Skip to Content
Technical Articles
Author's profile photo Babar Haroon Mangi

Complete Guide to configure Pay Statement (Direct) in Employee Central / Employee Central Payroll.


The article is intended to cover all areas which will enable Pay Statement (Direct) in Employee central (Employee Profile), in SuccessFactors Mobile (Payroll), and in the Latest Home Page via Quick Action card View Pay Statement (pay history link).

Please bear the long list of steps, and have patience to follow all the steps. The Pay statement direct when compared to Pay Statement (Arrow based) is much user-friendly and is displayed with pay date, gross, and payout amount. In addition, you can enable custom key figures to be displayed


NOTE: All Screenshots in the blog are taken from internal partner system.

Employee Profile:


Latest Home Page View Pay statement quick action card

Configuration – Let’s get in details 

The configuration has to be done in both the Employee central (EC) and Employee Central Payroll (ECP). I have tagged system as (EC) and (ECP) in the below steps;

  1. The custom pay Statement in tcode HRFORMS is activated as per the country grouping. (ECP)

  2. The feature HRFOR in tcode PE03 is customized with the name of the custom HRFORMS (ECP)

  1. Maintain Payroll System Configuration and (EC)

Search Manage Data and select Payroll System Configuration or choose “Create New”

Add a new portlet with any name like Pay Slip, and click on “Details” and select “Direct Pay Statement” from field Service, and save.

  1. Configure People Profile to Payroll Information block (EC)

  1. Payroll Unified Configuration (EC)

Refer procedure here

  1. Permission role for Administrators, refer here and for employee role refer here

  2. Single Sign-on setup SAML 2.0 using report RP_HRSFEC_SAML_CONFIG to automate the SAML 2.0 Configuration. (ECP)

Open Tcode SE38 and enter program name RP_HRSFEC_SAML_CONFIG, and enter the below information in the selection screen;

Host Address: URL of the Employee Central Data center

Company Instance: Company ID of EC instance(Development, Preview or Production)


Upon execution, the report will generate the below URLS;

Sign on to provisioning and select your company ID. (EC)

Assertion Consumer Service and Logout URL are used to configure the consumer service settings for the company ID.

  • Under Service Provider Settings, choose Authorized SP Assertion Consumer Service Settings.
  • Enter the URLs for the Assertion Consumer Service and Logout URL fields, as illustrated in the following image.

  • Sign on to Employee Central Payroll and go to transaction SICF
  • Choose F8
  • Activate the following services from tcode SICF:
  • /default_host/sap/public/bc/sec/saml2
  • /default_host/sap/public/bc/sec/cdc_ext_service

Enable Secure Communication by going to transaction SICF_SESSIONS and verify that Security Session Management is enabled.

  1. The integration setup for Pay Statement (Direct) which involves configuration of OAUTH 2.0 (ECP)


Make sure that SAP System Aliases “LOCAL” is maintained

  1. Activate and Maintain Services in the below SPRO Path (ECP)



  1. Activate ICF Node by clicking on the ICF Node icon (ECP);

Post activation the Status column should be green;

Make sure all the below services have System Aliases LOCAL added

HRSFEC_ECP_INFO_SRV – Payroll system Information.
HRSFEC_INFOTYPE_SRV – Infotype Existence
HRSFEC_PAY_OVERVIEW_SRV – Direct Pay Statement.

Click on Add System Alias

  • Click on “New Entries”
  • Type LOCAL in the “SAP System Alias” field and press enter to auto-fill the remaining fields.
  • Save your entries.


  1. Open tcode SICF and activate the below services, (ECP)

HRSFEC_ECP_INFO_SRV – Payroll system Information.
HRSFEC_INFOTYPE_SRV – Infotype Existence
HRSFEC_PAY_OVERVIEW_SRV – Direct Pay Statement.


Enter “HRSFEC_ECP_INFO_SRV” in service name field and click on execute;


Right click on the service name, and click on “Activate Service”, do the same for other services.


  1. SuccessFactors X509 certificate generation (EC)

Goto Admin center, company setting and click on “Security Center” or from Search field


Click on X509 Certificates

Add new certificate by clicking the Add button

Enter the below details;


The Certificate after saving, should now be downloaded by clicking on the Download button; The certificate would be in .crt extension.


