Provisioning to SAP Solution Manager

[manu]

Hello, we are trying to integrate Saviynt with SAP system using the OOTB SAP connector. We are able to import the data but unable to provision any account. There are no error logs and we do not know even if Saviynt is able to make the call. Provisioning retries are incremented, job trigger is fine as well. We do not have CUA enabled and our service account has the requisite permissions.

[rushikeshvartak]

• Share connection config Screenshot

[manu]

We have populated the following fields with relevant values -

MESSAGESERVER - FALSE

JCO_ASHOST

JCO_SYSNR

JCO_CLIENT

JCO_USER

PASSWORD

JCO_LANG

SYSTEMNAME

CREATEACCOUNTJSON - {
"ADDRESS": {
"LASTNAME": "${user.lastname}",
"FIRSTNAME": "${user.firstname}",
"E_MAIL": "${user.email}",
"FUNCTION": "${user.title}"
},
"LOGONDATA": {
"GLTGV": "${user.startdate}}"
},
"PASSWORD": {
"BAPIPWD": "${user.passwrd}"
}
}

PROV_JCO_ASHOST

PROV_JCO_SYSNR

PROV_JCO_CLIENT

PROV_JCO_USER

PROV_PASSWORD

PROV_JCO_LANG

ENFORCEPASSWORDCHANGE - FALSE

PASSWORD_MIN_LENGTH

PASSWORD_MAX_LENGTH

PASSWORD_NOOFCAPSALPHA

PASSWORD_NOOFDIGITS

PASSWORD_NOOFSPLCHARS

SAPTABLE_FILTER_LANG

ALTERNATE_OUTPUT_PARAMETER_ET_DATA

Does this help?

[rushikeshvartak]

This won't help.

try below json

{
"ADDRESS": {
"LASTNAME": "${user.lastname}",
"FIRSTNAME": "${user.firstname}",
"E_MAIL": "${user.email}",
"FUNCTION": "${user.title}"
},
"LOGONDATA": {
"GLTGV": "${user.startdate}}"
},
"PASSWORD": {
"BAPIPWD": "${randomPassword}"
}
}

[manu]

Thanks, Rushikesh. What did you want to validate in the connection? I can provide specific response. Also, I tried this JSON but it didn't work and nothing is visible in the logs as well.

[rushikeshvartak]

Does automated provisioning is enabled 

[manu]

Yes

[rushikeshvartak]

Please share logs after running wsretry

[Manu269]

@manu Few more points to be validated :

1. The service account ID used for the integration does it have access to all the BAPI functions listed here :

Preparing for Integration (saviyntcloud.com)

2. Does the service account ID has access to SAP table listed here : Preparing for Integration (saviyntcloud.com)

[manu]

Yes, but SAP logs do not show Saviynt even trying to call the system while provisioning.

[manu]

Logs are attached. Thanks.

[rushikeshvartak]

,"Found 0 pending tasks.. Ending the job.."

[manu]

We have 2 pending tasks for this system. The provisioning retry count is increasing. Job trigger does not have filters and automated provisioning is on. We have raised a bug for this issue.

[rushikeshvartak]

It seems issue with your service account privileges 

[manu]

That was validated and does not appear to be the case. Also in-case of authz issues, Saviynt would return that as an error.

[rushikeshvartak]

Please share connection page screenshot.

[adarshk]

Once the wsretry is executed, is it updating last updated date on the task details? 

[manu]

Yes and also increasing provisioning retry count.