More information, see /security Security in Detail Secure User Access Identity Management Identity Management APIs. The UME APIs support access using the Service Provisioning Markup Language (SPML). You can configure what attributes the simple search targets. The UME enables you to define virtual groups based on the content of a user attribute.Įnables you to support delegated user administration. The UME enables you to import and export user data from and to external systems. The UME logs important security events, such as successful and failed user logons, and creation or modification of users, groups, and roles. It is also possible to set up an approval workflow, whereby administrators approve newly registered users. UME provides self-service scenarios that allow users to register themselves as new users or to change their own data (address, password, and so on). You can define a password policy including settings such as minimum and maximum length of passwords, number of failed logons before the system locks a user, and so on. For example, if an administrator locks a user account, the user receives an e-mail informing him or her of the change. E-mails are automatically sent to users or administrators on specific events. You can also configure the UME for e-mail notification.

Identity management enables administrators to perform routine administration tasks such as creating or searching for users and groups, and assigning users and groups to roles. In the persistence manager, you configure which data is written to or read from which data source, so that the applications using the API do not have to know any details about where user management data is stored. The application programming interface (API) is a layer on top of the persistence manager.

The persistence manager consults the persistence adapters when creating, reading, writing, and searching user management data. Each type of data source has its own persistence adapter. In the figure, user data is stored in one or more data sources. The following figure illustrates the architecture of the UME. User management of SAP NetWeaver AS for ABAP. Sources, such as Lightweight Directory Access Protocol (LDAP) directories, the systemĭatabase of SAP NetWeaver AS for Java, and The UME can be configured to read and write user-related data from and to multiple data

Management engine