Symptom
- Customer wants to connect Production SuccessFactors tenant to Test IAS tenant (or vice versa).
- Customer wants to connect SuccessFactors tenant to a different 'region' IAS tenant.
- The "Initiate SuccessFactors SAP Cloud Platform Identity Authentication Service Integration" upgrade in Upgrade Center does not show desired IAS tenant as an option.
- "Create New Tenant" option is disabled or grayed out.
Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.
Environment
- SAP SuccessFactors HXM Suite
- Identity Authentication Service
- Identity Provisioning Service
Reproducing the Issue
- Go to Admin Center
- Open the Upgrade Center
- Search for upgrade Initiate SuccessFactors SAP Cloud Platform Identity Authentication Service Integration and click Learn More & Upgrade Now;
- Click Upgrade Now;
- Enter S-User credentials, same as used in the support portal to open incidents for the instance;
- A pop-up will appear to select the IAS tenant to integrate with;
- By default, this screen will only show IAS tenants matching the SF tenant type (Production or Test) and region (APAC, EU, AMER etc.);
Cause
Customers may want to connect SF and IAS across type and/or region.
Resolution
By default, the IAS tenants shown for selection are listed matching the SF tenant type and region. But cross-type and/or cross-region IAS tenants can be allowed by enabling a SF Provisioning setting, please contact customer support if this setting needs to be enabled.
Upon doing so, all available IAS tenants will be listed in the Upgrade pop-up, regardless of type and region.
Note:
The upgrade will show a message if IAS tenant belonging to different region is selected-> "The SAP Cloud Platform Identity Authentication Service tenant you've chosen for this upgrade is not in the same region as your SAP SuccessFactors tenant. Are you sure you want to continue?". This is just a warning and the upgrade can be proceeded with by clicking "Yes".
Note for SAP SuccessFactors Support: This is the feature that needs to be enabled in Provisioning (only with customer approval).
- Provisioning > Company Settings > "Ignore region and type restrictions for Identity Authentication Service integration"
Important: Enabling the "Ignore region and type restrictions for Identity Authentication Service integration" setting can also disable the "Create New Tenant" option in the upgrade, that is expected behavior.
See Also
Keywords
Create New Tenant,IAS,not available,not shown,disabled,grayed out , KBA , LOD-SF-PLT-IAS , Identity Authentication Services (IAS) With BizX , BC-IAM-IDS , Identity Authentication Service , How To