Issue aggregating accounts with SAP Fieldglass connector

Hi Team,

I was trying to integrate SAP Fieldglass application using OOB SAP Fieldglass connector provided by the Sailpoint. All the Prerequisites & Required permissions has been provided as mentioned in the connector doc. The test connection and even the account aggregation is successful, but I do see an issue with account details. Users actually have multiple roles in the Fieldglass system but the aggregation just shows one role attached with every user.

In the account scheme the role attribute, Primary Role & Additional role is set as multivalued attribute, yet multiple roles are not being aggregated for any user. Has anyone worked on this connector, any help is greatly appreciated. I am not sure if I am missing something here. The doc has nothing much to offer on this issue.

Thanks!!

Hi Rohan

I haven’t worked with this connector but can try to help troubleshoot. When you say only one role is aggregated, is this on the identity account, only one role is reflecting under the entitlement? If you download the accounts csv, does it also only show the one role or are you able to see the data for the other roles?

Thanks

Hi @Irshaad_Laher_WS,

Thanks for the reply. Yes, it is showing only one role on the identity account under entitlements. I did take a look at accounts CSV as well even there it is showing just one.

Hi Rohan

Are you able to identify the API function being called for aggregation of user accounts and entitlements for this connector - as a next step, I would suggest trying to test the API directly with Postman to inspect the response. Alternatively enable logging for the connector and check what is being passed and received in the aggregation process. This would give us a good indication of if there is potentially a limitation on the connector or the API.

You can check this page for information on enabling logging for a connector: https://community.sailpoint.com/t5/IdentityNow-Articles/Enabling-Connector-Logging-in-IdentityNow/ta-p/188107?_ga=2.192633134.549720369.1677512159-1413086531.1675185796&_gl=1*ew0ox7*_ga*MTQxMzA4NjUzMS4xNjc1MTg1Nzk2*_ga_SS72Z4HXJM*MTY3Nzc2ODY4MS42MC4xLjE2Nzc3NzAwNjguNDguMC4w

Hope that helps

Hi @Irshaad_Laher_WS,

I am using the OOB connector provided by Sailpoint. I do not have the info on the API being called within the connector. Also the document does not tell us the logging class to be used for SAP Fieldglass connecor to enable debugging logger in VA. The connector is supposed to aggregate the accounts as per the documentation, I do not see any limitation mentioned in the document.

Hi Rohan

I understand the frustration, however, as mentioned, I don’t have experience with this particular connector but I do have experience with many connectors for ISC and as a result am trying to provide some guidance to troubleshoot and potentially find where the issue or gap is.

My suggestion is to confirm through the logging which APIs are being referenced for this connector and then to verify the data received back from the connector. If all data is being received as expected then you will probably need to log a support ticket with SailPoint directly to investigate further as a potential problem with the connector.

Thanks

Thanks for your inputs. I will try getting the logger class for this connector and see what the log has for me to debug.

Did you confirm that the schema is configured for “multi-value” on the “Additional Roles” attribute?

Hi @edmarks,

Yes, it is configured as mulit valued for both Primary Role & Additional Role attribute in the account schema.

In our system using Fieldglass we only have “Multi” on the “Additional Roles” (not on the Primary Role which should only be a single value).

Not sure this would make any difference, but figured it doesn’t hurt to clarify.

Thanks for your inputs. I will test this out as well. Unfortunately of SAP Fieldglass application is undergoing a major migration, as part of this the tenants have been refreshed and they have halted the intergration, once this is completed I will resume my testing.

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.