1.3 How It Works

The SAP User Management driver can be configured to work with a single client (standalone non-CUA, CUA, central client, or a CUA child client). In this configuration, the synchronization is bidirectional if the client is a CUA central client and it is unidirectional (from the Identity Vault to SAP) in all other configurations. In all cases, the driver can subscribe passwords. It can also be configured to connect to multiple clients in a fan-out configuration. In this configuration, the synchronization is bidirectional to the client on the primary connection, if the client is a CUA central client, and it is unidirectional (from the Identity Vault to SAP) in all other configurations. Each additional connection the fan-out driver makes is a secondary connection, and each secondary connection is also unidirectional. The driver can subscribe passwords in all configurations. For more information about the fan-out configuration, see Section 2.0, Fan-Out Configuration.

Figure 1-1 SAP User Management Driver Configurations