Symptom
You are experiencing an inconsistent behavior with OData API, when SuccessFactors is configured as source system in IPS. Specifically, users that are active in SuccessFactors are not being read from IPS and therefore they get deleted from the target system. A following job reads them again and re-creates them in the target system. This issue tends to happen sporadically.
The issue may happen even if there have not been any changes in the IPS configuration, e.g. it always reads from SF with a status eq 'active' filter and the relevant users were active at the time.
As a result, the OData API sometimes will not return the complete number of users.
Environment
SAP SuccessFactors
SAP IPS
SAP IAS
SAP SuccessFactors OData API
SAP SuccessFactors SCIM API
Cause
Known behaviour
Resolution
The issue is caused by a known issue in the OData pagination, so our recommendation and strong advice is that you upgrade to the SCIM connector
This is documented in the following:
https://community.sap.com/t5/product-and-customer-updates/adoption-of-successfactor-scim-connector-and-x-509-certificate-based-auth/ba-p/13596208
For more information and instructions on how to upgrade:
https://community.sap.com/t5/human-capital-management-blogs-by-sap/onboarding-new-hires-authentication-using-sap-identity-authentication/ba-p/13549345
See Also
https://community.sap.com/t5/product-and-customer-updates/adoption-of-successfactor-scim-connector-and-x-509-certificate-based-auth/ba-p/13596208
https://community.sap.com/t5/human-capital-management-blogs-by-sap/onboarding-new-hires-authentication-using-sap-identity-authentication/ba-p/13549345
Keywords
OData, missed users, IAS, IPS, SAP IAS, SAP IPS, SCIM API, OData API, SF OData API, SF, SuccessFactors, SuccessFactors OData API, API, connector, connecter, conector, source system, users deleted, users deleted from target, 3319017 , KBA , LOD-SF-INT , Integrations , BC-IAM-IPS , Identity Provisioning Service (IPS) , LOD-SF-PLT-IAS , Identity Authentication Services (IAS) With BizX , Problem