SAP Knowledge Base Article - Public

2088622 - Security of SuccessFactors passwords and communications

Symptom

  • What security protocols are followed for SuccessFactors user passwords?
  • How the communications to/from the customers with SF are protected?

Environment

SAP SuccessFactors HXM Suite

Resolution

The passwords in our customer databases are stored in a hashed format, not in “clear text” format.  Specifically, we utilize SHA-1 as the Hash protocol. Hash vs. Encryption is slightly different, with the Hash providing better performance, and this is the default behavior. As opposed to enabling Password Encryption in Admin Center.

In addition, all communication to/from SuccessFactors is encrypted. Internet communication to/from SuccessFactors is over HTTPS with 128-bit SSL encryption.

Keywords

Password, encryption, hash, security, SHA-1 , KBA , sf passwords , LOD-SF-PLT , Platform Foundational Capabilities , How To

Product

SAP SuccessFactors HCM Suite all versions