2186617 - Creating a Super Admin User in SuccessFactors Provisioning

• How to login to the SucessFactors system as an admin user
• How to reset a user password
• How to create an admin user from Provisioning

SAP SuccessFactors HCM Suite

Please be informed that SAP Product Support does not have the ability to reset users' passwords for SuccessFactors systems. This task falls under the scope of the administrator of the account, and has been highlighted in KBA 2345110 - Configuring Password Reset for the Login Page in SuccessFactors.

As described in the KBA 2517118 - SAP SuccessFactors New Instance/Re-activation request, Product Support is not responsible for providing new instance credentials. The tenant credentials email notifications are sent to the company's Provisioning Contact Person IT maintained in the contract.

When the instance is first created, the customer will get an email with credentials from the team responsible for creating the instance.

When to request a Super Admin user be created from the backend (Provisioning)? 

• The Super Admin creation request for Product Support comes from customers/partners and are processed by support only if they(users and admins) cannot do it themselves/are not able to login to their instance.
• When a customer doesn't receive the notification containing the System Details and Initial User credentials after the tenant is created, normally caused by an incorrect SuccessFactors IT Contact maintained in the SPC System.

For Customers:

1. Submit a support case under component LOD-SF-PLT-ADM.
2. Include the required details:
• E-mail address where the credentials will be sent to:
• Company ID:
• Data Center where the new user will be created:
• Reason why a new admin user needs to be created:
3. Product Support will then create a Super Admin user via Provisioning using the same steps as provided for Partners/Consultants below.

For SAP Partners/Consultants:

a) SAP Partners/Consultans with access to Provisioning:

1. Navigate to Provisioning.
2. Click on "Company ID".
3. Click on "Company Settings"
4. Search for "Create Admin".
5. Enter the details required considering below points:
   - The username used here should be unique and should not exist in the instance;
   - The e-mail id mentioned should be a valid one.
6. Check the box for "I confirm that the affected customer has provided approval for the creation of the super admin user account".
7. Click the "Create Admin" button.
8. Notice the green message at the top stating "Admin user was created".

b) Sap Partners/Consultants without access to Provisioning.

Follow the same instructions above mentioned for customers in this KBA.

Note: please add the customer approval and the reason why a new admin user needs to be created - it could be either via a customer updating the case or attach the approval email from customer to the case.

Important Notes:

Granting user admin permissions

Although this is an admin user created, it will not have permissions by default. Upon login, the first step is to add the user to the "Manage Role-Based Permission Access" page.

To do so, please follow the below steps:

1. Go to "Admin Center";
2. Search for "Manage Role-Based Permission Access" or search it directly from "Action Search";
3. Click in the "Add User" button and select the users you want to add.

Once selected user is added, the added user will have the access to use the four features below:

• Manage Permission Groups
• Manage Permission Roles
• User Role Search
• View User Permission

With access to these features, the user can create permission groups and permission roles.

Reference guide: Super Admin Management | SAP Help Portal

Single Recipient

If the single recipient e-mail feature is enabled, creating a Super Admin from Provisioning is not possible. To proceed, temporarily disable the feature.

IAS

After creating Super Admin in Provisioning and while trying to login, if you are getting this error "Sorry, we could not authenticate you. Try again" this means IAS SSO is enabled. In this case, make sure to create same user name account in IAS and set the same username as login name in IAS. This user creation in IAS can be done through the IPS job sync, the IAS administrator has access to IAS Admin tenant to perform the sync. You can check who is the administrator of IAS tenant in the https://iamtenants.accounts.cloud.sap. To run the IPS job refers to guide in Section 7.2 Running and Scheduling Jobs (User Sync). Only after running the IPS job that the SF login will works.

To do that in IAS, please check List and Edit User Details | SAP Help Portal

• 2345110 - Configuring Password Reset for the Login Page in SuccessFactors
• Managing Instance Access: Super Administrators
• 2344584- How to add access to Role-Based Permission Admin features (Manage Role-Based Permission Access, View User Permission, Manage Permission Roles, Manage Permission Groups and User Role Search)

sf, success factors, administrator, admin permissions, new user, all access, provisioning, super, admin, SuccessFactors, sf, sfsf , sf sf, SuccessFactors, SuccessFactor, Success, Factor, bizx , KBA , LOD-SF-PLT-ADM , Admin user creation , How To