Configure the SAP Identity Provisioning Service (IPS) Proxy System

Use one of the following options to configure the proxy system. It is recommended to use the import file template.

Note
Create separate IPS Proxy systems for each of the Buyer Realms. These proxies are required to be used later to setup the connection for target realms.

  1. Sign in to the SAP Cloud Identity Services admin console. Go to Identity Provisioning > Proxy Settings, and select the +Add button.

  2. Download the provided template, edit the placeholders with the appropriate property values, and Save the changes.

  3. Select Import File, and browse to the downloaded file.

  1. Sign in to the SAP Cloud Identity Services admin console. Go to Identity Provisioning > Proxy Settings, and select the +Add button.

  2. Enter the following values on the configuration details page.

    • Type: SAP Ariba

    • System Name: User defined name

    • Description: User defined description

  3. Select Save.

  4. Set the read transform to exchange data with the target system in the SCIM2 compliant format.

    1. Select Read Transformation, and switch to the JSON editor.

    2. Select Edit link, and replace the transformation content with the provided data.

    3. Select Save.

  1. Set the write transform to exchange data with the target system in the SCIM2 compliant format.

    1. Select Write Transformation, and switch to the JSON editor.

    2. Select Edit link, and replace the transformation content with the provided data.

    3. Select Save.

  1. Select Properties. It is mandatory to set properties to configure the proxy connection to target systems.

  1. The following table contains the properties for the SAP Ariba system. Enter the values, and then select Save.

Property Name Description and Value

Type

Enter HTTP

URL

Enter the SCIM API URL for your SAP Ariba application (refer to Configure the OAuth Client and APIs).

ProxyType

Enter Internet

Authentication

Enter BasicAuthentication

User

Enter the OAuth Client ID (refer to Configure the OAuth Client and APIs).

Password

(Credential) Enter the OAuthClient Secret (refer to Configure the OAuth Client and APIs).

OAuth2TokenServiceURL

Enter the OAuth 2.0 Token Service URL (refer to Configure the OAuth Client and APIs).

ariba.applications.api.key

(Credential) Enter your application key (refer to Configure the OAuth Client and APIs).

ariba.applications.realm.id

Enter your AN-ID (refer to Configure the OAuth Client and APIs).

(Optional) ariba.applications.group.flatten

This property allows or forbids reading nested groups (group structures) from SAP Ariba applications. If enabled (true), group members of type group will be ignored during read in order not to be provisioned to target systems that do not support nested groups. Thus, set it to false only if you are sure that the target system supports nested groups.

  • Default value: false

  • Predefined value (during system creation): true

Important
Set it to false only if you are sure that the target system supports nested groups.

ariba.applications.support.patch.operation

This property is automatically added to the system. Default value: true