Make UserID field editable in SAC

[VirajSaha]

Hello Experts,

I understand that in SAC User ID field is non editable. But it is quite common in our org to change email ID and hence users ID when employees transition from temporary to permanent role or change name altogether.

Wanted to know if there is any alternative to address this scenario, without deleting the user completely and creating new user.

I am sure this scenarios is quite commin in other places as well.

Thanks.

[DebjitSingha · Accepted solution]

Hello viraj_saha,

You can use custom filed (custom SAML User mapping option under choose an user attribute to map to IDP) during custom IDP setup. Then use your User ID field mapped on IDP attribute assertion side. Once you start using custom field you will see additional column under user menu. New custom column will be used for authentication against IDP and this field is editable as well.

Enabling a Custom SAML Identity Provider

Viewers/ readers - If you find above information helpful, feel free to up-vote (arrows on left side).

Debjit

[dvankempen]

For the interested reader, we have started to record a video tutorial series about the SAP Analytics Cloud user and team provisioning API

• https://blogs.sap.com/2021/09/25/sap-analytics-cloud-user-and-team-provisioning-api-hands-on-video-t...

[VirajSaha]

Thanks for sharing

[Matthew_Shaw]

Hello Viraj,

You're right the User ID is not changeable (it wouldn't be an id if it was!). You can update a users email address though via the SCIM API. You can use one of my sample scripts to perform this function. Script 201 will be ideal for this task, the script (a collection in Postman) reads a data file, and for this script the data file will look like this: (its a csv file)

file_userid,file_isconcurrent,file_givenname,file_familyname,file_displayname,file_email,file_managerid
MATTHEW1,false,Matthew,Shaw,Matthew Shaw 1,matthew999999@sap.com,
MATTHEW1,true,Matthew,Shaw,Matthew Shaw 1,matthew+100001@sap.com,

In the above sample data file you can see I'm updating a single user MATTHEW1 with different email address each time (and if the user is concurrent or not)

All the sample scripts come with a comprehensive user guide as well as a article, PPT, and webinar. You'll also find a demo video of the scripts in action.

Your starting point is my blog where you can access all the resources.

Other sample scripts (131, 132, 133, and 231, 232, 233) are ideal for those that using SAML SSO and mapping on an email address, as these scripts will assign a user id of your choice, rather than one derived from the email address. This might be particularly handy in your case.

If you have enabled SSO and mapping the user attribute on the email address AND you've enabled 'dynamic user creation', then when the cAsE of the email address changes you can easily end up with another user for the same user (as each user id will be identified by the different email addresses - and the cAsE of an email makes it different!). So you'll end up with another user but typically with a _1 at the end of the user id. If you follow my blog and article I have something in the works to resolve this problem, so stay tuned!

Hope this helps. Matthew