SAP HR Connector changes in Access Governance Suite 5.1

  • 7011186
  • 03-May-2011
  • 19-Oct-2012

Resolution

Below is a list of detailed changes made to the SAP HR Connector, starting with the identityIQ 5.1 release.

Starting with Access Governance Suite 5.1, the SAPHR code was refactored to avoid calling BAPI_PERSDATA_GETDETAILEDLIST. It now calls another BAPI called BAPI_PERSDATA_GETDETAIL which provides a more granular way to choose which attributes are returned.

Top level flags were also added to allow one to disable most of the function modules by type of data they are returning.  This allows customers to turn off any of the BAPI calls, with the
exception of getting the employeeId list.

There are five main attribute categories used by the SAPHR connector out of the box.

  1. Organization Information
    Calls BAPI_EMPLOYEE_GETDATA only enables and reads ORG_ASSIGNMENT table

    To disable this section add, the following xml to the SAP HR application:
    <entry key="disableOrgData" value="true"/>
  2. Address Information
    Calls BAPI_ADDRESSEMPGETDETAILEDLIST reads ADDRESS table

    To disable this section add, the following xml to the SAP HR application:
    <entry key="disableAddressData" value="true"/>

  3. Communications Data
    Calls BAPI_EMPLCOMM_GETDETAILEDLIST reads COMMUNICATION table

    To disable this section add, the following xml to the SAP HR application:
    <entry key="disableCommData" value="true"/>
  4. Personal Data
    Calls BAPI_PERSDATA_GETDETAIL but selectively allows which attributes are enabled and each field that is returned by editing the schema.

    To disable this section add, the following xml to the SAP HR application:
    <entry key="disablePersonalData" value="true"/>

    Otherwise, you can just remove individual attributes from the schema. For example, if you don't want "Id Number" to be returned you can just remove that specific attribute and it won't be sent over the wire OR put on the new objects.
  5. Lookup and Adorning of Supervisor position, org and job descriptions, position text

    To disable these look-ups remove the following schema attributes:
    Supervisor remove 'Supervisor'
    Org Text remove 'Organization Description'
    Job Description remove 'Job Description'
    Position Text remove 'Position Description'