3084273 - How to allow SuccessFactors and IAS integration across regions and/or tenant type

• Customer wants to connect Production SuccessFactors tenant to Test IAS tenant (or vice versa).
• Customer wants to connect SuccessFactors tenant to a different 'region' IAS tenant.
• The "Initiate SuccessFactors SAP Cloud Platform Identity Authentication Service Integration" upgrade in Upgrade Center does not show desired IAS tenant as an option.
• Error shows up when submitting "Change SuccessFactors-Identity Authentication Service Integration" in Upgrade Center.
• After authenticate your user to upgrade, the following message is displayed: You have no existing Identity Authentication service tenant that is eligible for this upgrade. Please contact Product Support if your existing tenant is not displayed and you want it to be used for this upgrade. Otherwise, please select "Request New Tenant" to proceed to the next step."
• When trying to initiate the upgrade and select the "Request New Tenant" option is disabled or grayed out.

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

• SAP SuccessFactors HCM Suite
• Identity Authentication Service
• Identity Provisioning Service

1. Go to Admin Center
2. Open the Upgrade Center
3. Search for upgrade Initiate SuccessFactors SAP Cloud Platform Identity Authentication Service Integration and click Learn More & Upgrade Now
4. Click Upgrade Now
5. Enter S-User credentials, same as used in the support portal to open incidents for the instance
6. A pop-up will appear to select the IAS tenant to integrate with
7. By default, this screen will only show IAS tenants matching the SF tenant type (Production or Test) and region (APAC, EU, AMER etc.)

    or

1. Go to Admin Center
2. Open the Upgrade Center
3. Search for upgrade Change SuccessFactors-Identity Authentication Service Integration and click Learn More & Upgrade Now
4. Click Upgrade Now
5. Enter S-User credentials, same as used in the support portal to open incidents for the instance
6. Error message will pop up: "You have no existing Identity Authentication service tenant that is eligible for this upgrade. Please contact Product Support if your existing tenant is not displayed and you want it to be used for this upgrade. Otherwise, please select "Request New Tenant" to proceed to the next step."
   

Customers may want to connect SF and IAS across type and/or region but this is disabled by default.

By default, the IAS tenants shown for selection are listed matching the SF tenant type and region. But cross-type and/or cross-region IAS tenants can be allowed by enabling a SF Provisioning setting, please contact customer support if this setting needs to be enabled. Upon enablement, all available IAS tenants will be listed in the Upgrade pop-up, regardless of type and region.

Note:  The upgrade will show a message if IAS tenant belonging to different region is selected-> "The SAP Cloud Platform Identity Authentication Service tenant you've chosen for this upgrade is not in the same region as your SAP SuccessFactors tenant. Are you sure you want to continue?". This is just a warning and the upgrade can be proceeded with by clicking "Yes".

Note for SAP SuccessFactors Support: This is the feature that needs to be enabled in Provisioning (only with customer approval): Provisioning > Company Settings > "Ignore region and type restrictions for Identity Authentication Service integration"

Important Note: Enabling the "Ignore region and type restrictions for Identity Authentication Service integration" setting can also disable the "Create New Tenant" option in the upgrade, that is expected behavior.

KBA 2791410 - Integrating SuccessFactors with SAP Cloud Identity Authentication Through the Upgrade Center

Guide: Initiating the Upgrade to SAP Cloud Identity Services - Identity Authentication Service

Create New Tenant, IAS, not available, not shown, disabled, grayed out, Create New Tenant grayed out, Create New Tenant disabled , KBA , LOD-SF-PLT-IAS , Identity Authentication Services (IAS) With BizX , BC-IAM-IDS , Identity Authentication Service , How To