Symptom
Provisioning role assignments with validity from/to AS ABAP system is earlier or delay than expected time because of the time zone of AS ABAP. A typical issue may like:
The AS ABAP system is running in UTC+8 time zone and acts as source system in IPS. An user in the ABAP system is created and assigned to one role with validity 2023/03/24 to 9999/12/31.
At the time 2023/03/23 16:00:01 UTC, an IPS job starts to read user from the AS ABAP system.
In the AS ABAP system, the time is 2023/03/24 00:00:01 UTC+8, and the role assignment is in validity and should be provisioned to target system.
But IPS is running in UTC time zone. The date is still 2023/03/23, so IPS will not treat the role assignment between 2023/03/24 to 9999/12/31 is a valid assignment, and will not provision it to target system.
Read more...
Environment
Identity Provisioning.
Product
Keywords
Time zone, Netweaver, source system, target system, , KBA , BC-IAM-IPS , Identity Provisioning Service (IPS) , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
SAP Knowledge Base Article - Preview