Skip to Content
Intermittent issues on our Blogging System
Due to unforeseen circumstances, we are experiencing some intermittent issues with our Blogging system , we apologize for the inconvenience and are working hard to rectify the situation.
  • Home
  • Community
  • Ask a Question
  • Write a Blog Post
  • Login / Sign-up
Author's profile photo Former Member
Former Member
February 22, 2017 3 minute read

How to enable Pay Statement Mashup from SAP Payroll to SuccessFactors Employee Central

34 16 34,455

This blog is co-authored by Gobinder Sandhu  (https://people.sap.com/gobi.sandhuFormer Memberand Jai Korpal (Former Member)

Since the advent of SuccessFactors Employee Central suite, one of the critical requirement is to display remuneration  /  pay statement within the SuccessFactors employee central integrated with on premise SAP payroll system.   While this information is currently scattered in various implementation  guides, The hunt for single source or an article which gives  sequence of technical steps  required  to achieve this integration is still on.  This blog aims to  address this  gap by illustrating the said integration.

On high level , following steps are to be implemented :

  1. Implement SAML (Security Assertion Markup Language) configuration as per SAP note 2253599 and activate Payslip and related Services in SAP
  2. Maintain Assertion Consumer Settings in SuccessFactors Provisioning
  3. Configure Payroll System Configuration object in SuccessFactors Employee Central
  4. Perform Role based permissions to give employees access to Pay Statement and Tax Form applications

Please note that these steps assume the pay statement is already configured in SAP.

Each of the above steps are illustrated below .

STEP 1.  Implement SAML configuration as per SAP note 2253359.

SAML, security assertion markup language is an XML based open standard data format for authentication and authorizing the data between parties, in particular between identity provider and service provider. In our case SF EC system is an identity provider and On Premise SAP payroll system is the service provider. Follow the steps given in SAP note 2253359. The manual implementation of this note results in activation pay statement service in SAP.

STEP 2. Maintain Assertion Consumer Settings in SuccessFactors Provisioning

From the implementation of step 1 , a meta data file is extracted from SAP system ( Seek help from your SAP basis) . Within this file contains following URLs :

Assertion: https://myXXXXXX.payroll.ondemand.com/sap/saml2/sp/acs/100

Logout:  https://myXXXXXXX.payroll.ondemand.com/sap/saml2/sp/slo/100

These links are required to be maintained in the SuccessFactors provisioning at following place :

 

Click Add another Service Provide ACS and add the assertion consumer service and logout URLS.

STEP 3. Configure Payroll System Configuration object in SuccessFactors Employee Central

In SuccessFactors Employee Central Admin center , Configure the earning and deduction portlet for the payroll information page in the payroll system configuration object.

Go to Manage Data , Create  New  Payroll System Configuration  object, if not already exists.

Under Portlets, Click on details section of Earnings and Deductions ,  make sure the service ‘Pay Statement’ is selected from the drop down as shown in the screen below.

Tip: SF EC stores the names of services in the Picklist ‘payroll services’ (Configure Object Definitions- Picklist) . Make sure that the external code of pay statement is ‘1’.

STEP 4 Perform Role based permissions to give employees access to Pay Statement and Tax Form applications 

Following screen shots are self explanatory to setup the role based permissions in SuccessFactors Employee Central.

 

Display pay statement in Employee Central ( Employee File – navigate to Payroll Information). Latest pay statement will be shown.  Options are  available to navigate to pay statement from previous periods, Print or download the pay statement.

 

We hope this helps  and expedite your work towards to invoke this wonderful functionality.

Feel free to provide feedback / improvement and share your learning’s in the comments section.

About Authors :

Jai Karan Korpal is an experienced SAP and SuccessFactors Integration Architect, who specializes in Integration, Employee Central,Employee Self Service.  

Gobinder Sandhu is an experienced SAP consultant and project manager with expertise in SAP HCM/Payroll , SuccessFactors Employee Central , EC Payroll ,  SF Recruiting and on-premise – cloud integrations .

