Symptom
Inactive users are being provisioned from SAP SuccessFactors (SF) to the SAP Identity Authentication Service (IAS), even though the user filter is configured to include only active users (sf.user.filter=active eq true).
This issue is occurring in a scenario that also includes Group transformations and filters and SCIM API (sf.api.version=2).
This behavior is causing user accounts for withdrawn or inactive employees to be created in the target system (e.g., ABAP, S/4).
Environment
SAP SuccessFactors HCM Suite
Reproducing the Issue
Run the IPS sync job.
Cause
This is expected behavior.
SF SCIM API protocol works based on two different and separate endpoints:
-
User endpoint: https://<SF API URL>/rest/iam/scim/v2/Users?$filter=active eq true
- Group endpoint: https://<SF API URL>/rest/iam/scim/v2/Groups?$filter=displayName eq 123
So for the standard IPS and SuccessFactors integration, the records are retrieved separately and operate independently.
Groups are filtered and transformed based solely on group-specific parameters, while user records are filtered and transformed based solely on user-specific parameters.
Resolution
To achieve the desired outcome, we recommend working with your implementation partner to customize your IPS settings and transformations (refer to IPS guide), ensuring they align with your specific requirements.
For detailed information on standard IPS and SF integration, refer to Setting Up SAP SuccessFactors with Identity Authentication and Identity Provisioning Services guide.
For detailed information on the SF SCIM API and its resources, refer to Business Accelerator Hub - API Reference and Overview of SAP SuccessFactors Workforce System for Cross-Domain Identity Management API guide.
Keywords
inactive, active, user, group, provisioned, successfactors, SF, ias, ips, provisioning, job, filter, sf.user.filter, active eq true, target system, error, not, being, respect, respected, respecting, worked, working , KBA , LOD-SF-INT-API , API & Adhoc API Framework , Problem
SAP Knowledge Base Article - Public