Symptom
- What security protocols are followed for SuccessFactors user passwords?
- How the communications to/from the customers with SF are protected?
Environment
SAP SuccessFactors HXM Suite
Resolution
The passwords in our customer databases are stored in a hashed format, not in “clear text” format. Specifically, we utilize SHA-1 as the Hash protocol. Hash vs. Encryption is slightly different, with the Hash providing better performance, and this is the default behavior. As opposed to enabling Password Encryption in Admin Center.
In addition, all communication to/from SuccessFactors is encrypted. Internet communication to/from SuccessFactors is over HTTPS with 128-bit SSL encryption.
Keywords
Password, encryption, hash, security, SHA-1 , KBA , sf passwords , LOD-SF-PLT , Platform Foundational Capabilities , How To