What's New for SAP Cloud Platform

Identity Provisioning

2018

Technical Component

Capability

Environment

Title

Description

Type

Available as of

Identity Provisioning Platform Foundation Neo SAP Application Server ABAP

Besides as a source connector, you can now use SAP Application Server ABAP as a target or a proxy, as well. See:

New 2018-09-17
Identity Provisioning Platform Foundation Neo SAP S/4HANA Cloud (Beta)

The Identity Provisioning UI now supports SAP S/4HANA Cloud, which you can use as a source, target or proxy system in a beta state. See:

New 2018-10-23
Identity Provisioning Platform Foundation Neo Identity Directory

Identity Directory is no longer a separate service, nor in beta state. You can now use it as a productive source or target system. Also, you can merge user data from multiple source systems and provision it all in a single Local Identity Directory target system. See:

Announcement 2018-10-23
Identity Provisioning Platform Foundation Neo Identity Directory

Besides as a source and a target connector, you can now use Local Identity Directory as a proxy system, as well.

See: Exemplary Proxy Scenario

New 2018-11-07
Identity Provisioning Platform Foundation Neo CloudFoundry UAA Server

The Identity Provisioning UI now supports CloudFoundry UAA Server, which you can use as a source, target or proxy system. See:

New 2018-11-07
Identity Provisioning Platform Foundation Neo Microsoft Active Directory

Besides as a source connector, you can now use Microsoft Active Directory also as a target, to provision users. See:

New 2018-12-03
Identity Provisioning Platform Foundation Neo SAP HANA XS Advanced UAA Server

The Identity Provisioning UI now supports SAP HANA XS Advanced UAA Server, which you can use as a source, target or proxy system. See:

New 2018-12-03
Identity Provisioning Platform Foundation Neo Real-Time Provisioning

You can now immediately provision newly created users without manually running a job or wait for a scheduled one.

  • Currently, this scenario supports only SAP Cloud Platform Identity Authentication as a source system.
  • You can execute real-time provisioning to all target systems.

See: Real-Time Provisioning: Identity Authentication

Announcement 2018-12-03
Identity Provisioning Platform Foundation Neo Destinations When you create a new system or edit an existing one, you can now add destinations on both subaccount and subscription level. To learn how, see: Add System New 2018-12-03
Identity Provisioning Platform Foundation Neo SAP Marketing Cloud (Beta)

The Identity Provisioning UI now supports SAP Marketing Cloud, which is based on SAP S/4HANA logic. You can use it as a source, target or proxy system in beta state. See:

New 2019-01-23
Identity Provisioning Platform Foundation Neo defaultValue

This JSON expression returns the default value of an attribute when no specific functions or conditions are set for this attribute.

See Transformation ExpressionsdefaultValue.

New 2019-01-23
Identity Provisioning Platform Foundation Neo Microsoft Active Directory

The Microsoft Active Directory target system can now write groups and group assignments. Also, you can use it as a proxy system as well. See:

Changed 2019-01-23
Identity Provisioning Platform Foundation Neo SAP Cloud Platform Java/HTML5 Apps

The SAP Cloud Platform proxy system can now read additional group attributes, such as application roles and IdP-defined group mappings.

See: SAP Cloud Platform Java/HTML5 Apps (Proxy)

Changed 2019-01-23
Identity Provisioning Platform Foundation Neo SAP S/4HANA Cloud (Beta)

The SAP S/4HANA Cloud proxy systems can now retrieve both users and technical roles, which is important for hybrid scenarios.

See: SAP S/4HANA Cloud (Proxy)

Changed 2019-01-23
Identity Provisioning Platform Foundation Neo Microsoft Azure Active Directory

There is a new system property related to Microsoft Azure ADaad.group.member.attributes. It defines the attributes of a group member to be read during a Read job. The default attributes are type and id.

You can enter additional attributes to be read by the Identity Provisioning service. To learn how, see:

Changed 2019-01-23
Identity Provisioning Platform Foundation Neo LDAP Server

The following properties are now added for LDAP Server:

  • ldap.attribute.group.id
  • ldap.attribute.user.id

Find them in List of Properties.

Changed 2019-01-23
Identity Provisioning Platform Foundation Neo SAP Cloud Platform ABAP Environment (Beta)

The Identity Provisioning UI now supports SAP Cloud Platform ABAP Environment , which is based on SAP S/4HANA logic. You can use it as a source, target or proxy system in beta state. See:

New 2019-02-19
Identity Provisioning Platform Foundation Neo LDAP Server

Besides as a source connector, you can now use LDAP Server as a target and a proxy, as well. See:

New 2019-02-19
Identity Provisioning Platform Foundation Neo SAP Marketing Cloud (bundle)

The SAP Marketing Cloud license now includes Identity Provisioning and Identity Authentication. That means, you can request (free of charge) two bundle accounts for the Identity Provisioning service – one for testing and one for productive use. See:

Announcement 2019-02-19
Identity Provisioning Platform Foundation Neo SAP SuccessFactors

The source connector for SAP SuccessFactors now supports groups. That means, you can replicate user-to-groups assignments from SAP SuccessFactors to any target system.

See: SAP SuccessFactors

Changed 2019-03-27
Identity Provisioning Platform Foundation Neo SAP S/4HANA On-Prem (Beta)

The Identity Provisioning UI now provides connectors for on-premise SAP S/4HANA systems. You can add source, target and proxy connectors in beta state. See:

New 2019-04-25
Identity Provisioning Platform Foundation Neo SAP Integrated Business Planning Cloud (Beta)

The Identity Provisioning UI now supports SAP Integrated Business Planning Cloud, which is based on SAP S/4HANA logic. You can add source and target connectors in beta state. See:

New 2019-04-25
Identity Provisioning Platform Foundation Neo Microsoft Active Directory

You can now enable recursive reading of nested groups of Microsoft AD so that their user assignments can be properly resolved and populated in the target system. For this purpose, you can use the new system property ad.group.flatten.

