[midPoint] SAP Cloud Identity Services connector?

[Chris Woods]

Hi Robin,

	IAS or IdDS is SCIM with some custom extensions from SAP. I am currently (unfortunately) no longer a midpoint customer, but have written an ICF connector in the past for IAS. 

	One major stumbling block that we had back then was the department field. It is not possible to just send any old string. The department must be one of the valid values that SAP has provided (there are ways round this, but it is a pain).

	SAP also has a couple of custom fields in its schema extension, such as mailVerified (this prevents SAP sending a welcome mail to your users, for example). 

IAS offers client-certificate or Bearer-Token based authentication - you just need to set up a technical user in your SAP admin console.

	At my current place of work I did the implementation (non-ICF framework) using this SCIM library: Releases · pingidentity/scim2 (https://github.com/pingidentity/scim2/releases)

	I probably can't share all the code, but maybe the info above can get you started.

	Cheers,

	Chris

	"Robin Gorris via midPoint" midpoint at lists.evolveum.com – 5. Juni 2026 um 10:50
	Dear community,

	Anyone willing to share their insights, pitfalls, lessons learned and/or source code of their custom developed SAP Cloud Identity Services connector?

	Many thanks in advance!
	Kind Regards,
	 (http://www.acen.eu/)

	Robin Gorris

	+32 (0)474 40 99 91

	robin.gorris at acen.eu (mailto:robin.gorris at acen.eu)
June 5, 2026 10:49 AM, "Robin Gorris via midPoint" <midpoint at lists.evolveum.com (mailto:midpoint at lists.evolveum.com?to=%22Robin%20Gorris%20via%20midPoint%22%20<midpoint at lists.evolveum.com>)> wrote:
	Dear community,

	Anyone willing to share their insights, pitfalls, lessons learned and/or source code of their custom developed SAP Cloud Identity Services connector?

	Many thanks in advance!
	Kind Regards,
	 (http://www.acen.eu/)

	Robin Gorris

	+32 (0)474 40 99 91

	robin.gorris at acen.eu (mailto:robin.gorris at acen.eu)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20260610/a24bc0ef/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image007.png
Type: image/png
Size: 46079 bytes
Desc: not available
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20260610/a24bc0ef/attachment-0001.png>