 

 

Alerting is not available for unauthorized users

Assigned Tags

      /
      34 Comments
      You must be Logged on to comment or reply to a post.
      Author's profile photo Rinky Karthik
      Rinky Karthik
      February 27, 2017 at 3:25 pm

      Hi Jai,

       

      Great insight ! Looks like this will work for customers who keep SAP ERP and Employee Central at the sametime. If a customer is moving to EC for HR and ECPY for payroll and sun setting On premise SAP (including ESS/MSS service), will this still work ?

       

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Gobinder Singh Sandhu
      Gobinder Singh Sandhu
      February 28, 2017 at 2:50 am

      Hi Rinky,

      These steps are relevant for EC payroll implementations as well.

      Also, In case on-premise SAP payroll system is being sunset, The HR Forms pay statement can still be transferred and leveraged in EC payroll. Rest of the steps are same as explained in the article. 

      Cheers !

      – Gobi

       

       

       

       

       

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Barin DESAI
      Barin DESAI
      August 18, 2017 at 9:28 am

      Hi Gobi

       

      Thanks for the insight

      1. most customer user webdispatchers in the landscape hence the query is do we use saml2 authentication from gateway or ERP. I think it should be gateway however wanted to check your experience.
      2. SAML configuration node now has changed so anyone needing more info on SAML can refer to below link.https://wiki.scn.sap.com/wiki/display/Security/Single+Sign-On+with+SAML+2.0

       

      thanks again.

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Russell Knight
      Russell Knight
      March 11, 2017 at 9:39 am

      Thanks very much for this insightful article - we are in the process of planning our SAP SuccessFactors employee central module implementation at present and this is an element that we have had a lot of debate on.

      We have some concern over security/confidentiality with pay statement viewing due to shared workstation instances.  Do you perhaps know whether it is possible at all to have the specific tile for viewing of the pay-statement information to bypass SSO and force the User to insert his login credentials again?

      Russell

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Former Member
      Former Member
      Blog Post Author
      March 14, 2017 at 11:14 pm

       Hi Russell, yes it can be done that way as well.

      Give this a try- for the PAYSLIP service in SAP transaction 'SICF',

      1. Select 'Alternate Logon Procedure' in the Procedure dropdown
      2. Only keep  'Basic Authentication' in the Login procedure list

      This should force the service to ask for credentials again as soon as user clicks on the Pay Statement service. See the screenshots below.

      Thanks,

      Jai

      • Like 1
      • Share
        Right click and copy the link to share this comment
      /
      Author's profile photo Former Member
      Former Member
      March 19, 2017 at 9:34 pm

      Nice blog.

      Does mash-up require the SAP system to be on a certain EHP (6/7) version?

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Gobinder Singh Sandhu
      Gobinder Singh Sandhu
      April 2, 2017 at 6:02 pm

      Hi Raj

      The blog was written during our implementations in ECC EHP 8 .  We have implemented earlier the payslip view online using same service as early as as EHP 6 SP 23.  That was in HR renewal feature pack 01. We also went live with  Fiori app for pay statement leveraging the same service.  Crux of the story , since payslip service is available in SAP ECC EHP 6 , mashup will be possible as well.  I have no doubt for EHP7/8.

      Hope this helps.

      Regards

      - Gobi

       

       

       

       

       

       

       

       

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Former Member
      Former Member
      May 10, 2017 at 2:24 pm

      Hi Jai and Gobinder, Is it possible to use this solution having ECC 6.0 without EHP installed?

      I am working in a Employee Central implementation and the client wants the payslip available in EC.

      A lot of thanks for your answer.

       

      Best regards,

       

      Jorge Martinez

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Barin DESAI
      Barin DESAI
      June 11, 2018 at 1:42 pm

      which application do you want to use? you can configure it as an navigational url.

      the challenge will be sso between EC and your ECC system if you do so.

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Anand Venkatapathi
      Anand Venkatapathi
      April 10, 2017 at 4:44 pm

      Hi Jai,

       

      We have not activated EC payroll in our instance and I cannot see the  "Payroll System Configuration object" in Manage Data. Can you please let me know if activating EC Payroll is a mandatory step to implement payslip mashup.

