Filter users based on group assignment in Cloud Identity via Target System Transformation

[pmuschick]

Hello,
I would like to replicate users from SAP Cloud Identity (SCI) to the "Procurement Data Warehouse", an Analytics Cloud (SAC), part of the Ariba Category Management subscription set up. To that SAC you only get SCIM API access to create and manage users - therefore local user mgmt. is not possible.

After a lot of research I was not able to find out out if you can filter with a condition based on groups assigned in the identity directory of SCI. So basically our source system is SCI reading all users & groups and in the target system transformation (!) I would like to work with the condition to filter users based on a specific group assigned. I would like to avoid setting up source systems all the time I have a filter criteria (saw that as well during my research) - therefore I am asking on a way for target system transformations.

The transformation in the target system SAC is as follows:

($.emails[0].value EMPTY false) && isValidEmail($.emails[0].value) && ($.groups[?(@.value == 'Ariba_Category_Mgmt-DEV-PDW_SAC')] EMPTY false)

But the issue is in this case it does not replicate any users - although like 7 users have this assigned. By removing the "&& ($.groups[?(@.value == 'Ariba_Category_Mgmt-DEV-PDW_SAC')] EMPTY false)" part I am able to replicate all ~1800 users in the identity directory to SAC so generally the process is working (slowly).

Any ideas? Appreciate anybody helping 🙂

[MatthiasL]

"condition": "($.groups[?(@.value =~ /sac.*/)].value EMPTY false)",

You are missing some stuff and might also be breaking the regex.