SAP Knowledge Base Article - Public

2278836 - Permission Sync Issue and Fix - Onboarding 1.0


  • Permission Sync is not working, user's permissions are not syncing from BizX to ONB 1.0
  • File is not generated and placed in SFTP
  • File in the SFTP is not picked up by Onboarding 1.0
  • Few of the column information is synced and few column information is not synced.

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."


SAP SuccessFactors Onboarding 1.0


  1. Sync Between BizX and SFTP Fails(i.e.File is not generated and placed in SFTP)
  2. Sync between SFTP and ONB Module(i.e. File is placed in SFTP but it not picked up from SFTP)
  3. Sync between SFTP and ONB Module(i.e. File is picked up from SFTP but few column information is not synced to Onboarding 1.0 )
  4. Onboarding Group name is different from BizX Role name
  5. System Administrator role is included. If a user has several permission roles along with System Administrator role, then none of the roles would be sync to Onboarding 1.0.


Scenario 1

Permission sync file not getting sent to SFTP

  1. Image of Job in SFTP
  2. Provisioning
  3. Manage Schedule Jobs
  4. Filter by Ad Hoc
  5. Check that the job is present
  6. Check if job is submitted
  7. If the job is not submitted this action is the reason why the file is not placed in SFTP
    Job Submitted in Provisioning.png
  8. If submitted, and not placed in SFTP
  9. Click the job name to open it
    Send File to SFTP.png
  10. Check that the “File available in FTP?” option is checked because that is the option that sends the file to SFTP once it has been submitted.
  11.  "Report format" should be CSV, otherwise even onboarding 1.0 takes the file, content cannot be read.
  12. A correctly configured job in provisioning looks like below.
    Correctly configured job in Provisioning.png

Scenario 2

File is going to SFTP, but it’s not being picked by Onboarding 1.0 .

  1. Provisioning
  2. Company setting
  3. Check for Onboarding 1.0 Account ID
    Account Name.png
  4. Super Admin, find account, Features, Foundation Import.
    Foundation Import Feature.png
  5. If the foundation import feature is enabled, ensure that the SFTP folder is correct for example, /ONB/inbound, and the host address.
  6. Go back to Provisioning, Manage Schedule jobs, filter by Ad Hoc reports and click the job
  7. Logon to SFTP using the below credentials that will be displayed on the job
    Logon to SFTP.png
  8. Check the folder based on the path to see if the file is Available
    File Path.png
  9. Find your job in the ONB inbound folder.
  10. Check that the file name on the job in provisioning is correct
    File Name.png
  11. The file name consists of ONBaccountID_Permission_Sync.csv
  12. If the above are completed and the file is still not getting picked up.
  13. Open the report in SFTP check the row headings on the report
  14. Navigate to Super Admin
  15. Import Export Settings
  16. FoundationImportFieldMapping
  17. Export the files, and check that the name of the columns in the XSLT file matches the name of the row headings on the report
    Import File.png
    Foundation Import XSLT.png
  18. The username is not important, User ID and Role Name is required.
  19. Job Owner below
    Job Owner.png

Scenario 3

The permission sync is working, but users are not going to the designated groups in Onboarding 1.0

  1. Navigate to provisioning
  2. Manage schedule Jobs
  3. Select Job Type by Ad Hoc
    Find Job.png
  4. Click Refresh on the right
  5. Click the permission sync Job
  6. Logon to SFTP using server access credentials
    Logon to SFTP.png

  7. Run the job by hovering over “Select” on the right
    Run Sync.png
  8. Click “Run it now”
  9. Click “Monitor Jobs”
    Monitor Job.png
  10. Check the status of the job to see is it completed
    Completed Job.png
  11. Once completed navigate to SFTP
  12. Click folder name ONB
  13. Click Inbound
  14. Double-click the permission sync file to open it
  15. In the Excel file, click Data
  16. Filter
  17. Search for the user by the user ID
    Search for User.png

  18. If the user is not there that is the reason the permission is not syncing over,
    you must tell the client to add the user in the respected permission groups in BizX
  19. If the user is there check what permission roles are associated with the user
    Roles in Report 1.png
  20. Now navigate to Onboarding 1.0
  21. Security
  22. Groups
  23. Check that the role name in the report matched the group name is Onboarding 1.0
    Roles in Report Vs Groups In Onboarding.png
  24. After the above steps are completed if the job is sent to Onboarding 1.0 , but failing
  25. Navigate to Onboarding 1.0
  26. Settings
  27. Audit Trail
  28. Select a blank value from the “Type”
  29. Enter INT for “Event code”
  30. You can select an “Event From” or take the default date if the sync failed today
  31. Double-click the job copy the error and open an case with Support

Scenario 4

After Role name is created in BizX > Role Based Permission this must match the Onboarding Group name. The BizX report generate a file with User ID and Role Name, if this Role Name is not exacly the Onboarding Group name the permissions will not sync. The solution is to change Onboarding Group name to the same as Role Name.

Tips and Common Error

  1. Do not add the Onboarding 1.0 account name in the Foundation Import file on FileMask row.
  2. Ensure to leave the default as shown below

Scenario 5

Please add filters to exclude the System Administrator role from the permission Sync report.

  1. Find the report to generate Permission sync file
  2. Click Edit 
  3. Click on Filters
  4. Click Refine Criteria
  5. Under All columns -> Choose Role Information
  6. Choose Role Name in the filters
  7. Clcik "By Rule " 
  8. Click Add rule 
  9. Under Rule , Choose Not Equal to
  10. Choose System Administrator and click Finish
  11. You can verify the report , by running the report (Reporting --> AD Hoc Reports--> click the drop down in Permission Sync report name -> Run Report)

                                                          See Also

                                                           Create Permission Sync Report 


                                                          Permission, Sync, SFTP, Recruiter, Hiring Manager, Provisioning, Super Admin, Job, Foundation, Import, Role, Name, Group , KBA , LOD-SF-OBD-INT , Integrations with Onboarding , Problem


                                                          SAP SuccessFactors Onboarding all versions