The OpenText Identity Governance Salesforce Fulfillment template provides a transformation policy that:
Executes a query for a single existing user and creates a new Salesforce User if needed
Assigns or revokes the following permission types: UserRole, Profile, PackageLicense, PermissionSetLicense, PermissionSet, and PermissionSetGroup
To assign some PermissionSet or PermissionSetGroup permissions, it might be necessary to assign an appropriate license first. We therefore recommend that you assign all licenses before you assign other permission types.
The default transformation policy also includes fulfillment attributes required for fulfillment operations. One required User attribute is ProfileId, which must contain the native ID value of a Profile permission. Since all Salesforce Users must have a Profile assignment at all times, it is your responsibility to provide a default ID that can be used for new Users or to reset a User whose profile has been removed by OpenText Identity Governance fulfillment actions. This attribute ID should replace the ID of default profile string in the transformation policy.
Depending on your operations, you might also need to specify additional Fulfillment Context attributes for userProfile and permissionProfile.