<!DOCTYPE html>
<html><meta http-equiv="content-type" content="text/html; charset=UTF-8"><body>
<p style="margin:0;">Hi Robin,</p><p style="margin:0;"> </p><p style="margin:0;">IAS or IdDS is SCIM with some custom extensions from SAP. I am currently (unfortunately) no longer a midpoint customer, but have written an ICF connector in the past for IAS. </p><p style="margin:0;"> </p><p style="margin:0;">One major stumbling block that we had back then was the department field. It is not possible to just send any old string. The department must be one of the valid values that SAP has provided (there are ways round this, but it is a pain).</p><p style="margin:0;"> </p><p style="margin:0;">SAP also has a couple of custom fields in its schema extension, such as mailVerified (this prevents SAP sending a welcome mail to your users, for example).</p><p style="margin:0;"> </p><p style="margin:0;">At my current place of work I did the implementation using this SCIM library: <a href="https://github.com/pingidentity/scim2/releases">Releases · pingidentity/scim2</a></p><p style="margin:0;"> </p><p style="margin:0;">I probably can't share all the code, but maybe the info above can get you started. IAS offers client-certificate or Bearer-Token based authentication - you just need to set up a technical user in your SAP admin console.</p><p style="margin:0;"> </p><p style="margin:0;">Cheers,</p><p style="margin:0;">Chris</p><p style="margin:0;"> </p><div class="quote"><p style="margin:0;">"Robin Gorris via midPoint" midpoint@lists.evolveum.com – 5. Juni 2026 um 10:50<br> </p><blockquote><div><p style="margin:0;">Dear community,</p><p style="margin:0;"> </p><p style="margin:0;"> </p><p style="margin:0;"> </p><p style="margin:0;">Anyone willing to share their insights, pitfalls, lessons learned and/or source code of their custom developed SAP Cloud Identity Services connector?</p><p style="margin:0;"> </p><p style="margin:0;">Many thanks in advance!</p><p style="margin:0;"> </p><p style="margin:0;"> </p><p style="margin:0;"> </p><table><tbody><tr><td><table><tbody><tr><td><p style="margin:0;"><span style="color:#000162;">Kind Regards,</span></p><p style="margin:0;"> </p></td></tr></tbody></table></td></tr><tr><td><p style="margin:0;"><a href="http://www.acen.eu/"><span style="color:#467886;"><span><img class="image_resized" style="aspect-ratio:60/30;height:0.3166in;width:0.625in;" src="cid:image007.png@01DCF4D7.50819D90" alt="cid:image007.png@01DCF4D7.50819D90" width="60" height="30"></span></span></a></p><p style="margin:0;"> </p></td><td><p style="margin:0;text-align:center;"><span style="color:#000162;"><strong>Robin Gorris</strong></span></p><p style="margin:0;"> </p></td><td><p style="margin:0;text-align:center;"><span style="color:#000162;">+32 (0)474 40 99 91</span></p><p style="margin:0;"> </p></td><td><p style="margin:0;text-align:center;"><a href="mailto:robin.gorris@acen.eu"><span style="color:#0563C1;">robin.gorris@acen.eu</span></a></p><p style="margin:0;"> </p></td></tr></tbody></table><p style="margin:0;"> </p><p style="margin:0;"> </p><p style="margin:0;"> </p><p style="margin:0;"> </p><p style="margin:0;"> </p><p style="margin:0;"> </p><p style="margin:0;"> </p><p style="margin:0;"> </p></div></blockquote></div>
</body></html>