Transformations help you transform user and group attributes from the data model of the source system to the data model of the target system.
Identity Provisioning provides a default transformation logic for every supported provisioning system. Source systems apply read transformations, target systems apply write transformations, while proxy systems apply both – read and write proxy transformations.
During a provisioning job, the read transformation of the source system converts the system specific JSON representation of users and groups to one common JSON format (also called internal JSON). This common JSON format is then used as a source for passing the data to the target system, which applies the write transformation.
The following examples illustrates how the last name user attribute is read from the SAP S/4HANA Cloud source system, transformed and prepared as the family name user attribute for the Identity Authentication target system using both - graphical and JSON text editor.
Source System-Specific JSON |
Common JSON |
---|---|
Common JSON |
Target System-Specific JSON |
---|---|
Source System-Specific JSON |
Common JSON |
Target System-Specific JSON |
---|---|---|
|
|
|
You can adapt the transformation logic, for example, to read only the entities that should be provisioned to the target system. This filter can speed up the processing of the entities and their provisioning to the target system.
Every time you modify the transformation of a provisioning system and save your changes, a new version is created and displayed in the Transformation History screen. It lists all versions - from the initial to the current one, and gives you additional information about the last modification date, the person who modified it and a description.
Identity Provisioning provides graphical andJSON text editor for managing provisioning system transformations.
Related Information