Hello everyone,
we are currently facing the following challenge with SailPoint ISC and the SAP HR/HCM connector:
-
The synchronization is done via RFC_READ_TABLE because the SailPoint Add-On is currently not allowed to be installed in the SAP system.
-
The technical user has all necessary permissions as defined in the official SAP HR/HCM SailPoint documentation, and the aggregation itself works correctly.
-
The customer wants to prevent some of the standard attributes that the connector fetches by default from being read or displayed at all in the UI (neither as values nor as empty fields).
Questions:
-
Is there an officially supported way (for instance through the source schema or other ways) to completely exclude specific attributes from being processed or displayed by the connector?
-
What happens if we remove attributes directly from the source schema in Identity Security Cloud? I assume this might break the connector or cause aggregation issues—can anyone confirm?
-
Are there any best practices or workarounds to control which attributes are synchronized, especially when the SAP Add-On cannot be used and we have to rely entirely on RFC_READ_TABLE for data retrieval?
Any advice, recommendations, or documentation references would be very much appreciated!
Christina