) Now, run the SAP AC UM Role Lookup Reconciliation
It correctly brings in only the composite role.
We have checked this from /sysadmin lookup tab
and also using sql query on LKV and LKU tables
4) Then we run user recon.
After doing this, we go to the OIM user --> account tab
and see the roles assigned to the account at the bottom.
You can see that the composite role is displayed correctly BUT
there are other (blank) rows for single roles which should not be displayed.
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document