Re: [sap-security] Difference between CUA and IDM
Posted by
Admin at
|
Share this post:
|
|
0 Comments
 | Posted by Sonia (Sap Basis and Securiy Analyst) on Feb 2 at 5:36 PM |  Mark as helpful |
Hi,
CUA is central user administration
Its a central system where where we maintain / create users.
For instance : you have 30 systems installed (like ECC6.0 (dev / QA / PROD),
SRM,BI,CRM...)
if u get a request from client saying you need to create 50 users in 30
systems (ie u are giving access to the users in 30 systems).
So what you do - in each and every sytem u need to create users (user
creation independent of other system / clients) its a tedious process.
if at all you have central system(CUA) install,then within 3 to 5 sec you
will be able to create 50 users in 30 system.
it enables you to manage several thousand users and their individual role
assignments.
How to know that CUA is installed in ur company- Su01 -Create /change user
-> if you notice "system tab" other than role, profile , logon...then it is
CUA.
CUA gets connected to all your child system (BI,SRM,ECC...) using ALE / IDOC
method.
CUA only get connected to ABAP systems.
If at all user wants to reset password / unlock he needs to approach help
desk / security team
IDM - Identity Management.
Gets connected to ABAP system + NON ABAP systems + third party tools
Adv of IDM : Self service password reset.
IDM : can be connected and used in combination with an existing CUA.
or if CUA is not installed ,you can directly go for IDM.
Enables workflow-based requests for approvals, automating user provisioning
in multiple back-end systems
Supports LDAP directories and databases, as well as standards such as SPML
Supports tight integration with SAP Business Suite 7.0 .
Thank you,
Sonia
On Tue, Feb 2, 2010 at 5:04 PM, Bob Talbot via sap-security <
sap-security@groups.ittoolbox.com> wrote:
> Posted by Bob Talbot
> on Feb 2 at 5:05 PM
> CUA (Central User Administration) is utilized to manage your user
> population across your SAP landscape giving you a single system/client to
> manage user ID's in several SAP systems (DEV, QA, PROD in ERP, BW, SCm,
> etc.). SAP IDM is an identity Manager that provides this along with "all
> systems, instances, and applications in a heterogeneous global IT
> environment". This link provides the info on SAP IDM:
> http://www.sap.com/platform/netweaver/components/IDM/index.epx
> I hope this helps.
> Bob
> SAP Security Analyst
>
> ---------------Original Message---------------
> From: charu-jain
> Sent: Monday, February 01, 2010 8:29 AM
> Subject: Difference between CUA and IDM
>
> > Hello All, <br/>I was a little confused as to what is the difference
> between CUA and SAP IDM.
__.____._ CUA is central user administration
Its a central system where where we maintain / create users.
For instance : you have 30 systems installed (like ECC6.0 (dev / QA / PROD),
SRM,BI,CRM...)
if u get a request from client saying you need to create 50 users in 30
systems (ie u are giving access to the users in 30 systems).
So what you do - in each and every sytem u need to create users (user
creation independent of other system / clients) its a tedious process.
if at all you have central system(CUA) install,then within 3 to 5 sec you
will be able to create 50 users in 30 system.
it enables you to manage several thousand users and their individual role
assignments.
How to know that CUA is installed in ur company- Su01 -Create /change user
-> if you notice "system tab" other than role, profile , logon...then it is
CUA.
CUA gets connected to all your child system (BI,SRM,ECC...) using ALE / IDOC
method.
CUA only get connected to ABAP systems.
If at all user wants to reset password / unlock he needs to approach help
desk / security team
IDM - Identity Management.
Gets connected to ABAP system + NON ABAP systems + third party tools
Adv of IDM : Self service password reset.
IDM : can be connected and used in combination with an existing CUA.
or if CUA is not installed ,you can directly go for IDM.
Enables workflow-based requests for approvals, automating user provisioning
in multiple back-end systems
Supports LDAP directories and databases, as well as standards such as SPML
Supports tight integration with SAP Business Suite 7.0 .
Thank you,
Sonia
On Tue, Feb 2, 2010 at 5:04 PM, Bob Talbot via sap-security <
sap-security@groups.ittoolbox.com> wrote:
> Posted by Bob Talbot
> on Feb 2 at 5:05 PM
> CUA (Central User Administration) is utilized to manage your user
> population across your SAP landscape giving you a single system/client to
> manage user ID's in several SAP systems (DEV, QA, PROD in ERP, BW, SCm,
> etc.). SAP IDM is an identity Manager that provides this along with "all
> systems, instances, and applications in a heterogeneous global IT
> environment". This link provides the info on SAP IDM:
> http://www.sap.com/platform/netweaver/components/IDM/index.epx
> I hope this helps.
> Bob
> SAP Security Analyst
>
> ---------------Original Message---------------
> From: charu-jain
> Sent: Monday, February 01, 2010 8:29 AM
> Subject: Difference between CUA and IDM
>
> > Hello All, <br/>I was a little confused as to what is the difference
> between CUA and SAP IDM.
Copyright © 2010 Toolbox.com and message author.
Toolbox.com 4343 N. Scottsdale Road Suite 280, Scottsdale, AZ 85251
Toolbox.com 4343 N. Scottsdale Road Suite 280, Scottsdale, AZ 85251
SoniaSAP Security Enthusiast
Contributed 100 posts in a group to earn a Bronze Achievement
Related Content
In the Spotlight
White Papers
In the Spotlight
Earn Recognition for Your Contributions at Toolbox for IT. Gain Points for Community Achievements
View this thread online
Manage group e-mails
Create an FAQ on this topic
Tell us what you think
Unsubscribe from discussion
Manage group e-mails
Create an FAQ on this topic
Tell us what you think
Unsubscribe from discussion
_.____.__ 