       

      Thanks,

      Anand

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Former Member
      Former Member
      Blog Post Author
      April 17, 2017 at 6:08 pm

      Hi Anand,

      You will have to activate "Enable Payroll Integration (Valid for SAP Payroll in ERP Systems)" in Company settings in Prov.

      Thanks,

      Jai

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Former Member
      Former Member
      April 18, 2017 at 2:20 pm

      Hi Jai,
      if i want integrate with SAP ERP HCM payroll already exists what the process or any content should i go?

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Anand Venkatapathi
      Anand Venkatapathi
      April 26, 2017 at 2:39 pm

      Hi Jai,

       

      Thanks, I was able to progress after enabling payroll Integration in provisioning. Now I have completed all the configuration for Password based login (Same user id in ECC and SF EC), but I am getting the error below in the Pay Statement screen. Can you please suggest what could be wrong.

       

      We’re having trouble processing this request due to a problem in the system. Please contact your Admin.

       

      Thanks and Regards,

      Anand

       

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Barin DESAI
      Barin DESAI
      June 11, 2018 at 1:43 pm

      what error are you getting?

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Bernardo Santos
      Bernardo Santos
      March 3, 2020 at 2:46 pm

      I have the same error

      "We’re having trouble processing this request due to a problem in the system. Please contact your Admin."

       

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Marisol Mejia
      Marisol Mejia
      April 27, 2017 at 9:10 pm

      is available for COLOMBIA?

       

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Former Member
      Former Member
      May 2, 2017 at 3:43 pm

      Hi,

       

      Does the PAYSLIP service access HRFORMS based on the country grouping? My requirement is to show one payslip for all countries. I believe if HRFORMS is being used, then we would need one form per country grouping effectively copies to cater to this requirement. Please provide your valuable inputs.

      Regards,

      Rahul

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Ka Shun Wong
      Ka Shun Wong
      September 7, 2017 at 5:23 am

      This actually is the same as the SAP ESS Salary Statement configuration where there are 3 HR Features to control which form (PE51/HRFORMS), report variant (for PC00_Mxx_CEDT), and smartform/PDF conversion program (for using PE51 form, which will have to convert to smartforms then PDF, then display in SF EC).

      Kindly find below URL for your reference:

      https://archive.sap.com/discussions/thread/797211

       

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Steve Rumsby
      Steve Rumsby
      May 9, 2017 at 3:59 pm

      Are there are security recommendations for the SICF web service at the ERP end of this? I ask because we have this set up and it works as described, except that if I grab the URL for the call to the get_payslip service and call it independently with different parameters, I seem to be able to view payslips for other employees. I'm not sure that's quite right... 🙂

      Any suggestions for what I might have missed?

      Thanks,
      Steve.

      • Like 1
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Ka Shun Wong
      Ka Shun Wong
      September 7, 2017 at 5:18 am

      I will think this may be authorization setup issue on SAP ERP.

      Normally, this employee can view their own payslip (ie. ESS scenario), as well as HR may view employees' payslips (ie. MSS scenario).

      You may have to check the authorization setup on the user logging in SF, then it should be the same in SAP ERP.

      I have also tried to copy the URL and paste to a new browser session.

      If SSO is configured, this new browser session will use the existing SF login account for the authentication; If you paste to a private session (or another browser), it will redirect you to SF login page.

       

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Former Member
      Former Member
      June 2, 2017 at 12:19 pm

      Jai,

      Thank you for this blog,

      It is needed to pay a user license (employee) in EC and to have a named user license for the same employee in EC Payroll (Payroll On-premise)?

      This has stopped the customer for considering this solution, what it seems to him a double license cost.

      Can anyone clarify?

      Thanks in advance,

      Rodolfo

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Prakash Jeevakala
      Prakash Jeevakala
      July 13, 2017 at 8:59 am

      Hi Jai,

      Article is really self explanatory in a nutshell.  Can you please let me know  is there any possibility to display company logo as well in the pay statement?

       

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Ka Shun Wong
      Ka Shun Wong
      September 7, 2017 at 5:09 am

      This involves the pay statement form (PE51 or HRFORMS in SAP) development. Sure it can have company logo.

