SuccessFactors to Active Directory User Provisioning - can we change Odata filter query?
We have a setup using SuccessFactors to Active Directory User Provisioning enterprise app to synchronize users from SAP Employment Central (EC) to Active Directory. We have configured this rather straight forward from setup and guides from Microsoft Learn.
We have done this customization to facilitate for future hires:
startDate from SuccessFactors attribute has the following JSON path
$.employmentNav.results[-1:].startDate
.
This enables us to synchronize both users already employed, and user with startDate sometime in the future. According to this link:
https://learn.microsoft.com/en-us/entra/identity/app-provisioning/sap-successfactors-integration-reference#how-pre-hire-processing-works
For the record, employees have different statuses in SuccessFactors; as explained here: https://userapps.support.sap.com/sap/support/knowledge/en/2736579
EmployeeCentral where everything works have statuses t (active) and f (inactive)
Employees from Onboarding module have statuses e (active_external_suite) and i (inactive_external_suite)
However - now we have expanded with the onboarding module, and users with status (e) are only synced with a limited amount of data when they are in future hire. After startDate is passed - all employeeData is synced.
The SAP consultants say that we need to change the OData query filter in the Enterprise App in Entra ID - but I find no option to do this in the app - nor in the attribute mapping, JSON paths.
Have anyone stumbled upon changing OData query?
(Note: I have seen a SAP blog where a similar issue was solved altering permissions in SAP, but this is handled I have been told. This blog article: https://community.sap.com/t5/technology-blogs-by-members/future-dated-hires-provisioning-from-sf-ec-onboarding-to-azure-ad-onprem-ad/bc-p/13965411#M170811 )