Enforce user email attribute value to SAP account email attribute

About this task

Note: The attribute ersapnwemailaddress is defined as a multi-value attribute in SAP NW Account attribute and hence User email attribute value cannot be enforced to it. To enforce User email attribute value to ersapnwemailaddress attribute, ensure that you always have only single email address in SAP target.

Procedure

  1. Extract targetProfile.json, schema.dsml and ersapnwaccount.xml files from SapNWProfile.jar file:
    jar xf SapNWProfile.jar SapNWProfile/targetProfile.json SapNWProfile/schema.dsml SapNWProfile/ersapnwaccount.xml
  2. Update targetProfile.json file as follows:
    *********************************************************
    From:
    "name": "ersapnwemailaddress",
    "type": "string",
    "multiValued": true,
     
    To:
    "name": "ersapnwemailaddress",
    "type": "string",
    "multiValued": false,
    *********************************************************
  3. Update schema.dsml file as follows:
    *********************************************************
    From:
    <attribute-type single-value = "false" >
    <name>ersapnwemailaddress</name>
     
    To:
    <attribute-type single-value = "true" >
    <name>ersapnwemailaddress</name>
    *********************************************************
  4. Update ersapnwaccount.xml file as follows:
    *********************************************************
    From:
    <formElement direction="inherit" label="$ersapnwemailaddress" name="data.ersapnwemailaddress">
    <editableTextList><comboItem label="$ersapnwemailaddress" name="data.ersapnwemailaddress"><size></size><width>300</width></comboItem></editableTextList>
    </formElement>
     
    To:
    <formElement direction="inherit" label="$ersapnwemailaddress" name="data.ersapnwemailaddress">
    <input type="text" name="data.ersapnwemailaddress"/>
    </formElement>
    *********************************************************
  5. Update targetProfile.json, schema.dsml and ersapnwaccount.xml files into SapNWProfile.jar file:
    jar uf SapNWProfile.jar SapNWProfile/targetProfile.json SapNWProfile/schema.dsml SapNWProfile/ersapnwaccount.xml
  6. Login to IBM Security Verify Governance and import updated SapNWProfile.jar.
  7. Navigate to Enterprise Connectors > Manage > Connectors > SAP Service Instance > Driver Attributes List > Actions > Automatic Add.
  8. Navigate to Access Governance Core > Account Configurations > SAP Service Instance > Target Attributes and then remove existing ersapnwemailaddress attribute and add it again (This is required to update the attribute from multi-valued to single-valued).
  9. Enforce user email attribute to ersapnwemailaddress attribute.
    Note: Default value for ersapnwemailaddress attribute needs to be set in "X|{Email}|X|001" format as ersapnwemailaddress is a complex attribute. See Special Attributes section for more details about ersapnwemailaddress attribute.