Skip to Content
Technical Articles
Author's profile photo Ajeesh Nair

How to convert Login Method from PWD to SSO automatically for New Users hired from Onboarding [Pre-Day 1] [Integration with BizX] – Onboarding 1.0 / Onboarding 2.0


While using Onboarding 1.0 or Onboarding 2.0 with Pre-Day 1 feature enabled, the default login method for new hires is PWD. When a customer is using SSO, the system and designed behaviour is that the login method for the new employee remains as PWD and not changed to SSO, even after the new hire is hired in Employee Central. For a permanent resolution an enhancement request is submitted to SAP SuccessFactors Onboarding 1.0 Product Management team. There is no specific date when this will be added to the system.

This post explains about the workaround solution that can be implemented to automatically convert the login method from PWD to SSO on completion of New Hire action in Employee Central. This is achieved by leveraging Intelligent Services for ‘Employee Recruitment’ Event and Integration Centre.


  1. Enable Employee Central
  2. Enable Intelligent Services Centre using the Upgrade Centre(ISC)
  3. Integration Centre


  1. Configure a business rule in Job Information portlet – To trigger Intelligence Service during New Hire
    • Create a Basic rule with ‘Job Information Model’ as the Base Object.

    • Set the rule condition to execute ‘Trigger New Hire Event’

2. Assign the Business rule

    • Navigate to Admin Center> Manage Business Configuration> ‘jobInfo’ element

    • Scroll all the way down to the ‘Trigger Rules’ section
    • Add the business rule as a ‘onPostSave’under ‘Job Information Model’ and Save


  1. Configure Intelligent Services for ‘Employee Recruitment’ event – Create and assign Integration Centre flow
    • Navigate to Admin Center> Intelligent Services Centre (ISC)
    • Search and select the Event> Employee Recruitment

    • Under ‘Activities’, Select ‘Integration’ tab

    • Click ‘OK’ and ‘Create a new integration’ in the pop-up window

    • In the ‘Choose Integration Type’ pop-up, select the following:
      • Destination Type: SuccessFactors
      • Format: OData v2
    • Click ‘Create’
    • The system redirects to the Integration Centre

    • Enter an Integration Name and Description
    • Click ‘Next’

    • Click ‘+’
    • Search, and Select ‘User’ as starting Node in Integration Centre

    • Switch to Field Mapping view

    • Assign data in these 4 fields
      • User/userId > userNav/userId
      • User/gender > userNav/gender
      • User/status > userNav/status
      • User/loginMethod > Fix as ‘SSO’
    • This is completed by drag and drop from Source Fields to Destination Fields




    • To set the fixed value for User/loginMethod > Fix as ‘SSO’, switch to Details View

    • Set the Default Value to ‘SSO’

    • Switch back to Field Mapping view to preview the integration
    • Click ‘Next’

    • Skip ‘Filter’, Click ‘Next’ and move to ‘Review and Run’

    • Click Save> Save




4. Set the Intelligent Services Flow Rule

    • Navigate to Admin Center> Intelligent Services Centre (ISC)
    • Search and select the Event> Employee Recruitment

    • Under ‘Activities’, Select ‘Integration’ tab

    • In the pop-up window, Select the integration definition configured and click ‘Add Integration’

    • This adds the new integration to the Flow Rule.
    • Set the ‘Timing’ to ‘When event is published’


    • Make sure you have saved the changes under Actions> Save Flow


  • Once the flow is successfully saved, this overrides default login method from PWD to SSO for a New User hired from Onboarding automatically.


Additional Notes:

  1. Gender is a required field as per the oData API Metadata and cannot be Null or Blank while triggering a upsert. KBA: 2819591 Hence the gender field needs to be added in the Integration  Center Field mapping.
  2. The event flow is triggered after the New Hire action is completed in Employee Central and a Employee Profile is created in Successfactors. Hence, this solution can be implemented in both Pre-Day1 and Non Pre-Day1 scenario.
  3. If Employee Central is not in scope, then the loginMethod can be updated in BizX through the daily employee import job.

Assigned Tags

      You must be Logged on to comment or reply to a post.
      Author's profile photo Chris Paine
      Chris Paine

      Awesome demo of the power of integration centre!

      Is there no way that you can just not have the login method not populated for onboardees or automatically reset to blank when they are hired?

      Noting that with IAS/IPS this should become something that isn't needed as the change to whether password is needed vs using SSO should be something that we can configure in IAS  (based on whatever attributes we want to use in IPS mapping)

      However, does sound very reasonable to put out this solution for those people staying on ONB1.0!


      great post!

      Author's profile photo Ajeesh Nair
      Ajeesh Nair
      Blog Post Author

      Thanks, Chris.

      Absolutely. I agree with you on IAS/IPS function.

      Author's profile photo Brandon Toombs
      Brandon Toombs

      I echo Chris's Kudos about the demo of a use case for using intelligent services/integration center for dealing with a gap in the product.  Thanks for sharing!!!

      Author's profile photo Ajeesh Nair
      Ajeesh Nair
      Blog Post Author

      Thanks Brandon.

      Author's profile photo Sameer Kadam
      Sameer Kadam

      It is something that I had been waiting for ages for this Login Method related issue related with hiring On-boarded candidates (ONB1.0). And since SAP had not committed to providing a solution within any fixed time frame, we were manually changing the login method to SSO for newly hired candidates- whiuch was tedious & time consuming to say the least.

      Ajeesh has provided this beautiful workaround solution utilizing the powers of both Intelligent Services & Integration Centre. I have implemented this solution for my organization & it works like a charm!!

      It now frees up the BAU support resources to do something more productive...

      Thanks, Ajeesh!

      Author's profile photo Rinky Karthik
      Rinky Karthik

      Ajeesh Nair , Great blog and well presented. I love to play around with Intelligent Service Center, and its good to see a nice use case that can be achieved with both ISC and IC. This is a good solution for customers staying with  ONB1.0.

      Author's profile photo Ajeesh Nair
      Ajeesh Nair
      Blog Post Author

      Thanks Rinky.

      Author's profile photo Praveen Thota Abraham
      Praveen Thota Abraham

      Hi Ajeesh,  great article very detailed and clearly articulated.  Can we use the same logic to have this configured for only ONB2.0 customers by triggering this well in advance when hiring manager completes the data validation because in ONB2.0 new hires receives welcome email and reset password link as soon as the hiring manager completes the data validation?

      Author's profile photo Ajeesh Nair
      Ajeesh Nair
      Blog Post Author

      Thanks Praveen.

      This event flow will get triggered only after the new hire is hired in Employee Central from Manage Pending Recruits dashboard.

      Author's profile photo Praveen katepally
      Praveen katepally

      Hi Ajeesh,

      Could you let us know the reason why 'When event is published’? Can we also use ‘On effective date’? Just needed some clarification. I feel we can use but just wanted to check any specific reason 'When event is published' if so.

      Author's profile photo Ondrej Musil
      Ondrej Musil

      Hello Praveen,

      I think ‘Event is published’ will become an issue if you hire employee with future hire date. I believe employee should remain PWD (preday1 user) untill became hired, therefore ‘On effective date’ makes more sense to me.

      Author's profile photo Ajeesh Nair
      Ajeesh Nair
      Blog Post Author

      Hi Praveen,

      Yes, ‘On effective date’ is supported and can be used if the client wants to complete the hire in Employee Central before the start date, but then want to retain PWD as the login method till the start date.

      Author's profile photo Megan Pajollari
      Megan Pajollari

      Hi Ajeesh, I had set this value to 'on effective date' and noticed some issues where this integration was not triggered - the user remained PWD even after MPH was completed.  My theory is that the issue is because the MPH was processed AFTER the effective date, i.e. the Hire Date was 8/10 but MPH wasn't completed until 8/13.  Just wanted to mention this in case others may have the same issue.

      Author's profile photo Sudhir Hadimane
      Sudhir Hadimane

      Hi Ajeesh,

      Most of us waiting for this solution form a long time, thanks for your time and effort preparing this demo.

      Can you please advise below scenarios:

      1. Can I re-use the event trigger business rules such as "EVENT_NEWHIRE (SAP_EVENT_NEWHIRE)"
      2. Some reason I am not getting Intelligent Services Centre rule type; can I ignore this and solution still works when I add the business rule as a ‘onPostSave’ under ‘Job Information Model’.

      With regards

      Author's profile photo Megan Pajollari
      Megan Pajollari

      I would also like to know the answer as to whether we can reuse that SAP New hire event.

      Author's profile photo Ajeesh Nair
      Ajeesh Nair
      Blog Post Author

      Hi Sudhir,

      1.SAP_EVENT_NEWHIRE is a standard trigger and you can use it to configure the solution.

      2. Rule Type is a picklist in the system and you need to add Intelligent Services as a picklist value to show under the drop down. It is not mandatory and hence you can ignore it.

      Kind regards,


      Author's profile photo Sudhir Hadimane
      Sudhir Hadimane

      Thank you Ajeesh

      Author's profile photo Sumana Ghosh
      Sumana Ghosh

      Hi Ajeesh,


      Thanks for the amazing solution! We are also struggling with the same issue for ONB to EC.

      I was following your steps but not able to find the Gender in User node and if I add the PersonalInformation (PerPersonal)-gender , it is picking null value.


      Could you please suggest me in this issue?

      Thanks in advance!


      Sumana Ghosh

      Author's profile photo Lopa Chakraborty
      Lopa Chakraborty

      Gr8 blog

      Author's profile photo Swapna Bombay
      Swapna Bombay


      This is very Helpful! thanks for the writeup

      Author's profile photo SALMAN KARMALE

      Hello Ajish!
      Thank you for sharing a demo and the process of converting Login Method from PWD to SSO automatically for New Users using the Intelligent Services Centre using the Upgrade Centre(ISC). However, I wanted to check if there is a way of converting the PWD to SSO, without using the ISC?!

      For instance, what if I want the new joiner's status / login method to be changed from PWD to SSO, is it possible without using ISC, an automated process, that changes from PWD to SSO?