Entra User provisioning from SAP Successfactor - change odata api query - need to add filter

Question

Hi all

I'm wrestling a bit with SAP Successfactor user provisioning to Entra ID, it works good for most part, but i need to change the OData query filter. I guess this would be like this information mentioned here:

https://learn.microsoft.com/en-us/entra/identity/app-provisioning/sap-successfactors-integration-reference#how-full-sync-works

Something like this:
https://apiX.successfactors.XXX/odata/v2/User?$format=json&$select=username,status,email,userId,firstName,country&**$filter=status in 't','f'**&$top=200

we're using the gallery app for Successfactor user provisioning, but I find no information on how i can change the odata query for the SAP Successfactor API call.

or if this indeed is customizable or configured in the provisioning app.

Answer 1

Hi @Jakob Hus Digranes

I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this! Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others ", I'll repost your solution in case you'd like to "Accept " the answer.

Issue: > Entra User provisioning from SAP Successfactor - change odata api query - need to add filter.

how to change the odata query for the SAP Successfactor API call.

Solution:

here how you fixed the issue. PreHire needs to activated in Entra ID provisioning app: https://learn.microsoft.com/en-us/entra/identity/app-provisioning/sap-successfactors-integration-reference#how-pre-hire-processing-works

You also need to sync active employment record in Entra ID provisioning app: https://learn.microsoft.com/en-us/entra/identity/app-provisioning/sap-successfactors-integration-reference#retrieving-current-active-employment-record And in SAP Successfactors your API user needs some permission, which might be unknown: https://community.sap.com/t5/human-capital-management-q-a/not-getting-data-for-future-hires-in-successfactors-to-azure-ad-integration/qaq-p/12600662 (i guess you'd need a SAP support user to access this). Abstract: In SAP Successfactors - Ensure that the API user account has Manage User > Employee Export permission.

If you have any other questions or are still running into more issues, please let me know. Thank you again for your time and patience throughout this issue.

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

Answer 2

Hi

Thank you for getting back to - I've created support cases for both SAP and Microsoft as they point to each other. For anyone else stumbling upon this; here's what fixed it:

PreHire needs to activated in Entra ID provisioning app: https://learn.microsoft.com/en-us/entra/identity/app-provisioning/sap-successfactors-integration-reference#how-pre-hire-processing-works

You also need to sync active employment record in Entra ID provisioning app: https://learn.microsoft.com/en-us/entra/identity/app-provisioning/sap-successfactors-integration-reference#retrieving-current-active-employment-record

And in SAP Successfactors your API user needs some permission, which might be unknown:
https://community.sap.com/t5/human-capital-management-q-a/not-getting-data-for-future-hires-in-successfactors-to-azure-ad-integration/qaq-p/12600662 (i guess you'd need a SAP support user to access this). Abstract: In SAP Successfactors - Ensure that the API user account has Manage User > Employee Export permission.

This may be not be the solution for all, we have configured that employees is registered in SAP SF as inactive until start date, other organizations might have solved this other ways.