SuccessFactors to Active Directory User Provisioning - can we change Odata filter query?

Jakob Digranes 0 Reputation points
2024-12-17T14:31:57.9066667+00:00

We have a setup using SuccessFactors to Active Directory User Provisioning enterprise app to synchronize users from SAP Employment Central (EC) to Active Directory. We have configured this rather straight forward from setup and guides from Microsoft Learn.

We have done this customization to facilitate for future hires:
startDate from SuccessFactors attribute has the following JSON path
$.employmentNav.results[-1:].startDate.
This enables us to synchronize both users already employed, and user with startDate sometime in the future. According to this link:
https://learn.microsoft.com/en-us/entra/identity/app-provisioning/sap-successfactors-integration-reference#how-pre-hire-processing-works

For the record, employees have different statuses in SuccessFactors; as explained here: https://userapps.support.sap.com/sap/support/knowledge/en/2736579

EmployeeCentral where everything works have statuses t (active) and f (inactive)

Employees from Onboarding module have statuses e (active_external_suite) and i (inactive_external_suite)

However - now we have expanded with the onboarding module, and users with status (e) are only synced with a limited amount of data when they are in future hire. After startDate is passed - all employeeData is synced.

The SAP consultants say that we need to change the OData query filter in the Enterprise App in Entra ID - but I find no option to do this in the app - nor in the attribute mapping, JSON paths.

Have anyone stumbled upon changing OData query?

(Note: I have seen a SAP blog where a similar issue was solved altering permissions in SAP, but this is handled I have been told. This blog article: https://community.sap.com/t5/technology-blogs-by-members/future-dated-hires-provisioning-from-sf-ec-onboarding-to-azure-ad-onprem-ad/bc-p/13965411#M170811 )

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
6,764 questions
0 comments No comments
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.