  1. Configuring OAuth Identity Provider (ECP)

Pre-requisite SAML 2 configurations should be auto generated refer STEP 7

Configure service provider and identity provider in Employee Central Payroll as one of multiple steps, to be able to use OAuth 2.0.


  1. Start the transaction SAML2 in the corresponding tenant.
  2. Switch to the Trusted Providers tab and select OAuth 2.0 Identity Providers. To create the Identity Provider,

choose Add Manually . and provide the X509 file downloaded from the previous step.

  1. In the SAML 2.0 Configuration window, enter a Name and choose Next.
  2. Choose Browse, next to the Primary Signing Certificate field and upload the file that you downloaded.

Creating OAuth X505 Keys.

  1. Choose Finish.
  1. Choose Edit in the main configuration screen.
  2. In the details section of your newly created Identity Provider, choose Add. In the Supported NameID Formats window, select Unspecified and chooseOK.
  3. In the details section of NameID Format Unspecified, select Assertion Subject NameID as User ID Source and Logon Alias as User ID Mapping Mode.
  4. Save your entries and choose Enable

  1. Creating Service Users in Employee Central Payroll (ECP)

Create a service user in Employee Central Payroll as one of multiple steps, to be able to use OAuth 2.0.


  1. Go to transaction SU01 and create following service users:



  1. In the Maintain Users screen, provide a Last Name on the Address
  2. On the Logon Data tab under User Type, select System and provide a password.

   15. Registering OAuth Client (ECP)

  1. Go to transaction SOAUTH2.
  2. In the OAuth 2.0 Administration screen, choose Create and for each of the following client IDs follow the steps described.
    • In the Create OAuth 2.0 Client window, select a OAuth 2.0 Client ID, provide a Description and choose Next.
    • In the Client Authentication step, ensure SSL Client Certificate is checked and choose Next.
    • In the Resource Owner Authentication step, ensure Grant Type SAML 2.0 Bearer Active is checked. In the Trusted OAuth 2.0 IdP field, choose the identity provider you already created in the Configuring OAuth Identity Provider section and choose Next.
    • In the Scope Assignment step, add a OAuth 2.0 Scope ID, according to your client ID and choose Next:
Client ID OAuth 2.0 Scope ID
EC_ADM_OAUTH HRSFEC_ECP_INFO_SRV_0001 (for Payroll System Information)
  HRSFEC_INFOTYPE_SRV_0001 (for Infotype Existence)
  HRSFEC_PAYCTRL_REC_SRV_0001 (for Payroll Control Record Information)

3. Review your entries in the Summary step and choose Finish to save your entries.

  1. Configuring Outbound OAuth (EC)


Go to Admin Center Security Center and select the OAuth Configurations tab.

Select Add and enter following information:

Field Name User Entry
Configuration Name Create two separate configurations for ecp and ecp_ess. ( case sensitive, DON’T enter the name in capital letters)
OAuth Type Select OAuth 2.0 with SAML Flow.

Client ID


For configuration name, ecp provide EC_ADM_OAUTH as Client ID.

○ For configuration name, ecp_ess provide EC_ESS_OAUTH as Client ID.

Client Secret


Provide the password for EC_ADM_OAUTH or EC_ESS_OAUTH respectively.
Token URL

Provide the URL of your Employee Central Payroll system.


Token Method


Select POST




Enter the Provider Name from the Local Provider, which you’ve created as a prerequisite in the Getting SuccessFactors HCM Suite IDP ready for SAML 2.0 section.





Enter the Identity Provider name, that you created in the Configuring OAuth Identity Provider section.


Subject Name ID


Leave this field blank.


Subject Name ID Format


Select Unspecified.


X509 Keys


Enter the X509 key you already created from the dropdown.



  1. When you’re finished, save your data.


  1. Assign the roles for all ESS user. (ECP)

The below standard roles should be copied, generated and activated. This activity can be done in transaction code PFCG, ask basis team member for help;

ESS Users should have the below roles;


Payroll Administrator


Note : The role assignment can be done through program HRSFEC_ESS_USER_UPDATE. The above roles complied in composite role, and assigned in the variant for the user creation program.


The pay statement (direct) can now be tested by “Proxy Now” functionality in Employee central. Please note the authorization role for the proxy user should have the above roles.


