System and method of consolidated central user administrative provisioning

• US 9,704,134 B2
• Filed: 06/16/2014
• Issued: 07/11/2017
• Est. Priority Date: 12/31/2008
• Status: Active Grant

• Current Assignee: SAP SE
• Original Assignee: SAP SE
• Inventors: Garg, Neha, Adithe Venkata Ram, Sarma, Gourineni, Madhu
• Primary Examiner(s): Sall, El Hadji
• Application Number:
  US14/305,784
• Publication Number:
  US 20140297873A1
• Time in Patent Office: 1,121 Days
• Field of Search: 709200, 709226, 709217, 709203, 709220
• CPC Class Codes: G06F 16/2445 Data retrieval commands; View definitions
• CPC Class Codes: G06F 16/25 Integrating or interfacing systems involving database management systems
• CPC Class Codes: G06F 9/542 Event management; Broadcasting; Multicasting; Notifications
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 10/103 Workflow collaboration or project management
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: Y10S 707/99944 Object-oriented database structure

Abstract

In one embodiment the present invention includes a computer-implemented method of reducing a quantity of business application programming interface (BAPI) calls in a hardware client-server environment. The method includes configuring a centralized provisioning system on a hardware server with access definitions for systems. The method further includes receiving, by the centralized provisioning system, a provisioning request for a user of a client to access the systems. The method further includes determining a collected BAPI call according to the access definitions. The method further includes providing access to the user according to the collected BAPI call.

Claims

1. A computer-implemented method of reducing a quantity of business application programming interface calls in a hardware client-server environment, wherein the client and the server each contain a processor and a memory, the method comprising:

configuring a centralized provisioning system on a hardware server with a plurality of access definitions for a plurality of systems, wherein the plurality of systems includes a parent system and a plurality of child systems;

receiving, by the centralized provisioning system, a provisioning request for a user of a client system to access at least two of the plurality of child systems;

determining a collected business application programming interface call from the client system, according to the plurality of access definitions; and

determining, by the centralized provisioning system, whether a system of the at least two of the plurality of child systems in the provisioning request participates in central user administration,

if the system participates in central user administration, the collected business application programming interface call collects at least two business application programming interface calls to the at least two of the plurality of child systems into a single business application programming interface call to the parent system, and the centralized provisioning system provides access to the user to the at least two of the plurality of child systems according to the collected business application programming interface call to the parent system, and

if the system does not participate in central user administration, the centralized provisioning system performs non-central user administration provisioning for the system by making a business application programming interface real time agent call that provides access to the user.

2. The method of claim 1, wherein determining the collected business application programming interface call comprises:

generating a map of the plurality of systems that includes the parent system and the plurality of child systems; and

determining the collected business application programming interface call according to the map.

3. The method of claim 1, wherein determining the collected business application programming interface call comprises:

determining whether a system level configuration is defined;

determining whether a global level configuration is defined; and

determining the collected business application programming interface call according to the system level configuration and the global level configuration.

4. The method of claim 1, further comprising:

configuring the centralized provisioning system with a plurality of access settings for the plurality of systems;

determining a plurality of provisioning parameters for the plurality of systems according to the plurality of access settings; and

providing access to the user according to the plurality of provisioning parameters.

5. The method of claim 4, wherein the plurality of access settings includes a global level setting and a plurality of system level settings.

6. The method of claim 4, wherein the plurality of provisioning parameters includes at least one of a direct provisioning parameter and an indirect provisioning parameter.

7. The method of claim 1, wherein the provisioning request corresponds to a plurality of business application programming interface calls, and wherein the collected business application programming interface call results in a reduced quantity of business application programming interface calls as compared to the plurality of business application programming interface calls.

8. The method of claim 1, wherein the provisioning request corresponds to a request to access a plurality of business objects managed by the plurality of systems, and wherein providing access comprises:

providing access, to the user, to the plurality of business objects according to the collected business application programming interface call.

9. A centralized provisioning system that reduces a quantity of business application programming interface calls in a hardware client-server environment, wherein the client and the server each contain a processor and a memory, the centralized provisioning system comprising:

a hardware server that implements the centralized provisioning system;

a configuration module, implemented by the hardware server, that configures the centralized provisioning system with a plurality of access definitions for a plurality of systems, wherein the plurality of systems includes a parent system and a plurality of child systems; and

a processing module, implemented by the hardware server, that receives a provisioning request for a user of a client system to access at least two of the plurality of child systems, that determines a collected business application programming interface call from the client system, according to the plurality of access definitions, that determines whether a system of the at least two of the plurality of child systems in the provisioning request participates in central user administration,

if the system participates in central user administration, the collected business application programming interface call collects at least two business application programming interface calls to the at least two of the plurality of child systems into a single business application programming interface call to the parent system, and the centralized provisioning system provides access to the user to the at least two of the plurality of child systems according to the collected business application programming interface call to the parent system, and

if the system does not participate in central user administration, the centralized provisioning system performs non-central user administration provisioning for the system by making a business application programming interface real time agent call that provides access to the user.

