As promised, this is a information sharing blog and follow up blog to my previous post:
Extending Cloud Integration of SAP IAG to SAP Arib... - SAP Community
SAP Ariba applications now supports User and Group integration via SCIM protocol and it has been made generally available in August 2024. What does this mean then. I will summarize some key points and also point you towards - Getting Started with the SAP Ariba SCIM API | SAP Help Portal.
- For all your SAP Ariba applications (Buying, Sourcing, Supplier Management, Contracts etc), you can utilize SCIM based used user and groups provisioning/assignment. (both for read and write operations)
- You can access and enable these APIs via SAP Ariba APIs Portal under Procurement or Strategic Sourcing as "SCIM API for User and Group Master Data". The SAP Ariba SCIM API is a REST API based on the SCIM (System for Cross-domain Identity Management) 2.0 specification.
- Let it be SAP Ariba Sourcing/Contract sites (also knows as Realms) or let it be SAP Ariba Buying sites with various variants (SAP, Peoplesoft and Generic), you can utilize the SCIM API. SAP variant has most number of business attribute coverage where as Peoplesoft and Generic variant have limited attributes coverage at this point of time.
- Consider a scenario that you have a Parent SAP Ariba Buying site which is of Generic variant and Child site(s) is(are) of SAP variant, then you can first make the baseline general user provisioning to the Parent site as it does not require much of business attributes, and then make another provisioning call to the Child site with required business attribute. This would help the user (end user) perform their business operations based on their attributes
- SCIM API can be used with or without IPS and IAG, though SAP recommends to use IPS based flow for better integration architecture. A suggestive flow is mentioned below for example. Please note: SAP IAG (Identity and access governance) is still undergoing some enhancements to support all business attributes out of the box.
You will also find that the rate limit of this API is greatly improved than previous version and much more additional functionalities.
Please check the official documentation for restrictions on the API functionality. And please note that this Blog is not a official product documentation but rather a quick guide on this topic. Kindly stay updated with the official documentation.
If you are interested knowing more about this topic, please reach out to your SAP Ariba representative.
Thank you and I hope this adds some clarity to current state of this API and user/group provisioning in SAP Ariba applications.
| User | Count |
|---|---|
| 8 | |
| 3 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
