SAP Knowledge Base Article - Public

2238736 - [2H 2023 ]SAML2 Single Sign On Behavior :How to enable SSO on my environment?

Symptom

  • What is Single Sign On?
  • How does SAML2 work?
  • How to enable SAML2 SSO on my environment?
  • Is IAS is mandatory for SF SSO configurations?

Environment

SAP SuccessFactors HXM Suite

Cause

SF only support SSO configuration via Identity Authentication

Resolution

SingleSign-On (SSO) is a property of access control of multiple related, but independent software systems. With this property, a user logs in once and gains access to all systems without being prompted to log in to each of them.

SuccessFactors used to offers a number of SSO options to allow users to access the application without entering their SuccessFactors username and password. Post 2H 2023 Release,  For any new SSO integrations, it is mandatory to have IAS in place  as SSO provider . Further  we can use any third party IDP as corporate IDP via IAS only. IAS is a mandatory for the instances SSO set up.

The existing configurations that has corporate IDP without IAS will work as it , without any impact and changes. But For new SSO Integrations, IAS is mandatory .

As part of this, request for customers to migrate to Identity Authentication, it is also being made to prevent the creation of third-party identity providers in Provisioning.

Now From Provisioning -> SSO Settings -> We cannot Add new Asserting Parties as the The option to add asserting parties in Provisioning has reach end of maintenance and is deleted on November 17, 2023.

Only the Update Asserting parties option is available for the existing assertions . Click here for more details.

How to enable SAML2 SSO on my environment?

For New Instance SSO integration IAS upgrade is mandatory .

For Complete IAS upgrade and configuration details, Click here.

For Configuring SSO between Corporate IdP, Identity Authentication tenant and SuccessFactors, Click here.

See Also

Keywords

SAML2, Single Sign-On, Add Asseting party option not available, SSO settings not cannot be save, SSO, SAML v2, IDP, SP,PLT-82518, Removal of Add Asserting party option, SF SSO set up , KBA , LOD-SF-PLT-SAM , SAML SSO First Time Setup , How To

Product

SAP SuccessFactors HCM Suite all versions