IAS to SAC: User Updates Not Provisioned

[tskwin]

Hello Experts,

I have provisioned users from IAS to SAC.

However, when I change a user in IAS (e.g., updating the last name) and run the Read job, the changes are not provisioned to the target system (SAC).

There is no error, but the users are read, and no update is performed in the target system.

What should I pay attention to and what needs to be configured to ensure that only the user changes are successfully provisioned?

Many Thanks

Best regard

[Matthew_Shaw · Accepted solution]

Some user properties are mapped as SAML attributes by default. When a property is mapped, it can not be updated via the SCIM API, which will include user provisioning services. Simply unmap these properties. Go to SAP Analytics Cloud, as the system owner, Menu-Security-Users, and select the button to 'Map SAML attributes'. This opens a dialogue box allowing you to select which attributes to unmap (or remap if you've previously removed the mapping). The first name and last name are mapped attributes, as well as others. If you want these to be updated via the SCIM API rather than via SAML then you'll need to unmap them.

If this isn't your issue (or even if it is), you may find the sample Postman Collections helpful in validating whether the issue is at the SAP Analytics Cloud end or with your provisioning mapping service. The user guide also provides a little more detail on the mapped attributes mentioned above.

[paula_augedahl · Accepted solution]

Dear tskwin, since an answer was provided to your question, and there has been no other activity on the topic, we have accepted the answer as a solution on your behalf. You can unaccept it anytime if the answer provided was not helpful enough or if you have further questions. Thank you for bringing this question to SAP Community! Best regards, Paula