Hello everyone!
While connecting the SAP HR/HCM to IdentityIQ, I’ve faced the issue.
The manager data in SAP is stored as PERNR (personal number) of manager as String, so as the aggregation is executed, there is only the pers. number of manager in Account Attributes.
Does anyone have the ideas of how this personal number could be converted to “Identity” data type in “Manager” field for Identity Attributes? Should it be done via IdentityCreation rule?
Thanks in advance!
Hi @d_pustovoitov ,
Welcome to Sailpoint Developer’s Community!!
You need to Define Manager Correlation in SAP HR/HCM Application–>Setting–>Correlation–>Manager Correlation:
IdentityAttribute–> attribute in Identity cube holding PERNR Number.
Application Attribute–> PERNER Number
Run Aggregation again or you can run refresh task as well as discover manager correlation option checked.
Thank you for such a fast answer, I’ll check this now.
Unfortunately, this can’t help me.
Probably because of different data types (String and Identity Link) those attributes cannot be correlated.
There is no “Manager” attribute which we have in Identity Cube.
Application Attribute should be PERNER and Identity Attribute Should be the one who is holding PERNER attribute value from like, if you do not have any attribute for Identity which is holding PERNER from HR System, then you might need to create one.
you can follow below link:
As @dheerajk27 suggested,
You need to understand how manager correlation works and why do you need correlation for manager attribute unlike for any other attributes like firstname or lastname or email.
All the attributes (mostly) are string literals. We just read the data from HR source.
But for manager, it is not a string, it is an identity object. That is why you are able to see Manager attribute value as a hyperlink pointing to manager identity cube.
This will help us a lot in coding, we get manager as an object
Identity manager = identityObj.getManager();
Once you get manager object, you can get any property of manager as per your requirements. You will understand this more when you start development in IIQ.
So, I don’t see that you have created an attribute pointing to PERNER in your Identity.
Once changes done, Run Refresh identity Cube Task with Refresh Manager status option enabled.
This will work for you.
Thanks
Krish
Hello Krishna, thanks for your answer.
I’ve made everything as you told, except that the attribute that handles the PERNR from SAP is already created.
I’ll provide you with several screenshots in different replies, cause i have the limit of attached screenshots.
Here is the Identity Attribute for employee personal number from SAP.
Unfortunately, there is still no Manager assigned to Identity.
Sorry if I don’t understand something basic)
No problem, config looks good.
Please run Refresh Identity Cube Task with Refresh Manager Status option enabled.
Sadly, but still nothing.
Here is the task result.
And refresh manager checkbox enabled
No manager in the Identity Cube Attributes
Check
Sorry, didn’t read all the topic, but if the refresh is not assigning manager try adding
<entry key="alwaysRefreshManager" value="true"/>
to the refresh task definition.
Hi Grzegorz,
Thanks for reply.
Sadly, that didn’t help.
I’ve checked the user from the screenshots above and his manager ID.
The Identity with this ID is present in IIQ.
Here is the Supervisor ID from the HR Account Attributes:
And the Identity found by this ID
Try HR app account aggregation task and then Refresh Task
I’ll try, but this will take some time, cause we have about 4500 users.
