diff --git a/SAP Ariba/README.md b/SAP Ariba/README.md new file mode 100644 index 0000000..c9838bf --- /dev/null +++ b/SAP Ariba/README.md @@ -0,0 +1,557 @@ + +> **Disclaimer** +> The integration was either created by Saviynt or by Saviynt community users. The integration is available “as is” and falls under standard connectors support for REST, SOAP, JDBC, LDAP, PowerShell, Jar and Saviynt Connector Framework. + +* [Preface](#preface) +* [Audience]("#audience) +* [Introduction](#introduction) + * [Supported Features](#supported-features) + * [Supported Software Versions](#supported-software-versions) +* [Understanding the Integration between EIC and  Adobe Creative Cloud](#understanding-the-integration-between-eic-and-adobe-creative-cloud) + * [Integration Architecture](#integration-architecture) + * [Setting Up the Integration](#setting-up-the-integration) + * [Prerequisites](#prerequisites) + * [Creating a Connection](#creating-a-connection) + * [Importing Connection Package](#importing-connection-package) + * [Creating a Security System](#creating-a-security-system) + * [Creating an Endpoint for the Security System](#creating-an-endpoint-for-the-security-system) +* [Using the  Adobe Creative Cloud Integration](#using-the-adobe-creative-cloud-integration) + * [Guidelines for Using the Integration](#guidelines-for-using-the-integration) + * [Configuring Import Operations](#configuring-import-operations) + * [Importing Accounts and Accesses](#importing-accounts-and-accesses) + * [Configuring Provisioning and Deprovisioning](#configuring-provisioning-and-deprovisioning) +* [Troubleshooting](#troubleshooting) + + +# Preface + +This guide describes the integration between Saviynt **Enterprise Identity Cloud (EIC)** and  SAP Ariba. + +# Audience + + +This guide is intended for administrators and target application integration teams responsible for implementing a secure integration service with  SAP Ariba. + +# Introduction + + +**SAP Ariba** is a cloud-based procurement platform developed by SAP. It is designed to streamline and automate the procurement process for businesses, connecting buyers and suppliers in a digital marketplace. SAP Ariba provides a collaborative platform that allows organizations to manage their procurement activities efficiently, reduce costs, and enhance supplier relationships. + +The SOAP connector enables you to seamlessly integrate with SAP Ariba to manage user lifecycle and govern access to their Teams, Entities, and Roles. + +For more information about different connectors in EIC, see  [Saviynt Enterprise Identity Cloud Connectors](https://docs.saviyntcloud.com/bundle/EIC-Connectors/page/Content/Certified-Connectors.htm). + +**Note:** This guide provides information about using the  SAP Ariba (SOAP Connector) for performing operations listed in the Supported Features. + +## Supported Features + + +The  Adobe Creative Cloud integration supports the following features: + + + +### Supported Software Versions + +| **Software** | **Version** | +| ------------ | ----------- | +| EIC | Release v5.5 and later| + +Understanding the Integration between EIC and  Adobe Creative Cloud +=================================================================== + +You must create an integration between EIC and the collaboration platform hosted by the target application to perform import, provisioning, and de-provisioning tasks. The following components are involved in the integration: + +* The Complete Service Management platform  Adobe Creative Cloud combines ITSM with ESM and SIAM capabilities, enabling all internal departments, such as IT, HR, and Facilities, as well as external service providers and customers, to collaborate securely and seamlessly on one complete platform, reducing complexity and improving productivity. + +* **Objects** are imported as entitlement types into EIC. + +* **Security System** represents the connection between EIC and the target application. + + * It comprises an endpoint, which is the target application for which you want EIC to manage the identity repository. + * It provides application instance abstraction from connectivity including high-level metadata. For more information about creating a security system, see [Creating a Security System](https://docs.saviyntcloud.com/bundle/EIC-Admin-v2022x/page/Content/Chapter02-Identity-Repository/Creating-a-Security-System.htm). + +* **Endpoint** is an instance of an application within the context of a security system. + + * It is the target application or application from which the connector imports the data and performs provisioning or de-provisioning of identity objects, such as users, accounts, and entitlements. + + * It is mandatory to create an endpoint after creating the security system. + You can associate a single security system with multiple endpoints if the deployment involves modeling multiple isolated virtual applications (based on sets of specific entitlements according to certain categories) within a single application instance. For more information about creating an endpoint, see [Creating an Endpoint for the Security System](https://docs.saviyntcloud.com/bundle/EIC-Admin-v23x/page/Content/Chapter02-Identity-Repository/Creating-Endpoints.htm). + +* **The connector** is a software component that enables communication between EIC and the target application. It provides a simplified integration mechanism where in some instances you only need to create a connection with minimal connectivity information for your target application. The REST connector is used for importing, provisioning accounts, and accessing through the REST APIs. For more information about creating a connection, see [Creating a Connection](https://docs.saviyntcloud.com/csh?topicname=Creating-a-Connection&pubname=EIC-Admin-v2022x). + +* **Job Scheduler** is a software component that executes a job based on the configured schedule to perform import or provisioning operations from EIC. + When a provisioning job is triggered, it creates provisioning tasks in EIC. When these tasks are completed, the provisioning action is performed on the target application through the configured connector. If you want to instantly provision requests for completing the tasks without running the provisioning job, you must enable Instant Provisioning at the security system level and the **Instant Provisioning Tasks** global configuration. For more information about the jobs used by the connectors in the  Adobe Creative Cloud integration. + + +## Integration Architecture +------------------------ + +EIC uses a **REST** connection for integrating with  Adobe Creative Cloud for importing data and for performing provisioning and de-provisioning tasks. + +The following diagram illustrates the integration architecture and communication with the target application. + +## Setting Up the Integration +-------------------------- + +### Prerequisites + +To obtain the credentials you need to access the User Management service, create a **Service Account Integration** using the [Adobe I/O Console](https://console.adobe.io/). + +* A member of the organization with admin rights can create the Integration. You can use the Admin Console to grant administrative privileges to users. +* You will need to create or purchase a digital signing certification and use it to sign a JSON Web Token (JWT), which you will use to authenticate your requests. +* Your integration provides an API key that uniquely identifies your client, and other credentials that you need to access the UM API. +* For complete details of the entire integration process, see [Adobe documentation](https://adobe-apiplatform.github.io/umapi-documentation/en/api/user.html) + + + +### Creating a Connection + +Connection refers to the configuration setup for connecting EIC to target applications. For more information about the procedure to create a connection, see [Creating a Connection](https://docs.saviyntcloud.com/csh?topicname=Creating-a-Connection&pubname=EIC-Admin-v2022x). + +#### Understanding the Configuration Parameters + +While creating a connection, you must specify connection parameters that the connector uses to connect with the target application, define the type of operations to perform, the target application objects against which those operations are performed, and the frequency of performing them. In addition, you can view and edit attribute mappings between EIC and the target application, predefined correlation rules, and provisioning jobs and import jobs. + +##### Configuration Parameters for Account and Access Import + +The connector uses the following parameters for creating a connection and for importing account and access from the target application: + +###### **Connection Parameters** + +| **Parameter** | **Description** | **Example Configuration** | **Mandatory?** | +| ------------- | --------------- | ------------------------- | -------------- | +| Connection Name | Specify the name to identify the connection. | | Yes | +| Connection Description | Specify the description for the connection.| | No | +| Connection Type |