Skip to content

Latest commit

 

History

History
203 lines (117 loc) · 9.62 KB

add-new-systems-bd214dc.md

File metadata and controls

203 lines (117 loc) · 9.62 KB

Add New Systems

You can add source, target, and proxy systems for your provisioning scenarios.

To provision entities (users, groups, roles) from one system to another across your enterprise, you first need to add and configure these systems as source and target connectors in Identity Provisioning.

Restriction:

The maximum number of systems you are allowed to add is:

  • 20 sources systems

  • 50 target systems

This restriction is valid for Customer Managed systems only. If your business requires using more systems, create an incident for component BC-IAM-IPS to request them. Describe your scenarios and provide a reason why you need the additional systems.

When you add a system, it is created with its default properties and transformations. If the system has different versions (based on the APIs it provides), you can specify which one you want to use, so that the system is created with the version specific properties and transformations.

Versioning is supported for Identity Authentication, SAP SuccessFactors, SAP Concur, SAP Analytics Cloud and SAP Sales Cloud and SAP Service Cloud. It is controlled by the <system prefix>.api.version property.

To add a system, proceed as follows:

  1. Access the Identity Provisioning UI and choose a tile – Source Systems, Target Systems, or Proxy Systems.

    Sign in to the administration console of SAP Cloud Identity Services and navigate to Identity Provisioning > Source Systems, Target Systems or Proxy Systems.

  2. Choose the Add button at the top left corner of your screen.

  3. On the Details tab, provide the following information:

    Field

    Description

    Type

    Select the system type that you want to configure.

    System Name

    Add a name for your system. Make sure it does not duplicate another system's name in the UI.

    Note:

    System names can have a length of up to 100 characters. Only the following characters are allowed: (a-z), (A-Z), (0-9), (-), (_), (.) and spaces.

    Destination Name

    (Optional) Select a destination.

    If you have previously created a connectivity destination in SAP BTP cockpit on subaccount level, you can access it from the Identity Provisioning UI.

    Remember:

    • When you select a connectivity destination, it must be compliant to the relevant system type.
    • The destination should specify all the connection settings required for your identity provisioning scenario.
    • For SAP Application Server ABAP systems, creating a destination is mandatory.

    If you skip the Destination Name field, you can enter the connection and configuration properties, needed for your scenario, on the Properties tab.

    Note:

    If you use both a connectivity destination and the Properties tab, and one and the same property exists in both places, the value set in the Properties tab will be considered with higher priority.

    If you leave both the Destination Name field and the Properties tab empty and then run a job, no identity provisioning will be performed.

    Description

    (Optional) Enter a description. It will help you easily distinguish your systems in the list later on.

    Source Systems

    This field is displayed only for target systems.

    Select a source system whose identities you want to read and provision to the target one. You can select multiple source systems.

    Tip:

    If you had previously added one or more source systems but some of them were later deleted in your Identity Provisioning UI, an error message will appear. To correct this inconsistency, edit the target system configuration (select active source systems), and save the changes.

  4. Decide on the version of the system you want to add.

    • Choose Save, if the system you add has no version, or it has two or more versions and you want the default one. The new system appears in the left-side panel. The default transformations and properties are displayed under the respective tabs.

    • Do not choose Save, if the system you add has two or more versions and you want to specify a particular one. In this case, proceed as follows:

      1. From the Details tab (without saving your configurations), move to the Properties tab and select it.

      2. Add the API version property for your system and a value. For example, if you add SAP SuccessFactors on the Details tab, add sf.api.version and the desired version 2.

      3. Now, choose Save.

      This creates an SAP SuccessFactors system with specific properties and transformation for version 2, which is based on SAP SuccessFactors Workforce SCIM API. Providing value 1, would result in creating a system with specific properties and transformation for version 1, which is based on SAP SuccessFactors HCM Suite OData API.

      Note:

      Once you save your configuration, switching between versions is possible but requires manual work, mostly adding the version specific properties and transformations. For more information, see Update Connector Version.

  5. To add connection and configuration properties, choose Properties > Edit. See List of Properties

  6. To modify your default system transformation (if needed), choose Transformations > Edit.

  7. Save your changes.

At the end of the Identity Provisioning URL, a dash-separated string appears. This is the automatically generated unique ID of the newly created system.

Related Information

Search and Edit Systems

Enable and Disable Systems

Export and Import Systems

Delete Systems

Update Connector Version

Manage Properties

Manage Transformations

Manage Certificates

Manage Full and Delta Read

Manage Deleted Entities

Connect to On-Premise Systems

Start and Stop Provisioning Jobs

Handle Rate Limits

Handle Failed Operations

Reset Identity Provisioning Settings

Reset Identity Provisioning System

Manage Properties

Manage Transformations