1.4 Global Configuration Values (GCVs)

After configuring the SCIM driver, you can set the Global Configuration Values (GCVs) as required. These settings must be configured properly for the driver to start and function correctly.

The SCIM driver for SAP Cloud includes predefined GCVs as shown below:

  • Validate Resource with Required Attributes: This field validates resources and the required attributes that are available in the schema. Select as false.

  • Connecting to SAP Cloud: Set this to true if you are connecting to SAP Cloud. Defaults to false.

  • Connected Application’s Name: Enter the name of the connected application, such as SAP Cloud. This default name appears in the entitlements. For example, Account for scim system: SAP Cloud.

  • SCIM 2.0 URL: Auto-populates the SCIM 2.0 URL value as provided while creating the driver object.

For more information on GCVs, see When and How to Use Global Configuration Values in NetIQ Identity Manager Driver Administration Guide.

1.4.1 Configuring Entitlements for SCIM Driver

You can configure the driver with entitlements enabled or disabled. To configure entitlements, perform the following steps:

  1. In the modeler window, right-click the driver icon or the driver line, then select Properties.

  2. Click GCVs > Entitlements and review the Entitlement Configuration settings:

    NOTE:These settings are only displayed if you have installed the SCIM Entitlements package. The entitlements are supported based on the connected application’s capabilities.

    • Enable User Account Entitlement: This field enables the driver to manage user account permissions using the User Account entitlement. Ensure that the value of this parameter is set to true. By default, the value is set to False. Specify the values as shown in the following table to set User Account Entitlements.

      Field

      Description/Value

      Sync Login Disabled attribute

      This field is used to control the Login Disabled attribute for a particular user:

      Select:

      • Yes, to sync the changes made to the Login Disabled attribute in the Identity Manager, to SAP Cloud.

      • No, to restricts syncing the changes of Login Disabled attribute in the Identity Manager to SAP Cloud.

      Action on Account Revocation

      Select the action to be performed in SAP Cloud when the user account entitlement is revoked.

      The available options are:

      • Disable Account

      • Delete Account

    • Enable Group Entitlement: This option enables the driver to manage group memberships using the Group entitlement. Ensure that the value of this parameter is set to true. By default, the value is set to false.

      IMPORTANT:If the values for Enable User Account Entitlement and Enable Group Entitlement parameter is set to False, the user and group membership synchronization will be managed using the non-entitlement configuration method.

  3. Click Apply.

  4. Click OK when finished.