SAP Knowledge Base Article - Preview

3743525 - ibp business roles not provisioned via scim from identity provisioning; 400 "externalId cannot be changed" error – cloud identity services

Symptom

  • Provisioning from identity provisioning to integrated business planning (ibp) fails for Business Roles even after setting group type to "authorization" in the transformation.
  • User provisioning succeeds, but Business Role assignment fails.
  • Error 501: "Operation not supported for Business Roles" when a POST to /Groups is attempted.
  • Error 400: "externalId cannot be changed" for a specific user.
  • Group with displayName like "RN_APPD-..." skipped due to condition not fulfilled: isAttributeWithOptionalPrefix($['urn:sap:cloud:scim:schemas:extension:custom:2.0:Group']['name'], ibp.group.prefix).


Read more...

Environment

  • Product: Cloud Identity Services
  • Identity Provisioning Service (IPS)

Product

Identity Provisioning all versions

Keywords

ibp business role, scim v2, authorization group, supportedOperations membership, ibp.support.patch.operation, 501 operation not supported for business roles, 400 externalId cannot be changed, userGroup vs authorization, BUGR BROL mapping, transformation mapping, ibp.group.unique.attribute, externalName externalId, role membership patch, group skip condition , KBA , BC-IAM-IPS , Identity Provisioning Service (IPS) , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.