Central Person ID in SAP HCM connector

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hi,
In SailPoint connector documentation, it has mentioned that it is mandatory to set “Central Person ID” as Account ID.
However, not all SAP HCM systems uses Central Person ID concept and the old HCM sources do not have such requirements. I tried setting the Account ID to “Employee Number” and it throws error - Identity attribute [Employee Number] was not found.

Anyone have experience on this, please share on how I can aggregate without Central Person ID. Thanks!

2

Hi

I see Employee Number also supported as Account ID.

image
image1851×512 32.3 KB

If you don’t have Central Person ID in your HCM, better delete it and try aggregation.

Thanks
Krish

3

Hi Krishna,
I have deleted the Central Person ID and aggregate. Similar error “Identity attribute [Employee Number] was not found”.

4

@yuyanglee

Identity attribute [Employee Number] was not found.

This error indicates that IdentityIQ is unable to find or map the “Employee Number” attribute from the SAP HCM accounts to the corresponding Identity attribute in IdentityIQ.

To aggregate accounts from an SAP HCM system that doesn’t use Central Person ID, you’ll need to adjust your connector configuration and possibly your IdentityIQ schema to use the Employee Number as the Account ID. Below are the steps to achieve this:

  • Ensure that the Employee Number is correctly defined and active as an Identity attribute in IdentityIQ.
  • Modify the SAP HCM application schema to include the Employee Number and set it as the Account ID.
  • Map the Employee Number from the application to the Identity attribute in IdentityIQ.
  • Adjust correlation settings to use the Employee Number for matching accounts to identities.
1 Like
5

Thanks Amit. I’ve managed to resolve issue. Root cause is due to incorrect mapping in /SAILPOIN/CONF table. Therefore ISC is not able to find the value.

1 Like
6

@yuyanglee - Please mark my post to solution, If that helps.

7

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.