Hi All
We are implementing C4C at a customer, where OIM and GRC are access provisioning tools in production, right now from the information we have got and consider project scoping, GRC doesn't have a std. connector consumer web services in C4C and OIM also doesnt have a std. functionality to integrate with C4C, so we are using CRM on prem to push Identity and access mangement data pertaining to C4C users to C4C, so that OIM and GRC will talk with CRM on prem as a intermediate system which will then relay the required information to C4C. BP replication from CRM on prem takes care of employee and users (tied automatically to employe record) creation in C4C. What we require are update functionality on user in C4C.
We understand, there are no independent user records in C4C for business users, and they are rather Identity Business Object tied up to a employee id.
Requirement is to assign roles to this identity, and set its status (active/inactive - based on HR process trigger i.e employee creation/change/inactivation) and valid to dates.
As per std. documentation referred by CRM development team in project, Identity business object only allows for reading a user's role assignment, it doesn't allow updating user's role assignment, I havent checked with development team on other requirements related to changing user id status and valid to dates right now.
What we want is to understand/find a way of updating the required fields in C4C via a PI/PO interface which will send user access data from CRM on prem and update these fields in C4C accordingly. Has anyone worked on a similar requirement in past or now, can you please share you method, documentation, approach, anything that may be helpful. We would have more than 60K+ users in production environment and it would be high impractical to do manual administration of these users just because we dont have a method/utility that allows updating of user role assignment in C4C. Will also raise this post in C4C forum to reach out to their audience base also. Additionally, I hope SAP will not leave user provisioning in lurch, are there any developments coming up in C4C from SAP in terms of integration with GRC/IDM? or at least with regards to publishing code for identity object's update functions because if we can manually assign role to an user in C4C it should be possible via code and I dont know how to put it but we just need it or find an alternate, manual administration is not an option.
Thanks
Prashant