2776016 - How to set up Two Factor Authentication between IAS and BizX SuccessFactors - BizX Platform

There is a requirement within an organisation for 2FA (Two Factor Authentication)

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental." 

SAP SuccessFactors HXM Suite

[Enter your Reproducing the Issue here...]

[Enter your Cause here...]

Pre-requisite

To use this feature, you need to have first implemented IAS integration with your SuccessFactors instance.

Please refer to KBA 2791410 - Integrating SuccessFactors with SAP Cloud Identity Authentication Through the Upgrade Center

Configuring the IAS Tenant for 2FA

• Within the IAS Tenant, navigate to Applications > Choose Application > Authentication and Access > Risk-Based Authentication

• Selecting a 'Default Setting' of Two Factor Authentication will apply it for everyone
• Otherwise, you can define a 'Rule' for a specific target audience

• There are many different types of Rules to choose from, it's entirely up to you based on your organisation
• For instance, here I have created a group in IAS called RiskBased and assigned Users to it

• The above scenario would result in anyone that is part of the RiskBased group being prompted for Two Factor Authentication
• Everyone else would just be prompted for Single Factor Authentication

Pairing IAS User Profile to Mobile Authenticator

• Once the user/s are set to login to SuccessFactors via IAS 2FA as outlined above, they must activate it
• This is done via their IAS Profile and pairing it with their Mobile Authenticator

Examples of Mobile Authenticators:

• SAP Authenticator
• Google Authenticator

• To Open their IAS Profile, user/s have to navigate and login to their specific IAS Tenant URL
• Example: https://xxxxxx.accounts400.ondemand.com

• Scroll Down the Profile to the Two Factor Authentication section
• Click Activate > Open SAP Authenticator on Mobile Device > click Add account > Scan QR Code on screen
• That's it! You're SAP Authenticator will now start displaying codes that will be used for the Two Factor Authentication login process

[Enter your See Also here...]

Two-Factor, Two-Factor Authentication, 2FA, IAS with 2FA, IAS Two-Factor , KBA , LOD-SF-PLT , Platform Foundational Capabilities , LOD-SF-PLT-IAS , Identity Authentication Services (IAS) With BizX , LOD-SF-PLT-SAM , SAML SSO First Time Setup , How To