IPS Trasformation add Org Member Roles

[dirkwiegele14]

Hello,

I would like to read users from the SAP IAS and automatically assign Org Members via IPS SAP BTP Type Platform Members (Cloud Foundry).
I have made the configuration.
https://help.sap.com/docs/identity-provisioning/identity-provisioning/sap-btp-platform-members-cloud...
With the default transformation I get the following error
group:b499810c-3102-4a73-84ae-7aa78c97e542,
system=MyTargetSystem,
time=2025-01-28T12:31:00.382+00,
error=Unable to write entity to target system with name rd-tgt-btp-rs-u-cloudfoundry-Administrator Caused by: An unparsed group id must have exactly 2 or 3 logical parts,
content={“displayName”:“Org Manager”,“members”:[{“$ref”:“https://myhost.accounts.ondemand.com/scim/Users/50c58b3b-347c-4ae0-8c7f-86a9b50780c2”,“type”:“User”,“value”:“50c58b3b-347c-4ae0-8c7f-86a9b50780c2”}],“urn:sap☁️scim:schemas:extension:custom:2.0:Group”:{“name”:“org_manager”}}
I think it is missing
//the organization group extension name follows the pattern: <org_ID> <org_role>
But I don't understand how to insert this into the transformation.
Greetings Dirk

[Sahil_Sachdeva]

@ dirkwiegele14- is the issue fixed?

[TobiasTheiner]

Hello @dirkwiegele14,

I also got the same error message: "An unparsed group id must have exactly 2 or 3 logical parts" but I managed to make it work by creating a new group with the following properties:

• Name: "aaaaaaaa-bbbb-cccc-dddd-123456789123 organization_user" (pattern: "<org_ID> <org_role>")
• Display Name: "BTP_CF_PM_*****_OrgUsers" (according to the btp.cf.pm.group.prefix property value in the target system)

Aside from that, I made no changes to the default transformation except removing "%btp.cf.pm.landscape%" from the condition because I didn't want to include the landscape in the Display Name.

From my understanding, the error message is misleading, as it is not the group ID but the group name that must have 2 or 3 logical parts: either "<org_ID> <org_role>" or "<org_ID> <space_ID> <space_role>", as commented in the default transformation.

I hope this helps!

Best regards

Tobias

[dirkwiegele14]

That was helpful. The error is gone, but no org members are written User Read Read 1 User Write Skipped 1 I am also using the default transformation. I pinned the group condition as a test. "group": { "condition": '('%btp.cf.pm.group.prefix%' === 'null') || ($.displayName =~ /%btp.cf.pm.group.prefix%%btp.cf.pm.landscape%.+/)", "mappings": [.... I did not set the %btp.cf.pm.group.prefix% property. %btp.cf.pm.group.prefix% then this is null My IAS group is called BTP_CF_PM_12345678-1234-1234-1234-123456789101112_org_manager Org ID= 12345678-1234-1234-1234-1234-123456789101112 Pattern BTP_CF_PM_ORGID_ORGRole ias.group.filter=displayName eq "BTP_CF_PM_".

[dirkwiegele14]

Hello @TobiasTheiner 

That was helpful.

The error is gone, but no org members are written.

User Read Read 1
User Write Skipped 1
I am also using the default transformation. I pinned the group condition as a test.
"group": { "condition": '('%btp.cf.pm.group.prefix%' === 'null') || ($.displayName =~ /%btp.cf.pm.group.prefix%%btp.cf.pm.landscape%.+/)",
"mappings": [....
I did not set the %btp.cf.pm.group.prefix% property.
%btp.cf.pm.group.prefix% then this is null.
My IAS group is called BTP_CF_PM_12345678-1234-1234-1234-123456789101112_org_manager
Org ID= 12345678-1234-1234-1234-1234-123456789101112
Pattern BTP_CF_PM_ORGID_ORGRole ias.group.filter=displayName eq "BTP_CF_PM_".

Best regards Dirk