Lastly, I would like to share a very important Knowledge Base Article (KBA): 2900830 

which will help you with any frequent errors faced while deploying the solution.

Please share your thoughts in the comments below, and feel free to ask for any clarifications!




Assigned Tags

      You must be Logged on to comment or reply to a post.
      Author's profile photo Leandro Machado
      Leandro Machado

      Hi, Babar Haroon Mangi.
      Thank you to share it this explanation.

      Author's profile photo Sarika Goda
      Sarika Goda

      Hi Babar,


      Thank you so much for sharing this information. I have precisely followed the steps mentioned and I am still facing the error. I am not sure what am I missing. But i have exactly followed all the steps. Can you please assist.





      Author's profile photo Babar Haroon Mangi
      Babar Haroon Mangi
      Blog Post Author

      Hi Sarika,


      Please share the error you are getting in EC, when you click View Pay statement on the new home page or Payslip link on the Payroll Information portlet.



      Author's profile photo Hari Bhaskar Bhoopathy
      Hari Bhaskar Bhoopathy

      Hi @Babar Haroon Mangi,

      Can you please explain the first point in detail.

      What exactly has to be done in the HRFORMS page. I tried to copy it and create a new form (Working for MOLGA 99), but I was given ABAP error.

      Kindly advice.

      Author's profile photo Babar Haroon Mangi
      Babar Haroon Mangi
      Blog Post Author

      Hi Hari,


      Please share the error details.



      Author's profile photo Hari Bhaskar Bhoopathy
      Hari Bhaskar Bhoopathy

      Hi Babar Haroon Mangi

      Thanks for your response

      First, I have copied from the standard HR form to my custom form ZPAYslip for MOLGA 99.

      While I tried to activate the form, I received the following error:


      ERROR: The data object "WA_RESULT" has no component called "INPERIOD_OC_KEY", but there is a component called "INPERIOD_KEY".

      Have you encountered the same before or do you have any experience in resolving this issue?

      Kindly advice.

      Author's profile photo Babar Haroon Mangi
      Babar Haroon Mangi
      Blog Post Author

      Hari, it seems there has been some changes done in adobe form context. This can be better looked by technical consultant who made the changes in the form. I would recommend activate the standard form, if it in green status, then make a copy.




      Author's profile photo Hari Bhaskar Bhoopathy
      Hari Bhaskar Bhoopathy

      Hi Babar Haroon Mangi

      Thanks for your response

      Strangely, no change has been made in the HR forms and there is no technical consultant involved in this project till now. We are going to onboard one soon.

      Also, as you have pointed out, even the standard PAYSLIP form is red in colour. And we are encountering the same issue with the standard form as well.



      Author's profile photo Clarice Tchun Chai Lian
      Clarice Tchun Chai Lian

      Hi @Babar Haroon Mangi,

      Got the error as attached when click View Pay statement on the new home page. But the Payslip link on the Payroll Information portlet is working.

      Kindly advise

      Author's profile photo Barket Ali Zafar
      Barket Ali Zafar

      Thanks brother Babar Haroon Mangi ,for sharing nice Article

      Author's profile photo Cláudia de Jesus dos Santos Moura
      Cláudia de Jesus dos Santos Moura

      Hi Babar

      In my case, the payslip is running ok, but, this month some employees have received /559 and /558, but on the left side screen it's showing just /559. Do you know what's wrong?



      Author's profile photo Shubha Kartini Umesh Halbhavi
      Shubha Kartini Umesh Halbhavi

      Great work Babar Haroon Mangi, very detailed

      Author's profile photo Oksana Lorenz
      Oksana Lorenz

      Great blog, @Babar Haroon Mangi! Very well structured and detailed. Great help for customers.

      The only important  remark, the oAuth configuration part has been recently enhanced. Customers should follow the instruction in Employee Central Payroll guide, chapter "Using oAuth 2.0", subchapter "Upgrading Existing Configuration" to upgrade it:

      With kind regards,

      Oksana Lorenz

      Author's profile photo Jazmin Garcia Olvera
      Jazmin Garcia Olvera

      Hello Babar Haroon Mangi,


      Thank you very much for this great explanation, we were able to configure it successfully. We were wondering if you had more information on how you configure it in the people profile to show the pay information (pay date, gross, net and payout amount) and is it possible to show the last 2-3 payroll results information?