SAP HR (HCM on SAP ECC)
SAP·AE_HSc_SAPHRConnectorGuide
Overview
The SAP HR connector integrates AlertEnterprise Guardian with SAP HCM (Human Capital Management) running on SAP ECC 6.0 or later. This is SAP's traditional on-prem HR system — the predecessor to SAP SuccessFactors. SAP HR remains in production at many large enterprises that have not yet migrated to SuccessFactors or S/4HANA HCM, particularly in manufacturing, banking, and government.
Architecture: AE Guardian → ACF → SAP HR Adapter → SAP HR System (RFC / BAPI / IDoc-based ECC integration). The connector pulls employee lifecycle events (hire, transfer, termination, promotion) from SAP HR and propagates them downstream to Guardian's PIAM workflows. Standard pattern: SAP HR is the system of record for employee identity; AE Guardian consumes that record and drives provisioning into PACS / IAM / network.
For newer SAP HR successors: - sap-btp — SAP Business Technology Platform (integration mediation for SuccessFactors) - sap-fieldglass — SAP Fieldglass (contingent workforce, separate from employee HCM) - success-factors-lms — SAP SuccessFactors Learning (training compliance)
Architecture
Composed from this connector's actors + edges. Trust zones are color-coded; trust crossings render as thicker lines.
Authentication
1 method supported
Authentication uses an SAP service-account user with privileges to call the RFC / BAPI endpoints the connector consumes. Credentials configured in AE System Parameters; SAP RFC connection uses sapjco3.jar Java connector library.
Prerequisites
Everything that must be in place for this connector to work, with the owner who's responsible.
SAP ECC 6.0+ deployment with HR/HCM module
customerAn operational SAP ECC 6.0 or later deployment with SAP HR/HCM module licensed and configured.
SAP service-user with RFC + BAPI privileges
customerDedicated SAP service account with privileges to invoke the RFC function modules / BAPIs the connector uses for employee data extraction.
SAP JCo (Java Connector) library deployed
aesapjco3.jar Java Connector library must be deployed on the AE application server.
HR specifics
- Sync modes
- full-load · delta
- Scheduled sync
- configurable
- Direction
- inbound
- Contingent worker support
- No
Standard SAP HR fields (PERNR = personnel number, NACHN = surname, VORNA = first name, PERSG = employee group, PERSK = employee subgroup, BUKRS = company code, WERKS = personnel area, ORGEH = organizational unit, PLANS = position). Mapping to AE Guardian attributes is configurable.
Full-load reconciliation supported for initial sync / cutover. Subsequent runs use delta extraction (events changed since last run).
- src/connectors/sap-hr/source.pdf — Full connector guide — 17 pages, updated 2024-08-28
- src/connectors/sap-hr/source.pdf — p5 — Supported Version