Identity provisioning service - IPS

[Aishwarya13]

As a newcomer in this scenario, I would appreciate some guidance on how to proceed. Here is the situation:

The IAS needs to be established as a source system.

The IPS team should configure the IPS application to send deactivation requests to the target application whenever an employee is deactivated in the IPS application.

IPS should be configured for the target system in a way that when an employee is deactivated, they are also deactivated in the target application.

To ensure the setup is functioning correctly, we need to deactivate an employee in the IPS application and confirm that they are also deactivated in the target application.

Could you please provide suggestions on how to accomplish these tasks effectively?

[istvanbokor]

Hi,

You can check 'scope' 'deleteEntity' at https://help.sap.com/docs/identity-provisioning/identity-provisioning/transformation-expressions?loc...

deleteEntity – If an entity has been deleted from the source system or has been set a condition for it not to be read anymore, this entity can "stay" in the target system for the following reasons:

• The target system does not support deletion of entities.
• You do not want to delete it but only temporary disable/deactivate it.
• You want to neither delete it, nor deactivate it but only remove its permissions, or exclude it from some corporate groups.

Best regards,
Istvan

[normann]

Hi Aishwarya,

IPS does not store any data, hence, you cannot really deactivate a user in IPS. Do you mean IdDS?
Do you have the product SAP Identity Management in place? From what you describe it does not seem to be the case, but its 2 complete different scenarios with our without SAP Identity Management.

Regards

Norman