Skip to Content
Author's profile photo Ivelina Kiryakova

How to Install SAP Identity Management 8.0 with Software Provisioning Manager 1.0

You want to get rid of the error-prone manual installation and update steps – processes that can take up days.

You want to use a tool that automates your SAP Identity Management 8.0 installation and update.

You want to use modern-looking UIs that guide you through the installation and update for less than an hour.

Well, this is a reality now. As of version 8.0 SP04 and higher, you can install SAP Identity Management (IdM) using the Software Provisioning Manager 1.0 installation tool. Once you install your IdM system, you can use the same tool to update it to a higher SP level or to apply patches.

If you want to try it, this blog post is the right place to start with.

We will focus on the installation option only. You will learn how to install your IdM system as a standard system (with all instances on one host) on Windows. For more information about a distributed system installation over several hosts, see: How to Install SAP Identity Management 8.0 as a Distributed System with Software Provisioning Manager 1.0

Before you start, you need to have the following prerequisites fulfilled:

We recommend that you always download the latest patch level of SAP Identity Management components from the SAP Software Download Center as an alternative to downloading the complete installation media. Note that, if you choose to download the complete SAP Identity Management media, the media is delivered with each support package stack of SAP Identity Management 8.0 release. As result of this, you always download patch 00 of the respective SP.

  1. Log on to the installation host using an account with the required user authorization to run the Software Provisioning Manager. See: Required User Authorization for Running Software Provisioning Manager on Windows
  2. Start the Software Provisioning Manager by executing sapinst.exe from the directory to which you unpacked the file SWPM10SP<Support_Package_Number>_<Version_Number>.SAR. By default, the SL Common GUI uses the default browser defined for the host where you run the installer. We recommend using Google Chrome.
  3. Choose SAP Identity Management 8.0 -> Installation -> Standard System -> SAP Identity Management Standard System and then choose Next.
  4. To run the installation in a typical mode, choose Typical and then choose Next
  5. Enter SAP System ID and then choose Next
  6. Enter the master password, confirm it and then choose Next
  7. In the Package Path field, browse for the path to the following installation archives (SAPEXE<Version>.SAR, SAPHOSTAGENT<Version>.SAR and SAPJVM8_<Version>.SAR). Every time you provide a path to an installation archive, you need to choose Next to make the archive available. Once the thee installation archives are available, choose Next
  8. In the Database Type field, select the database type for your IdM installation and choose Next
  9. Enter the database host and port of the server where the IdM database is to run and choose Next
  10. Enter the credentials for the IdM database and choose Next
  11. Enter the prefix of the IdM database and the base-qualified name that is used for IdM packages in this database. Choose Next
  12. Enter the passwords for the IdM database users. By default, the master password (in step 6) that is used for all the created users, is populated for the database users. If you want, you can provide different passwords for the different database users. In addition, enter the name of the developer administrator user. Note that this user must either exist in the UME or be added to the UME before you can log on to the Identity Management Developer Studio. Choose Next
  13. Enter the IdM instance number and choose Next. This instance number is assigned to the SAP Identity Management Dispatcher instance. If you do not enter a specific value, the instance number is set automatically to the next free and valid instance number that has not yet been assigned to the SAP system to be installed or to SAP systems that already exist on the installation host. 
  14. Browse for the JDBC driver path and enter the JDBC driver class name. Choose Next
  15. Enter the SAP SID of the SAP NetWeaver Java system to be used for IdM components that you want to install. Choose Next
  16. Enter your SAP NetWeaver release version and Support Package. Choose Next
  17. Enter the credentials of the administrator of the AS Java. 
  18. Select the additional IdM components that you want to install or deploy. Choose Next
  19. If you want to install VDS, select this option and choose Next
  20. Enter the IdM instance number and choose Next. This instance number is assigned to the Virtual Directory Server instance. If you do not enter a specific value, the instance number is set automatically to the next free and valid instance number. 
  21. In the Package Path field, browse for the path to the IdM installation archives. You can either specify the path to each archive separately, or provide the path to a download basket with all downloaded archives. Choose Next
  22. In the “Parameter Summary” dialog, you can select a parameter that you want to change and then choose Revise or choose Next to start the installation.
  23. The installation of your SAP Identity Management standard system completed successfully. 

Next Steps:

  1. Install SAP Identity Management developer studio. See: Installing the Identity Management Developer Studio
  2. Proceed with the initial configuration of all installed IdM components. See Post-Installation Checklist and all referenced information.

