What isSAP GRC Connector – "Fields Company, Manager are mandatory" during Create User Provisioning

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hi everyone,

I’m working with the SailPoint ISC SAP GRC connector and encountering the following error while provisioning a new user:



Error: Incomplete items. Please contact your administrator.
Request failed

[ConnectorException]
Fields Company, Manager are mandatory.

We have already added the Company attribute to the account schema and are mapping it in the provisioning policy. However, SAP GRC still reports that the Company field is mandatory.

I have a few questions:

  1. Is there a specific attribute name that the SAP GRC connector expects for Company (other than Company)?
  2. Does the Company field need to be mapped to a different SAP GRC field (e.g., Company Code or another user information field)?
  3. Has anyone encountered this issue, and if so, how was it resolved?
  4. Similarly, what is the expected attribute or mapping for the Manager field?

Any guidance or examples of a working provisioning policy would be greatly appreciated.

Thank you!

2

Hello Rakesh. Company and Manager ID are not universally mandatory for Create User provisioning in the SAP GRC connector. Whether they’re required depends on your SAP GRC managed-system configuration and request setup.

Manager ID should already be part of the connector’s default Create Profile. Check whether it is mapped to the appropriate identity attribute or a valid static value in the format expected by SAP GRC.

Company isn’t in the connector’s standard account schema, but it’s one of the additional attributes you can bring in using a custom BAPI. The idea is to create the custom BAPI on the SAP GRC side, register it in the SailPoint source configuration, and then add Company to your account schema and Create Profile so it gets included in provisioning plans.

The error suggests that SAP GRC is rejecting the request because these fields are mandatory in your GRC configuration but are being sent without valid values. If they are intended to remain mandatory, complete the above mappings. Otherwise, the SAP GRC team should review whether the mandatory-field configuration can be changed.

3

Hi @Rakesh_Singh_1234
Seems the root cause of this error is a mismatch between how the SailPoint SAP GRC connector compiles user details and what the SAP GRC Access Request Management SOAP web service (GRAC_USER_ACC_REC_WSD) expects in its payload.When SailPoint generates a provisioning plan, it formats user details into a standard list structure.Which is userInfoList.
If SAP GRC rejects the plan with an explicit Fields Company, Manager are mandatory error, it means the attributes are either incorrectly named in the SailPoint schema or are missing completely from the outgoing XML payload structure.kindly check and fix the mapping for company and manager_id used by standard SOAP layer. Would suggest to check the below points :
Check SAP GRC Custom Configuration
Fix the Provisioning Policy and Attributes