3301583 - SAP SuccessFactors SAML Assertion format demonstration using MS Azure

You wish to learn how to generate a SAML assertion for SAP SuccessFactors SFAPI/ODATA API using Microsoft Active Directory (AD).

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental"

IMPORTANT NOTES:

1. This implementation does not belong to SAP and this KBA is merely published for demonstration purposes and developers' know-how only. For help with the implementation, contact Azure support/consultors.
2. Azure AD is one of many IDP products available in the market, in this KBA we are using it merely as an example to illustrate how to use 3rd-party IDP in SuccessFactors OAuth2 flow. SAP does not endorse any specific software for 3rd-party IDP products.
3. Any software coding and/or code snippets are examples. If you use any examples to help generate a SAML Assertion that will be used in a production environment, you are solely responsible for ensuring the security of such a SAML Assertion. SAP does not warrant the correctness and completeness of the example code and such code is delivered “AS-IS”. SAP shall not be liable for errors or damages caused by the use of example code unless damages have been caused by SAP's gross negligence or willful misconduct.
4. Please ensure to update the validity date of the SAML Assertion for Production grade scenarios.
5. Software Vendors who want to re-use the sample code in their platform, need to check the code with their security team and legal team (for 3rd party licensing) and then re-use it accordingly.

SAP SuccessFactors OData API
SAP SuccessFactors SFAPI

MS, Microsoft, Azure, Active Directory, SAML Assertion Generation, SAML, assertion, assertion generation , KBA , LOD-SF-INT-ODATA-OAU , ODATA OAUTH Authentication , LOD-SF-INT-ODATA , OData API Framework , LOD-SF-INT-API , API & Adhoc API Framework , LOD-SF-INT-CE , Compound Employee API , How To