SAP Knowledge Base Article - Public

3667904 - Inactive users being retrieved from SuccessFactors to IAS despite active user filter

Symptom

Inactive users are being provisioned from SAP SuccessFactors (SF) to the SAP Identity Authentication Service (IAS), even though the user filter is configured to include only active users (sf.user.filter=active eq true).

This issue is occurring in a scenario that also includes Group transformations and filters and SCIM API (sf.api.version=2).

This behavior is causing user accounts for withdrawn or inactive employees to be created in the target system (e.g., ABAP, S/4).

Environment

SAP SuccessFactors HCM Suite

Reproducing the Issue

Run the IPS sync job.

Cause

This is expected behavior.

SF SCIM API protocol works based on two different and separate endpoints:

  1. User endpoint: https://<SF API URL>/rest/iam/scim/v2/Users?$filter=active eq true

  2. Group endpoint: https://<SF API URL>/rest/iam/scim/v2/Groups?$filter=displayName eq 123

So for the standard IPS and SuccessFactors integration, the records are retrieved separately and operate independently.

Groups are filtered and transformed based solely on group-specific parameters, while user records are filtered and transformed based solely on user-specific parameters.

Resolution

To achieve the desired outcome, we recommend working with your implementation partner to customize your IPS settings and transformations (refer to IPS guide), ensuring they align with your specific requirements.

For detailed information on standard IPS and SF integration, refer to Setting Up SAP SuccessFactors with Identity Authentication and Identity Provisioning Services guide.

For detailed information on the SF SCIM API and its resources, refer to Business Accelerator Hub - API Reference and Overview of SAP SuccessFactors Workforce System for Cross-Domain Identity Management API guide.

Keywords

inactive, active, user, group, provisioned, successfactors, SF, ias, ips, provisioning, job, filter, sf.user.filter, active eq true, target system, error, not, being, respect, respected, respecting, worked, working , KBA , LOD-SF-INT-API , API & Adhoc API Framework , Problem

Product

SAP SuccessFactors HCM Suite all versions