SAP CPQ integration with Cloud Identity Service - Conflict on Documentation

[SAPSupport]

Need clarification on the documentation found here:

Integrate SAP CPQ and Identity Provisioning Service (Example Scenario) | SAP Help Portal

In this help document it is mentioned that in Cloud Identity Service we create user Groups based on CPQ Permission groups.

In the SCIM API documentation for CPQ that can be found here:

SCIM API | SAP Help Portal

the Mapping of groups is based on CPQ User Types and not on permission groups and using the SCIM connector we get User type + a suffix of '-USERTYPE'.

Questions:

1. If I am to setup a transformation where SAP CPQ as source, will I get groups created in Cloud Identity Service based on User Types or based on Permission Groups?
2. Will I also also be getting the permission groups as groups in Cloud Identity Service?

------------------------------------------------------------------------------------------------------------------------------------------------
Learn more about the SAP Support user and program here.

[SAPSupport · Accepted solution]

Answers:

1. When setting up a transformation with SAP CPQ as the source, groups in Cloud Identity Service will be created based on User Types and not directly on Permission Groups. This is because the SCIM connector maps users to groups using their User Type + "-USERTYPE" suffix​.

2. Yes, permission groups will also appear as groups in Cloud Identity Service, but separately from the user-type-based groups. The documents mention that other groups (besides the "-USERTYPE" groups) are permission groups, and they are also referenced by their system IDs​.

So, Cloud Identity Service will contain both:

• Groups based on User Types (with the "-USERTYPE" suffix).
• Groups representing Permission Groups, which are mapped separately.