3486565 - Entity condition is not fulfilled - Users are skipped for synchronization from SuccessFactors to SAC

Users are skipped for synchronization from SuccessFactors to SAP Analytics Cloud.

The errors in the logs can be seen as:

skip reason=Entity condition [(($['urn:ietf:params:scim:schemas:extension:successfactors:2.0:User']['perPersonUuid'] EMPTY false) || ($['urn:sap:cloud:scim:schemas:extension:sfsf:2.0:User']['personGUID'] EMPTY false)) &&(($['urn:sap:cloud:scim:schemas:extension:sap.ips.sfsf.sac:2.0:User']['hasEmbeddedAnalyticsPermission'] empty true) || ($['urn:sap:cloud:scim:schemas:extension:sap.ips.sfsf.sac:2.0:User']['hasEmbeddedAnalyticsPermission'] == true))] is not fulfilled

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

SAP SuccessFactors HCM Suite

1. Go to Source Systems;
2. Go to 'Jobs';
3. Run IPS Read or Resync job;
4. Under Identity Provisioning tab access 'Provisioning Logs';
5. The last IPS job will be with "Finished with error" status;
6. Access the details and you will see that several users were skipped in the SAP Analytics Cloud row.

Users are skipped because the value of hasEmbeddedAnalyticsPermission is false.

1. Navigate to IPS, choose SF source system and validate "sf.api.version" and the transformations.

If sf.api.version=2, it should be the following code, but if sf.api.version=1, it should not be included.

           {
                "sourcePath": "$['urn:ietf:params:scim:schemas:extension:sap:2.0:User']['groupDomains']",
                "targetPath": "$['urn:ietf:params:scim:schemas:extension:sap:2.0:User']['groupDomains']",
                "optional": true,
                "preserveArrayWithSingleElement": true
            }, 

            {
                "targetPath": "$['urn:sap:cloud:scim:schemas:extension:sap.ips.sfsf.sac:2.0:User']['hasEmbeddedAnalyticsPermission']",
                "constant": false
            },
            {
                "targetPath": "$['urn:sap:cloud:scim:schemas:extension:sap.ips.sfsf.sac:2.0:User']['hasEmbeddedAnalyticsPermission']",
                "condition": "$['urn:ietf:params:scim:schemas:extension:sap:2.0:User']['groupDomains'][?(@.value == 'embeddedAnalyticsAccessPermission')] empty false",
                "constant": true
            } 

2. Follow this if sf.api.version=2 is used:

Only users who have access to Report Center will be synced to SAC.

If all users need to be synced to SAC, assign Report Center permissions to them.

To grant Report Center permission to users, see KBA 2354921 - What are the Required User permissions for Report Centre? - RBP.

3. If users who have access to Report Center are skipping follow this:

          1. Go to IPS > Source Systems > select SuccessFactors - <Company ID>

          2. Select the "Properties" tab and check if "sf.api.version" is 2 (SCIM IPS)

 If yes, an one-time activity must be done in SF: 

Schedule recurring version of Refresh Synthetic Group Data:

To do that go to Admin Center > Scheduled Job Manager > Job Scheduler > + Create Job Request

1. 1. 1. Job type: Refresh Synthetic Group Data
      2. Job Parameters: Select ALL or Story Reports Access User Group
      3. Occurrence: Recurring, select time according to your IPS sync schedule. We recommend running it on a daily basis.

More information regarding this job, and it's set-up can be found on SAP SuccessFactors Story Reports:
Enablement Configurations document. (Pages 6-7).

• 2354921 - What are the Required User permissions for Report Centre? - RBP
• SAP SuccessFactors Story Reports: Enablement Configurations.

Entity condition is not fulfilled, skip, hasEmbeddedAnalyticsPermission, SAC, IPS, skipped user, IPS, resync, read, SAP SuccessFactors Platform , KBA , LOD-SF-ANA-SAC , Stories in People Analytics , Problem