SuccessFactors integration lets you pull in useful info like user notifications and PTO balances right into your intranet. It uses OAuth for secure authentication via SAP Cloud Identity Services and SuccessFactors.

Prerequisites

1. You have the Administrator Permissions > Manage Security > Manage SAML SSO Settings permission.
2. You have the Administrator Permissions > Manage Security > Manage Application Security Feature Settings permission.
3. You already have an SAP SuccessFactors HCM suite hybrid SAML/OIDC application set up in Identity Authentication.

Configuring SAP Cloud Identity Services

1. Log in to your SAP Cloud Identity Services tenant (e.g., https://tenantzxcvb.accounts.ondemand.com).
2. Navigate to the Applications section and click "New" to create an OpenID Connect application (or use an existing one).
3. Configure the values as outlined below

   1. Redirect URI (OpenID Connect Configuration > Redirect URIs) - https://{your-intranet-domain}/marketplace/successfactors/account/sign-in/oauth

      1. 

   2. Grant Types (OpenID Connect Configuration > Grant Types) - ensure the following Grant Types are enabled:

      1. 
         

   3. Subject Name Identifier

      1. 
      
      

   4. Dependency (Dependencies > APIs)

      1. Add the existing hybrid SAML/OIDC application as an API dependency and note down the name that you give it
      2. 

   5. API Permission (Provided APIs > API Permissions Groups > Allow all APIs for principal propagation) - Enabled

      1. 
   
   
4. Make a note of the Client ID, Client Secret, Dependency Name, and URL - you'll need these for the integration setup.

❗️

Client Secret Security

Treat the Client Secret like a password. Store it securely and avoid sharing it unnecessarily.

Configuring SuccessFactors

1. Log in to your SuccessFactors instance (e.g., https://demo-eu10-sales.hr.cloud.sap/).
2. Go to Admin Center > Tools > Manage OAuth2 Client Applications and select the application used for SAML/OIDC application set up in Identity Authentication.
3. Make a note of the Application URL, Company ID, and API Key - you'll need these for the intranet setup.

❗️

API Key Access

Ensure the API Key has permissions to access user data and notifications to avoid issues with the integration.

Configuring Interact Marketplace

1. From Application Settings > Control Panel > Marketplace, select SuccessFactors.

   

2. Specify the following from your SAP Cloud Identity Services and SuccessFactors setups:

   • Client ID
   • Client Secret
   • Authority (e.g. https://tenantzxcvb.accounts.ondemand.com)
   • API URI
   • API Key
   • SAP SuccessFactors Company ID
   • Dependency Name

3. Click Save.

❗️

Editing Marketplace Configuration

Editing these settings will invalidate existing authentication tokens for all users, requiring them to re-authenticate to use the integration again. Any scope changes will apply to new tokens immediately.