I’ve just installed the SAP MA (also called the ERP MA) for the first time. As usual it took four times as long as seemed strictly necessary so, in this post, I shall summarise the steps I took to create a basic MA, able to import Users and Employees from SAP into ILM.
1. Software Requirements
For some reason I found it really hard to find a nice, simple list of what is required on the ILM server. So here’s my attempt:
|Windows 2003 Enterprise 32-bit||Not 64-bit, as I found out the hard way.|
|Visual Studio 2005||Installed with preferred language – VB.NET or VC#. You can deselect the other options if you like.|
|SQL 2005||I believe SQL 2000 is also ok.|
|Visual Studio 2003||Yes! As well! This is needed by the SAP .NET Connector, though again you can install it with minimal settings. In fact there is a way to avoid installing VS 2003 but you will need access to a computer with the SAP Connector already installed, from which you can copy certain files. See this post by Tomek for his workaround.|
|SAP .NET Connector 2.0.1||Downloadable from http://service.sap.com/connectors though it needs a username and password, so maybe you can see if the local SAP admin already has one.|
|ERP MA||There’s a more recent version that the CD one available here.|
2. Configure the Schema
The SAP MA is not able to go off into your SAP system, discovering the schema for itself. It is necessary to use the ERP MA Configuration Tool to produce copy of the required schema elements in an XML file, which you will then import into your MA.
We mucked around for quite some time trying to create our own configuration, before paying attention to the template referred to in the documentation. This is a preconfigured schema which should work for most standard SAP installations (I would imagine, being no SAP expert – though it worked for the one I was connecting to), and will grab all active users and employees.
So here’s what you need to do:
- Run the ERP MA Configuration Tool from the Programs menu created by the installation
- Choose File -> Open Configuration
- Browse for the Microsoft ERP Management Agent program folder
- Open the ERPDefaultTemplate.xml
- Fill in the Connection Information as follows:
- Connect To: ASHOST=SAP_Server SYSNR=00 CLIENT=800
- Username: SAP username with sufficient access to retrieve user and employee records
- Password: SAP password
- Have a look through it, while thinking “what the heck does all this mean??”
- Choose File -> Save As
- Save it to the Extensions folder, using the same name as you will use for the MA.
3. Create the MA
No you can go into Identity Manager and create a SAP MA.
Remember to give it the same name as the schema file you saved above. The connection details are the same ones you entered in the configuration tool – step 5 above.
When prompted to enter a schema file, the one you want is MAName_schemaAttributes.xml.
After that the configuration is the same as for any other MA.
The template schema only includes a “full” method for imports – no “delta”. So you will be stuck with Full Imports for the time being.
There is something in the Help about enabling “change docs” – but I haven’t got that far yet myself. Once I figure out how to do delta imports from SAP you can be sure there will be another post.