3263646 - PI/PO to SuccessFactors Integrations encounter "handshake failure" after SF NGCD DC Migration

Your PI/PO Integrations with SAP Successfactors start failing after a SAP SuccessFactors Next Generation Cloud Delivery (NGCD) migration:

• Exception caught by adapter framework: iaik.security.ssl.SSLException: Peer sent alter: Alert Fatal: handshake failure

• SAP SuccessFactors HXM Suite
• SAP NetWeaver Process Integration (PI/PO)

SAP Successfactors HXM is using newer / stronger Cipher Suites post NGCD migration

Older / weaker cipher suites will no longer be used by SAP SuccessFactors 

In order to overwrite the default cipher suites used by the PI/PO system, the SSLContext.properties file needs to be updated as described in the following two KBAs:

• 2569156 - How to get and validate SSLContext.properties file
• 2616983 - How to customize cipher suites in SSLContext.properties file

If you are not clear on what Cipher Suites are current supported by successfactors

The supported Cipher Suites that are supported by SF can be determined by using https://www.ssllabs.com/ to check the API Endpoint URL/

SAP SuccessFactors official position on TLS version support can be found in KBA:

• 2861289 - TLS version support for SAP SuccessFactors

Should the issue persist following the above checks / actions, please engage the PI/PO support team: BC-XI-CON to further assess the issue

3089960 - SAP SuccessFactors Next Generation Cloud Delivery (NGCD) Customer checklist

3262302 - NGCD - DC Migration Timeline

NGCD, PI, PO, TLS, SSL, handshake, failure, migration, fatal, alert, cipher, suite, Next Generation Cloud Delivery, NextGen, Exception caught by adapter framework, iaik.security.ssl.SSLException, Peer sent alert, Alert Fatal: handshake failure , KBA , LOD-SF-INT-API , API & Adhoc API Framework , LOD-SF-INT , Integrations , LOD-SF-INT-ODATA , OData API Framework , Problem