Human Capital Management Blogs by SAP
Get insider info on HCM solutions for core HR and payroll, time and attendance, talent management, employee experience management, and more in this SAP blog.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 

Configuring IAS for People Analytics when using your own 3rd Party IDP

JackNoone94
Product and Topic Expert
Product and Topic Expert
‎10-15-2020 12:39 PM
With the introduction of People Analytics Stories, one of the biggest changes to our SuccessFactors Customer base has been the need for the implementation of Identity Authentication Store (IAS). This is a move which has presented some challenges for our customer base as quite a lot of them have their own corporate IDP enabled. However, it is possible to use both & necessary to use IAS while using People Analytics Stories.

Why is it necessary to use IAS for People Analytics Stories?


People Analytics leverages an embedded version of SAP Analytics Cloud (SAC) as the technology to power the visualisations, whilst data processing is done in the SuccessFactors HANA system. This solution is seamlessly embedded so that end users using the solution are not aware that the SAP Analytics Cloud technology is being leveraged. However, there are some backend configurations required in order to allow user authentication to happen seamlessly between the various SAP technologies.

Stories in People Analytics require the use of IAS for user authentication between SuccessFactors & SAP Analytics Cloud.

Through SuccessFactors we connect to many applications like SAC embedded into Report Centre (People Analytics Stories) . So with this SSO settings we can login to IAS tenant account once and then we can directly access all the applications which are configured in it like Career Site Builder and People Analytics.

How-to Enable IAS in SuccessFactors?


SAP Cloud Identity Authentication comprises two components:

  • Identity Authentication Services (IAS) - used to authenticate/login users

  • Identity Provisioning Services (IPS) - used to sync users from the source (ex. SAP SuccessFactors) to the target (ex. IAS & SAC) in order for users to be authenticated and logged in.



For full guide on enabling IAS / IPS for People Analytics, please see the Customer Community post from our colleagues in Platform:

https://community.successfactors.com/t5/Platform-Resources-Blog/Migration-to-SAP-Cloud-Identity-Auth...

Important Configuration Checks in IAS for People Analytics Stories:


Post the upgrade to People Analytics Stories, customers are often faced with the Blank / Loading Screen issue. This is a common issue for those customers that are using their own 3rd Party Corporate IDP (ex. Azure). However, it is possible to combine the use of both your own 3rd Party IDP and IAS so that we can use People Analytics Stories and not run into the common blank / loading screen issue. Below are some of the configuration checks you need to consider before attempting to use People Analytics Report Stories:

Corporate IDP Issue (Forward all requests to Corporate IDP):



  • Problem : Using Corporate SSO customer is not able to load the SAC in Report Center but same is working for IAS based login.

  • Reason : All requests are getting redirected to the Corporate IDP. Even when you are trying to access the SAC in Report Centre, the request is getting redirected to Corporate IDP. But IDP for SAC is IAS.





  • Solution : Turn off the flag responsible for redirecting all the request to the Corporate IDP.


The Default Identity Provider is not the same for SAC and SuccessFactors applications:



  1. Log in IAS

  2. Go to Application & Resources

  3. Applications

  4. Select the SuccessFactors company ID

  5. Scroll down and go to Conditional Authentication

  6. Default Authenticating Identity Provider

  7. Set your IDP as the Default Identity Provider

  8. Repeat the same steps for SAC application


For companies using third Party Identity Provider as SSO:


Check if the user is able to create story without issue when logging in directly through IAS and facing issue while logging in via SSO.

Login to IAS -> Identity Provider -> Corporate Identity Providers -> Select the third Party IDP customer is using (there can be multiple IDPs set up here so make sure that you are selecting the one customer is using, check with customer if not sure)  -> Select Identity Federation (from right pane) -> Make sure that 1st option - Use Identity Authentication user store is ON .


Do not Make Changes to SAML 2.0 Configuration in SuccessFactors, IAS or SAC Tenant



 

Note: All the screenshots used in this blog are taken from Demo instance.

Other Useful Resources


2945740 - People Analytics Upgrade fails with error pointing that IAS is not configured on your inst...

2912865 - Blank/loading screen accessing Report Story

2937356 - HXM Suite Instance Refresh and known impacts and limitations with People Analytics Report ...

2954815 - Configuring IAS and IPS when two SuccessFactors instances are mapped to one IAS tenant - P...

2949729 - What information do I need to provide when opening an incident for People Analytics (Repor...

Thanks,

Jack Noone

People Analytics Product Support
1 Comment
Popular Blog Posts