SAP Knowledge Base Article - Public

3340133 - [ONB] External user logged out intermittently when using SSO with IAS

Symptom

  • IAS is enabled on the SF tenant and onboardee users are presenting issues when logging into SF or when browsing the SF tenant.  
  • When an external user logs into bizx using SSO with IAS, when navigating between pages they are running into a 'invalid login' or 'invalid manager screen'

Environment

SAP SuccessFactors HXM Suite - Onboarding module

Reproducing the Issue

  • Log into the instance as an external user 
  • Navigate between pages and you may
  • Suddenly you will be logged out with the 'invalid manager' or 'invalid login screen'

Cause

User is using SP initiated login by logging via a PWD URL in the format [[HOME_PAGE]]&pm_product_name=ONB while we expect to have them to login via IAS causing these inconsistencies. 

Resolution

External users should use a url which fits the following <SF host>/login?company=<company_id> aka default [[HOME_PAGE] login. This would later get redirected automatically and properly to the IAS tenant.  In other words, Once IAS is enabled for onboarding users it is recommended to have all the login / authentication process to go thu IAS. 

See Also

3418406 - Onboardee user was synched to IAS but login fails - URL User is illegal external user - SAP for Me

Keywords

External users, SSO, IAS, IDP initiated login, onboarding, invalid manager, invalid login, INC4669950 CS20230005338045  , KBA , LOD-SF-PLT-IAS , Identity Authentication Services (IAS) With BizX , LOD-SF-OBX-IAS , IAS User Authentication , How To

Product

SAP SuccessFactors HXM Core 2211