How Accenture is taking SAP NetWeaver Identity Management to the next level. Kristian Lehment, SAP AG Matthew Pecorelli, Accenture

Transcription

1 How Accenture is taking SAP NetWeaver Identity Management to the next level Kristian Lehment, SAP AG Matthew Pecorelli, Accenture

2 In This Session You will receive an overview of the functionality that is available with SAP NetWeaver Identity Management You will understand the key drivers behind Accenture s decision to migrate to SAP NetWeaver Identity Management version 7.2 and an overview of how this implementation was successfully delivered You will obtain an understanding of Accenture s global SAP implementation You will get a glimpse of how Accenture Delivery Methods for SAP can help you deliver high value, complex SAP solutions You will understand how Accenture has leveraged key features of SAP NetWeaver IdM 7.2 to create a best-of-breed Identity Management Solution 2

3 What We ll Cover The Overview: SAP NetWeaver Identity Management SAP At Accenture Key Drivers Behind SAP NW IdM 7.2 Implementation Implementation Overview Wrap-up 3

4 What We ll Cover The Overview: SAP NetWeaver Identity Management SAP At Accenture Key Drivers Behind SAP NW IdM 7.2 Implementation Implementation Overview Wrap-up 4

5 Compliant IdM and SSO Overview Compliant identity management and single sign-on Compliance and governance Identity management Authentication and single sign-on SAP Access Control SAP NetWeaver Identity Management SAP NetWeaver Single Sign-On SAP offers a complete suite of compliance, governance, identity management, and single sign-on solutions 5

6 SAP NetWeaver Identity Management Functional Overview SAP ERP HCM Example: on-boarding Compliance checks SAP SAP BusinessObjects Access Control Access Control (GRC) Integration with SAP Business Suite Identity virtualization and identity as service SAP NetWeaver SAP NetWeaver Identity Identity Management Management Approval workflows Central identity store Reporting Rule-based assignment of business roles SAP applications Provisioning to SAP and non-sap systems Non-SAP applications Web-based single sign-on and identity federation Password management 6

7 SAP NetWeaver Identity Management Example of a Use Case Request role assignment 1 4 Risk analysis SAP BusinessObjects Access Control (GRC) 3 SAP Access Control 5 Risk mitigation 6 Forward request for risk analysis Risk status SAP NetWeaver Identity Management SAP NetWeaver Identity Management Manager approval Notification to user and manager Provisioning to target systems SAP applications Non-SAP applications SAP SCM Java Database SAP ERP HCM Portal Legacy Web app SAP ERP OS 7

8 What We ll Cover The Overview: SAP NetWeaver Identity Management SAP At Accenture Key Drivers Behind SAP NW IdM 7.2 Implementation Implementation Overview Wrap-up 8

9 SAP at Accenture 9

10 SAP at Accenture RUNS SAP 10

11 SAP at Accenture A bit about our Company Revenue USD $27.9 billion annually Six working days to close our books Countries Over 120 Countries 13 Geographic Units 3 Geographic Areas Employees Over 261,000 Accenture is perhaps the only Services Industry company in the world running a multi-billion dollar, diverse business on a single database instance of SAP 11

12 SAP at Accenture A bit about our Company Breakdown of business: 2 Types of Work: Consulting and Outsourcing 5 Industry-based Operating Groups (Public Service, Resources, Products, Communications & High Tech, Financial Services) 3 Growth Platforms: (SI&T, MCIM, Outsourcing) Major SAP user groups: Finance: Controllership, Global Service Center, Client Financial Matters, Finance Reporting, and Treasury HR: Global Service Center, Personnel Admin, and HR Global Reporting Sales: Opportunity Support, and Sales Force Project Teams: Engagement Financials reporting and updates 12

13 SAP at Accenture SAP Scope Requisition to Pay (RTP) Manage Suppliers Process Purchasing Requisition (via Ariba) Process Invoice Process Payment Bank Integration Time and Expense (T&E) Process Personnel Time Process Personnel Expenses MyT&E Feeds Suspense Processing Integrate Employee Data Order to Cash (OTC) Set Up & Maintain Customer Information Set Up and Maintain Contract, Project, WBS Process Contract Transactions Analyze & Forecast Contract Record & Adjust Revenue Process Inter-Entity Transactions Invoice Customer Manage Customer Receivables Bank Integration Collect & Apply Customer Payments Close Out Contract SAP Business Functions Record To Report (RTR) Establish and Maintain Chart of Accounts (Global & Statutory) Maintain Currency Exchange Rates Asset Accounting Process Journal Entries Prepare & Consolidate Legal Entity Financial Statements Controlling (CO) Profit / Cost Center Hierarchies Manage Internal Projects CO Journal Entries Settle External Costs Settle Internal costs Perform Allocations & Assessments Profitability Analysis Cost Center Accounting Reporting & Analysis (BI) Load Management Reports (Finance, HR, Sales) Release Reports Ad Hoc Reporting Support Denied Party Screening (DPS) Audit Accenture customers and vendors against denied-party business listings Sales Opportunity Management Personnel Administration (PA) Maintain Employee Data HR Transactional Reporting Integrated Forecasting Set Annual Corporate Forecast Collect Monthly Client Team Revenue Forecast Create Corporate Financial Forecast Define Personnel Demand Define Personnel Supply Perform Demand/Supply Balancing Update Corporate Forecast Cross-Functional Teams SAP Program Infrastructure (release mgmt, product test, cutover; operations leadership) Close Team (monthly financial close management; close & performance testing) Archiving (quarterly movement of data to low-cost storage) Security (application security role development, role provisioning, SoD audits) Tech Infrastructure (Basis, Data Services, Environment Mgmt, Change Control, Batch) Operations Support for the Enterprise (OSE) SAP Components ECC6.0 (R3) SAP NetWeaver BI SAP BI IP (Integrated Planning) Customer Relationship Management (CRM) Business Planning and Consolidations System (BPC) Enterprise Portal (EP) Governance, Risk, Compliance (GRC) Global Trade Services (GTS) Payroll (Spain and Portugal only) SAP NetWeaver Identity Manager (IdM) SAP Modules Financial Accounting: FI- GL/SPL/TV/AP/FA Sales and Distribution: SD Materials Management: MM- PUR/IV/EDI Project System: PS Human Resources: HR-PA/TM, CA- TS Controlling: CO-PCA/CCA/PA Business Information: BI, BI-IP SAP Tools SAP GUI Solution Manager 13

