SAP Knowledge Base Article - Public

3340133 - [ONB] External user logged out intermittently when using SSO with IAS

Symptom

  • IAS is enabled on the SF tenant and onboardee users are presenting issues when logging into SF or when browsing the SF tenant.  
  • When an external user logs into bizx using SSO with IAS, when navigating between pages they are running into an 'invalid login' or 'invalid manager screen'

Environment

SAP SuccessFactors HXM Suite - Onboarding module

Reproducing the Issue

  • Log into the instance as an external user 
  • Navigate between pages and you may
  • Suddenly you will be logged out with the 'invalid manager' or 'invalid login screen'

Cause

User is using SP initiated login by logging via a PWD URL in the format [[HOME_PAGE]]&pm_product_name=ONB while we expect to have them to login via IAS causing these inconsistencies. 

Resolution

External users should use a url which fits the following <SF host>/login?company=<company_id> aka default [[HOME_PAGE] login. This would later get redirected automatically and properly to the IAS tenant.  In other words, Once IAS is enabled for onboarding users it is recommended to have all the login / authentication process to go thu IAS. 

See Also

3418406 - Onboardee user was synched to IAS but login fails - URL User is illegal external user - SAP for Me

Keywords

External users, SSO, IAS, IDP initiated login, onboarding, invalid manager, invalid login, INC4669950 CS20230005338045  , KBA , LOD-SF-PLT-IAS , Identity Authentication Services (IAS) With BizX , LOD-SF-OBX-IAS , IAS User Authentication , How To

Product

SAP SuccessFactors HXM Core 2211