SAP Knowledge Base Article - Public

3017663 - Deleting the Inactive SF users from IAS via IPS provisioning job

Symptom

You need to automatically delete users from IAS if their corresponding user in Success Factors changed to "INACTIVE" state.

Environment

  • SAP Identity Authentication Services
  • SAP Identity Provisioning Services
  • SAP Success Factors

Cause

Users are not automatically removed because they were not provisioned via IPS provisioning job after adding property "ips.delete.existedbefore.entities = true" in target system.

Resolution

  1. Make sure you have the property "ips.delete.existedbefore.entities = true" in target system;
  2. Then, in the source system, change the property from status eq 'active' to status in 'active','inactive';
  3. Run the READ job;
  4. After the job finishes, change back the property in the SOURCE system from status in 'active','inactive' to status eq 'active';
  5. Run another READ job and the 'inactive' users should be automatically deleted from now on when running the IPS provisioning jobs.

Please note: The deletion activity is executed only in that case when the provisioning job is successful. In case the job fails, the delete operation will be roll-backed, and no users will be removed from the target. This feature was added by the IPS developers to avoid any errors.

See Also

Manage Deleted Entities

Keywords

IPS, automatically remove, SF, inactive, no longer part of the company, Identity Provisioning Services, Success Factors, Identity Authentication Services, IAS, ips.delete.existedbefore.entities, status eq 'active' , KBA , BC-IAM-IPS , Identity Provisioning Service (IPS) , How To

Product

SAP SuccessFactors HXM Core 2011