Symptom
- The user is getting synced in IAS with the username of their inactive employment record.
- The user is a concurrent employment and cannot log in to the SuccessFactors instance as their username is not correctly synced in IAS.
- IPS Sync failing due to missing email ID in concurrent employment
Environment
- SAP SuccessFactors HCM Suite
- SAP Cloud Identity Services – Identity Authentication IAS
- SAP Cloud Identity Services – Identity Provisioning IPS
Resolution
Q: Which username does IPS pick for multiple employment scenario?
- A-> The user is set as LoginName under Manage Login account in SF. Since the user has multiple employments, IPS will always pick the username which is set as login Name under Admin Center -> Manage Login Account. To address this:
-
- Go to Admin Center > Manage Login Accounts,
- Ensure that the Login name/username maintained in there is only the current active one.
Q: Will the IPS sync work if one of the employments is missing the email ID in SF?
- A-> No. The SCIM API sync logic relies on the email ID found in the primary assignment profile under Manage login account page. If this profile does not contain a valid email ID, the sync will fail.
- You need to Ensure the employment record linked to the primary assignment includes a valid email ID. If the current primary assignment lacks one, update it to an assignment with a valid email ID to avoid sync issues.
Q: I have 1k+ user with the wrong LoginName set under Manage Login account in SF it is possible to bulk update the LoginName value for these users ?
https://help.sap.com/docs/successfactors-platform/managing-user-information/exporting-login-accounts
https://help.sap.com/docs/successfactors-platform/managing-user-information/importing-login-accounts
See Also
- Help Guide: Important Notes About Using SAP SuccessFactors with SAP Cloud Identity Services - Identity Authentication
- KBA 2999496 - The subject (user) in SAML response does not exist in SuccessFactors
Keywords
IPS, SYNC, loginname, manage login account, IPS sync, inactive record, inactive user, inactive, Active users, Active, LoginName already Exists , INC5311699 , KBA , LOD-SF-PLT-IPS , IPS integration & sync with BizX , LOD-SF-PLT-IAS , Identity Authentication Services (IAS) With BizX , LOD-SF-PLT-MLA , Manage Login Accounts , Problem
SAP Knowledge Base Article - Public