The goal: Provide a new IMI which ensures higher data consistency, lower administration effort, better security and transparency (e.g. automatic role assignment).
The process: Integrate the SAP-HR system into the IMI by a connector, so that the IMI can retrieve the required information on users and organizational units. Based on this information, the mapping rules – maintained by a workflow within IMI – are applied to automatically assign roles.
The result: A system-aided authorization process, which is a major benefit in terms of currentness, process quality and traceability. Subsequently, additional features were implemented, such as a new role model based on Syrius ASE and a nightly task to retrieve LDAP information.