SAP Connector Mapping Issue (HCM)

Question

Hello experts, 
 i am also experiencing an isuue upon reading and mapping data from SAP HCM with SAP R/3 Connector. 
 Some info about my DEV environment: 
 
 Identity Manager 8.2.1 
 Corresponding BAPI successfully imported to the SAP Client 
 SAP NCo installed on both sides (1IM and Target System) - Version 3.0.25 
 Sync project cofigured according to the docs, with template for SAP HCM 
 
 The connection to the target system works, but most of the attributes cannot be reached (e.g. Last name) and therefore person object are not created. Strangely enough, values of data type Date (e.g. HR_LEAVING_DATE) or references to organizational structure (e.g. ORGEH) are correctly displayed in the Target System Browser and upon executing the synchronization. 
 Altough the mapping looks like this: The error that is displayed in the sync log looks like this: [810077] Person: The following fields are compulsory and need to be filled: Last name. 
 Though, in the mapping looks just fine (LASTNAME (HREmployeeActive) => Last name (1IM)). 
 I would appreciate any help or suggestions. 
 Best regards 
 Toni

tlindner · Accepted Answer

Hi Toni, 
 so I guess your SAP account used in connection string has not enough access rights to execute functions having to do with HR module function calls (i.e. BAPI_PERSDATA_GETDETAIL ). Please have a look the the One IM product documentation or use the prepared SAP role delivered with the transports. 
 Regards, 
 Tino

tlindner · Answer

Hi Enrico, 
 you should notice the section "Authorizations for synchronizing with an SAP HCM system" at "Administration Guide for SAP R/3 Structural Profiles Add-on". 
 Authorizations for synchronizing with an SAP HCM system 
 You require the following authorizations for accessing the target system in order to synchronize One Identity Manager with an SAP HCM system. * Structural profile "ALL" (assigned in the T77UA table) * Authorization object S_RFC (authorization check on RFC access) with activity 16, at least for the PERS, PADR, RH65, RPAI function groups. Regards, 
 Tino

tlindner · Answer

Hi Enrico, 
 due to an security update of our /VIAENET - BAPI we introduced new authentication objects ZVIA_OP, ZVIH_OP, ZVIL_OP and ZVIL_TABLE in the past. If you have an older version of role /VIAENET/SYNC you should add this new objects to the role to have access to all functions of our BAPI. 
 
 Regards, 
 Tino

Endpoint Privilege Management

SAP Connector Mapping Issue (HCM)

Top Replies