 

 

 

 

 

 

Assigned Tags

      22 Comments
      You must be Logged on to comment or reply to a post.
      Author's profile photo Former Member
      Former Member

      Hi Ivelina Kiryakova

       

      I am Install SAP Identity Management 8.0 with sap netweaver 7.4 SP8 and oracle 12C

       

      I have the following error:

       

      Regards,

      Rafael

      Author's profile photo Ivelina Kiryakova
      Ivelina Kiryakova
      Blog Post Author

      Hi Rafael,

      You need to view the entries in the log files and try to solve the problem. For more information about how to proceed when errors occur while the installer is running, see Troubleshooting with Software Provisioning Manager

      Best Regards,

      Ivelina

      Author's profile photo Jonathan Gijsemans
      Jonathan Gijsemans

      been manually installing IDM for years now but needed a new IDM server in our test domain and figured I'd give the SWPM a try.

      Sadly, I'm stuck.

      I'm doing a distributed installation because idm server, db (ms sql 2012) and java stack are on different systems.

      So I ran the installation for the central component but when the swpm runs the 1-create-db.sql script I get the error that the database installation has failed.
      However if I copy paste the exact command the SWPM is using and drop it in cmd it works.

      Any idea?

      Author's profile photo Ivelina Kiryakova
      Ivelina Kiryakova
      Blog Post Author

       

      Hi Jonathan,

      You need to check the log files. (The LOG FILES tab, if you are using the SL Common GUI or the View Logs menu item, if you are using the Java SDT GUI).

      If you cannot resolve the problem, report an incident using component BC-INS.

      Best Regards,

      Ivelina

       

      Author's profile photo Rafael Schostek
      Rafael Schostek

      Hello Ivelina,

      I'm going to install all components of IDM 8.0 on one server as a PoC.

      Does AS Java simple installation cover all possible requirements of IDM 8.0, or are some additional product instances (EP Core, Enterprise Portal, AS Java extentions, etc.) needed to support IDM 8.0 functionalities?

      Best regards,

      Rafael

       

      Author's profile photo Benoit Cappez
      Benoit Cappez

      Hi Rafael,

       

      The NW Java installation is enough. All needed components for IDM are installed from its archives as shown in step 21 above.

      Of course, You'll need the Eclipse Neon (4.6) with the latest SAP IDM (8.5.2) on your computer (or directly on the PoC server) to work with IDM.

      Author's profile photo Ivelina Kiryakova
      Ivelina Kiryakova
      Blog Post Author

       

      Hi Rafael,

      Yes, the SAP NW AS Java installation is enough, as Benoit mentioned in his comment. Depending on the IDM components that you want to deploy on AS Java, make sure you check the prerequisites for them here: Prerequisites and Dependencies Between Deployable Components.

      Some IDM components require libraries that are available as AS Java extensions.

      Best Regards,

      Ivelina

      Author's profile photo Richard Pietsch
      Richard Pietsch

      Hi,

      what about the update option? I once installed our system, manually each IDM component (IDM, VDS, IDM Dev. studio).
      When I now try to use the SWPM it says: "SAP system XYZ exists and is not suitable for this installation option.
      DIAGNOSIS:Valid instance types for this installation option are IDM,VDS, but instance J00 has a different type.
      SOLUTION: Choose a different SAP system ID or uninstall the existing system."
      Regards, Richard

      Author's profile photo Ivelina Kiryakova
      Ivelina Kiryakova
      Blog Post Author

      Hi Richard,

      You can update SAP Identity Management with Software Provisioning Manager 1.0 only if you have installed SAP IDM with the SWPM tool.

      Best Regards,

      Ivelina

      Author's profile photo Former Member
      Former Member

      Hi We followed the above steps and installation guide from SAP to install SAP IDM 8.0

      after installation we get an error ""Login failed: SSL error message""

       

      Please help.. where can we trouble shoot..

       

      Author's profile photo Mouhamed Bankole
      Mouhamed Bankole

      Login failed: SSL error message mean by you don't import the ssl certificate on your eclipse JRE.

      you need to import it by keytool cmd. https://docs.oracle.com/javase/tutorial/security/toolfilex/rstep1.html

      If you don't want to use ssl port on eclipse dev studio you must add "IS_HTTPS = FALSE" on the eclipse preferences metadata  .metadata\.plugins\org.eclipse.core.runtime\.settings\com.sap.idm-dev-studio-userinterface.prefs

      Sorry if I answer too late but this can help the next person who will have the same problem

       

      Author's profile photo Former Member
      Former Member

      getting error Login failed: SSL error message after installation.. where can we check.. pls advice

      Author's profile photo Ivelina Kiryakova
      Ivelina Kiryakova
      Blog Post Author

