Hi All,

Am creatng users in manage v 8.7(not from Suite api)   using Rest API the MASUSERSYNC cron syncs user to the suite as a local by default saml is not getting enbaled as my system is saml authenticated and local authenticated both applies with authentication ( it shows under authentication tab of user management  in suite we are not using ldap)  but during user sync from manage to suite it only creates local user as default,Also I noticed MASISSUER attribute of MAXUSER of manage db  is appearing as local, Do i need to set parameter owner to default-saml in order to set the user authetication to SAML during syncing o user to suite besides the cron creates local user by default?

------------------------------
Vinod Kumar
------------------------------

Hi Vinod,

OWNER parameter shows how the user was provisioned. It says local if created manually (or via integration) in MAS. If created via SCIM it would say scim.
You can try setting MASISSUER to default-saml, but the best solution (for MAS 8.x) would be to create those users using MAS Core API, not directly in Manage.

Upgrading to 9.1 would be another option. In MAS 9.1 the API for creating users changed quite a lot and what You've described is easily doable: https://www.ibm.com/docs/en/masv-and-l/cd?topic=uma-managing-users-apis-in-maximo-application-suite-91

------------------------------
Witold Wierzchowski
Solution Architect
Cohesive Poland
------------------------------

Hi Vinod,

I support the recommendation of Witold, the best strategic move is to plan upgrading to MAS 9.1 (or 9.2 that is around the corner).

Short-term, if you prefer to sync users from Manage to MAS, that's easy. Repeat the following steps separately for local and SAML users.

1. Reset masissuer field in maxusers table in Manage database to make sure these users are processed by the cron task.
   To sync local users:

   update maxuser set masissuer=null where masissuer='local'

   -OR-
   To sync SAML users:

   update maxuser set masissuer=null where masissuer='saml'

2. Sync users using the cron task:

   1. Open Manage UI, go to Cron Task Setup application
   2. Find MASUSERSYNC cron task
   3. Set "ISSUER" to "saml" for SAML users or keep it blank for local users
   4. Enable "Active?" toggle, adjust schedule to run every minute, save cron task
   5. Click "Reload Request" action, select the cron task and click OK
3. Wait for users to get synced. It should happen within a minute. The MASUSERSYNC cron task will deactivate itself after execution so there is no need to change it.

------------------------------
Ivan Lagunov
Manager Technology - Europe
Naviam (formerly ZNAPZ)
------------------------------

Hi Ivan,

Thanks for reply,I followed short term approach given by you but am still unable to set the authentication to SAML against user who has already got assigned to the local authentication in suite.

------------------------------
Vinod Kumar
------------------------------

Original Message:
Sent: Wed June 03, 2026 04:22 AM
From: Ivan Lagunov
Subject: Rest api manage user sync to suite with aaml authentication

Hi Vinod,

I support the recommendation of Witold, the best strategic move is to plan upgrading to MAS 9.1 (or 9.2 that is around the corner).

Short-term, if you prefer to sync users from Manage to MAS, that's easy. Repeat the following steps separately for local and SAML users.

1. Reset masissuer field in maxusers table in Manage database to make sure these users are processed by the cron task.
   To sync local users:

   update maxuser set masissuer=null where masissuer='local'

   -OR-
   To sync SAML users:

   update maxuser set masissuer=null where masissuer='saml'

2. Sync users using the cron task:

   1. Open Manage UI, go to Cron Task Setup application
   2. Find MASUSERSYNC cron task
   3. Set "ISSUER" to "saml" for SAML users or keep it blank for local users
   4. Enable "Active?" toggle, adjust schedule to run every minute, save cron task
   5. Click "Reload Request" action, select the cron task and click OK
3. Wait for users to get synced. It should happen within a minute. The MASUSERSYNC cron task will deactivate itself after execution so there is no need to change it.

------------------------------
Ivan Lagunov
Manager Technology - Europe
Naviam (formerly ZNAPZ)
------------------------------

Hi Vinod,

I suggest you try the following:

• If it's a few users, just change them manually via MAS Administration UI.
• In case of many users, set masissuer=null for those in maximo database and set ISSUER to "saml" when triggering the MASUSERSYNC cron task.

Both options should help resolving that.

------------------------------
Ivan Lagunov
Manager Technology - Europe
Naviam (formerly ZNAPZ)
------------------------------

Original Message:
Sent: Thu June 04, 2026 05:16 AM
From: Vinod Kumar
Subject: Rest api manage user sync to suite with aaml authentication

Hi Ivan,

Thanks for reply,I followed short term approach given by you but am still unable to set the authentication to SAML against user who has already got assigned to the local authentication in suite.

------------------------------
Vinod Kumar
------------------------------


Original Message:
Sent: Wed June 03, 2026 04:22 AM
From: Ivan Lagunov
Subject: Rest api manage user sync to suite with aaml authentication

Hi Vinod,

I support the recommendation of Witold, the best strategic move is to plan upgrading to MAS 9.1 (or 9.2 that is around the corner).

Short-term, if you prefer to sync users from Manage to MAS, that's easy. Repeat the following steps separately for local and SAML users.

1. Reset masissuer field in maxusers table in Manage database to make sure these users are processed by the cron task.
   To sync local users:

   update maxuser set masissuer=null where masissuer='local'

   -OR-
   To sync SAML users:

   update maxuser set masissuer=null where masissuer='saml'

2. Sync users using the cron task:

   1. Open Manage UI, go to Cron Task Setup application
   2. Find MASUSERSYNC cron task
   3. Set "ISSUER" to "saml" for SAML users or keep it blank for local users
   4. Enable "Active?" toggle, adjust schedule to run every minute, save cron task
   5. Click "Reload Request" action, select the cron task and click OK
3. Wait for users to get synced. It should happen within a minute. The MASUSERSYNC cron task will deactivate itself after execution so there is no need to change it.

------------------------------
Ivan Lagunov
Manager Technology - Europe
Naviam (formerly ZNAPZ)
------------------------------