Changing the AS ABAP Back-End
System for the UME
Use
Use this procedure to switch the data source of the user management engine (UME) from one ABAP system to another. You can also use this procedure to change the client used by the UME; however, if the new client is an exact copy of the old client you can use the shortened procedure.
For more information, see Changing the ABAP Client for the UME After a Client Copy.
Consider changing the back end only if you have not yet created assignments in the UME, or if you are sure that the new AS ABAP system contains those users that were already present in the old AS ABAP system. If there are users and roles in the old AS ABAP system, which do not exist in the new AS ABAP system, applications in the AS Java that refer to those users and roles may no longer function as expected.
We recommend that you plan carefully and install the UME with the AS ABAP system you intend to use the UME with, whenever possible. If this is not possible, try to change the back end as soon as possible after installation. This reduces the likelihood of inconsistencies due to changes to users and roles.
Prerequisites
● This procedure requires you to restart the AS Java, so you should plan for the required downtime while the AS Java restarts.
● The new ABAP system must be SAP NetWeaver AS 6.20 Support Package Stack 25 or higher.
Procedure
...
1. On the AS Java, use identity management determine the identity of the following users in the UME:
For more information, see Identity Management.
○ Guest user
Use identity management to search the built-in user group anonymous users. The default logon ID is J2EE_GUEST.
○ At least one administrator user
Use identity management to find a user with an administrator role.
2. Determine the identity of the system user for UME-ABAP communication.
a. Start UME configuration.
For more information, see Configuring User Management.
b. Choose the ABAP Server tab.
c. Note the User ID in the General Connections Settings.
The default ID is SAPJSF.
3. Determine if the users identified above appear in both the old and new ABAP systems.
Use transaction SU01 to determine if each of the three users identified above appear in the old ABAP system. If the users appear in the old ABAP system, then make sure that the role assignments for the users are named exactly the same as in the old ABAP system.
4. Prepare the system user for UME-ABAP communication in the new system.
○ Ensure the password for the system user is the same in both ABAP systems. If you cannot remember the password for the system user, create a new password in the new ABAP system and change the password in the AS Java.
For more information, see Changing the Password of the User for UME-ABAP Communication.
○ Ensure that the roles assigned to the system user in old ABAP system are assigned and generated in the new ABAP system.
Use the transaction PFCG to check the status of the roles under Authorizations and User → User comparison. The status indicators for these tabs should be green.
If a status indicator is not green you must regenerate the profile and perform a user comparison as needed. For more information, see the following:
■ Regenerate the Authorization Profile Following Changes
5. On the AS Java, under the ABAP Server tab of UME configuration, choose Modify Configuration.
6. Enter the connection data for connecting to ABAP systems.
Survey the settings. Change the settings to connect to the new AS ABAP system. You are likely to need to change at least the following connection settings:
○ Application Server
○ System Number
For more information about the configuration settings, see Configuring the UME to Use an AS ABAP as Data Source.
7. Choose Test Connection.
If the test fails, go back and reenter the connection data and test the connection until you are successful.
8. Choose Save All Changes.
9. Restart the AS Java.
Result
The AS Java uses the new AS ABAP as the data source.