Selecting the System Landscape

Before you define a user administration, you need to decide on a system landscape. Among other things, this depends on how you want to administer your users. Another important consideration with regard to your (future) system landscape is which systems you are already using.

The graphic below shows a complete view of technically meaningful system combinations: a directory servoce integrates external non-SAP systems, any number of J2EE Engines, and ABAP systems with connected J2EE Engines.

The following table shows the combinations of the components that are important for the system landscape. Part-system landscapes in accordance with your requirements result from this, for which you can obtain more detailed information using the links.

System Landscapes with Specific Components

With CUA

Without CUA

With Directory

LDAP Directory with ABAP System(s)

·        LDAP Directory with ABAP System(s)

·        J2EE Engine with LDAP data source

Without Directory

CUA System Landscape with J2EE Engine(s)

·        J2EE Engine with DB Data Source

·        J2EE Engine with ABAP Data Source

For user administration, you must above all define whether you want to store the user data in an ABAP system or an LDAP directory. In the case of a mixed system landscape, which also contains non-SAP systems, we recommend that you use a directory service. A typical usage case for a directory service is, for example, portal.

The figure below clarifies the decision process for a partial system landscape.

This helps you to address the following questions:


       1.      Is there a directory service in your system landscape?

Yes. See step 3.

No. See step 2.

       2.      Are non-SAP systems accessed using the SAP NetWeaver Portal?

Yes. Set up a directory service, and read on from step 3.

No. Set up a dedicated CUA child system. For more information, see CUA System Landscape with J2EE Engine(s).

       3.      Is there a CUA in your system landscape in addition to the directory service?

Yes. For more information, see LDAP Directory with ABAP System(s).

No. See step 4.

       4.      Are there one or more ABAP systems in your system landscape?

Yes. For more information, see LDAP Directory with ABAP System(s).

No. For more information, see J2EE Engine with LDAP Data Source.

For information about creating and administering user and role data when using a portal, see Setting Up Role Administration for the Portal.