SAP Knowledge Base Article - Public

2776016 - How to set up Two Factor Authentication between IAS and BizX SuccessFactors - BizX Platform

Symptom

There is a requirement within an organisation for 2FA (Two Factor Authentication)

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental." 

Environment

SAP SuccessFactors HXM Suite

Reproducing the Issue

[Enter your Reproducing the Issue here...]

Cause

[Enter your Cause here...]

Resolution

Pre-requisite

To use this feature, you need to have first implemented IAS integration with your SuccessFactors instance.

Please refer to KBA 2791410 - Integrating SuccessFactors with SAP Cloud Identity Authentication Through the Upgrade Center

Configuring the IAS Tenant for 2FA

  • Within the IAS Tenant, navigate to Applications > Choose Application > Authentication and Access > Risk-Based Authentication


Risk Based Authentication.png

  • Selecting a 'Default Setting' of Two Factor Authentication will apply it for everyone
  • Otherwise, you can define a 'Rule' for a specific target audience

Creating Rule.png

  • There are many different types of Rules to choose from, it's entirely up to you based on your organisation
  • For instance, here I have created a group in IAS called RiskBased and assigned Users to it

Rule Set.png

  • The above scenario would result in anyone that is part of the RiskBased group being prompted for Two Factor Authentication
  • Everyone else would just be prompted for Single Factor Authentication

1st Factor.png

2nd Factor.png

Pairing IAS User Profile to Mobile Authenticator

  • Once the user/s are set to login to SuccessFactors via IAS 2FA as outlined above, they must activate it
  • This is done via their IAS Profile and pairing it with their Mobile Authenticator

Examples of Mobile Authenticators:

    • SAP Authenticator
    • Google Authenticator
  • Scroll Down the Profile to the Two Factor Authentication section
  • Click Activate > Open SAP Authenticator on Mobile Device > click Add account > Scan QR Code on screen
  • That's it! You're SAP Authenticator will now start displaying codes that will be used for the Two Factor Authentication login process

Activate 2FA.png

2FA QR Code.png

See Also

[Enter your See Also here...]

Keywords

Two-Factor, Two-Factor Authentication, 2FA, IAS with 2FA, IAS Two-Factor , KBA , LOD-SF-PLT , Platform Foundational Capabilities , LOD-SF-PLT-IAS , Identity Authentication Services (IAS) With BizX , LOD-SF-PLT-SAM , SAML SSO First Time Setup , How To

Product

SAP SuccessFactors HCM Suite all versions