Identity Management for SAP Service Parts Planning

General Prerequisites

You can use this function only when the following applies, in addition to the standard SPP system setup:

• SAP NetWeaver Identity Management (as of release 7.1) is installed and connected to SAP SPP.

• For the uses case Creation of users and business partners for new employees, an Personnel Administration component of SAP ERP HCM (as of enhancement package 4 for SAP ERP 6.0) solution is installed.

Settings

You have maintained the following master data and Customizing settings:

• Adaptation of external number ranges for business partner IDs

  You have checked if the user names provided by SAP NetWeaver Identity Management fit into the external default number range configured in Customizing for Cross-Application Components under  SAP Business Partner   Business Partner  Basic Settings  Number Ranges and Groupings.   The user names might deviate from the default number range for the following reasons:

  • You have changed the default external number range delivered by SAP.

    (The default external number range for business partner is A...ZZZZZZZZZZ.)

  • The user names provided by SAP NetWeaver Identity Management have leading digits or are purely numerical.

    In this case, implementing the BAdI /SCMB/MDL_PARTNER_GEN_ID is mandatory for ensuring the assignment of valid business partner IDs to generated business partners in SAP SPP. For more information about the BAdI, see Customizing for SCM Basis under  Master Data Layer  BAdI: Modify Generated Partner ID.  

• Creation of business partner of type Organization

  You have created business partners of type Organization that represent your own company or the organizations of your company and the companies of your business partners in SAP SPP.

• Customizing for business partners

  You have entered the business partner of type Organization that represents your company in Customizing for Supply Network Collaboration under  Master Data  Integration with Identity Management  Define Leading Business Partner for Identity Management .

• Business Add-In (BAdI) for business partners

  If you want to have your own logic for assigning business partners of type Organization to new users when creating users and business partners for new employees, you have to implement Business Add-In (BAdI) /SCA/IDM_PARTNER_OWN. For more information, see Customizing for Supply Network Collaboration under  Business Add-Ins (BAdIs) for SAP SNC  Master Data  BAdI: Determination of Leading Business Partner for Identity Management .

• Creation of a background user

  You have created a user that a system administrator can use for calling up SAP SPP from the SAP NetWeaver Identity Management system in the background. You have assigned the technical roles SAP_CA_BP_IDM_INTEGRATION and SAP_BC_SEC_IDM_COMMUNICATION to this user.

• Mapping of forms of address

  You have mapped the form of address in Human Resources (HR) to the form of address of the business partner in Customizing for Supply Network Collaboration under  Master Data  Integration with SAP NetWeaver Identity Management  Assign HR Form of Address Key to Form of Address Keys of Business Partner .

Settings in SAP NetWeaver Identity Management

You have performed an initial load of all existing users, existing PFCG roles, and business partner IDs from SAP SPP to SAP NetWeaver Identity Management. You have also maintained the following master data and settings in SAP NetWeaver Identity Management:

• You have created a business role for creating SAP SPP users, called SPP User business role, for example.

• When you set up your screen for SAP NetWeaver Identity Management for creating external users, make sure that the attribute IDENTITY_TYPE is not used.

Creation of an Identity in SAP NetWeaver Identity Management

A new identity can be created manually or automatically (see use cases above). An administrator assigns a business role to this new identity. The business role contains general information such as the PFCG roles and profiles in SAP SPP. For SAP SPP, you can assign the business partner of type Organization.

This business partner either represents the company the employee is working for and is thus the same for all employees or it represents an organizational unit such as an internal department. The organizational unit is not necessarily related to an HR organizational unit. In the case of an external identity, it is the business partner of type Organization in SAP SPP that represents the company for whom the external user is working. Depending on the use case, you can determine the assignment of business partners of type Organization as follows:

• Creation of users and business partners for external users use case

  The assignment of a business partner of type Organization in SAP NetWeaver Identity Management is mandatory.

• Creation of users and business partners for employees use case

  The assignment of a business partner of type Organization in SAP NetWeaver Identity Management is optional. You can also leave this field empty. In this case, SAP SPP assigns the business partner of type Organization that has been maintained in Customizing for SAP SNC.

Generation of Users and Business Partners in SAP SPP

In all use cases, SAP NetWeaver Identity Management distributes the new user to SAP SPP as follows:

• Generation of a user in SAP SPP

  SAP SPP generates the user automatically in the background. The role that you have assigned to the identity in SAP NetWeaver Identity Management is automatically assigned to the user in SAP SPP. Note that this can be any role that is available in SAP SPP. For more information about available roles in SAP SPP, see the SAP SPP documentation on SAP Help Portal at http://help.sap.com.

• Generation of a business partner

  The business partner is generated automatically in the background and assigned to the Internet User partner role. The system determines the business partner ID as follows:

  1. The system takes the first 10 characters of the user name and checks if such a user already exists.

  2. If the business partner already exists, the system concatenates a running number to the user name.

  3. If you want to implement your own custom logic that determines the business partner ID, you can use the Business Add-In (BAdI) /SCMB/MDL_PARTNER_GEN_ID. For more information, see the Prerequisites section.

• Assignment of the business partner

  SAP SPP automatically assigns the business partner of type Person to a business partner of type Organization that represents the business partner the user belongs to. For external users, this is the business partner of type Organization that you have entered in SAP NetWeaver Identity Management. For internal users, the assignment depends on the Customizing or on what has been maintained in SAP NetWeaver Identity Management, in the following order:

  1. If you have assigned a business partner of type Organization to the user in SAP NetWeaver Identity Management, SAP SPP takes over this business partner.

  2. If no business partner has been assigned in SAP NetWeaver Identity Management, SAP SPP checks if you have implemented the Business Add-In (BAdI) /SCA/IDM_PARTNER_OWN. With this BAdI, you can implement your own logic for assigning business partners to users.

  3. If no business partner has been assigned in SAP NetWeaver Identity Management and no BAdI has been implemented, SAP SPP takes over the business partner that has been maintained in Customizing for SAP SNC under  Supply Network Collaboration  Master Data  Integration with Identity Management  Define Leading Business Partner for SAP SNC. .

Changing and Deleting Users

If you change or delete users, SAP NetWeaver Identity Management also distributes the user change or deletion to SAP SPP, with the following constraints:

• The assignment of a user to a business partner of type Person cannot be changed.

• When you delete a user, the assignment of the user to a business partner of type Person is also deleted. The business partner of type Person, however, remains in the system.

Mandatory Set of Data to Be Transferred from SAP NetWeaver Identity Management to SAP SPP

If you want to create or change a user in SAP SPP, the following data must be transferred from SAP NetWeaver Identity Management to SAP SPP: