SAP BTP Kyma Runtime – Extending SAP SuccessFactors | Video Tutorial Series

This video tutorial series extends the Getting Started with the SAP Business Technology Platform (BTP), Kyma environment tutorial playlist with two videos about SAP SuccessFactors system registration. For the video tutorials covering how to create the SAP BTP Kyma environment, see SAP BTP Kyma Runtime Getting Started | Video Tutorial Series For the video tutorials about extending SAP solutions, see SAP BTP Kyma Runtime – Extending SAP SuccessFactors | Video Tutorial Series SAP BTP Kyma Runtime – Extending SAP S/4HANA Cloud | Video Tutorial Series For the video tutorials about extending SAP solutions in the Cloud Foundry environment, see Building Extensions for SAP SuccessFactors using APIs and Events Building Extensions for SAP S/4HANA Cloud using APIs and Events Questions? Post as comment. Useful? Give us a like and share on social media. Thanks!

Extending SAP SuccessFactors

SAP Business Technology Platform

SAP BTP provides a standard way for extending SAP solutions. In this article we cover SAP SuccessFactors.

The tutorial series assumes you have a Kyma environment running. For this, see

• SAP BTP Kyma Runtime Getting Started | Video Tutorial Series

For additional information about extending cloud solutions in general and SAP SuccessFactors and the Kyma environment in particular, see Learn More below.

SAP SuccessFactors Extension Center

To integrate your SAP BTP subaccount with SAP SuccessFactors you need to access the SAP SuccessFactors Extension Center. This requires the following privileges

• Metadata Framework (MDF)
  • Configure Object Definitions
  • Admin access to the MDF OData API
• Manage Extensions on SAP BTP
  • Create integration with SAP BTP

The figure below shows how the privileges are granted to the custom role Extension Center using SAP SuccessFactors Admin Center.

As documented

• Register an SAP SuccessFactors System in a Global Account in SAP BTP

Previously, the SuccessFactors Provisioning tool was used for this purpose. For information about the change. see

• Introducing the reworked steps for extending SAP SuccessFactors on SAP Business Technology Platform

SAP SuccessFactors Provisioning

To establish a trust between the SAP BTP subaccount and the SAP SuccessFactors company (tenant), you need to access the provisioning tool. For information, see

• hcmcloudops.successfactors.com
• 2273365 – Provisioning Access for Partners – How to request, revoke, unlock and access to what it provides

To access the tool, using URL

https://<sap_successfactors_system>/provisioning_companies

As documented

• Register the Assertion Consumer Service of the Subaccount in SAP BTP in SAP SuccessFactors

SAP BTP Kyma Runtime Get Started

For the playlist, visit the SAP HANA Academy channel on YouTube

• SAP BTP, Kyma runtime (SKR)

Register an SAP SuccessFactors System

Video Tutorial

In this video, we show how to register an SAP SuccessFactors system, including entitlements and creating a service instance using the Kyma Dashboard, which generates a SAP BTP destination for the system registered.

Time Markers

0:00 – Introduction

0:30 – Documentation

2:00 – SAP BTP Cockpit: Register System

2:55 – SAP SuccessFactors Extension Center

3:35 – SAP BTP Cockpit: Entitlements

4:30 – Kyma Dashboard: Service Management

6:50 – SAP BTP Cockpit: Destination

Procedure

SAP systems are paired at the global account level using the SAP BTP Cockpit. When we register a system an integration token is generated, which we need to add to SAP SuccessFactors using the Extension Center.

When the pairing is successful, the status will be Integrated in the Extension Center and Registered in SAP BTP Cockpit.

When creating a service instance using the Kyma Dashboard, Service Management, Catalog, the system name as registered need to be passed as a parameter.

{
   "systemName":"<system-name-as-registered>",
   "technicalUser":"technicalonboarder"
}

The technicalUser parameter is optional (but required for the OData access with OAuth 2.0 SAML bearer assertion with technical user scenario)

As documented

• Authentication Type JSON File
• Create a Service Instance to Consume the SAP SuccessFactors HXM Suite OData API
• Configure Application Authentication

References

For the documentation, see

• Extending SAP SuccessFactors in the Cloud Foundry and Kyma Environment | SAP Business Technology Platform
• Configuring SAP SuccessFactors, Second Half 2021 Release or Later on SAP BTP | SAP SuccessFactors platform, Extension Center

Configure Single Sign-On

Video Tutorial

In this video, we show how to configure configure Single Sign-On (SSO) between a subaccount in SAP BTP and SAP SuccessFactors.

Time Markers

0:00 – Introduction

0:50 – Download SAP SuccessFactors SAML metadata

1:05 – SAP BTP Cockpit, new trust configuration

1:40 – Deactivate user logon default provider subaccount

2:00 – Download SAP BTP subaccount SAML metadata

2:20 – Add ACS using SAP SuccessFactors Provisioning tool

Procedure

The SAML metadata exchange between the SAP BTP subaccount and SAP SuccessFactors company (tenant) is manual process where we need to download the SuccessFactors tenant metadata.xml from URL (including the SHA-256 certificate).

https://<sap_successfactors_system>/idp/samlmetadata?company=<company_id>&cert=sha2

Next, using the SAP BTP Cockpit we establish a trust between the SuccessFactors tenant and your subaccount by uploading this metadata file. To make this a mutual trust, we need to download the metadata for the subaccount and then complete the configuration using copy/paste of three URLs in the SuccessFactors Provisioning tool.

Using an editor with provides XML formatting like Microsoft Visual Studio Code may be helpful for the last step.

SAP BTP subaccount ACS added in SuccessFactors Provisioning tool.

References

For the documentation, see

• Configure Single-Sign On Between a Subaccount in SAP BTP and SAP SuccessFactors

Learn More

SAP Help Portal

For the documentation about creating extensions, see

• Extensions | SAP BTP

• Working with Extensions on SAP Business Technology Platform | SAP SuccessFactors platform, Extension Center

The components involved are illustrated below. Note that for the Kyma environment, the Extensibility Service uses the Kyma runtime with the Destination Service created at the subaccount level. A Cloud Foundry environment is not required.

SAP Learning Journey

For a related SAP Learning Journey with links to the documentation on the SAP Help Portal and missions on the SAP Discovery Center, see

• SAP SuccessFactors Extensions on SAP BTP

SAP Discovery Center

For a related tutorial, see

• Extend SAP SuccessFactors on SAP Business Technology Platform

For tutorials about the Kyma environment, search the catalog for

• discovery-center.cloud.sap/missionssearch/kyma

SAP Developers

For a related tutorial, see

• Extend SAP SuccessFactors on SAP BTP, Cloud Foundry Environment

For tutorials about the Kyma environment, filter your search on

• SAP BTP, Kyma environment

SAP HANA Academy | Partner Innovation Lab

For a video tutorial series about building SAP SuccessFactors extensions in the SAP BTP Cloud Foundry environment, see

• Building Extensions for SAP SuccessFactors using APIs and Events

Share and Connect

Questions? Please post as comment.

Useful? Give us a like and share on social media.

Thanks!

If you would like to receive updates, connect with me on

• LinkedIn > linkedin.com/in/dvankempen
• Twitter > @dvankempen

For the author page of SAP PRESS, visit

• Denys van Kempen

Over the years, for the SAP HANA Academy, SAP’s Partner Innovation Lab, and à titre personnel, I have written a little over 300 posts here for the SAP Community. Some articles only reached a few readers. Others attracted quite a few more.For your reading pleasure and convenience, here is a curated list of posts which somehow managed to pass the 10k-view mile stone and, as sign of current interest, still tickle the counters each month. Good Reads (my two cents)