SAP Knowledge Base Article - Public

3397892 - Security in integrations done via REST API

Symptom

You are using the SAP SuccessFactors REST API for an integration scenario (e.g. via the Integration Center) and wish to know more about the exchange of data.
e.g. is the data sent blank and not encrypted? In other words, if a hacker would hack the connection and get the exchange file, what is the risk that the hacker can see the data in blank?

Environment

SAP SuccessFactors API

Resolution

The services that support HTTPS protocol are network protected, i.e.  the data sent through network using HTTPS protocol is encrypted and sent between client and server.  

Hackers can intercept the traffic in https communication but they can see only the encrypted bytes of data – not the plain text.

We would expect the REST API services provided by the customer should always support HTTPS protocol.

Keywords

hacker, REST, REST API, SuccessFactors API, SFSF API, IC, Integration Center, HTTPS, exchange of data, blank , KBA , LOD-SF-INT-PSI , Product Security Inquiries , LOD-SF-INT , Integrations , LOD-SF-INT-INC , Integration Center , How To

Product

SAP SuccessFactors HCM Suite all versions