10. The system of claim 9, wherein determining the collected business application programming interface call comprises:

generating a map of the plurality of systems that includes the parent system and the plurality of child systems; and

determining the collected business application programming interface call according to the map.

11. The system of claim 9, wherein determining the collected business application programming interface call comprises:

determining whether a system level configuration is defined;

determining whether a global level configuration is defined; and

determining the collected business application programming interface call according to the system level configuration and the global level configuration.

12. The system of claim 9, wherein the configuration module configures the centralized provisioning system with a plurality of access settings for the plurality of systems, and

wherein the processing module determines a plurality of provisioning parameters for the plurality of systems according to the plurality of access settings, and provides access to the user according to the plurality of provisioning parameters.

13. The system of claim 9, wherein the provisioning request corresponds to a plurality of business application programming interface calls, and wherein the collected business application programming interface call results in a reduced quantity of business application programming interface calls as compared to the plurality of business application programming interface calls.

14. The system of claim 9, wherein the provisioning request corresponds to a request to access a plurality of business objects managed by the plurality of systems, and wherein providing access comprises:

providing access, to the user, to the plurality of business objects according to the collected business application programming interface call.

21. The system of claim 9, wherein the plurality of access settings includes a global level setting and a plurality of system level settings.

22. The system of claim 9, wherein the plurality of provisioning parameters includes at least one of a direct provisioning parameter and an indirect provisioning parameter.

15. A non-transitory computer program product, comprising a computer readable medium having a computer readable program code embodied therein, that when executed by a hardware server, reduces a quantity of business application programming interface calls in a hardware client-server environment, wherein the client and the server each contain a processor and a memory, the non-transitory computer program product comprising:

a configuration module that controls the hardware server to implement a centralized provisioning system with a plurality of access definitions for a plurality of systems, wherein the plurality of systems includes a parent system and a plurality of child systems; and

a processing module that controls the hardware server to receive a provisioning request for a user of a client system to access at least two of the plurality of child systems, to determine a collected business application programming interface call from the client system, according to the plurality of access definitions, and to determine whether a system of the at least two of the plurality of child systems in the provisioning request participates in central user administration,

if the system participates in central user administration, the collected business application programming interface call collects at least two business application programming interface calls to the at least two of the plurality of child systems into a single business application programming interface call to the parent system, and the centralized provisioning system provides access to the user to the at least two of the plurality of child systems according to the collected business application programming interface call to the parent system, and

if the system does not participate in central user administration, the centralized provisioning system performs non-central user administration provisioning for the system by making a business application programming interface real time agent call that provides access to the user.

16. The non-transitory computer program product of claim 15, wherein determining the collected business application programming interface call comprises:

generating a map of the plurality of systems that includes the parent system and the plurality of child systems; and

determining the collected business application programming interface call according to the map.

17. The non-transitory computer program product of claim 15, wherein determining the collected business application programming interface call comprises:

determining whether a system level configuration is defined;

determining whether a global level configuration is defined; and

determining the collected business application programming interface call according to the system level configuration and the global level configuration.

18. The non-transitory computer program product of claim 15, wherein the configuration module controls the hardware server to configure the centralized provisioning system with a plurality of access settings for the plurality of systems, and

wherein the processing module controls the hardware server to determine a plurality of provisioning parameters for the plurality of systems according to the plurality of access settings, and to provide access to the user according to the plurality of provisioning parameters.

19. The non-transitory computer program product of claim 15, wherein the provisioning request corresponds to a plurality of business application programming interface calls, and wherein the collected business application programming interface call results in a reduced quantity of business application programming interface calls as compared to the plurality of business application programming interface calls.

20. The non-transitory computer program product of claim 15, wherein the provisioning request corresponds to a request to access a plurality of business objects managed by the plurality of systems, and wherein providing access comprises:

providing access, to the user, to the plurality of business objects according to the collected business application programming interface call.

23. The non-transitory computer program product of claim 15, wherein the plurality of access settings includes a global level setting and a plurality of system level settings.

24. The non-transitory computer program product of claim 15, wherein the plurality of provisioning parameters includes at least one of a direct provisioning parameter and an indirect provisioning parameter.