       

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Former Member
      Former Member
      August 8, 2017 at 5:35 am

      Hi Jai

      I have the following error while accessing the Paystatement or W4 URL in EC.

      I have verified the SAML configuration, SICF services, User Id and Roles in EC and SAP.

      Could you please advise.?

       

      The webpage at https://my010XXXX.payroll.ondemand.com/sap/ec/payslip/get_payslip_by_offset?sap-client=100&PERNR_EC=XXXXX%2CXXXX%2CXXXX&sap-language=en&OFFSET= might be temporarily down or it may have moved permanently to a new web address.

       

      Regards

      Srinivasa

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Former Member
      Former Member
      September 17, 2017 at 2:28 am

      Hi Srinivasa,

      Please check following notes and particularly #6 as your on premise system should be accessible through internet.

      2530623 - Finding the URL for SAP for the SuccessFactors Employee Central Payroll Mashup

      Unfortunately, Authors of this post did not highlight pre-requisites which are most important as most of the other config in On-premise and SFs are very much straight forward and documented in SAP documents.

      In this scenario you can think of using SAP Web Dispatcher and try to keep in DMZ so that you can avoid questions from your IT Security team.

      Thanks

      Subbu

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Adriano Martins
      Adriano Martins
      September 28, 2017 at 8:25 pm

      Hi, gurus!

      I'm trying to set up the payment statement, but upon reaching the stage of configuring the PAYSLIP service in SAP transaction 'SICF', I can not find the node. Do I have to install some service or business function?  if so, which one?

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Former Member
      Former Member
      November 8, 2017 at 1:29 am

      Please check this note which talks about per-requisites if you have not checked already

      • 2542149 - Enable Pay Statement Service - missing PAYROLL in SICF

       

       

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Author's profile photo jeevan bodla
      jeevan bodla
      October 15, 2017 at 6:48 am

      Good info, thanks for sharing Jai and Gobinder

       

      thanks

      jeevan

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Juan Roger Rodriguez
      Juan Roger Rodriguez
      November 23, 2017 at 12:57 am

      Hi!, we have already enabled this solution, through the web we can see the pay statement, but with the mobile application this has not been possible, do you know if this should work on the app also?

      Thanks!

      • Like 1
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Daniel Blug
      Daniel Blug
      February 8, 2021 at 1:12 pm

      Hi Juan,

       

      as far as I know it can only get implemented mobile if you are using EC Payroll.

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Adam Harkus
      Adam Harkus
      March 23, 2018 at 3:52 pm

      Any Idea why this would work from within our Internal Network but not from outside?

       

      We realise that SF is a cloud-based solution so can't understand why the interface doesn't work for users outside of our network.

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Kamal Rawal
      Kamal Rawal
      January 27, 2019 at 4:10 pm

      Hi Adam,

      I am replying too late. hope, you would have already found the solution . You might have configured Local URL for Payslip. e.g. prd.sap.com is local URL which might have not exposed to the outside world (Internet). You should coordinate with Networking team to get the Public URL to expose the SAP services to the internet. Networking team will do so by setting up the reverse proxy.

      Public URL : sap.companyname.com -> pointing to prdserver.com

      Regards,

      Kamal

       

       

      • Like 1
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Prasad Narayanasamy
      Prasad Narayanasamy
      June 28, 2021 at 5:06 pm

      Hi,

      Thanks for this information. Please let me know how do we change arrow based pay statement to monthly view pay statement with same mashup from ECP to EC

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Author's profile photo Daniel Blug
      Daniel Blug
      February 22, 2022 at 4:30 pm

      Hey experts,

       

      where can I maintain which payslip form  should be displayed. What is the correct transaction and feature to determine which payslip should be displayed?

       

      Thanks and best regards,

      Daniel

      • Like 0
      • Share
        Right click and copy the link to share this comment
      Find us on
      • Privacy
      • Terms of Use
      • Legal Disclosure
      • Copyright
      • Trademark
      • Newsletter
      • Support

      Insert/edit link

      Enter the destination URL

      Or link to existing content

        No search term specified. Showing recent items. Search or use up and down arrow keys to select an item.