Entra User provisioning from SAP Successfactor - change odata api query - need to add filter

Jakob Hus Digranes 20 Reputation points
2024-06-12T15:09:35.8733333+00:00

Hi all

I'm wrestling a bit with SAP Successfactor user provisioning to Entra ID, it works good for most part, but i need to change the OData query filter. I guess this would be like this information mentioned here:

https://learn.microsoft.com/en-us/entra/identity/app-provisioning/sap-successfactors-integration-reference#how-full-sync-works

Something like this:
https://apiX.successfactors.XXX/odata/v2/User?$format=json&$select=username,status,email,userId,firstName,country&**$filter=status in 't','f'**&$top=200

we're using the gallery app for Successfactor user provisioning, but I find no information on how i can change the odata query for the SAP Successfactor API call.

or if this indeed is customizable or configured in the provisioning app.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,540 questions
{count} votes

Accepted answer
  1. Akhilesh 7,230 Reputation points Microsoft Vendor
    2024-06-18T05:10:22.31+00:00

    Hi @Jakob Hus Digranes

    I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this! Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others ", I'll repost your solution in case you'd like to "Accept " the answer.

    Issue: > Entra User provisioning from SAP Successfactor - change odata api query - need to add filter.

    how to change the odata query for the SAP Successfactor API call.

    Solution:

    here how you fixed the issue. PreHire needs to activated in Entra ID provisioning app: https://learn.microsoft.com/en-us/entra/identity/app-provisioning/sap-successfactors-integration-reference#how-pre-hire-processing-works

    You also need to sync active employment record in Entra ID provisioning app: https://learn.microsoft.com/en-us/entra/identity/app-provisioning/sap-successfactors-integration-reference#retrieving-current-active-employment-record And in SAP Successfactors your API user needs some permission, which might be unknown: https://community.sap.com/t5/human-capital-management-q-a/not-getting-data-for-future-hires-in-successfactors-to-azure-ad-integration/qaq-p/12600662 (i guess you'd need a SAP support user to access this). Abstract: In SAP Successfactors - Ensure that the API user account has Manage User > Employee Export permission.

    If you have any other questions or are still running into more issues, please let me know. Thank you again for your time and patience throughout this issue.

    Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Jakob Hus Digranes 20 Reputation points
    2024-06-17T10:47:23.9033333+00:00

    Hi

    Thank you for getting back to - I've created support cases for both SAP and Microsoft as they point to each other. For anyone else stumbling upon this; here's what fixed it:

    PreHire needs to activated in Entra ID provisioning app: https://learn.microsoft.com/en-us/entra/identity/app-provisioning/sap-successfactors-integration-reference#how-pre-hire-processing-works

    You also need to sync active employment record in Entra ID provisioning app: https://learn.microsoft.com/en-us/entra/identity/app-provisioning/sap-successfactors-integration-reference#retrieving-current-active-employment-record

    And in SAP Successfactors your API user needs some permission, which might be unknown:
    https://community.sap.com/t5/human-capital-management-q-a/not-getting-data-for-future-hires-in-successfactors-to-azure-ad-integration/qaq-p/12600662 (i guess you'd need a SAP support user to access this). Abstract: In SAP Successfactors - Ensure that the API user account has Manage User > Employee Export permission.

    This may be not be the solution for all, we have configured that employees is registered in SAP SF as inactive until start date, other organizations might have solved this other ways.

    0 comments No comments