Symptom
You want to filter a group of users in the SCIM API using the "Division" attribute. The expectation is that applying a filter would return only users from a specific division. However, the filter does not return the expected results.
Environment
- SAP SuccessFactors HCM Suite
- SAP SuccessFactors SCIM API
- Identity Provisioning Service
Reproducing the Issue
-
In the IPS property sf.user.filter, specify the following:
"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User:division eq "Direct Sales (DIR_SALES)"
-
The filter does not return users from the specified division as expected.
Cause
The "division" attribute is not part of the core set of attributes defined by SCIM 2.0. As a result, it is not natively supported for filtering in SCIM API queries.
Resolution
A workaround is to use IPS transformation. This approach enables you to transform the data to meet specific filtering criteria, even if that attribute isn't natively supported in the SCIM schema. For more details, refer to the SAP documentation on transformations to explore this option further.
How to use Conditions in IPS transformations
If you have any additional custom requirements for the User sync, beyond the standard configuration, please refer to the following documentations for details on the respective API scope and IPS syntax information:
- BizX SCIM API Schema/Supported fields -> https://api.sap.com/api/PLTScim/schema
- BizX OData API Schema/Supported fields -> https://api.sap.com/api/PLTUserManagement/path/get_User
- IAS API Documentation-> https://help.sap.com/docs/identity-authentication/identity-authentication/api-documentation
- IPS Operations Guide -> https://help.sap.com/docs/identity-provisioning/identity-provisioning/transformations
And for further assistance with any custom requirement, please engage your Partner or SAP Professional Services.
See Also
Keywords
SCIM API, SCIM 2.0, user filtering, division attribute, SCIM core schema, sf.api.version=2, query, not supported filter, Identity Provisioning, transformation , KBA , LOD-SF-INT-API , API & Adhoc API Framework , Problem