Skip to Content
Technical Articles
Author's profile photo Yogananda Muthaiah

SAP Commissions – SCIM v3 APIs for IPS (Top-Down & Bottom-up Sync)

Dear All,

In this article, you will come to know about SCIM v3 API’s are enabled for User Provisioning to sync the Users between SAP Commissions to IAS and IAS to SAP Commissions (vice versa)

What is Bottom-Up Sync?

A Commission Admin will create a user (Participant through ODI/CDL file) & Admin users directly in the application (SAP Commissions) and IPS will trigger the job and those users are moved to SAP IAS (Identity Authentication) are called Bottom-up

What is Top-Down Sync?

An IAS Admin makes any changes in the User Management(both Admin & Participant) and newly created user (Admin only) will be synced up automatically through IPS using SCIM v3 API are called Top-Down 

Usually, some clients try to automate the user provisioning from Azure AD/Workday/Successfactors.. to IAS and then to different applications (Ex: SAP Commissions…) In this way, users are synced in real-time…

For example, An user leaves the company, immediately the user (he/she) won’t be able to access the application and as well when New user is onboarded to the company, he/she would be getting access to the application quickly.

Another use case:  IAS Admin can manage a user seamlessly for all the Applications having one unique userID for access across other products as well (SAP C4C, Successfactors, S4 HANA Cloud, SAP Commerce, SAP CPQ..etc )

Note The best recommendation is to enable Top-Down and Bottom-up user Sync simultaneously

SAP Commissions SCIM API Documentation

v2 SCIM Documentation

v3 SCIM Documentation in SAP API Business Hub

SAP Commissions v3 API’s Endpoint for debugging

 

### SCIM v3 Groups
GET https://<tenantid>.callidusondemand.com/CallidusPortal/services/v3/scim/Groups
Content-Type: application/json
Authorization: Basic @{{authtoken}}



### SCIM v3 Users for All (Participant and Admins)
GET https://<tenantid>.callidusondemand.com/CallidusPortal/services/v3/scim/Users
Content-Type: application/json
Authorization: Basic @{{authtoken}}


### SCIM v3 To find out only Admins
GET https://<tenantid>.callidusondemand.com/TrueComp-SaaS/services/v3/scim/Users
Content-Type: application/json
Authorization: Basic @{{authtoken}}

 

SAP Commissions Global Settings

This change is subjected to make by an Administrator to enable v3 SCIM APIs for SAP IPS (Identity Provisioning Service) Job to trigger.

SAP Identity Provisioning Service (IPS) 

Bottom-Up Sync Configuration: By default, SAP Commissions provided IPS tenants are pre-configured.

Top-Down Sync Configuration: IPS Admin will configure based on the business requirement to enable user sync provisioning.

References

https://blogs.sap.com/2020/10/26/sap-commissions-must-know-about-ias-ips-other-apps/

https://launchpad.support.sap.com/#/notes/2999357

 

Assigned tags

      Be the first to leave a comment
      You must be Logged on to comment or reply to a post.