SAP Knowledge Base Article - Public

2825324 - Prevent the import of unsecured content

Symptom

Is it possible to prevent the import of unsecured content?

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."

Environment

SAP SuccessFactors HCM Suite

Resolution

  • The Security Scan of User Inputs option only works in Employee Central-enabled instances. Employee Import files can also be scanned. For example, fields containing cross-site scripting are detected, skipped, and reported in the import status email.

  • You can now better prevent the import of unsecured content with Employee Import.

  • This applies to basic and extended user import.

  • When the "Security Scan of User Inputs" option is enabled, and fields containing unsecured scripts, such as cross-site scripting, are detected, the import ignores the fields send report via import status email.

To Enable:

  1. Go to Admin Center > Application Security Feature Settings.
  2. On the Security Toggles tab, select Security Scan of User Inputs.
  3. Save your change.

See Also

Enabling User Input Validation | SAP Help Portal

Keywords

security scan, enable, basic import, employee import, user inputs, unsecure scripts, import. unsecured data , KBA , LOD-SF-PLT-UIM , Employee Import Issues , Product Enhancement

Product

SAP SuccessFactors HCM Suite all versions