3086919 - Not all IAS tenants available to be chosen during Initiate or Change IAS Upgrade

Symptom

Not all Identity Authentication Service (IAS) tenants are visible to choose for the option "Choose an SAP Cloud Platform Identity Authentication Service tenant from the following options:"

Environment

SAP SuccessFactors HXM Suite

Reproducing the Issue

Go to Admin Center
Open the Upgrade Center
Search for upgrade Initiate SuccessFactors SAP Cloud Platform Identity Authentication Service Integration and click Learn More & Upgrade Now;
Click Upgrade Now;
Enter your S-User credentials, same as used in the support portal to open incidents for the instance;
A pop up will appear for you to select the IAS tenant to integrate with;
Not all IAS tenants are shown

Cause

Cause 1

For "Preview" SuccessFactors instances, in Upgrade Center, only "Non-Productive" IAS tenants will be available for choice. For "Productive" SuccessFactors instances, in Upgrade Center, only "Productive" IAS tenants will be available.

Cause 2

For both Preview and Productive SuccessFactors instances, only IAS tenants in the same region will be available for choice (see more information in KBA 3084273 - How to allow SuccessFactors and IAS integration across regions and/or tenant type - SAP for Me).

Cause 3

If the IAS tenant is already added as an Asserting Party in SSO settings for the BizX system, it will not show up for selection in the Upgrade.

Cause 4

The concerned IAS tenant and the BizX tenant are mapped to different customer ids.

Resolution

Cause 1

The upgrade will only show IAS tenants for the respective BizX environment.

Cause 2

If the tenant that you want to upgrade is located in a different region or you don't see the tenant that you want to upgrade, please contact customer support so that they can remove the flag that checks your tenant for the region and type.

Note for SAP SuccessFactors Support and Partners: This is the feature that needs to be enabled in Provisioning (only with customer approval).

Provisioning > Company Settings > "Ignore region and type restrictions for Identity Authentication Service integration"

Important: Enabling the "Ignore region and type restrictions for Identity Authentication Service integration" setting can also disable the "Create New Tenant" option in the upgrade, that is expected behavior.

Cause 3

If the IAS tenant in concern has asserting party created in SuccessFactors Provisioning, then that asserting party will need to be removed for the same IAS option to show up in the upgrade. If the upgrade is then run selecting same IAS, it should recreate the asserting party in provisioning.

Note: Removal of an asserting party will have impact if the same asserting party is active and is being used for user login to SuccessFactors. So this should be done at a planned and agreed upon time to minimize user impact

Cause 4

The upgrade will only show IAS tenants that are mapped to the same customer id as the BizX tenant.

Keywords

missing tenant, IAS URL, initiate, ias missing, ias tenant missing, upgrade ias, ias upgrade tenant missing, , KBA , LOD-SF-PLT-IAS , Identity Authentication Services (IAS) With BizX , Problem

Product

SAP SuccessFactors HXM Core 2105 ; SAP SuccessFactors HXM Core 2111