Skip to main content
All CollectionsOnboarding and Configuration Guides
SAP SF
SAP SF
Reco Product Management avatar
Written by Reco Product Management
Updated over 5 months ago

Perquisite:

  1. Admin user in IAS and SAP SuccessFactors.

Preparation

  1. In IAS, copy the X.509 certificate under IAS administration console > Applications & Resources > Tenant Settings > SAML 2.0 Configuration > Signing Certificates > Display > Certificate information:

Settings in SuccessFactors side

  1. Register an OAuth2 Client Application by following the Registering Your OAuth2 Client Application chapter and using the certificate previously copied in the X.509 Certificate field.
    ​(Optional) Additionally, If you want you can fill the User IDs field with the user mentioned in the Perquisite part.
    ​
    ​


    ​
    ​

  2. After clicking on Register, reopen the settings by clicking on View and copy the API key for later use:
    ​
    ​


    ​

Settings in IAS side

  1. Create a new OIDC application by following the Create OpenID Connect Application for Token Exchange chapter:
    ​
    ​

  2. Configure the OIDC application to allow password and token exchange by following the chapters below:

  3. Create secret for the OIDC application by following the Configure Secrets for API Authentication chapter. Copy Client ID and Client Secret for later use:
    ​

  4. Under Applications & Resources > Applications > Create, create a new application for SF with SAML 2.0 as Protocol Type;
    ​

  1. Under SAML 2.0 Configuration tab, set the Name field to any you wish and add the SF token endpoint (https://<SF API endpoint>/oauth/token):
    NOTE: To know your SF API endpoint, refer to List of SAP SuccessFactors API Servers chapter.
    NOTE: Do not use existing SF application because special settings are required.
    ​
    ​


    ​
    ​

  2. Under Subject Name Identifier tab, select Basic Configuration option and set the basic attribute to Login Name:
    ​

  3. Under Attributes tab, remove the "user_uuid" attribute and add the "api_key" attribute, setting its Source to Expression and Value to the API key previously copied:
    ​


    ​
    ​

  4. Under Provided APIs tab, switch on the "Allow all APIs for principal propagation" option:
    ​
    ​


    ​

  5. Under OIDC application > Application APIs > Dependencies, add a SF dependency as mentioned in step 6-9 of the Consuming APIs from Other Applications chapter and save it for later use:
    ​

How to connect?

  1. Go to the integrations screen

  2. Click on “add integration” button

  3. Search for SAP SuccessFactors

  4. Click on “add integration” button

  5. insert your admin credentials in the SAP Username and Password.

  6. Sign in to your SuccessFactors portal. Select your profile icon, then select Show Version Settings. You can view your company ID.

Screenshot of the profile icon with Show Version Settings selected.

Screenshot of the version settings pane.

7. Pick your SAP SuccessFactors site from: https://help.sap.com/docs/SAP_SUCCESSFACTORS_PLATFORM/d599f15995d348a1b45ba5603e2aba9b/af2b8d5437494b12be88fe374eba75b6.html
​
8. Copy your IAS site domain, for example:
​https://aegori22y.accounts.cloud.sap

9. IAS App Client Id from part 3 in Settings in IAS side.
​
10. IAS App Client Secret from part 3 in Settings in IAS side.
​
11. SAP SF Application API Key from part 2 in Settings in SuccessFactors side.
​
12. Please make sure that the admin you insert is admin in both IAS and SAP SuccessFactors environments + if you used the UserIDs filtering in the OAuth 2.0 app in Settings in SuccessFactors side part 2 , you also used the same one over there.
​
​

Did this answer your question?