Integration alternatives for an older SAP application

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hello community!

We have an older SAP NetWeaver application that cannot be integrated with IdentityNow using a standard connector. We are exploring alternative methods to connect to it, even if they require manual processes like provisioning and/or certification tasks.

We are considering the following options:

  1. Generic or Delimited File connector: These connectors only allow manual file uploads. Would it be possible to connect to a server (e.g., SFTP) and read a file from it using a dedicated connector?

  2. Web Services connector: This could be an option but would require custom development to implement REST calls and create a client to receive calls from IdentitySecurityCloud. Moreover, how could we integrate this approach to enable IdentitySecurityCloud users to request access to this application or certify their access through “Request Center” and “Certification Campaigns”?

  3. IdentityNow APIs: Could we use IdentitySecurityCloud APIs to receive files and process them as “Entitlement Lists” and “Account Lists”?
    How can we use this approach to enable IdentitySecurityCloud users to request access to this application or certify their access through “Request Center” and “Certification Campaigns”?
    Would we need to create a dedicated source for this scenario? If so, what type of connector would be most suitable?

  4. Oracle HCM Cloud connector: This connector can connect to an SFTP server, access it with a dedicated user, and read an encrypted CSV file. While this approach seems ideal, our SAP doesn’t have the standard HCM attributes. Additionally, we are concerned about potential conflicts with the connector’s internal logic. What are the pros and cons of this approach?

  5. SAP API: We recently discovered that SAP APIs exist to provision the accounts. The API are at this link: SAP Business Accelerator Hub. Would it be possible to configure a “Web Services” connector, configure these APIs and manage the integration in this way? Moreover, I cannot find anything for entitlement aggregations so this could be an obstacle. It could also be the reason why the “SAP Direct” connector does not use them.
    Does anyone know about these API? Could they be used for our purposes?

We would appreciate your guidance on the best approach and any alternative scenarios you may suggest.
Best regards