Configuring UME to Use an LDAP Server as Data Source

Purpose

There is no option to set up SAP User Management Engine (UME) to use an LDAP directory as data source during installation. Instead you have to install with a database and configure the UME manually after installation.

Prerequisites

You have installed a SAP Web Application Server Java where the UME is configured to use the database of the J2EE Engine as data source.

Process Flow

...

       1.      Enter connection data for the LDAP server in the LDAP configuration tool.

       2.      Select the location of default users and groups.

       3.      Restart all cluster nodes.

       4.      Verify the configuration.

       5.      Change user in secure storage (optional).

Result

You have connected UME to an LDAP directory.

We strongly recommend that you configure Secure Sockets Layer (SSL) between the UME and the LDAP directory. Some directories, such as Microsoft Active Directory Server, require an SSL connection if you want to create users on the directory. For more information, see Configuring SSL Between the UME and an LDAP Directory.

In addition, you can configure your LDAP directory for high availability. For more information, see Configuring High Availability of the LDAP Data Source.