[midPoint] SAP Cloud Identity Services connector?

[Chris Woods]

Hi Robin,
 
IAS or IdDS is SCIM with some custom extensions from SAP. I am currently
(unfortunately) no longer a midpoint customer, but have written an ICF
connector in the past for IAS. 
 
One major stumbling block that we had back then was the department field.
It is not possible to just send any old string. The department must be one
of the valid values that SAP has provided (there are ways round this, but
it is a pain).
 
SAP also has a couple of custom fields in its schema extension, such as
mailVerified (this prevents SAP sending a welcome mail to your users, for
example).
 
At my current place of work I did the implementation using  this SCIM
library: Releases · pingidentity/scim2
 
I probably can't share all the code, but maybe the info above can get you
started. IAS offers client-certificate or Bearer-Token based authentication
- you just need to set up a technical user in your SAP admin console.
 
Cheers,
Chris
 
"Robin Gorris via midPoint" midpoint at lists.evolveum.com – 5. Juni 2026 um
10:50 

> Dear community,
>  
>  
>  
> Anyone willing to share their insights, pitfalls, lessons learned and/or
> source code of their custom developed SAP Cloud Identity Services
> connector?
>  
> Many thanks in advance!
>  
>  
>  
>
>   Kind Regards,
>  
>    
>  	Robin Gorris
>  
>  	+32 (0)474 40 99 91
>  
>  	robin.gorris at acen.eu
>  
>
>  
>  
>  
>  
>  
>  
>  
>  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20260610/ab1fef2f/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image007.png
Type: image/png
Size: 46079 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20260610/ab1fef2f/attachment-0001.png>