SEC633 – SAP Cloud Platform Identity Provisioning:

Maintain Mapping Transformations

PUBLIC
Speakers 2018

SAP TechEd Las Vegas Plamen Pavlov

October 2–5, 2018

SAP TechEd Barcelona Alexander Zubev

October 23–25, 2018

SAP TechEd Bangalore Karthikeyan Viswanathan

November 28–30, 2018

© 2018 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 2

 Take the session survey.
We want to hear from you!

Be sure to complete the session evaluation

for this session SEC633
on the SAP TechEd mobile app.

Download the app from

iPhone App Store or Google Play.

© 2018 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 3

Disclaimer

The information in this presentation is confidential and proprietary to SAP and may not be disclosed without the permission of SAP.
Except for your obligation to protect confidential information, this presentation is not subject to your license agreement or any other service
or subscription agreement with SAP. SAP has no obligation to pursue any course of business outlined in this presentation or any related
document, or to develop or release any functionality mentioned therein.
This presentation, or any related document and SAP's strategy and possible future developments, products and or platforms directions and
functionality are all subject to change and may be changed by SAP at any time for any reason without notice. The information in this
presentation is not a commitment, promise or legal obligation to deliver any material, code or functionality. This presentation is provided
without a warranty of any kind, either express or implied, including but not limited to, the implied warranties of merchantability, fitness for a
particular purpose, or non-infringement. This presentation is for informational purposes and may not be incorporated into a contract. SAP
assumes no responsibility for errors or omissions in this presentation, except if such damages were caused by SAP’s intentional or gross
negligence.
All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ materially from
expectations. Readers are cautioned not to place undue reliance on these forward-looking statements, which speak only as of their dates,
and they should not be relied upon in making purchasing decisions.

© 2018 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 4

Introduction
SAP Cloud Platform Identity Provisioning
In the security products portfolio from SAP

Digital Core People

Manufacturing
& Supply Chain Engagement

Network & Spend

Customer Management
Experience

Intelligent
Secure access Enterprise
Suite
SAP Single Sign-On Secure code
SAP Cloud Platform Identity Authentication SAP NetWeaver AS, add-on
Intelligent Systems
for code vulnerability analysis

Manage users and permissions AI/ML | IoT | Analytics

SAP Identity Management

Detect attacks
SAP Cloud Platform Identity Provisioning
Digital
SAP Enterprise
SAP Cloud Identity Access Governance
Platform Threat Detection
SAP Access Control
Data Cloud
Management Platform
© 2018 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 6
SAP Cloud Platform Identity Provisioning
Product description

Key capabilities
Retrieve cloud users and attributes
 Identity and access management for the cloud and hybrid:
Identity provisioning is a service of SAP Cloud Platform. It enables
customers to establish an identity lifecycle management for cloud- Create accounts Cloud-based
user store
based business applications and integrates with SAP Identity
Management to support hybrid landscapes as well.
 Simple and agile solution with short time to value: Identity Assign authorizations
provisioning was developed with the cloud qualities in mind,
supporting the onboarding of both users and applications in a Cloud-based business
applications
simple and agile manner.
 Openness: Through the support of the industry standard protocol Corporate
SAP Cloud
SCIM and dedicated connectors for important third-party cloud Platform Identity Retrieve on-premise users and
user store

platforms, SAP Cloud Platform Identity Provisioning covers not Provisioning

attributes
only an SAP landscape but also multivendor scenarios, including
integration toward on-premise solutions. SAP Cloud Platform

© 2018 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 7

Time to code
Exercise
Details

Scenario
 Onboard SuccessFactors user into SAP Cloud Platform Identity Authentication

Actions to be performed
 Configure a source system Provision / Deprovision Identity
 Configure a target system User attributes Authentication
 Apply source system filtering
 Apply conditional filtering in source system transformations
 Apply conditions to set attribute values in source system transformations Retrieve
User attributes
 Change the identifier of the source system
Identity
 Special handling of referenced attributes Provisioning
 Modify conditional filtering in target system transformations
 Modify attribute mappings in target system transformations
 Apply conditions to set attribute values in target system and use additional
functionality (like sending e-mail) in transformations

© 2018 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 9

SAP TechEd online / SAP Community

Access replays of:

 Keynotes
 SAP TechEd live interviews
 Selected lecture sessions

http://sapteched.com/online

Continue your SAP TechEd discussion after

the event within SAP Community:
 Read and reply to blog posts
 Ask your questions
 Join conversations

sap.com/community
See all SAP TechEd blog posts

© 2018 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 10

Further information

Related SAP TechEd learning journeys

SEC2 – Comply with legal regulations and securely govern your system environments

Related SAP TechEd sessions

SEC364 – Hands-on: End-to-End Identity and Access Management Using SAP Cloud Platform​
SEC260 – Hands-on: Identity and Access Management in Hybrid System Environments​
SEC823 – Road Map: SAP Cloud Platform Identity Provisioning Service​
SEC305 – CodeJam: Identity and Access Management Services Offered by SAP Cloud Platform

Public SAP Web sites

Identity Provisioning: https://www.sap.com/developer/expert/cloud-platform-identity-provisioning.html

SAP training and certification opportunities

www.sap.com/education

© 2018 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 11

 Thanks for attending this session.

Feedback Contact for further topic inquiries

Please complete your session Plamen Pavlov

Product Owner / Product Manager
evaluation for SEC633 Plamen.Pavlov@sap.com

© 2018 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLIC 12

Follow us

www.sap.com/contactsap

© 2018 SAP SE or an SAP affiliate company. All rights reserved.

No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of
SAP SE or an SAP affiliate company.
The information contained herein may be changed without prior notice. Some software products marketed by SAP SE and its
distributors contain proprietary software components of other software vendors. National product specifications may vary.
These materials are provided by SAP SE or an SAP affiliate company for informational purposes only, without representation or
warranty of any kind, and SAP or its affiliated companies shall not be liable for errors or omissions with respect to the materials.
The only warranties for SAP or SAP affiliate company products and services are those that are set forth in the express warranty
statements accompanying such products and services, if any. Nothing herein should be construed as constituting an additional
warranty.
In particular, SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or
any related presentation, or to develop or release any functionality mentioned therein. This document, or any related presentation,
and SAP SE’s or its affiliated companies’ strategy and possible future developments, products, and/or platforms, directions, and
functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time for any reason
without notice. The information in this document is not a commitment, promise, or legal obligation to deliver any material, code, or
functionality. All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ
materially from expectations. Readers are cautioned not to place undue reliance on these forward-looking statements, and they
should not be relied upon in making purchasing decisions.
SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered
trademarks of SAP SE (or an SAP affiliate company) in Germany and other countries. All other product and service names
mentioned are the trademarks of their respective companies.
See www.sap.com/copyright for additional trademark information and notices.