See: Microsoft Active Directory

Changed 2019-04-25
Identity Provisioning Platform Foundation Neo Local Identity Directory

The Identity Provisioning can now filter users and groups when reading entities from the identity directory. To do this, you need to add the following properties – idds.user.filter and idds.group.filter. See:

Changed 2019-04-25
Identity Provisioning Platform Foundation Neo SAP Fieldglass

The Identity Provisioning service now supports SAP Fieldglass, which you can add and configure as source, target and proxy systems. See:

New 2019-07-12
Identity Provisioning Platform Foundation Neo SAP SuccessFactors

Besides as a source connector, you can now use SAP SuccessFactors as a target and a proxy, as well. See:

New 2019-07-12
Identity Provisioning Platform Foundation Neo JSON Functions

There are two new transformation functions, putIfAbsent and putIfPresent, which work on user attributes of type array (list of elements). These functions take care of setting default values for key-value pair elements if a key is missing or different than the default one.

These functions are now part of the default target and proxy write transformations of the Identity Authentication connectors. See:

New 2019-07-12
Identity Provisioning Platform Foundation Neo SAP S/4HANA – generally available

The following SAP S/4HANA based connectors are no longer in Beta state but are available for productive use:

  • SAP S/4HANA On-Premise – source, target, proxy
  • SAP S/4HANA Cloud – source, target, proxy
  • SAP Marketing Cloud – source, target, proxy
  • SAP Cloud Platform ABAP Environment – source, target, proxy
  • SAP Integrated Business Planning Cloud – source, target
Announcement 2019-07-12
Identity Provisioning Platform Foundation Neo SAP Cloud Platform Account Members

The Identity Provisioning service now provides connectors for SAP Cloud Platform Account Members. You can use it as source, target and proxy systems. To learn more, see:

New 2019-08-14
Identity Provisioning Platform Foundation Neo SAP Commissions

The Identity Provisioning service now provides connectors for SAP Commissions. You can use it as source, target and proxy systems. To learn more, see:

New 2019-08-14
Identity Provisioning Platform Foundation Neo SAP Integrated Business Planning Cloud

Besides as source and target connectors, you can now use SAP Integrated Business Planning Cloud as a proxy system as well. Also, a new scenario ID is now available – SAP_COM_0193 (SAP Cloud Identity Provisioning Integration). You can use it instead of the previous ones. See:

Changed 2019-08-14
Identity Provisioning Platform Foundation Neo SAP Cloud Platform ABAP Environment

Besides as source and target connectors, you can now use SAP Cloud Platform ABAP Environment as a proxy system as well. Also, a new scenario ID is now available – SAP_COM_0193 (SAP Cloud Identity Provisioning Integration). You can use it instead of the previous ones. See:

Changed 2019-08-14
Identity Provisioning Platform Foundation Neo SAP Marketing Cloud

A new scenario ID is now available – SAP_COM_0193 (SAP Cloud Identity Provisioning Integration). You can use it instead of the previous ones. See:

Announcement 2019-08-20
Identity Provisioning Platform Foundation Neo Sales Cloud – Analytics & AI

The Identity Provisioning service now provides connectors for Sales Cloud – Analytics & AI. You can use it as source, target and proxy systems. To learn more, see:

New 2019-09-24
Identity Provisioning Platform Foundation Neo Sales Cloud – Analytics & AI

The connectors for SAP Analytics Cloud are no more in beta state, thus you can use them productively. See:

Announcement 2019-09-24
Identity Provisioning Platform Foundation Neo Microsoft Azure Active Directory

The following Microsoft Azure AD properties are now added or changed:

  • (Deprecated) msgraph-filter – it filters entities by specific criteria.
  • (New) aad.user.filter – it filters users by specific criteria.
  • (New) aad.group.filter – it filters groups by specific criteria.
  • (New) aad.user.attributes – it defines the attributes of a user to be read.
  • (New) aad.group.attributes – it defines the attributes of a group to be read.
  • (New) aad.entities.top – it defines the number of entities to be read per page.

To learn more, see:

Changed 2019-09-24
Identity Provisioning Platform Foundation Neo SAP S/4HANA Cloud (bundle)

The SAP S/4HANA Cloud license now includes Identity Provisioning and Identity Authentication. That means, you can request free access to two bundle subaccounts for the Identity Provisioning service – one for testing and one for productive use. See:

Announcement 2019-11-08
Identity Provisioning Platform Foundation Neo SAP S/4HANA Cloud (systems)

A new scenario ID is now available – SAP_COM_0193 (SAP Cloud Identity Provisioning Integration). You can use it instead of the previous ones. See:

Changed 2019-11-08
Identity Provisioning Platform Foundation Neo Properties

A new property defines whether or not the Identity Provisioning service to overwrite user/group assignments that have existed in the target system before you start provisioning entities to that system. The property is applicable to SAP Application Server ABAP target systems.

See: List of Propertiesips.overwrite.existedbefore.assignments

New 2019-11-26
Identity Provisioning Platform Foundation Neo Troubleshooting

A new Guided Answers page is added. It describes an issue where multiple users have duplicate e-mails in the source system, and after the provisioning job, they are all created as a single user in the target system.

To learn how to solve this problem, see: Multiple Users from a Source System Are Created as One in the Target Information published on SAP site

New 2019-11-26