Automating user provisioning with SAP NW BPM


Published on

Automating user provisioning with SAP NW BPM

Published in: Business, Technology
  • Be the first to comment

  • Be the first to like this

No Downloads
Total views
On SlideShare
From Embeds
Number of Embeds
Embeds 0
No embeds

No notes for slide

Automating user provisioning with SAP NW BPM

  1. 1. Incture Automating User Provisioning withTechnologies SAP NetWeaver BPM Maximize the return on your SAP Investment July 21, 2011 Engineering Your Success
  2. 2. About the Speaker • BPM Architect • Developed and implemented multiple large scale multi million dollar BPM projects • Conducted several BPM workshops in Asia • Frequent blogger and active contributor in SCN  INCTURE 2011 / 2 Engineering Your Success
  3. 3. About InctureLed by a strong team of ex-SAP employees with singular focus on SOA-BPMdriven innovation for SAP customers.• Largest BPM implementation partner in Asia – Most complex projects including5 major SAP NW BPM implementations in Asia• Enabling BPM adoption by customers with BPM Workshops for Business and IT teams with over 30customers and partners in APJ (BPM Jump Start Kit)• Thought leadership in SOA-BPM with large investments on solution and technology assets in SAPBPM• Agility and dedicated efforts on BPM adoption with all engagements being supported by highest levelof management• Located close to SAP Labs and SAP Global Delivery Centre in Bangalore and has strong multi yearcollaboration (over 2000 man months) with SAP Development teams• Combined advantage of deep skills and competitive cost (100+ delivery team is centred in Bangalore),Member of SAP Design Partner Council – Advisor to SAP BPM, BRMS, CE, Java technology teams onproduct roadmap, development and benchmarking and also participate in design, build and early testingSOA-BPM products  INCTURE 2011 / 3 Engineering Your Success
  4. 4. Agenda • About the customer • As Is Process and Business Pain Points • BPM Orchestrated Process • Roadmap & Future Improvements  INCTURE 2011 / 4 Engineering Your Success
  5. 5. About the customer Indias largest fast moving conglomerate. In India since: 1933 Employee strength: • Over 15,000 employees (> 6000 SAP users) • Contributes to indirect employment of over 52,000 people Distribution coverage: • Over 1 million retail outlets across India directly and its products are available in over 6.3 million outlets in the country, • Nearly 80% of all retail outlets in India. • Two out of three Indians use its many home and personal care products, food and beverages.  INCTURE 2011 / 5 Engineering Your Success
  6. 6. Agenda • About the customer • As Is Process and Business Pain Points • BPM Orchestrated Process • Roadmap & Future Improvements  INCTURE 2011 / 6 Engineering Your Success
  7. 7. As Is Process – Paper based Pain points Update parameter • Security and Risk mitigation SAP ERP • Compliance (GRC and SoX) Create business partner, • License cost assignment to cost centers • License asset management Manage change requests SAP Solution Manager 3 Update parameter SAP APO Create/modify user access, lock/unlock, Password reset SAP CUA 1 2 Do SoD compliance checks IT SAP GRCEnd users Business & IT Department managers head helpdesk(Employees, / SSC Do required role assignments SAP JavaCustomers, Vendors, Pain points systemsContractors, • User experience Update parameterTransporters) • Process visibility Pain points SAP ICH • Process quality • People Integration Generate reports, account • System integration • Business agility lock / unlock Other • Process exceptions Satellite • Auditing Systems  INCTURE 2011 / 7 Engineering Your Success
  8. 8. Agenda • About the customer • As Is Process and Business Pain Points • BPM Orchestrated Process • Roadmap & Future Improvements  INCTURE 2011 / 8 Engineering Your Success
  9. 9. BPM Orchestrated Process On demand End users Recommender Approver IT Help desk / SSCICH APO Parameters SAP NW BPM 7.11 Role EP CE assignment ERP CR Status update Business Partner Creation SoD simulation SAP Solution Manager Provisioning SAP GRC SAP CUA Propagation Satellite System 1 Satellite System 2  INCTURE 2011 / 9 Satellite System N Engineering Your Success
  10. 10. Key processes that were automated • User Creation Self Service (ESS/MSS) • User profile update • Bulk User Creation / Deletion, User de-provisioning • Provision/Revoke Additional System Access/Revoke System access • Provision/Revoke Role/TCode Request • User Password Reset • User Lock and Unlock (Timed + Manual) • New Role / System creation • Change in designation / location  INCTURE 2011 / 10 Engineering Your Success
  11. 11. Break through in Business KPI‘s with BPM OrchestratedProcess • Increased Operational Efficiency and SLA’s • Improved Process Visibility • Enablement of Security and Risk mitigation • Better People Integration • Adherence to Compliance • Greater Business Agility • Improved Auditing • Process Exceptions Handling • Automated License cost assignment and asset • Enhanced User Experience management • Improved Process Quality • Enhanced System Integration IT Process Average Process Cycle Time Without BPM With BPM User / access provisioning 7 – 15 days Almost Instantaneous User / access de-provisioning 10 days Almost Instantaneous User license auditing 11 days Approx . 1 -4 hours System reporting 13 days Approx . 1 -4 hours  INCTURE 2011 / 11 Engineering Your Success
  12. 12. BPM Orchestrated User Creation Process Activities Activity type Access type Requisition form Manual End user (Web UI) Bulk user creation (Excel upload) Manual Help desk (Web UI) Default systems / roles determination Automated License type determination Automated Actual user creation + license type update Automated Business Partner creation in Solution Manager Automated Parameter update – R/3 Automated Parameter update – ICH Automated Parameter update – APO Automated SAP Java systems role mapping Automated User notification Automated End user (Email) Approval Manual Approval (Email) Approval Manual Approval (Web UI) User request status check form Manual End user (Web UI) Customer creation Workbench Manual Help desk (Web UI) Transporter creation Workbench Manual Help desk (Web UI) Vendor creation Workbench Manual Help desk (Web UI) License quota check / adjustment Automated Approver escalation Automated  INCTURE 2011 / 12 Engineering Your Success
