Configuration Parameters

This section contains the information that this Module uses to connect and interact with the application. Each application type requires different information to create and maintain a connection.

The IdentityIQ for SAP ERP – SAP Portal - User Management Web Service uses the following connection attributes:

SAP Portal UMWebService Configuration

The url for the UMWebService. For example:

http://HOST:PORT

In the above url, HOST refers to the instance where SAP Portal-User Management WebService is installed and PORT is the listening port of the server.

This url can use either http or https.

When using https, the portal server’s keystore and the application server’s keystore must be configured.

Authentication method supported by the managed system:

  • Basic Authentication

  • OAuth 2.0

Applicable if Authentication Type is selected as Basic Authentication

The SAP Portal user name used when connecting to the Web Service.

Password for the user account specified in Username.

Applicable if Authentication Type is selected as OAuth 2.0

Authorization grant type supported by the managed system:

  • Refresh Token / Auth Code

Client ID for OAuth 2.0 authentication.

Client Secret for OAuth 2.0 authentication.

Access token required to access the managed system APIs.

Token required to regenerate the expired access token.

Aggregation Filter Settings

Enter the string representation of an object filter. Any account object matching the filter is filtered out of the dataset. The following is an example of a filterString that filters out all objects where the uniqueId starts with USER.R3_DATASOURCE:

uniqueId.startsWith("USER.R3_DATASOURCE.")

If this property is non-empty, filtering happens on the IdentityIQ server side and does not filter on the SAP portal side.

Enter the string representation of an object filter. Any roles object matching the filter is filtered out of the dataset. The following is an example of a filterString that filters out all objects from the that have a displayName starting with com.sap.pct:

displayName.startsWith("com.sap.pct")

When this property is non-empty filtering happens on the IdentityIQ server side and does not filter on the SAP portal side