3337002 - SAP SuccessFactors Work Zone integration with SuccessFactors Learning (LMS)

How to perform the integration between SAP SuccessFactors Work Zone with SAP SuccessFactors Learning?

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

• SAP SuccessFactors Work Zone
• SAP SuccessFactors Learning

The SuccessFactors Work Zone integration with LMS has two parts:

1. Work Zone side- Accessing Learning Records from Work Zone
2. Learning side- Accessing Work Zone Workspaces from Learning

A. Work Zone side- Integrating Learning Records in Work Zone

• The following guide page covers all the steps for this integration: Integrating SAP SuccessFactors Learning | SAP Help Portal 

B. Learning side- Accessing Work Zone Workspaces within Learning

• Pre-requisite: The steps from this guide must be completed: Integrating SAP SuccessFactors Learning | SAP Help Portal

Following that:

1. Support Ticket needs to be raised to LOD-SF-LMS-JAM to enable the flag ENABLE_WORKZONE_INTEGRATION. This is done through LMS Operations engagement. (@Support - please check internal memo section)
2. Base64 encoded public & private key pair should be generated using tools like openssl.
   
   For example, with the following command the public certificate will be output to certificate.pem and the private key will be output to key.pem
   • $ openssl req -newkey rsa:2048 -nodes -keyout key.pem -x509 -days 3650 -out certificate.pem -sha1
   The site https://www.samltool.com/self_signed_certs.php can be referenced for the required fields to input (please do not directly use production keys generated on the site!). For more details on installing and using openssl commands, please check articles available on the internet. This is not a Work Zone or LMS specific topic.
   
   
3. SAML Trusted IdP should be created in Work Zone using the public certificate generated in the previous step. Guide on creating SAML Trusted IdP-> SAML Trusted IDPs | SAP Help Portal 
   Use the,
   - Learning tenant URL for the IDP ID field,
   - the public certificate from Step 2 above for the X509 Certificate field.
   - "User Attribute used for Name ID" should be SCIM.externalID in the default setup.
   - Rest of the fields can be left blank.
   
   
   
4. Configure the following tenant level properties in LMS Admin: Configuration > System Configuration > BIZX
   workzoneEnabled: true
   successFactorsCubeTreeBaseURL: the Digital Workspace service (DWS) URL for the Work Zone instance. This can be found from the Work Zone Admin Console -> Overview -> Custom Domain field.
   clientKey: the client key from the OAuth client added in Integrating SAP SuccessFactors Learning | SAP Help Portal  (Step 3 in the page)
   idpId: the IDP ID used when registering the SAML Trusted IDP in Work Zone in the previous Step.
   workzonePrivateKey: the private key generated from openssl in in the Step 2. The key should be in a single line, with all newlines removed.

 SuccessFactors, WorkZone, Learning, Integration, Build, Records, Item, Curriculum, Curricula. , KBA , LOD-SF-SWZ-LMS , LMS Integration , LOD-SF-LMS-JAM , Integration with SAP Jam , How To

SAP SuccessFactors Learning all versions ; SAP SuccessFactors Work Zone all versions