Hi all, I’ve a requirement to build a transform logic for account disablement in SAP (pre-hire). However, I cannot find any attributes to do so. I have also tried IIQDisabled but doesn’t work.
Please share if you know any ways to disable/lock SAP account through account attributes. Thanks!
Hi @yuyanglee,
There is no attribute connector side to map, we used this connector, when we are disabling user account it is successful, in the next aggregation also user account showing disable only. but the existing accounts which are disable, we unable show those are disable state in IDN, because application side there is no account attribute for identifying this account is disable. you may check application there is any attribute carrying account disable value then use sap build map rule to achieve this case.
Thank You.
Hi @yuyanglee ,
You can use “User Valid To” field to indicate the User account’s end date.
Another possible way is to use “User Type” attribute to control the access to SAP accounts. This attribute can control the access to the SAP account if the value is set to “Reference”. No logon is possible with the value as “Reference”.
Usually, it depends on how the target SAP system is implemented and which logon parameters are used to disable/lock SAP accounts. Based on that you can explore provisioning those attributes either OOTB or via using SAP Build Map rule.
Hope this helps.
Thanks,
Shailee
Yes, i’m trying to see if any luck here. My last option is to write a beforeprovisioning rule to check the LCS pre-hire state and pass the disable operation there. This will be triggered when account gets created during pre-hire.
Hi,
When the user is created in prehire state, you can use the transform to check the lcs and set the “User Valid From” and “User Valid To” values to appropriate start date and end date respectively.
Yep we have done that. Unfortunately, the client has a requirement to lock the account as well and that can only be done through disablement of source account.
Hi @yuyanglee ,
You can try locking the access to the account by setting “User Type” filed in SAP as “Reference”. No Logon is possible with this value.
To enable back the logon when the user becomes “Active”, you can set “User Type” to “Dialog”
You may confirm with the target system - SAP team if these are acceptable processes to lock/unlock the accounts.
Hope this helps.
Thanks,
Shailee
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.