Provisioning role assignments with validity from/to AS ABAP system is earlier or delay then expected because of the time zone of AS ABAP. A typical issue may like:
The AS ABAP system is running in UTC+8 time zone and acts as source system in IPS. An user in the ABAP system is created and assigned to one role with validity 2023/03/24 to 9999/12/31.
At the time 2023/03/23 16:00:01 UTC, an IPS job starts to read user from the AS ABAP system.
In the AS ABAP system, the time is 2023/03/24 00:00:01 UTC+8, and the role assignment is in validity and should be provisioned to target system.
But IPS is running in UTC time zone. The date is still 2023/03/23, so IPS will not treat the role assignment between 2023/03/24 to 9999/12/31 is a valid assignment, and will not provision it to target system.
Time zone, Netweaver, source system, target system, , KBA , BC-IAM-IPS , Identity Provisioning Service (IPS) , Problem
About this pageThis is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).
Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.