Integrate with SAP Fieldglass

Overview: Integrate Oracle Access Governance with SAP Fieldglass

Integration between Oracle Access Governance and SAP Fieldglass streamlines user lifecycle management of SAP Fieldglass users, ensuring seamless access control and compliance through automated provisioning and enforcement of the principle of least privilege through access reviews of accounts and groups.

SAP Fieldglass Integration Architecture Overview

You can perform full data load for accounts in SAP Fieldglass. Once a connection is established, you can perform provisioning, remediation, and management tasks for user accounts, and groups.

SAP Fieldglass integration supports management of accounts, including the following use cases.

Centralized User Provisioning:
Perform SAP Fieldglass account updates. Create, Update, and Delete accounts from within Oracle Access Governance. See Manage Account Lifecycle with Service Desk Executive Support.
Access Control:
Assign or revoke SAP Fieldglass groups from Oracle Access Governance.

Automatically or manually revoke access for users whose access is no longer valid, based on organizational or lifecycle changes. See Automated Provisioning for Joiners, Movers, and Leavers (JML) Process.
Segregation of Duties:
Enforce segregation of duties (SoD) by implementing metadata-driven rules to define eligibility criteria for granting access bundle permissions, using Oracle Access Governance access guardrails and Identity collection. See Access Guardrails - Enforce Preventive Access Control Conditions
Self-Service Profile Management:
Enable users to view and update their own profile attributes using Oracle Access Governance, with updates reflected in SAP Fieldglass. See View Access Details and Manage Account
Access Reviews and Attestation:
Periodically review and certify SAP Fieldglass user access to ensure appropriate entitlements. See Access Reviews Overview.
Audit and Compliance Support:
Track and maintain full audit trail and recent changes of all user and access-related changes to meet regulatory and internal compliance requirements. See Audit Trail: Monitoring Access Decisions.

Functional Overview: Use Cases Supported for SAP Fieldglass Integration

SAP Fieldglass integration supports management of SAP Fieldglass accounts, and groups from Oracle Access Governance:

Configure SAP Fieldglass Orchestrated System

See Configure Integration Between Oracle Access Governance and SAP Fieldglass.
Match Identity and Account Attributes using Correlation Rules

Review or configure matching rules to match the identity and account data and build a composite identity profile. To view the default matching rule for this orchestrated system, see Default Matching Rules.
Load Data

Ingest accounts, and groups that can be managed by Oracle Access Governance.
Create Account

Ingest account data from your orchestrated system or request an access for an identity. This allows you to provision entitlements.
Update Account

Update account details by assigning or removing permissions. This allows you to update entitlements.
Delete Account

Delete an account associated with an identity. This will remove access for the account.