SuccessFactors integration lets you pull in useful info like user notifications and PTO balances right into your intranet. It uses OAuth for secure authentication via SAP Cloud Identity Services and SuccessFactors.

Prerequisites

1. You have the Administrator Permissions > Manage Security > Manage SAML SSO Settings permission.
2. You have the Administrator Permissions > Manage Security > Manage Application Security Feature Settings permission.
3. You already have an SAP SuccessFactors HCM suite hybrid SAML/OIDC application set up in Identity Authentication.

Configuring SAP Cloud Identity Services

1. Log in to your SAP Cloud Identity Services tenant (e.g., https://tenantzxcvb.accounts.ondemand.com).

2. Navigate to the Applications section and click "New" to create an OpenID Connect application (or use an existing one).

3. Configure the values as outlined below

   1. Redirect URI (OpenID Connect Configuration > Redirect URIs) - https://{your-intranet-domain}/marketplace/successfactors/account/sign-in/oauth

      1. 

   2. Grant Types (OpenID Connect Configuration > Grant Types) - ensure the following Grant Types are enabled:
      1.

      

   3. Subject Name Identifier

      1. 

   4. Advanced Settings - set the Access Token Format is set to JSON Web Token.

      

   5. Dependency (Dependencies > APIs)

      1. Add the existing hybrid SAML/OIDC application as an API dependency and note down the name that you give it
      2. 
      3. Go to the target application (for example, SF_SAML_APP) and repeat the same process. Navigate to Dependencies > APIs, but this time, add the source OpenID Connect application (OIDCToken) as the API dependency.

   6. API Permission (Provided APIs > API Permissions Groups > Allow all APIs for principal propagation) - Enabled

      1. 

4. Make a note of the Client ID, Client Secret, Dependency Name, and URL - you'll need these for the integration setup.

Configuring SuccessFactors

1. Log in to your SuccessFactors instance (e.g., https://demo-eu10-sales.hr.cloud.sap/).
2. Go to Admin Center > Tools > Manage OAuth2 Client Applications and select the application used for SAML/OIDC application set up in Identity Authentication.
3. Make a note of the Application URL, Company ID - you'll need these for the intranet setup.
4. Go to Admin Center > Learning and make a note of the Learning host URL (for example, https://demo.lms.hr.cloud.sap/). You'll need this value for the intranet setup.

Configuring Interact Marketplace

1. From Application Settings > Control Panel > Marketplace, select SuccessFactors.

   

2. Specify the following from your SAP Cloud Identity Services and SuccessFactors setups:

   • Client ID
   • Client Secret
   • Authority (e.g. https://tenantzxcvb.accounts.ondemand.com)
   • Client URI
   • API URI
   • SAP SuccessFactors Company ID
   • Dependency Name
   • LMS URI

3. Click Save.

Troubleshooting

If you encounter unexpected errors, performance issues, or difficulty accessing specific features, please review the common solutions below.