Configuration Parameters

This section contains the information that this connector uses to connect and interact with the application. Each application type requires different information to create and maintain a connection.

The SAP HR/HCM connector uses the following connection attributes:

Note
Attributes marked with * sign are mandatory attributes.

SAP JCO Connection Settings

The host on which the SAP Server is running.

The 2-digit SAP system number.
Default: 00

The 3-digit SAP client number.
Default: 001

The 2-letter SAP client language. Default: EN. If SAP has been patched to SP 17 or later, change the client language to a single character. For example, if the client language is EN, change it to E.

The SAP service account which has permissions mentioned in Required Permissions.

The SAP service account password.

Enter the comma separated value of Action Type(s) to be aggregated for each SAP HR person. For example: 01, 20, 21

In the example, 01 stands for hiring, 20 for termination and 21 for rehire.

Select this checkbox to aggregate inactive employees. Inactive employees are the employees having the following values of STAT2 as follows:

  • STAT2 = 0 refers to Action Type Termination

  • STAT2 = 1 refers to Action Type Leave of absence

  • STAT2 = 2 refers to Action Type Retirement

Enter the number of past days to aggregate inactive employees. The Inactive Employees Offset can have the following values:

  • Default: 30

  • 0: aggregates only the active employees

  • Blank: aggregates all the inactive employees

  • Any positive value: indicates the number of days in the past from when the terminations must be aggregated

Indicates the number of days to aggregate the future hires. The Future Dated Hires Offset can have the following values:

  • Default: 30

  • 0: aggregates no future hires.

  • Blank: aggregates all future hires until 9999-12-31,

  • A positive value: aggregates future hires within the specified number of days.

A rule is used to modify the default object or add custom attributes to each object returned from the SAP HR server (a rule that is called for each object returned from SAP).

Manager Configuration

Select one of the following models to determine the manager of an employee:

  • Organization Chief Manager Model (O-O-S-P): OOSP (Organization(O)-Organization(O)-Position(S)-Person(P)) model deals with the chief of the organization model in which employee's organization is detected with the relationship code 012 between the position of the employee and organization unit.

  • Supervisory Model (S-S): SS (position(S)-position(S)) model deals with the position-position manager relationship model in which the two positions are connected with the relationship code 002.

  • Custom: Custom rule to determine the manager of the SAP HR employee. An example of a custom rule is located in the WEB-INF/config/examplerules.xml file.
    For more information on the Manager Rule, refer to Account Attributes.

Function Module Configuration

The name of the function module that you need to configure. The default is SAILPOIN/SAIL_READ_TABLE. For more information on the function modules, refer to SailPoint Add-On to Replace the Use of RFC_READ_TABLE.

Enter the Page Size to specify the number of records fetched per page for your function module configuration. The default is 500.

Note
This field is only applicable if you have selected the /SAILPOIN/SAIL_READ_TABLE or /SAILPOIN/SAIL_READ_TABLE_LEG on the Name dropdown.

Load Balancing Configuration

Select this checkbox to configure and enable load balancing on this application.

The SAP message server's hostname or IP address.

The SAP message server's logon group name.

The SAP message server's port number or logical name.

SNC Configuration

Represents a Secure Network Connection which also internally signifies jco.client.snc_mode in SAP. SNC will be enabled if the mode is selected as ON whose value is 1. If SNC is off, the value will be 0.

Default: 1

Represents the Quality of Protection (QOP) level which is defined from 1 to 9. In SAP, it relates to jco.client.snc_qop.

Represents the SNC partner.

For example, provide the input as follows in SAP:

p:CN=R3, O=XYZ-INC, C=EN

If SNC is configured, it relates to jco.client.snc_partnername

Represents the SNC name which internally signifies jco.client.snc_myname. It overrides the default SNC Partner Name.

The path to the library which provides SNC service. It internally signifies jco.client.snc_lib.

For example, the value to be passed:

  • On Microsoft Windows: C:/sapcryptolib/sapcrypto.dll (the location of the cryptographic library).

  • On UNIX: /opt/sailpoint/lib/custom/libsapcrypto.so (the location of the cryptographic library).