2827300 - Data Anonymization feature in Instance Refresh - SuccessFactors

• How do to use the Data Anonymization from the instance refresh tool?
• What fields are anonymized in the refresh?
• Which module's related data can be anonymized during the refresh?
• What are the data anonymization options for Instance Refresh Tool?
• How to enable Selective Data Anonymization?
• How to use the Enhanced Data Anonymization option in Instance Refresh Center?

** Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental **

 SAP SuccessFactors HCM Suite

1. Prerequisites
2. Which module's related data can be anonymized during the refresh? 
3. How to use the Data Anonymization from the instance refresh tool?
4. What fields are anonymized in the refresh?
5. When can we expect more fields for data anonymization to be added?
6. Is it possible to select which fields will be anonymized? Any details on Selective Data Anonymization?
7. Does Manual Refresh support Data Anonymization?
8. Can we use automation to randomize values for generic fields, rather than relying on deterministic anonymization, fixed value, Null value or other static options?
9. Does deterministic anonymization means for example all user with the same place of birth e.g. London will anonymized with same value 12ERT ?
10. Is it possible to change or customize the email <dummy@successfactors.com> and address during data anonymization?
11. How to enable Selective Data Anonymization?

1. Prerequisites:

Instance Refresh Tool enabled and with its access properly granted to the user as per Creating an Instance Refresh Request

2. Which module's related data can be anonymized during the refresh?

The mask personally identifiable fields for the following modules/features when performing refreshes using Instance Refresh Tool:

• Recruiting Management
• Employee Central
• User Management
• Onboarding 2.0

3. How to use the Data Anonymization from the instance refresh tool?

You will see an option when scheduling the refresh via the tool called "Anonymize Rest of the Sensitive Fields" as shown in the screenshot below:

4. What fields are anonymized in the refresh?

See full list of Generic Field Names which are masked as part of the Data Anonymization for Instance Refresh see Instance Refresh Data Anonymization Fields. 

5. When can we expect more fields for data anonymization to be added?

Additional data anonymization fields will be added in a future road map - updates will be shared via Roadmap and SAP Help document Instance Refresh Data Anonymization Fields as details become available.

6. Is it possible to select which fields will be anonymized? Any details on Selective Data Anonymization?

By default, all fields mentioned in the Instance Refresh Data Anonymization Fields will be anonymized during the Data Anonymization process.

The 'Anonymize Selective Fields' is used to anonymize selected fields in the target instance according to the configuration set in the downloaded template.
However, it's important to note that individual 'Generic field ID' cannot be specified for anonymization. You can select the options on 'Generic Field Label' according to the template, please refer to the Help portal documentation 'Creating an Instance Refresh Request.' for more information about the fields.

 This is supported in Instance Refresh Tool only, not in Manual Refresh.

Note: Anonymized data will depend on fields set to 'Yes' in template downloaded during the refresh. In case you notice a field was not anonymized, please review the file uploaded to understand whether or not the field was selected to anonymize.

7. Does Manual Refresh support Data Anonymization?

Yes, Data Anonymization is now supported for manual refresh. Please mention the request in the Manual refresh form while raising the refresh ticket.

Selective Data Anonymization is not supported for manual refresh. All supported fields will be anonymized if Data Anonymization is required.

8. Can we use automation to randomize values for generic fields, rather than relying on deterministic anonymization, fixed value, Null value or other static options?

This request cannot be processed, as the system only handles anonymization.

9. Does deterministic anonymization mean for example all user with the same place of birth e.g. London will be anonymized with same value 12ERT?

Deterministic does not mean we use fixed values for a pattern like using 12ERT for city LONDON. The value is deterministic in nature and will be randomized for each user.

10. Is it possible to change or customize the email <dummy@successfactors.com> and address during data anonymization?

Email and address fields use fixed values during anonymization; it is not possible to customize or change the anonymized values. Refer to the documentation for more information: Instance Refresh Data Anonymization Fields

11. How to enable Selective Data Anonymization?

Select this option when you want to anonymize selected fields in the target instance after you submit a new instance refresh request from a source instance on a selected target instance.

Choose Download Template to manually mark the anonymization of fields and upload the template in Upload Anonymization Decision Template (Downloaded from above). You can also use an existing template.

Note: Selective Data Anonymization is not possible via manual refresh, only Full Anonymization is permitted.  Data Anonymization, once done, cannot be reverted. If mistakenly opted for, only option will be to rerun the refresh. Refer to this guide for the complete information: Creating an Instance Refresh Request 

IMPORTANT NOTES:

• This Feature is available by default using the Instance refresh Tool.
• Starting in 2H2026 release the "enhanced Data Anonymization" feature will be available to be manually enabled, please see associated KBA: https://me.sap.com/notes/3750293/E
• Not all fields are considered for Data Anonymization, the mapping of Field Label vs. Field ID can be found on Instance Refresh Data Anonymization Fields, with a complete list. 
• Note that once the Data Anonymization is done, there is not way to undo it.
• MDF custom object are not anonymized by instance refresh
• Employee Photo Anonymization is possible using the Instance Refresh Tool - Employee Photo Anonymization Using the Instance Refresh Tool. Also, currently performance forms are not part of the data anonymization.

• KBA 2791468 - Instance Refresh Tool for BizX & Learning | Must-Know Guide & FAQ 
• KBA 3750293 - Feature enablement of "Enhanced Data Anonymization" in Instance Refresh center
• Help Portal - Creating an Instance Refresh Request
• Help Portal - Instance Refresh Data Anonymization Fields

Data Anonymization for Recruiting, Management, Data, Anonymization, Instance, Refresh, Masking, Data, anonymization, mask, personally, identifiable, fields, Enable Data Anonymization for Instance Refresh,Selective Data Anonymization,Selective,Data,Anonymization,Anonymisation,Selective Data Anonymization, Enhanced Data Anonymization, 1h 2026. , KBA , LOD-SF-PLT-IRT , Instance Refresh Tool , LOD-SF-RCM , Recruiting Management , LOD-SF-PLT-REF , Instance Refresh , How To