3417151 - IPS Sync job error "You don’t have permission to view the user"

Sync job error "You don’t have permission to view the user.","status":403"

“Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.”

• SAP SuccessFactors HXM Suite
• SAP Cloud Identity Services – Identity Authentication IAS
• SAP Cloud Identity Services – Identity Provisioning IPS

1. In the Identity Provisioning Administration Console, select Source.
2. From your Source Settings, select Jobs.
3. Choose a sync job.
4. Then go to Job logs and check the error in the job:
   "You don’t have permission to view the user.","status":403"

• The certificate under "Security Center" has a login name associated to it and the user does not have employee export/import permission over all users:
  1. From Admin Center, access "Security Center"
  2. Clicked on "X.509 Certificates" > X.509 Public Certificate Mapping
  3. See "Login Name" field has user value
• The Integration Name of the certificate under "Security Center" is Identity Authentication Service (IAS).

Adding a username in the "Login Name" field is not mandatory, but if you choose to do so, please ensure that the user has all the required permissions. Otherwise the IPS job will fail.

Make sure that the Integration Name for the certificate is Identity Provisioning Service (IPS):

In case you need to make this correction, the current certificate in Security Center must be deleted since the system does not allow duplicate certificate. To download the active certificate - that should be uploaded in the Security Center - go to Source System > Outbound Certificates > Download the Active certificate.

3359245 - Migrating IPS and SF authentication from Basic Authentication to mTLS certificate using SCIM API

ias, x.509, error, failing, security center, certificate, admin, authorization error, IPS, 403, permission , KBA , LOD-SF-PLT-IAS , Identity Authentication Services (IAS) With BizX , How To