User Deprovisioning Signavio

[fhanzsch]

Hello Experts,

I am looking for a good way to deprovision users in SAP Signavio. What methods have you implemented?

We are looking for a nice way that automatically and regularly helps us to keep the User Licences up to date.

The method should work for all types of Licences (Process Governance, Process Manaager and Hub).

I am looking forward for your insights.

Thanks and best regards

Friedrich

[rada_sereseanu]

Hi Friedrich,

we developed an app with power apps that helps people book a license for a defined period of time through a planner. When the booked time is finished the user is automatically removed out of the planner. Now we have it in testing phase. Of course there are some disadvantages, at the moment it doesn't work with groups, due to missing API's, but it is working better than do everything manually.

Cheers

Rada

[fhanzsch]

Hi Rada,

that sounds like a great concept. Is that also feasible for large groups of users (a few hundred, that are using the Software for years)? Or is it rather a temporary approach?

Thanks and best regards

Friedrich

[rada_sereseanu]

Hi Friedrich,

[rada_sereseanu]

it can be used for a large group!

[cfghs]

Hi Friedrich,

to have a good solution which integrates in other SAP Products, according to our research, you will have to wait for the release of the IPS Integration, which will be released Q3 / 2024 according to the current roadmap. 

With IPS you can manage provisioning and de-provisioning of users, you can also create IAM lifecycle with Entra ID. 

https://roadmaps.sap.com/board?q=signavio&range=CURRENT-LAST#;INNO=67A556DDA7C81EDDAFA0C061690C13AD

Best regards, Hannes

[marc-werner]

Hello Friedrich,

please have a look to Identification of inactive users / date and time of last log-in | SAP Community

After getting the lists, we will check them every month and clarify how to proceed.
Just to get a feeling about it.
To do it automatically will be the next step.

regards

Marc

[julienmoigno]

Hello Friedrich

The Best Practice recommended is to setup a sandbox which allows you to keep an organized and productive environment while still allowing multiple users to provide input. The sandbox approach can be used for both the dictionary and process repository. The steps for creating sandboxes in the dictionary are:

1. Create a sub category for a dictionary category (e.g. Sandbox Documents)

2. In the user management tab, grant all users access to provide input

3. Restrict access to the parent category, e.g. only give your process management team access to this Do the same for folders to create a playground for your modelers or to enable Collaboration Hub users to create quick model processes as well.

Recommendation: A dedicated team with global access rights should go over the sandboxes periodically to transfer the approved content to the parent folder or category. Watch the video below to see an example how to set up your sandbox.

Here a video that can help

Let me know if that answer your question.

[fhanzsch]

Hello Julien,

thanks you for your answer. However, we have already set up the sandboxes. My question is about something different. We want to manage the licences of our employees, since the licences are floating and we want to make sure, that we get back the licences of employees who leave the company.

Thanks

Friedrich