SAP Knowledge Base Article - Public

3745370 - Onboardee-to-employee conversion deletes and recreates IAS user in dual SCIM Provisioning

Symptom

  • Objective: synchronize onboardees to ias via real-time SCIM provisioning and employees via scheduled SCIM provisioning to the target system.
  • Onboardees are successfully created and synchronized into IAS via real-time SCIM provisioning.
  • Employees are synchronized into IAS via scheduled SCIM provisioning.
  • When an onboardee is converted to an employee in the source system, the existing IAS user record (created earlier as an onboardee) is deleted.
  • A new user record is then created again in IAS for the same person via the scheduled SCIM sync as an employee.
  • This results in loss of continuity of the IAS user object (for example, group memberships, assignments, or identifiers tied to the original IAS user record).
  • Question: is the delete-and-recreate behavior expected and supported in a dual-provisioning setup (real-time SCIM for onboardees and scheduled SCIM for employees)?
  • No error messages or error codes are mentioned.

Environment

SAP SuccessFactors Onboarding

Reproducing the Issue

  1. Configure dual provisioning: real-time SCIM provisioning for onboardees and scheduled SCIM provisioning for employees.
  2. Create a new onboardee and confirm the user is created in IAS via real-time SCIM .
  3. Convert the onboardee to an employee in the source system.
  4. Run or wait for the scheduled SCIM employee provisioning job to execute.
  5. Observe that the previously created IAS user (from onboardee stage) is deleted.
  6. Observe that a new IAS user is created for the same person by the scheduled employee sync.
  7. Note that prior IAS -specific continuity (for example, group memberships) tied to the original user record is no longer present.

Cause

The behavior is by design in this dual-provisioning scenario: when an onboardee is converted to an employee, the existing IAS user record is deleted, and a new user is created by the scheduled SCIM employee sync.

Resolution

This behavior is expected and supported by design; no configuration change is provided to update the existing onboardee IAS user instead of delete-and-recreate upon employee conversion.

See Also

refer to: KBA 1902517
refer to: SAP Note 12

Keywords

onboarding, onboardee, onb, employee conversion, dual provisioning, scim, real-time provisioning, scheduled provisioning, identity authentication, ias, identity provisioning, delete and recreate, user continuity, group memberships, user lifecycle,IAS , SCIM  , KBA , LOD-SF-OBX-IAS , IAS User Authentication , Problem

Product

SAP SuccessFactors Onboarding 2511