{"ref":"capability:identity-provisioning","page":"/capabilities/identity-provisioning","json":"/capabilities/identity-provisioning.json","generated":"2026-10-26","drafted_with_ai":true,"entity":{"id":"identity-provisioning","name":"Identity provisioning","domain":"security-and-compliance","ecosystems":["btp"],"universal":false,"description":"Getting users, groups and role assignments into every system that needs them, and out again when a person leaves, through provisioning jobs or SCIM APIs. [Authentication](capability:authentication) answers who is calling one request; provisioning decides whether the user exists in that system at all.","short":"Getting users, groups and roles into every system that needs them","core_coverage":{"state":"core-only","assessed_at":"2026-09-14","what_core_does":"Identity Provisioning in [Cloud Identity Services](artifact:btp-cloud-identity-services) reads identities from a user store such as Microsoft Entra ID, replicates them into the Identity Directory through provisioning jobs and on to SAP cloud systems. The directory's SCIM 2.0 API manages the same users and groups from code.","where_it_stops":"At the user record and the groups carried into each target. What a group grants once it arrives is [authorization](capability:authorization), defined inside each system.","note":"[SAP Cloud Identity Services - Identity Provisioning](artifact:btp-identity-provisioning) is the service that runs the jobs. SAP-samples repositories show it with importable job configurations and API collections for [SAP Analytics Cloud](artifact:btp-analytics-cloud) and SAP Concur, and a workshop; samples show the service and are not presence.","sources":[{"url":"https://github.com/SAP-docs/btp-cloud-identity-services/blob/main/docs/centralized-provisioning-with-identity-directory-9d0235c.md","title":"SAP Cloud Identity Services documentation — Centralized Provisioning with Identity Directory","checked":"2026-09-14","quote":"the Identity Provisioning service reads identities from the customer's user store, like Microsoft Entra ID, and replicates them to the directory."},{"url":"https://github.com/SAP-docs/btp-cloud-identity-services/blob/main/docs/Development/identity-provisioning-api-4433374.md","title":"SAP Cloud Identity Services documentation — Identity Provisioning API","checked":"2026-09-14","quote":"Manage identity lifecycle processes for cloud and on-premise systems."}]},"drafted_with_ai":true,"history":[{"date":"2026-10-26","field":"core_coverage.note","from":"Every repository behind this entry is from SAP-samples: a workshop, importable job configurations and API collections for SAP Analytics Cloud and SAP Concur. Samples show the service and are not counted as providers.","to":"Names the Identity Provisioning service as the one that runs the jobs; SAP-samples repositories show it with job configurations and API collections; samples are not presence.","reason":"Reassessed against the graph (check:capabilities): the note claimed every repository behind the entry is a sample, which stopped being true when the SAP-official service entry arrived. State stays core-only."}]},"sap_delivery":{"door":"btp","all":{"built_in":[],"documented_pattern":[],"announced":[],"packages":[{"ref":"artifact:btp-identity-provisioning","name":"SAP Cloud Identity Services - Identity Provisioning","json":"/artifacts/btp-identity-provisioning.json"}]},"by_flavor":{}},"edges":{"use_cases":[],"shared_tasks":[],"related_tasks":[],"options":[{"ref":"artifact:btp-identity-provisioning","name":"SAP Cloud Identity Services - Identity Provisioning","json":"/artifacts/btp-identity-provisioning.json","ecosystem":"btp","origin_ring":"sap-official"}],"samples":[{"ref":"artifact:sap-samples-analytics-cloud-scim-api-samples","name":"analytics-cloud-scim-api-samples","json":"/artifacts/sap-samples-analytics-cloud-scim-api-samples.json"},{"ref":"artifact:sap-samples-sap-concur-user-provisioning-service-apis","name":"sap-concur-user-provisioning-service-apis","json":"/artifacts/sap-samples-sap-concur-user-provisioning-service-apis.json"},{"ref":"artifact:sap-samples-concur-joule-ips-jobs","name":"SAP-samples/concur-joule-ips-jobs","json":"/artifacts/sap-samples-concur-joule-ips-jobs.json"},{"ref":"artifact:sap-samples-teched2025-xp261","name":"teched2025-XP261","json":"/artifacts/sap-samples-teched2025-xp261.json"}],"explained_by":[{"ref":"content:ac-transforming-enterprise-data-strategy-with-sap-business-data-cloud","name":"Transforming Enterprise Data Strategy with SAP Business Data Cloud","json":"/content/ac-transforming-enterprise-data-strategy-with-sap-business-data-cloud.json"},{"ref":"content:automating-user-offboarding-in-sap-btp-across-multiple-subaccounts-with-powershe","name":"Automating User Offboarding in SAP BTP Across Multiple Subaccounts with PowerShell & BTP CLI","json":"/content/automating-user-offboarding-in-sap-btp-across-multiple-subaccounts-with-powershe.json"},{"ref":"content:ips-provisioning-to-abap-cloud-developer-trial","name":"IPS provisioning to ABAP Cloud Developer Trial","json":"/content/ips-provisioning-to-abap-cloud-developer-trial.json"},{"ref":"content:introducing-scim-api-for-sap-sales-service-cloud-v2-seamless-user-sync-between-s","name":"🚀 Introducing SCIM API for SAP Sales & Service Cloud v2: Seamless User Sync between Source & Target","json":"/content/introducing-scim-api-for-sap-sales-service-cloud-v2-seamless-user-sync-between-s.json"},{"ref":"content:explaining-sap-joule-for-hr-business-users-functional-consultants","name":"Explaining SAP Joule for HR Business Users & Functional Consultants.","json":"/content/explaining-sap-joule-for-hr-business-users-functional-consultants.json"},{"ref":"content:why-sap-cloud-identity-matters-for-sap-task-center-it-s-about-trust-and-global-u","name":"Why SAP Cloud Identity Matters for SAP Task Center: It’s About Trust and Global User ID","json":"/content/why-sap-cloud-identity-matters-for-sap-task-center-it-s-about-trust-and-global-u.json"},{"ref":"content:how-to-handle-usernames-global-user-ids-and-external-ids-in-your-landscape","name":"How to handle “usernames”, “Global User IDs” and “external IDs” in your landscape?","json":"/content/how-to-handle-usernames-global-user-ids-and-external-ids-in-your-landscape.json"},{"ref":"content:teched-2026-xp100","name":"Evolving the identity lifecycle for an AI-first future","json":"/content/teched-2026-xp100.json"},{"ref":"content:teched-2026-xp104","name":"Future-ready access governance from SAP: Strategy and innovation","json":"/content/teched-2026-xp104.json"},{"ref":"content:teched-2026-xp263","name":"Identity lifecycle and governance with SAP services and Microsoft Entra","json":"/content/teched-2026-xp263.json"}],"normative_context":[]}}