SAP Knowledge Base Article - Preview

3418406 - Onboardee user was synched to IAS but login fails - URL User is illegal external user

Symptom

  • You have Identity Authentication Service (IAS) enabled in your SuccessFactors instance: Onboardee users login via IAS is failing although the Onboardee user was synched to IAS.
  • Error message on Splunk: "Caused by: URL User is illegal external user."
  • Provisioning SSO logs shows "Failed to create external session.@sf_session"

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."


Read more...

Environment

  • SAP SuccessFactors HXM Suite 2311 - Onboarding Module 
  • SAP Cloud Identity Services – Identity Authentication IAS 
  • SAP Cloud Identity Services – Identity Provisioning IPS 

Keywords

SSO, IAS, SFSF, Onboarding, User Integration, PWD User, SCIM IPS Connector, ODATA IPS Connector, Illegal External User, Login Issue, real time sync, Onboarding process, INC6949383, SSO IAS - SFSF: User is illegal external user, SF-Onboarding-Product, SF-PLT Foundations-PLT-PLT Team, INC4669950, CS20230005338045 , 1032245   , KBA , LOD-SF-PLT-IAS , Identity Authentication Services (IAS) With BizX , How To

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.