The data repositories or persistence layers from which SAP User Management Engine (UME) retrieves user management data are referred to as data sources. With UME you can leverage existing user data repositories in your system infrastructure by connecting to them using configurable persistence adapters. You can read data from and write data to multiple data sources in parallel. For example, you can configure UME so that user data is read from an existing corporate directory, while new users are written to a database. A persistence manager is responsible for reading the data from or writing the data to the correct data source. The data source to which the persistence manager writes is transparent to applications using UME.
UME can use the following types of data sources:
· Database: For information on which databases are supported, see the Product Availability Matrix on SAP Service Marketplace at service.sap.com/pam
· Lightweight Directory Access Protocol (LDAP) directory: SAP has set up a program to certify LDAP directory solutions for use with UME. For more information, see SAP Service Marketplace at service.sap.com/security → Security Partners → Partners for directory services (Interface to LDAP enabled directories).
SAP Enterprise Portal 6.0 customers are are entitled to a 250,000-user version of Novell eDirectory free of charge. For more information, see www.novell.com/products/edirectory/sap/.
· ABAP user management of SAP Web Application Server 6.20 or higher
For recommendations on which data sources to use and how to integrate UME in your system landscape, see Integration of User Management in Your System Landscape.
You have several options for configuring the data sources used by UME:
· By defining the data sources during installation: During installation of the SAP Web Application Server, you can define whether UME uses a database or the ABAP user management of a SAP Web Application Server as a data source. For more information, see Installation Options.
· By defining the data sources after installation using preconfigured data source configuration files: UME provides data source configuration files that define a configuration for standard scenarios, such as storing standard user data in a corporate LDAP directory and application-specific data in the database. After installation, you can change the configuration of UME to use the configuration from one of these files. Note that restrictions apply. For more details on the restrictions, see SAP Note 718383.
For more information on the available files, see Preconfigured Data Source Combinations. For an example of how to change the configuration of UME to use one of these files, see Configuring UME to Use an LDAP Server as Data Source.
· By creating your own customized data source configuration file: If none of the preconfigured files meets your requirements, you can modify the existing configuration files according to your requirements.
This option is not recommended. Normally you should only need to change the data source configuration files if you are using an LDAP directory as data source and need to adapt the attribute mappings. Otherwise you should only change the configuration files if none of the preconfigured files meets your requirements. In this case, you should set up a dedicated project with experienced project members for creating the customized data source configuration file.
For more information, see Customizing a UME Data Source Configuration.