Saviynt unveils its cutting-edge Intelligence Suite products to revolutionize Identity Security!
Click HERE to see how Saviynt Intelligence is transforming the industry.
Saviynt Copilot Icon

Import and Provisioning to SAP specific client through SAP CUA vs Direct

seasaurabh
New Contributor
New Contributor

Hi Team,

We are currently in the process of integrating Saviynt with SAP and we would appreciate some expert advice regarding the following questions:

  1. In our client's SAP DEV environment, all systems are integrated via Central User Administration (CUA). However, in their PROD environment, only a couple of systems are CUA enabled. We would like to know what the best practice is in this situation - should we go via CUA or directly to integrate the systems?
  2. If we integrate SAP connector for each client with CUA enable in DEV and then move it back to direct system access (CUA disable) in PROD, is this feasible ? i.e. is this possible to convert Saviynt SAP connector with CUA enable to CUA disable. The Saviynt documentation provides very limited information on this topic.

After going through below post, i can see its possible to configure SAP connector for each client  separately via CUA. For provisioning it make sense to send the to specific client but when we import the data, is there way to make sure that each connection is getting only the specific client data ? as i can see we can give client name during the import.

https://forums.saviynt.com/t5/identity-governance/provisioning-to-sap-specific-client-through-sap-cu...

3 REPLIES 3

rushikeshvartak
All-Star
All-Star
  1. In our client's SAP DEV environment, all systems are integrated via Central User Administration (CUA). However, in their PROD environment, only a couple of systems are CUA enabled. We would like to know what the best practice is in this situation - should we go via CUA or directly to integrate the systems?  - You can implement CUA enabled SAP Applications
  2. If we integrate SAP connector for each client with CUA enable in DEV and then move it back to direct system access (CUA disable) in PROD, is this feasible ? i.e. is this possible to convert Saviynt SAP connector with CUA enable to CUA disable. The Saviynt documentation provides very limited information on this topic. --> if SAP is CUA then you need to use CUA enabled SAP in connector

During import you can't specify from which instance data to be pulled


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.

On point 2- That i know what you mentioned what i am asking is - Dev has CUA but for same client Prod doesn't have so the question is - is this possible to convert that to CUA disable when promoting to PROD ? 

Yes you can use disable CUA


Regards,
Rushikesh Vartak
If this helped you move forward, click 'Kudos'. If it solved your query, select 'Accept As Solution'.