Identity Management 

Use

The user management user interface of the user management engine (UME) provides you with the functions you need to manage users, groups, and roles on the SAP NetWeaver Application Server (AS) Java. This user interface is also known as the user administration console.

Starting Identity Management

Identity management is a Web Dynpro application for managing users on the AS Java. It is integrated in the SAP NetWeaver Administrator and in the System Administration role of the SAP NetWeaver Portal. You can also start this tool as a stand-alone console. Use the method most appropriate to your environment.

●      SAP NetWeaver Administrator

...

                            a.      Enter the following in your Web browser:

<http/https>://<AS_hostname>:<AS_HTTP_port>/nwa

                            b.      Choose System Management → Administration → Identity Management.

●      Portal

...

                            a.      Enter the following in your Web browser:

<http/https>://<AS_hostname>:<AS_HTTP_port>/irj

                            b.      Choose User Administration → Identity Management.

●      Stand-alone console

...

Enter the following in your Web browser:

<http/https>://<AS_hostname>:<AS_HTTP_port>/useradmin

When possible, configure the AS Java to use Secure Socket Layer (SSL).

For more information, see Configuring the Use of SSL on the J2EE Engine.

Prerequisites

Identity management requires that you have at least read access to the principals users, groups, or roles.

For more information, see Managing Users, Groups, and Roles.

Features

User Interface

The identity management user interface consists of two views, the search view and the details view. When you start the console, only the search view appears. When you search for a user, group, or role, the search results appear in a list at the bottom of the search view. When you select a user, group, or role in the list, the details view appears below the search view and displays detailed information about the selected principal. See the figure below.

Views of the Identity Management User Interface

Functions

For a general list of functions, see Administration of Users and Roles.

Identity management also enables the following:

●      Search for users, groups, or roles

○       Simple search for string in user ID or name

○       Advanced search for users using user attributes as search criteria

●      Search recursively for principals assigned to other principals

For example, if you perform a normal search for users assigned to a role, the search finds only the users directly assigned to the role. If you search recursively, the search finds both the users directly assigned to the role and the users that are assigned to groups that are assigned to the role, that is, users that are indirectly assigned to the role.

Configuration

The user interface provides a number of configuration options.

For more information, see Additional Configuration Options.