3832822 - SCIM-created users receive S_BUSINESS_USER_WITHOUT_PASSWORD instead of the configured default security policy on SAP Sales and Service Cloud Version 2

• Users are synchronized from the Local Identity Directory of the Cloud Identity Services via SCIM to the Sales and Service Cloud V2.
• New users created via SCIM are automatically assigned the security policy "S_BUSINESS_USER_WITHOUT_PASSWORD".
• The assigned policy prevents login for users who are not intended to use SSO.
• A custom policy (for example, Z_TEST) marked as default is not applied to SCIM-created users.

SAP Sales and Service Cloud

1. Synchronize users from the Local Identity Directory of the Cloud Identity Services via SCIM to the Sales and Service Cloud V2.
2. Create new users using SCIM.
3. Observe that new users are automatically assigned the security policy "S_BUSINESS_USER_WITHOUT_PASSWORD".
4. Create and mark a custom policy (for example, Z_TEST) as the default security policy.
5. Observe that users still receive "S_BUSINESS_USER_WITHOUT_PASSWORD" instead of the configured default.

For users created via SCIM, the backend assigns the security policy S_BUSINESS_USER_WITHOUT_PASSWORD by default; the configured default policy is not applied, and this behavior cannot be changed.

SCIM-created users are assigned S_BUSINESS_USER_WITHOUT_PASSWORD by default; this backend-controlled behavior is not configurable.

Security policy S_BUSINESS_USER_WITHOUT_PASSWORD

SCIM, security policy, S_BUSINESS_USER_WITHOUT_PASSWORD, default security policy, SSO, user provisioning, Cloud Identity Services, IAS, SAP Sales Cloud Version 2, Sales and Service Cloud V2, user login disabled, backend default, policy assignment, SCIM user creation, identity synchronization , KBA , CEC-CRM-IAM , Identity and Access Management for SAP Sales/Service Cloud , Problem