Resolution
Below is a list of detailed changes made to the SAP HR Connector, starting with the identityIQ 5.1 release.
Starting with Access Governance Suite 5.1, the SAPHR code was refactored to avoid calling BAPI_PERSDATA_GETDETAILEDLIST. It now calls another BAPI called BAPI_PERSDATA_GETDETAIL which provides a more granular way to choose which attributes are returned.
Top level flags were also added to allow one to disable most of the function modules by type of data they are returning. This allows customers to turn off any of the BAPI calls, with the
exception of getting the employeeId list.
There are five main attribute categories used by the SAPHR connector out of the box.
- Organization Information
Calls BAPI_EMPLOYEE_GETDATA only enables and reads ORG_ASSIGNMENT table
To disable this section add, the following xml to the SAP HR application:
<entry key="disableOrgData" value="true"/> - Address Information
Calls BAPI_ADDRESSEMPGETDETAILEDLIST reads ADDRESS table
To disable this section add, the following xml to the SAP HR application:
<entry key="disableAddressData" value="true"/> - Communications Data
Calls BAPI_EMPLCOMM_GETDETAILEDLIST reads COMMUNICATION table
To disable this section add, the following xml to the SAP HR application:
<entry key="disableCommData" value="true"/> - Personal Data
Calls BAPI_PERSDATA_GETDETAIL but selectively allows which attributes are enabled and each field that is returned by editing the schema.
To disable this section add, the following xml to the SAP HR application:
<entry key="disablePersonalData" value="true"/>
Otherwise, you can just remove individual attributes from the schema. For example, if you don't want "Id Number" to be returned you can just remove that specific attribute and it won't be sent over the wire OR put on the new objects. - Lookup and Adorning of Supervisor position, org and job descriptions, position text
To disable these look-ups remove the following schema attributes:
Supervisor remove 'Supervisor'
Org Text remove 'Organization Description'
Job Description remove 'Job Description'
Position Text remove 'Position Description'