2776016 - How to set up Two Factor Authentication between IAS and BizX SuccessFactors

There is a requirement within an organization for Two Factor Authentication (2FA)

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental." 

SAP SuccessFactors HCM Suite

Prerequisite

To use this feature, you need to have first implemented IAS integration with your SuccessFactors instance.

Please refer to KBA 2791410 - Integrating SuccessFactors with SAP Cloud Identity Authentication Through the Upgrade Center

Configuring the IAS Tenant for 2FA

• Within the IAS Tenant, navigate to Applications > Choose Application > Authentication and Access > Risk-Based Authentication

• Selecting a 'Default Setting' of Two Factor Authentication will apply it for everyone
• Otherwise, you can define a 'Rule' for a specific target audience

• There are many different types of Rules to choose from, it's entirely up to you based on your organisation
• For instance, here I have created a group in IAS called RiskBased and assigned Users to it

• The above scenario would result in anyone that is part of the RiskBased group being prompted for Two Factor Authentication
• Everyone else would just be prompted for Single Factor Authentication

Pairing IAS User Profile to Mobile Authenticator

• Once the user/s are set to login to SuccessFactors via IAS 2FA as outlined above, they must activate it
• This is done via their IAS Profile and pairing it with their Mobile Authenticator

Examples of Mobile Authenticators:

• • SAP Authenticator
  • Google Authenticator

• To Open their IAS Profile, user/s have to navigate and login to their specific IAS Tenant URL
  • Example: https://xxxxxx.accounts400.ondemand.com

• Scroll Down the Profile to the Two Factor Authentication section
• Click Activate > Open SAP Authenticator on Mobile Device > click Add account > Scan QR Code on screen
• That's it! You're SAP Authenticator will now start displaying codes that will be used for the Two Factor Authentication login process

• SAP KBA 2791410 - Integrating SuccessFactors with SAP Cloud Identity Authentication Through the Upgrade Center
• SAP KBA 3140883 - Second Factor Authentication (2FA) for SuccessFactors Provisioning access 
• SAP KBA 3326141 - Two Factor (2FA) authentication for SAP SuccessFactors instance

Two-Factor, Two-Factor Authentication, 2FA, IAS with 2FA, IAS Two-Factor, SuccessFactors , KBA , LOD-SF-PLT-IAS , Identity Authentication Services (IAS) With BizX , BC-IAM-IDS , Identity Authentication Service , How To