Automating user provisioning with SAP NW BPM
1 like2,144 views
This document summarizes an automated user provisioning solution implemented with SAP NetWeaver BPM for a large Indian conglomerate with over 15,000 employees. The as-is user provisioning process was paper-based and inefficient. The new BPM orchestrated process automates user creation, access provisioning, license management and provides self-service capabilities. Key benefits include improved security, compliance, efficiency and user experience. Future improvements include further system integrations and analytics-based optimizations.
Automating user provisioning with SAP NW BPM
- 1. Incture Automating User Provisioning with Technologies SAP NetWeaver BPM Maximize the return on your SAP Investment July 21, 2011 Engineering Your Success
- 2. About the Speaker • BPM Architect • Developed and implemented multiple large scale multi million dollar BPM projects • Conducted several BPM workshops in Asia • Frequent blogger and active contributor in SCN INCTURE 2011 / 2 Engineering Your Success
- 3. About Incture Led by a strong team of ex-SAP employees with singular focus on SOA-BPM driven innovation for SAP customers. • Largest BPM implementation partner in Asia – Most complex projects including 5 major SAP NW BPM implementations in Asia • Enabling BPM adoption by customers with BPM Workshops for Business and IT teams with over 30 customers and partners in APJ (BPM Jump Start Kit) • Thought leadership in SOA-BPM with large investments on solution and technology assets in SAP BPM • Agility and dedicated efforts on BPM adoption with all engagements being supported by highest level of management • Located close to SAP Labs and SAP Global Delivery Centre in Bangalore and has strong multi year collaboration (over 2000 man months) with SAP Development teams • Combined advantage of deep skills and competitive cost (100+ delivery team is centred in Bangalore), Member of SAP Design Partner Council – Advisor to SAP BPM, BRMS, CE, Java technology teams on product roadmap, development and benchmarking and also participate in design, build and early testing SOA-BPM products INCTURE 2011 / 3 Engineering Your Success
- 4. Agenda • About the customer • As Is Process and Business Pain Points • BPM Orchestrated Process • Roadmap & Future Improvements INCTURE 2011 / 4 Engineering Your Success
- 5. About the customer India's largest fast moving conglomerate. In India since: 1933 Employee strength: • Over 15,000 employees (> 6000 SAP users) • Contributes to indirect employment of over 52,000 people Distribution coverage: • Over 1 million retail outlets across India directly and its products are available in over 6.3 million outlets in the country, • Nearly 80% of all retail outlets in India. • Two out of three Indians use its many home and personal care products, food and beverages. INCTURE 2011 / 5 Engineering Your Success
- 6. Agenda • About the customer • As Is Process and Business Pain Points • BPM Orchestrated Process • Roadmap & Future Improvements INCTURE 2011 / 6 Engineering Your Success
- 7. As Is Process – Paper based Pain points Update parameter • Security and Risk mitigation SAP ERP • Compliance (GRC and SoX) Create business partner, • License cost assignment to cost centers • License asset management Manage change requests SAP Solution Manager 3 Update parameter SAP APO Create/modify user access, lock/unlock, Password reset SAP CUA 1 2 Do SoD compliance checks IT SAP GRC End users Business & IT Department managers head helpdesk (Employees, / SSC Do required role assignments SAP Java Customers, Vendors, Pain points systems Contractors, • User experience Update parameter Transporters) • Process visibility Pain points SAP ICH • Process quality • People Integration Generate reports, account • System integration • Business agility lock / unlock Other • Process exceptions Satellite • Auditing Systems INCTURE 2011 / 7 Engineering Your Success
- 8. Agenda • About the customer • As Is Process and Business Pain Points • BPM Orchestrated Process • Roadmap & Future Improvements INCTURE 2011 / 8 Engineering Your Success
- 9. BPM Orchestrated Process On demand End users Recommender Approver IT Help desk / SSC ICH APO Parameters SAP NW BPM 7.11 Role EP CE assignment ERP CR Status update Business Partner Creation SoD simulation SAP Solution Manager Provisioning SAP GRC SAP CUA Propagation Satellite System 1 Satellite System 2 INCTURE 2011 / 9 Satellite System N Engineering Your Success
- 10. Key processes that were automated • User Creation Self Service (ESS/MSS) • User profile update • Bulk User Creation / Deletion, User de-provisioning • Provision/Revoke Additional System Access/Revoke System access • Provision/Revoke Role/TCode Request • User Password Reset • User Lock and Unlock (Timed + Manual) • New Role / System creation • Change in designation / location INCTURE 2011 / 10 Engineering Your Success
- 11. Break through in Business KPI‘s with BPM Orchestrated Process • Increased Operational Efficiency and SLA’s • Improved Process Visibility • Enablement of Security and Risk mitigation • Better People Integration • Adherence to Compliance • Greater Business Agility • Improved Auditing • Process Exceptions Handling • Automated License cost assignment and asset • Enhanced User Experience management • Improved Process Quality • Enhanced System Integration IT Process Average Process Cycle Time Without BPM With BPM User / access provisioning 7 – 15 days Almost Instantaneous User / access de-provisioning 10 days Almost Instantaneous User license auditing 11 days Approx . 1 -4 hours System reporting 13 days Approx . 1 -4 hours INCTURE 2011 / 11 Engineering Your Success
- 12. BPM Orchestrated User Creation Process Activities Activity type Access type Requisition form Manual End user (Web UI) Bulk user creation (Excel upload) Manual Help desk (Web UI) Default systems / roles determination Automated License type determination Automated Actual user creation + license type update Automated Business Partner creation in Solution Manager Automated Parameter update – R/3 Automated Parameter update – ICH Automated Parameter update – APO Automated SAP Java systems role mapping Automated User notification Automated End user (Email) Approval Manual Approval (Email) Approval Manual Approval (Web UI) User request status check form Manual End user (Web UI) Customer creation Workbench Manual Help desk (Web UI) Transporter creation Workbench Manual Help desk (Web UI) Vendor creation Workbench Manual Help desk (Web UI) License quota check / adjustment Automated Approver escalation Automated INCTURE 2011 / 12 Engineering Your Success
