Provision User Groups from Azure AD to SAP IAS

Question

Provision User Groups from Azure AD to SAP IAS

Darth Vader 26

Is there any way we can provision user groups from Entra/Azure AD to SAP Identity Authentication Service (IAS)?
I was able to send the user data to IAS but not the group attributes.

2 answers

Your answer

Answer 1

Mehtab Siddique (MINDTREE LIMITED) 971

For provisioning group for the user:

For more information:

https://learn.microsoft.com/en-us/azure/active-directory/saas-apps/sap-successfactors-inbound-provisioning-tutorial#create-a-permission-group-for-the-api-user

Hope this is helpful.

Darth Vader 26 Reputation points

2022-12-24T13:05:47.667+00:00

Your article talks about provisioning to SuccessFactors but my question was regarding SAP Identity Authentication Service (IAS). I was able to achieve the provisioning to SuccessFactors but I'm not able to replicate the same in IAS.

Answer 2

Akshay-MSFT 17,956 Microsoft Employee Moderator

Hello @Darth Vader
As per: https://learn.microsoft.com/en-us/azure/active-directory/app-provisioning/how-provisioning-works#scoping The group object itself isn't provisioned unless the application supports group objects.

We could try the following to validate:

So withing AAD you need to select Sync only users and groups:

![275392-image.png][1]
From the tutorial [Setup SAP Cloud Platform Identity][2] you need to select Manage User and Manage Groups:
![275401-image.png][3]
Please do let me know if you have any further queries.
Thanks,
Akshay Kaushik
Please "[Accept the answer][4]", "Upvote" and rate your experience if the suggestion works as per your business need. This will help us and others in the community as well.

Darth Vader 26 Reputation points

2023-01-04T14:23:24.827+00:00

Hello @Akshay-MSFT ,

Tried this one still not working, but found out why. The standard IAS App from gallery can only do User Provisioning and not Groups and has SAPIASuser as source object which does not hold group attributes. So we can't go with standard IAS App for groups provisioning.

Regards.
Akshay-MSFT 17,956 Reputation points Microsoft Employee Moderator

2023-01-20T06:06:15.47+00:00

Hello @Darth Vader ,

Thanks for confirming. This implies that the first condition in the answer is true here.

The group object itself isn't provisioned unless the application supports group objects.

Please "Accept the answer" and rate your experience (Yes/No). This will help us and others in the community as well.

Thanks,

Akshay Kaushik

Share via

Provision User Groups from Azure AD to SAP IAS

2 answers

Your answer