Skip to Content

How to setup SuccessFactors Adapter with SAP Data Services

January 5, 2015 | 6,112 Views |
 adaptersap data servicessuccessfactors
Follow

Within SAP, we created a SAP Data Services Job to extract some recruiting data from SuccessFactors in order to store those data on an internal HANA system for reporting.

Since SAP Data Services 4.1, a specific adapter is available to connect with SuccessFactors. An adpater is a java service running in the background of Data Services which is able to deal with Cloud Web services. I would like to share with you some of my findings with SAP Data Services 4.2 and SFSF adapter.

Prerequisite

Please identify which Cloud instance of SuccessFactors you will use. It can be done via this URL:

https://sfapitoolsflms.hana.ondemand.com/SFIntegration/sfapitools.jsp


06-01-2015 09-39-13.gif

Please validate with this URL that you are able to open the connection from the SAP Data Services Job Server. To achieve this you need to ask SuccessFactors administrator the following things:

  • provide an API user with proper authorization and password
  • provide the Company ID
  • Setup the data services IP address into the whitelist of SuccessFactors otherwise you will face this kind of error message

22-12-2014 15-02-22.gif

Adapter – Proxy Setup:

As your SAP Data Services is running in your internal network, please pay attention to the proxy definition by adding the following parameters in the adapter web interface setup:

22-12-2014 13-57-08.gif

Parameters to be added : -Dhttps.proxyHost=<proxy> -Dhttps.proxyPort=<8080>

Please also activate the Trace mode to True to have a view on trace and errors.

Certificate setup

If you receive this error below, you need to upload the right certificates in the keystore used by the adapter in order to enable the SSL connection (There are sometime mistakes in some documentations.)

22-12-2014 13-55-26.gif

Please perform the steps below:

Obtain 3 SFSF certificates

Below are the steps to export all certificates from the certificate path using FireFox.

1. Click on the lock

/wp-content/uploads/2015/01/certificate_01_613216.png

Click ‘More Information’

/wp-content/uploads/2015/01/certificate_02_613232.png

3. Click ‘View Certificate’

/wp-content/uploads/2015/01/certificate_03_613233.png

4. Click ‘Details’

/wp-content/uploads/2015/01/certificate_04_613234.png

5. The ‘Certificate Hierarchy’ show 3 certificates – it is really important to get those 3 certificates to enable the SSL connection.

  • The root certificate is ‘VeriSign Class 3 Public Primary Certification Authority – G5’.
  • The child certificate is ‘VeriSign Class 3 Secure Server CA – G3’.
  • The grandchild certificate is ‘*.successfactors.eu’.

/wp-content/uploads/2015/01/certificate_05_613235.png

6. To export a certificate, click to highlight the certificate. Below shows how to export the root certificate.

/wp-content/uploads/2015/01/certificate_06_613236.png

7. Click ‘Export’, to save the certificate file.

/wp-content/uploads/2015/01/certificate_07_613237.png

Upload those 3 certificates in the right keystore

a) Open a Dos command and Type set JAVA_HOME=%LINK_DIR%\ext and press Enter.

b) Type set path=%LINK_DIR%\ext\jre\bin;%path% and press Enter.

c) Type cd %link_dir%\ssl\trusted_certs and press Enter.

d) Type notepad sslks.key to view the keystore password.

e) Type keytool -import -alias verisign_class3g5ca -file “need full path to VeriSignClass3PublicPrimaryCertificationAuthority-G5.crt” -keystore jssecacerts and press Enter.

When ask ‘Enter keystore password:’, copy the password in step (d).

When ask ‘Trust this certificate? [no]:’, type yes

f) Type keytool -import -alias verisign_g3 -file “need full path to VeriSignClass3SecureServerCA-G3.crt” -keystore jssecacerts and press Enter.

When ask ‘Enter keystore password:’, copy the password in step (d).

When ask ‘Trust this certificate? [no]:’, type yes

g) Type keytool -import -alias sfsf_eu -file “need full path to sap.successfactors.eu.crt” -keystore jssecacerts and press Enter.

When ask ‘Enter keystore password:’, copy the password in step (d).

When ask ‘Trust this certificate? [no]:’, type yes

h) Restart the adapter

Nota Bene : In some technical documentation it is mentioned %LINK_DIR%\ext\jre\lib\security and to have the connection working properly we work here with \ssl\trusted_certs. In the technical documentation they mentioned the keystore cacerts and here we use jssecacerts.

Reference blogs:

I hope those tips will help you if you need to enable the communication between SuccessFactors and SAP Data Services (on premise).

Other possibilities are available with SAP PI and >Hana Cloud Integration which are presented in the reference blogs.

I will continue to update this blog with other findings later in 2015.

Best regards

Thomas

To report this post you need to login first.

15 Comments

You must be Logged on to comment or reply to a post.

  1. Former Member

    I am planning to use BODS integrationlayer to extract data into BW from SF. Do you see this as a good chocie. Please suggest any other options.

    Thanks,

    Gopikrishna

    (0) 
    3. Thomas DELALOY Post author

      Hi Eriki and Nitesh,

      We have implmented this solution internally within SAP IT one year ago in order to allow Webi and Ad-hoc reporting on top of SuccessFactors, combined with other data sources.

      After one year, we can say that it is working fine and we are currently migrated the reporting database on HANA, keeping DS as extractor tools and Webi as reporting tools.

      We have also other possibilities which combine multiple layers like HCI, SAP PI, …

      Regards,

      Thomas

      (0) 
  2. Former Member

    We have followed above steps and tried integrating SF into BODS, and getting the Below error :

    1-8-2016 7-44-05 PM.png

    1. Do we need a SFAPI user to connect using the url mentioned in the screenshot ???

    2. Is the URL correct ?

    (0) 
    1. Thomas DELALOY Post author

      Hi Surendra,

      For the API url, you have to use the sfapitools to find the proper URL related to the datacebnter where your SuccessFactors instance is running:

      https://sfapitoolsflms.hana.ondemand.com/SFIntegration/sfapitools.jsp

      In addition you can try from your DSJob server to connect with this tool and with user/pwd. Your DSJob server has to be registered in the white list of Successfactors.

      Yes you need a Sfapi user with password to connect – certificat is not enough as one system can have multiple companies / sfapi users.

      Hope it helps.

      Thomas

      (0) 
    1. Former Member

      Hi Ksenia,

      Is the full version of Data Services needed to achieved this or the Data Services capabilities present in packages like SAP BO BI Suite is enough.

      I’m currently looking to licensing costs for this connection and could be huge.

      thanks in advance,

      Narciso 

      (0) 
  5. Former Member

    Hi Surendra, Thomas,

    I followed this post and able to configure BODS with SF, however I am getting the same error that Surendra faced.

    Please can you guide me to fix this?

     

    Thanks

    Mandeep

    (0) 

Leave a Reply