How to create custom fields in SAP IAG Access Request Form

How to create custom fields in SAP IAG Access Request Form?

SAP Identity Access Governance (IAG) is a game changer in Access Governance
area, and it’s now available as a public cloud offering for SAP customers.

Working with SAP IAG might seem a bit tricky at first, but don’t worry! With the right
information and guidance, you can use this powerful tool to its fullest. Whether you’re
already good with SAP or just starting with SAP IAG, this guide explains the steps for
adding custom fields. It also shares useful tips to make your access request
processes easier.

Join us on this learning journey as we explore customizing SAP IAG.

1. What are custom fields How can you use them?

Custom fields enable users to include specific (additional) details in access request forms that are not covered by the default fields. This customization helps organizations adapt the system to their unique workflows and business processes.

 

Custom fields allow to gather and store information beyond the default or standard data points. For example, SU01 User Group is not a standard field but you wish to capture this information and provision it along with the request. You could create custom fields like “User Group” and map it to the field to better suit your organization’s requirements.

2. Where can you use a custom field in SAP Cloud IAG?

You have the option to include custom fields in the Access Request Forms. However, as of now, SAP IAG does not permit the addition of custom fields in any other services.

3. How do you add custom fields in SAP IAG?

Adding custom fields involves a three-step process:

 

1. Create Custom Field Group
2. Create Custom Fields
3. Configure (map) Custom Fields

 

SAP provides pre-defined field mappings for the custom fields, simplifying the mapping process and making it more straightforward for you.

4. How do I add a custom field to the Access Request Form?

To add a custom field to access request form, follow the steps detailed below:

 

1. Login to SAP IAG
2. Under Administration, click “Custom Field Groups” app
3. Click + to create a new group, and provide the values:

Important Note: The Entity Type Value is the field where systems can be chosen. It is crucial to create groups according to specific requirements. multiple systems can be selected in a single Field group.

 

4. Click Save

 

The Custom Field group will be activated and you may see the status as below:

The next step is to create custom fields. Follow these steps:

 

1. From Administration group, execute “Custom Fields” App.
2. Click + sign to add new field
3. Enter all the fields as shown below:
4. Click + sign to add Custom Field Groups
5. Select the groups from the last (can support multiple groups)
6. Click Save.

 

Once the custom fields are created, the last step is to map the fields to the standard fields.

1. Execute Field Mapping app
   2. Select the system, for example: SAP S/4 HANA On-Premise Field (should be
   the one created in the group)
   3. Click + sign
   4. Select the SAP IAG Custom Field, and the corresponding SAP S/4 HANA On
   premise Field

NOTE: The target field differs from system to system

 

 

 

Read more: https://togglenow.com/learnings/creating-custom-role-collections-in-sap-btp-a-step-by-step-guide/. 

 

#SAPIAG

#sapsodanalysistool

#sapsodanalysis

#sapsodanalyzer

#saproledesign

#sapauthorizationreview

#sapgrciag

#SAPsecurityroledesign

#sapcloudiag

#sapintegrityscreening