      Hi,

      Please refer to the Post-Installation Tasks in the SAP Identity Management Installation and Update Guide. More specifically, see Using the HTTP Security (Secure Sockets Layer/SSL)

      Best Regards,

      Ivelina

      Author's profile photo Daniel Masaladzic
      Daniel Masaladzic

      Hello Ivelina,

      Thanks for your detailed blog post! We are working on a IDM 8.0 (latest SP) installation at the moment and some things are just not clear to us. Maybe you/anyone can help? :-

      1. Do we need to install a AS Java system in advance before we can install IDM into that?
      2. Since we dont see any possibility: Isnt there a way to install the AS Java plus IDM in one run?

      We tried to follow your guideline, but to me it is not clear if you already had a AS Java before you started the installation. As a prerequesite you name "A supported SAP NetWeaver version is installed, in this case, SAP NetWeaver 7.40 SP02." In one of the first screens you set up a system ISY into which you are putting IDM system IDM later...?

      Hope you can help us out on that 🙂

      Regards + Thanks in advance!

      Daniel

      Author's profile photo Ivelina Kiryakova
      Ivelina Kiryakova
      Blog Post Author

       

       

      Hi Daniel,
      You need to install SAP NetWeaver AS Java before you start SAP Identity Management 8.0 installation with SWPM. This is a prerequisite for the IDM installation.
      SWPM deploys several IDM components on SAP NetWeaver AS Java. If you don’t have it installed in advance, SWPM will not be able to deploy those components.
      Best Regards,
      Ivelina

      Author's profile photo Laurent GUERIN
      Laurent GUERIN

      But the SAPSID for IDM installation should be different than the one of SAP NW AS Java? Or it is the same?

      Author's profile photo Daniel Masaladzic
      Daniel Masaladzic

      Hi Ivelina,

      thanks for your response! That clears up the question.

      Best

      Daniel

       

      Author's profile photo Daniel Masaladzic
      Daniel Masaladzic

      Hello again Ivelina,

      do you think it is fine for a test environment to install the AS Java plus the IDM and all of its componnents on one machine?

      Regards
      Daniel

       

      Author's profile photo Ivelina Kiryakova
      Ivelina Kiryakova
      Blog Post Author

      Hi Daniel,
      Yes, you can test IDM and AS Java installation on one host. Depending on the database server you are using, have in mind that installing IDM and AS Java on the same Oracle or SAP ASE database server is not supported. You must install IDM and AS Java on different Oracle or SAP ASE database servers. For example, see: Prerequisites and Recommendations (SAP ASE)
      If you are using MS SQL server, it is OK to install IDM and AS Java on the same database server.

      Best Regards,

      Ivelina

      Author's profile photo Daniel Masaladzic
      Daniel Masaladzic

      Hi Ivelina,

      thanks again!

      Best,

      Daniel

      Author's profile photo Laurent GUERIN
      Laurent GUERIN

      Hi Ivelina,

      I am installing SAP IDM 8.0 standard version. SAP NW AS Java is already installed and up and running.

      After the step in which you mention the SID ofr SAP NW AS JAVA I am stuck with the following error:

      The step getNWVersion with step key |NW_IDM_OneHost|ind|ind|ind|ind|0|0|NW_IDM_AdaptNW_Internal|ind|ind|ind|ind|idmAdaptNw|0|getNWVersion was executed with status ERROR ( Last error reported by the step: TypeError: instanceForDeploy has no properties (in script NW_IDM_OneHost|ind|ind|ind|ind, line 129576: ???)).

      ERROR 2018-07-02 16:38:07.709 (root/sapinst) (startInstallation) [/bas/749_REL/bc_749_REL/src/ins/SAPINST/impl/src/sapinst/CSiStepExecute.cpp:1116] id=controller.stepExecuted errno=FCO-00011
      The step getNWVersion with step key |NW_IDM_OneHost|ind|ind|ind|ind|0|0|NW_IDM_AdaptNW_Internal|ind|ind|ind|ind|idmAdaptNw|0|getNWVersion was executed with status ERROR ( Last error reported by the step: TypeError: instanceForDeploy has no properties (in script NW_IDM_OneHost|ind|ind|ind|ind, line 129576: ???)).

      Any idea what could be the issue?

      Author's profile photo Ivelina Kiryakova
      Ivelina Kiryakova
      Blog Post Author

      Hi Laurent,

      I would suggest that you check out our Troubleshooting with Software Provisioning Manager topic. If you can’t resolve this issue, report an incident using component BC-INS.

      Best Regards,

      Ivelina