To enable Single Sign-On between SAP User Management Engine (UME) and SAP systems, users should ideally have the same user IDs both in the UME and in the SAP system.
How does it happen?
UME accomplishes replication by transmitting XML documents. During user management actions such as user creation, updating and deletion, an XML document is generated and sent to the connected SAP systems for which replication has been configured. The XML documents are sent using the SAP Java Connector (JCo). The XML document contains the user maintenance information and activity to be performed. After acting upon the XML document, an SAP system generates a response document and returns it to UME. The response document contains status and error messages related to the replication process. If the replication fails, the administrator may review and correct the errors and replicate again.
UME supports replication of user data to SAP Systems with release 4.6D or higher.
- Passwords and the lock status of a user are not replicated. Users are created with a deactivated password in the backend system. Users should log on through UME, in the portal and access backend systems using Single Sign-On with logon tickets
Configuration of UME Properties
System Administration –> System Configuration –> UM Configuration –>
In the backend system, go to transaction SM30, open the table SMUM_ACL and add the sender name that was mentioned in the property ume.r3.sync.sender that is by default SAPMUM.
Now you can see the users being automatically created in the backend system when you create a user in the portal.
To Manually Replicate Users in the backend Systems or errors can be checked in the User Administration –> Replication.