- 13. User Creation Dashboard INCTURE 2011 / 13 Engineering Your Success
- 14. One click approval from Manager‘s Inbox INCTURE 2011 / 14 Engineering Your Success
- 15. Request status & User provisioning in CUA INCTURE 2011 / 15 Engineering Your Success
- 16. BPM Orchestrated User Creation Process INCTURE 2011 / 16 Engineering Your Success
- 17. Bulk User Creation Dashboard INCTURE 2011 / 17 Engineering Your Success
- 18. BPM Orchestrated TCode Addition Process Activities Activity type Access type Requisition form Manual End user (Web UI) User notification Automated End user (Email) Segregation of Duties (SoD) check in GRC Automated Change Request creation in Solution Manager Automated Bi-directional BPM Solution manager Automated status update Approval / Recommendation Automated User request status check form Automated Approver escalation Automated INCTURE 2011 / 18 Engineering Your Success
- 19. Addtional TCode Requisition Dashboard INCTURE 2011 / 19 Engineering Your Success
- 20. Self Service Request Status Check INCTURE 2011 / 20 Engineering Your Success
- 21. One click approval from Manager‘s Inbox SoD (GRC) report + mitigation controls automatically generated and attached to email INCTURE 2011 / 21 Engineering Your Success
- 22. Email carrying multi level approval details INCTURE 2011 / 22 Engineering Your Success
- 23. Change Request in Solution Manager INCTURE 2011 / 23 Engineering Your Success
- 24. Realtime Request Status Monitoring Console INCTURE 2011 / 24 Engineering Your Success
- 25. Change Request Processing in Soln Manager INCTURE 2011 / 25 Engineering Your Success
- 26. BPM Soln Manager Bi-directional status updates INCTURE 2011 / 26 Engineering Your Success
- 27. Change Request Lifecycle in Soln Manager INCTURE 2011 / 27 Engineering Your Success
- 28. Change Request Completion in Soln Manager INCTURE 2011 / 28 Engineering Your Success
- 29. BPM Process Flow Completion INCTURE 2011 / 29 Engineering Your Success
- 30. BPM Orchestrated TCode Addition Process INCTURE 2011 / 30 Engineering Your Success
- 31. Customer quote I had a request for an urgent role change for Payment Run, since the existing user was going on leave. This request came to me at 2:13 PM. Call was logged at 2.33 PM and the role change was affected immediately on Approval. This has happened within an hour, proving the full functionality of User provisioning. Our sincere thanks to BPM Team for the effort put into to making this happen. Best Wishes! – End User INCTURE 2011 / 31 Engineering Your Success
- 32. Agenda • About the customer • As Is Process and Business Pain Points • BPM Orchestrated Process • Roadmap & Future Improvements INCTURE 2011 / 32 Engineering Your Success
- 33. Further Improvements in the Roadmap • Integration with HR systems to automate the user creation/de- provisioning • Organization structure based authorization • License Cost assignment to departments • User/License usage analytics based de-provisioning processes • SAP NW IDM based User Provisioning • Further Integration with GRC Services INCTURE 2011 / 33 Engineering Your Success
- 34. Copyright 2011 Incture Technologies •This publication has been prepared for the Incture Technologies Pvt Ltd. All rights reserved. All copyright in this publication and related works is owned by Incture. No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of Incture. The information contained herein may be changed without prior notice. • This document is a preliminary version and not subject to your license agreement or any other agreement with Incture. This document contains only intended strategies, developments, and functionalities of the Incture products and services and is not intended to be binding upon Incture to any particular course of business, product strategy, and/or development. • Incture assumes no responsibility for errors or omissions in this document. Incture does not warrant the accuracy or completeness of the information, text, graphics, links, or other items contained within this material. This document is provided without a warranty of any kind, either express or implied, including but not limited to the implied warranties of merchantability, fitness for a particular purpose, or non infringement. • Incture shall have no liability for damages of any kind including without limitation direct, special, indirect, or consequential damages that may result from the use of these materials. This limitation shall not apply in cases of intent or gross negligence. • Some software products marketed by Incture and its distributors contain proprietary software components of other software vendors. • All product and service names mentioned are the trademarks of their respective companies. Data contained in this document serves informational purposes only. National product specifications may vary. •This publication is for information purposes only. While due care has been taken during the compilation of this publication to ensure that the information is accurate to the best of Incture’s knowledge and belief, the content is not to be construed in any manner whatsoever as a substitute for professional advice. •Incture neither recommends nor endorses any specific products or services that may have been mentioned in this publication and nor does it assume any liability or responsibility for the outcome of decisions taken as a result of any reliance placed on this publication. The statutory liability for personal injury and defective products is not affected. Incture has no control over the information that you may access through the use of hot links contained in these materials and does not endorse your use of third-party Web pages nor provide any warranty whatsoever relating to third-party Web pages. INCTURE 2011 / 34 Engineering Your Success