  13. 13. User Creation Dashboard  INCTURE 2011 / 13 Engineering Your Success
  14. 14. One click approval from Manager‘s Inbox  INCTURE 2011 / 14 Engineering Your Success
  15. 15. Request status & User provisioning in CUA  INCTURE 2011 / 15 Engineering Your Success
  16. 16. BPM Orchestrated User Creation Process  INCTURE 2011 / 16 Engineering Your Success
  17. 17. Bulk User Creation Dashboard  INCTURE 2011 / 17 Engineering Your Success
  18. 18. BPM Orchestrated TCode Addition Process Activities Activity type Access type Requisition form Manual End user (Web UI) User notification Automated End user (Email) Segregation of Duties (SoD) check in GRC Automated Change Request creation in Solution Manager Automated Bi-directional BPM Solution manager Automated status update Approval / Recommendation Automated User request status check form Automated Approver escalation Automated  INCTURE 2011 / 18 Engineering Your Success
  19. 19. Addtional TCode Requisition Dashboard  INCTURE 2011 / 19 Engineering Your Success
  20. 20. Self Service Request Status Check  INCTURE 2011 / 20 Engineering Your Success
  21. 21. One click approval from Manager‘s Inbox SoD (GRC) report + mitigation controls automatically generated and attached to email  INCTURE 2011 / 21 Engineering Your Success
  22. 22. Email carrying multi level approval details  INCTURE 2011 / 22 Engineering Your Success
  23. 23. Change Request in Solution Manager  INCTURE 2011 / 23 Engineering Your Success
  24. 24. Realtime Request Status Monitoring Console  INCTURE 2011 / 24 Engineering Your Success
  25. 25. Change Request Processing in Soln Manager  INCTURE 2011 / 25 Engineering Your Success
  26. 26. BPM Soln ManagerBi-directional status updates  INCTURE 2011 / 26 Engineering Your Success
  27. 27. Change Request Lifecycle in Soln Manager  INCTURE 2011 / 27 Engineering Your Success
  28. 28. Change Request Completion in Soln Manager  INCTURE 2011 / 28 Engineering Your Success
  29. 29. BPM Process Flow Completion  INCTURE 2011 / 29 Engineering Your Success
  30. 30. BPM Orchestrated TCode Addition Process  INCTURE 2011 / 30 Engineering Your Success
  31. 31. Customer quote I had a request for an urgent role change for Payment Run, since the existing user was going on leave. This request came to me at 2:13 PM. Call was logged at 2.33 PM and the role change was affected immediately on Approval. This has happened within an hour, proving the full functionality of User provisioning. Our sincere thanks to BPM Team for the effort put into to making this happen. Best Wishes! – End User  INCTURE 2011 / 31 Engineering Your Success
  32. 32. Agenda • About the customer • As Is Process and Business Pain Points • BPM Orchestrated Process • Roadmap & Future Improvements  INCTURE 2011 / 32 Engineering Your Success
  33. 33. Further Improvements in the Roadmap • Integration with HR systems to automate the user creation/de- provisioning • Organization structure based authorization • License Cost assignment to departments • User/License usage analytics based de-provisioning processes • SAP NW IDM based User Provisioning • Further Integration with GRC Services  INCTURE 2011 / 33 Engineering Your Success
  34. 34. Copyright 2011 Incture Technologies •This publication has been prepared for the Incture Technologies Pvt Ltd. All rights reserved. All copyright in this publication and related works is owned by Incture. No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of Incture. The information contained herein may be changed without prior notice. • This document is a preliminary version and not subject to your license agreement or any other agreement with Incture. This document contains only intended strategies, developments, and functionalities of the Incture products and services and is not intended to be binding upon Incture to any particular course of business, product strategy, and/or development. • Incture assumes no responsibility for errors or omissions in this document. Incture does not warrant the accuracy or completeness of the information, text, graphics, links, or other items contained within this material. This document is provided without a warranty of any kind, either express or implied, including but not limited to the implied warranties of merchantability, fitness for a particular purpose, or non infringement. • Incture shall have no liability for damages of any kind including without limitation direct, special, indirect, or consequential damages that may result from the use of these materials. This limitation shall not apply in cases of intent or gross negligence. • Some software products marketed by Incture and its distributors contain proprietary software components of other software vendors. • All product and service names mentioned are the trademarks of their respective companies. Data contained in this document serves informational purposes only. National product specifications may vary. •This publication is for information purposes only. While due care has been taken during the compilation of this publication to ensure that the information is accurate to the best of Incture’s knowledge and belief, the content is not to be construed in any manner whatsoever as a substitute for professional advice. •Incture neither recommends nor endorses any specific products or services that may have been mentioned in this publication and nor does it assume any liability or responsibility for the outcome of decisions taken as a result of any reliance placed on this publication. The statutory liability for personal injury and defective products is not affected. Incture has no control over the information that you may access through the use of hot links contained in these materials and does not endorse your use of third-party Web pages nor provide any warranty whatsoever relating to third-party Web pages.  INCTURE 2011 / 34 Engineering Your Success