Show TOC

User Data SynchronizationLocate this document in the navigation structure

Use

SAP NetWeaver Application Server (SAP NetWeaver AS) ABAP can share user information with the following repositories.

  • Other ABAP systems with Central User Administration (CUA).

  • Directory servers

  • Database management system (DBMS) user management

Central User Administration

Using Central User Administration, you can maintain user master records centrally in one system. Changes to the information are then automatically distributed to the child systems.You have an overview in the central system of all user data in the entire system landscape.

For more information, see Central User Administration.

Directory Services

Directory services are a common store for information in IT landscapes. The information is stored in a central directory, which the various systems in your IT landscape can access. The directory serves as an IT address book for information that is common to applications, such as the following:

  • Personnel data (name, department, organization)

  • User data and security information (User account, authorizations, public key certificates)

  • Information about system resources and system services (system ID, application configuration, printer configuration)

You can map SAP data fields to directory attributes and in the other direction; determining which system holds the master data for each attribute. When you execute report RSLDAPSYNC_USER, SAP NetWeaver AS for ABAP triggers an exchange with the configured directory servers using Lightweight Directory Access Protocol (LDAP).

Recommendation

We recommend that you secure the connection between the directory server and SAP NetWeaver AS for ABAP with SSL.

For more information, see Directory Services.

DBMS User Management

SAP NetWeaver AS for ABAP enables you to customize a single ABAP client to create and delete users in the underlying DBMS. By creation, the systems can synchronize user IDs and initial passwords. After user creation, SAP NetWeaver AS for ABAP only synchronizes its administrative locks with underlying DBMS. Only User Maintenance (transaction SU01) supports this synchronization.

For more information, see DBMS User Management.