Skip to Content
Technical Articles

SuccessFactors Core Hybrid Integration Series – Part 1 – Basic Settings in SF and ECC

In this ‘SuccessFactors Core Hybrid Integration’ series, I intend to introduce you to the architecture, methodology and developmental path that is required to successfully implement a SuccessFactors Core Hybrid Integration to an On-Premise SAP ERP system.


This series will cover the following topics:

  • Basic Settings in SuccessFactors and On-Premise SAP ERP
  • SAP SuccessFactors Employee Central APIs – SOAP & OData
  • SAP SuccessFactors Compound Employee API – What is Compound Employee and how to use it
  • SAP SuccessFactors Employee Central Integration Methodologies – Common Implementation Scenarios
  • Cost Center Replication from SAP ERP to SAP SuccessFactors
  • Organizational Data Replication from SAP SuccessFactors Employee Central to SAP ERP
  • Employee Master Data Replication from SAP SuccessFactors Employee Central to SAP ERP
  • Implementing Employee and Org Data Migration and Replication from SAP ERP to SAP SuccessFactors Employee Central


This is Part 1 of the series in which I will be detailing the basic settings in the SuccessFactors and the on-Premise ERP system that needs to be enabled for Data Integration between these two systems.


Step 1: Install Add-Ons

  • Go to
  • Downloads – PA_SE_IN 100
  • Go to support packages



  • The selected package will be downloaded. Please ensure that you’re downloading the latest version. Then go back to the home page and download ODTFINCC 600 for cost center integration.



  • Load packages to SAP


Step 2: Basic Settings in SAP ERP HCM – Prerequisites


Before setting up the SAP ERP HCM system, the following topics need to be considered or checked:


  • Firewall

Ensure that data can pass through their firewall so that data can be directly replicated from Employee Central and that the UI federation can be enabled.


  • Configurations

If a payroll system already exists, you need to set up Employee Central to correspond to entries in SAP ERP HCM, for example, company, payroll group, and employee groups.

Configure Employee Central using the same information from SAP ERP HCM, for example, wage types.


  • Web Service Activation

You must activate the web service in order to receive data from Employee Central into your SAP ERP HCM system.


  • Authorizations and Restrictions

To ensure that the middleware can successfully communicate with the ERP on-premise system you will need a technical user of type B (System User) with specific authorizations and restrictions:



1. Go to the transaction PFCG.


3. Copy or Edit the role.

4. Then repeat the step and copy the role SAP_HR_SFIOM_PROCESSING.




Step 3: SAP SuccessFactors Steps

There are 3 sections to prepare the SAP SuccessFactors for replication:


Section 1 – Enable SFAPI Web Services

This step describes how to enable SFAPI Web Services in Provisioning Tool. Once enabled, SAP ERP and SuccessFactors Employee Central can communicate through a technical API user.


  • Log on to the provisioning.
  • Click the company list.
  • Click Company Settings and then locate Web Services.
  • In the Web Services section, enable SFAPI and SFAPI Ad hoc Feature by choosing the checkboxes.
  • Choose Save and confirm the changes.



Section 2 – Creating SuccessFactors API User

  • Import API User

This step is required to set up an API user in order for the integration scenarios between SAP ERP HCM or SAP S/4HANA and SuccessFactors to be executed using SAP Cloud Platform Integration (CPI) connections.


  • Log on to SuccessFactors as Administrator.
  • Go to Admin Center > Manage Employees  >  Update User Information  >  Employee Export  >  Export User File.
  • In the exported file, select and remove all rows except the first 2 header rows.
  • Add rows for the user IDs you require. For example, sap_api_user.
  • Go back to Admin > Manage Employees > Update User Information > Import Employee Data > Basic Import> Choose File.
  • Select and upload the user ID csv file.
  • Choose Validate Import File Data to check it.
  • Once the validation succeeds, import the user ID csv file



  • Maintain Permission Groups

This step describes the setup of a permission group for accommodating a permission role to be created in Step 3.


  • Log on to SuccessFactors as Administrator.
  • Go to Admin Center > Manage Employees > Set User Permissions > Manage Permission Groups > Create New 3. On the Permission Group page, maintain the following entry:
  • Group Name: SFAPI
  • In the Choose Group Members section, select Username as the category for Permission Group SFAPI.
  • Search the SFAPI system user. For example: sap_api_user.
  • Choose Done to complete the process.



  • Step 3 – Maintain Permission Roles

This step describes the set up steps necessary to grant security access to the SAP API user ID created in the step above when RBP has been activated.


  • Log on to SuccessFactors as Administrator.
  • Go to Admin Center > Manage Employees > Set User Permissions > Manage Permission Roles > Create New
  • On the Permission Role page, maintain the following entry:
  • Role Name: SFAPI
  • In the Permission Settings section, choose the Permission button to specify the permission you want to assign to the role.
  • Under 3. Grant this role, choose the Add button to specify the permission group you want to assign to the role.
  • For the Target population, select the checkbox for everyone.
  • Choose the Done and save changes to complete the creation of the role.



User Permissions

Administrator Permissions

Permission Groups

Target Population


General User Permission –

SFAPI User Login

Manage Integration Tools –

Access to SFAPI Audit Log

Access to SFAPI Metering Details

Access to SFAPI Data Dictionary

Admin access to OData API

Manage User –

Employee Export

Employee Central API –

Employee Central Foundation SOAP API

Employee Central HRIS SOAP API

Employee Central Foundation OData API (editable)

Employee Central HRIS OData API (editable)

Metadata Framework –

Read/Write Permission on Metadata Framework

Import Permission on Metadata Framework




  • Section 3 – Set API Login Exceptions

This section describes how to ensure that the password for the API user does not expire.


  • Log on to SuccessFactors as Administrator
  • Go to Admin Center > Company Settings > Password & Login Policy Settings > Set API Login Exceptions
  • Choose Add.
  • Make the following settings:
  • Username: The API user. For example, sap_api_user.
  • Maximum password age (days): Set to -1 days
  • IP address restrictions: Designated IP address(es) or address range from which the API user is being accessed from. For example,
  • Choose Save & Close.


Step 4: Enable Data Replication Monitor

To use the Data Replication Monitor, admin would need the authorization EMPLOYEE_FILES_SYSTEM_ADMIN.


Go to Admin Center → Manage Permission Roles → Manage System Properties → Manage Employee Files



We have seen, in this blog post, the basic configuration that needs to be done in the SAP ERP systems like installing Add ons, firewall configuration, user authorizations and along with this the basic configurations in SuccessFactors like enabling web services, creating SF API users, maintaining permission & Roles, etc.


In the next post we will take a look at some of the SuccessFactors Employee Central data entities, the various SOAP and OData services available and how to perform these webservice calls, etc.

1 Comment
You must be Logged on to comment or reply to a post.
  • Thanks for such excellent documentation. This will help a lot for all beginners of BIB replication.

    So, in all of the above steps, where and how can we download the metadata file for mapping?