We are currently encountering an issue with the SAP GRC connector integration in SailPoint IdentityNow.
Issue: During user creation, we are passing the SNC Name attribute value in the create provisioning policy, and it is successfully populated on the SAP GRC side. However, when we submit a modify request from SailPoint, the existing SNC Name is getting wiped out at SAP GRC end.
Request for Inputs: We would appreciate any insights into the possible reasons for this issue. If anyone has encountered a similar situation or has any recommendations on resolving this, please share your inputs.
@prathyusha730:
Check the sAMAccountName Generator rule/script:
Look for any variables being accessed without null checks.
Check identity data:
Go to the failing identities → check if they are missing key attributes (first name, last name, email, etc.) used by the script.
Check provisioning policies and mappings:
Verify that the right attributes are mapped from Active Directory into IdentityIQ.
Check rule assignment:
Make sure the right rule is attached to the correct provisioning or lifecycle events.