The SAP SuccessFactors connector for Elimity Insights fetches users for an SAP SuccessFactors tenant so you can keep in control of your environment.

Follow the instructions below to set up the connector for your environment.

How it works

Elimity Insights periodically fetches users for an SAP SuccessFactors tenant.
Write Elimity Insights queries to review and monitor updates to the data, or leverage existing queries.
Configure these stored queries to take action when the Elimity Insights data changes.

Integration requirements

Setting up an SAP SuccessFactors source in Elimity Insights requires:

an SAP SuccessFactors account to create a dedicated user, permission role, permission group and OAuth client application, and
a user in Elimity Insights with the role Connector Admin or higher.

Integration instructions

The following sections will explain the different steps you'll need to take to set up the SAP SuccessFactors connector for Elimity Insights.

1. Setting up a dedicated user in SAP SuccessFactors

The SAP SuccessFactors connector for Elimity Insights authenticates as an OAuth client application bound to a user. We recommend creating a dedicated user to assign the minimal amount of permissions. Refer to the official documentation for instructions on how to create a new user in SAP SuccesFactors. Note down the newly created user's username.

2. Setting up a dedicated permission role in SAP SuccessFactors

We also recommend creating a dedicated permission role for the newly created user. This permission role should only grant the 'Employee Export' permission. The official documentation contains more information about creating a new permission role in SAP SuccessFactors.

3. Setting up a dedicated permission group in SAP SuccessFactors

To assign the newly created permission role to the newly created user, we recommend using a dedicated static permission group. Refer to the official documentation for instructions in how to create a new static permission group in SAP SuccessFactors.

4. Assigning the permission role in SAP SuccessFactors

Follow the instructions listed in the official documentation to assign the newly created permission role to the newly created permission group.

5. Setting up an OAuth client application in SAP SuccessFactors

Create a new OAuth client application as described in the official documentation. We recommend enabling the 'Bind to Users' option and entering the newly created user's username in the 'User IDs' field. For the 'X.509 Certificate' field, we recommend to generate your own certificate and private key; for example by using the following OpenSSL command:

openssl req -days 999 -keyout key.pem -newkey rsa -nodes -out cert.pem -subj '/CN=elimity-insights' -x509

Remember to strip out the beginning and ending lines from the certificate contents before pasting into the `X.509 Certificate` field. Securely store the private key you generated, you will need it to set up the new source in Elimity Insights. Also note down the newly created application's API key.

6. Setting up a source in Elimity Insights

In Elimity Insights you can now create a new SAP SuccessFactors source providing the following configuration:

Gateway URL: URL of the Elimity Insights SAP SuccessFactors gateway, SaaS customers can stick to the default of `https://sap-sf.gateways.elimity.com`. On-premise customers can refer to the knowledge base article about installing gateways for more information about self-hosted alternatives.
API key: API key you noted down in step 5.
API URL: URL of the API server for your SAP SuccessFactors tenant. Refer to the official documentation for a list all API servers; contact your system administrator if you're unsure about which API server applies for your tenant.
Company ID: your SAP SuccessFactors company identifier, refer to the official documentation for instructions on how to find this information.
User ID: username of the newly created user, which you noted down in step 1.
X.509 private key: private key you stored in step 5.