14 What We ll Cover The Overview: SAP NetWeaver Identity Management SAP At Accenture Key Drivers Behind SAP NW IdM 7.2 Implementation Implementation Overview Wrap-up 14

15 Key Drivers Behind SAP NetWeaver IdM 7.2 Implementation Stability and Scalability Support Cost Compatibility with SAP Roadmap Integration with SAP GRC Integration with SAP BW 15

16 Key Drivers Stability, Scalability, and Support Cost NW IdM 7.2 Platform is more stable than outdated legacy system Legacy system consisted of hundreds of custom stored procedures Extensions to legacy system was costly and required long lead times Created a road block for business changes Oracle support skills more difficult to staff Large SAP and development delivery centers already in place 16

17 Key Drivers Compatibility with SAP Roadmap As SAP expands solution via rapid acquisition and large scale system upgrades, third party identity management solutions are often several steps behind SAP has a vested interest in keeping their Identity Management solution in lockstep with their solution landscape This was by far our biggest issue! 17

18 Key Drivers Integration with GRC and BW Integration with SAP GRC Desire to have real time SoD functionality integrated with provisioning workflow Integration with SAP BW Desire to improve visibility to critical access and issues across the global security model Accelerate audit activities and reduce manual efforts

19 What We ll Cover The Overview: SAP NetWeaver Identity Management SAP At Accenture Key Drivers Behind SAP NW IdM 7.2 Implementation Implementation Overview Wrap-up 19

20 Implementation Overview Scope End User Request, Approval, and Provisioning across all production SAP systems and clients User friendly, Self-service tool used by global user base (50,000+ end users) Simplify the number of steps required to request and approve Streamline the search for Business Roles Phased rollout 20

21 Implementation Overview Application Architecture 21

22 Implementation Overview Custom UI Request 22

23 Implementation Overview Custom UI Role Search 23

24 Implementation Overview Custom UI Approve 24

25 Implementation Overview Timeline 25

26 Integration with SAP GRC 10.0 SAP ID Management Provisi oning Frame work Create Access Request SoD Analysis Approval Workflow New Business Role Existing Business Role Direct Privilege Risk Analysis Result SAP GRC (Governance, Risk, and Compliance) 10.0 provides real-time Segregation of Duties analysis 26

27 Integration with NetWeaver BW Leverages BW engine within GRC 10.0 (ABAP stack) Automation of weekly compliance reporting process Reduced manual work/errors On demand results NW IdM Reporting Comprehensive Identity Reporting Proactive auditing and issue resolution 27

28 Future Plans SP7 April COMPLETE Operationalize GRC Integration June 2013 SP8 Summer 2013 Enhanced Approval Workflow (Out-of-Office, Timeouts, Delegation) Stability & Performance SP9 January 2014 Enhanced REST API s Enhanced Transport Management Consolidated Request Entity Retirement of MMC Attestation Q Incorporate new standard IdM functionality and configure/customize as needed to meet Accenture business requirements 28

29 What We ll Cover The Overview: SAP NetWeaver Identity Management SAP At Accenture Key Drivers Behind SAP NW IdM 7.2 Implementation Implementation Overview Wrap-up 29

30 7 Key Points to Take Home SAP Identity Manager 7.2 is a new breed of identity management software and unlike previous versions in almost every way Ensure you have a sound delivery methodology Make sure your delivery includes the appropriate documentation, testing, and resources Expect Challenges SAP Identity Manager 7.2 is a new platform, there are obstacles to overcome Leverage new integration options for improved ROI (SAP NetWeaver BW, GRC, etc.) SAP Identity Manager 7.2 isn t just an SAP solution, it works with dozens of applications and protocols via standard and custom adaptors Ask for help! There are more and more resources in the marketplace every day 30

31 Additional Resources SAP NetWeaver Identity Management Space on SCN Documentation Center SAP NetWeaver Identity Management (Requires login credentials to the SAP Service Marketplace) SAP Access Control 10.0 Interface for Identity Management Accenture Application Services for SAP 31

32 Kristian C. Lehment Senior Product Manager Matthew M. Pecorelli Principal THANK YOU FOR PARTICIPATING Please provide feedback on this session by completing a short survey via the event mobile application SESSION CODE: