Aggregation of SuccessFactors SaaS Groups

By default, the following account and entitlement schema attributes are present for new sources. For existing sources, schema attributes may be missing and you must add them manually. For more information, refer to Adding Attributes to a Source Schema.

Account Schema Attributes:

  • Groups

  • Roles

Attributes for the Group Entitlement Object:

  • GroupName

  • GroupID

  • GroupType

  • CreatedBy

  • LastModifiedDate

  • IsStaticGroup

  • Roles

Attributes for the Role Entitlement Object:

  • RoleName

  • RoleID

  • Groups

Additional Attributes Configuration

You can configure the values of the following additional attributes using the REST API:

POST <url>/api/source/update/<sourceID>

Where:

  • <url> – The URL for your Identity Security Cloud instance

  • <sourceID> – The Source ID (number) obtained through the UI

Note
For more information on SailPoint's REST APIs, refer to Best Practices: REST API Authentication and REST API - Update Source (Partial) in the SailPoint Developer Community.

In the body of the POST, use form-data for different attributes, as follows:

This attribute determines the number of requests required to get role details for multiple users using a single SuccessFactors OData batch operation.

  • Key – connector_batchSizeUserRole

  • Value – For example, you can use 20. The maximum value is 100.

This attribute determines the number of requests required to get group details for multiple users using a single SuccessFactors OData batch operation.

  • Key – connector_batchSizeUserGroup

  • Value – For example, you can use 10. The maximum value is 100.

Set this attribute value to true to aggregate the workflow group in the entitlement aggregation process.

  • Key – connector_includeWorkflowGroups

  • Value – true

Set this attribute value as true to aggregate the inactive roles assigned to a group.

  • Key – connector_includeInactiveGroupsOfRole

  • Value – true