SAP - IAM

This Integration is part of the SAP-IAM Pack.

Supported versions

Supported Cortex XSOAR versions: 6.0.0 and later.

Integrate with SAP's services to execute get and disable operations for employee lifecycle processes.

Configure SAP - IAM on Cortex XSOAR

1. Navigate to Settings > Integrations > Servers & Services.

2. Search for SAP - IAM.

3. Click Add instance to create and configure a new integration instance.

   Parameter	Description	Required
   Base URL		True
   Username		True
   Password		True
   Allow disabling users	Determines whether users can be disabled using the SAP IAM integration	False
   Incoming Mapper		True
   Outgoing Mapper		True
   Trust any certificate (not secure)	Trust any certificate (not secure).	False
   Use system proxy settings	Use system proxy settings.	False

4. Click Test to validate the URLs, token, and connection.

Commands

You can execute these commands from the Cortex XSOAR CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.

iam-get-user

Retrieves a single user resource.

Base Command

iam-get-user

Input

Argument Name	Description	Required
user-profile	A User Profile indicator.	Required

Context Output

Path	Type	Description
IAM.Vendor.active	Boolean	When true, indicates that the employee's status is active in the third party integration.
IAM.Vendor.brand	String	Name of the integration.
IAM.Vendor.details	String	Provides the raw data from the third party integration.
IAM.Vendor.email	String	The employee's email address.
IAM.Vendor.errorCode	Number	HTTP error response code.
IAM.Vendor.errorMessage	String	Reason why the API failed.
IAM.Vendor.id	String	The employee's user ID in the app.
IAM.Vendor.instanceName	String	Name of the integration instance.
IAM.Vendor.success	Boolean	When true, indicates that the command was executed successfully.
IAM.Vendor.username	String	The employee's username in the app.

Command Example

!iam-get-user user-profile={"username": "john.doe@example.com"}

Human Readable Output

iam-disable-user

---

Disable an active user.

Base Command

iam-disable-user

Input

Argument Name	Description	Required
user-profile	A User Profile indicator.	Required

Context Output

Path	Type	Description
IAM.Vendor.active	Boolean	When true, indicates that the employee's status is active in the third party integration.
IAM.Vendor.brand	String	Name of the integration.
IAM.Vendor.details	string	Provides the raw data from the third party integration.
IAM.Vendor.email	String	The employee's email address.
IAM.Vendor.errorCode	Number	HTTP error response code.
IAM.Vendor.errorMessage	String	Reason why the API failed.
IAM.Vendor.id	String	The employee's user ID in the app.
IAM.Vendor.instanceName	string	Name of the integration instance.
IAM.Vendor.success	Boolean	When true, indicates that the command was executed successfully.
IAM.Vendor.username	String	The employee's username in the app.

Command Example

!iam-disable-user user-profile={"username": "john.doe@example.com"}