2278836 - Permission Sync Issue and Fix - Onboarding 1.0

• Permission Sync is not working, user's permissions are not syncing from BizX to ONB 1.0
• File is not generated and placed in SFTP
• File in the SFTP is not picked up by Onboarding 1.0
• Few of the column information is synced and few column information is not synced.

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."

SAP SuccessFactors Onboarding 1.0

Scenario 1

Permission sync file not getting sent to SFTP

1. Image of Job in SFTP
   
2. Provisioning
3. Manage Schedule Jobs
4. Filter by Ad Hoc
5. Check that the job is present
6. Check if job is submitted
7. If the job is not submitted this action is the reason why the file is not placed in SFTP
   
8. If submitted, and not placed in SFTP
9. Click the job name to open it
   
10. Check that the “File available in FTP?” option is checked because that is the option that sends the file to SFTP once it has been submitted.
11.  "Report format" should be CSV, otherwise even onboarding 1.0 takes the file, content cannot be read.
12. A correctly configured job in provisioning looks like below.
    

Scenario 2

File is going to SFTP, but it’s not being picked by Onboarding 1.0 .

1. Provisioning
2. Company setting
3. Check for Onboarding 1.0 Account ID
   
4. Super Admin, find account, Features, Foundation Import.
   
5. If the foundation import feature is enabled, ensure that the SFTP folder is correct for example, /ONB/inbound, and the host address.
6. Go back to Provisioning, Manage Schedule jobs, filter by Ad Hoc reports and click the job
7. Logon to SFTP using the below credentials that will be displayed on the job
   
8. Check the folder based on the path to see if the file is Available
   
9. Find your job in the ONB inbound folder.
10. Check that the file name on the job in provisioning is correct
    
11. The file name consists of ONBaccountID_Permission_Sync.csv
12. If the above are completed and the file is still not getting picked up.
13. Open the report in SFTP check the row headings on the report
14. Navigate to Super Admin
15. Import Export Settings
16. FoundationImportFieldMapping
17. Export the files, and check that the name of the columns in the XSLT file matches the name of the row headings on the report
    
    
18. The username is not important, User ID and Role Name is required.
19. Job Owner below
    

Scenario 3

The permission sync is working, but users are not going to the designated groups in Onboarding 1.0

1. Navigate to provisioning
2. Manage schedule Jobs
3. Select Job Type by Ad Hoc
   
4. Click Refresh on the right
5. Click the permission sync Job
6. Logon to SFTP using server access credentials
   
   
   
7. Run the job by hovering over “Select” on the right
   
8. Click “Run it now”
9. Click “Monitor Jobs”
   
10. Check the status of the job to see is it completed
    
11. Once completed navigate to SFTP
12. Click folder name ONB
13. Click Inbound
14. Double-click the permission sync file to open it
15. In the Excel file, click Data
16. Filter
17. Search for the user by the user ID
    
    
    
18. If the user is not there that is the reason the permission is not syncing over,
    you must tell the client to add the user in the respected permission groups in BizX
19. If the user is there check what permission roles are associated with the user
    
20. Now navigate to Onboarding 1.0
21. Security
22. Groups
23. Check that the role name in the report matched the group name is Onboarding 1.0
    
24. After the above steps are completed if the job is sent to Onboarding 1.0 , but failing
25. Navigate to Onboarding 1.0
26. Settings
27. Audit Trail
28. Select a blank value from the “Type”
29. Enter INT for “Event code”
30. You can select an “Event From” or take the default date if the sync failed today
31. Double-click the job copy the error and open an case with Support

Scenario 4

After Role name is created in BizX > Role Based Permission this must match the Onboarding Group name. The BizX report generate a file with User ID and Role Name, if this Role Name is not exacly the Onboarding Group name the permissions will not sync. The solution is to change Onboarding Group name to the same as Role Name.

Tips and Common Error

1. Do not add the Onboarding 1.0 account name in the Foundation Import file on FileMask row.
2. Ensure to leave the default as shown below
   

Scenario 5

Please add filters to exclude the System Administrator role from the permission Sync report.

1. Find the report to generate Permission sync file
2. Click Edit 
3. Click on Filters
4. Click Refine Criteria
5. Under All columns -> Choose Role Information
6. Choose Role Name in the filters
7. Clcik "By Rule " 
8. Click Add rule 
9. Under Rule , Choose Not Equal to
10. Choose System Administrator and click Finish
11. You can verify the report , by running the report (Reporting --> AD Hoc Reports--> click the drop down in Permission Sync report name -> Run Report)

 Create Permission Sync Report 

Permission, Sync, SFTP, Recruiter, Hiring Manager, Provisioning, Super Admin, Job, Foundation, Import, Role, Name, Group , KBA , LOD-SF-OBD-INT , Integrations with Onboarding , Problem