3418436 - Learning Token Server deprecation and replacement

As it was communicated in the What's New Viewer of 2H 2023 release, integrations that rely on the Learning Token Server for authentication should be updated to use OAuth 2.0 or OpenID Connect (OIDC).

Refer to the Learning Token Server Deprecation (2027) post on SAP Community for further details on the transition, available options, documentation, specific configurations (ex.: OCN), and to post general questions about the transition. 

• SAP SuccessFactors HCM Suite
• SAP SuccessFactors Integrations
• SAP SuccessFactors Learning

As soon as the authentication is migrated, Learning automatically loses the ownership and the responsibility of the access token generated, which will be targeted to SAP SuccessFactors Integration (SF-INT). So, in case any issues occur while generating the token, please raise a case to “LOD-SF-INT” for an initial analysis and then, if needed, they may transfer it to SAP SuccessFactors Learning.

From the Learning perspective, note the following:

• Customers will continue to use the Learning APIs as before, the only change is how the access token is generated. Once generated, include the token in the appropriate field of the API tool to make the calls. If you encounter any unexpected behavior when calling the Learning APIs, raise a case under “LOD-SF-LMS-ODA”.
  
  
• During token generation, the only required information from Learning is the “userID”/“userName”. Ensure that the corresponding Learning User ID and Admin ID match and have the necessary permissions to perform the intended actions.
  
  
• Some APIs require specifying the User Type, as certain Entity Sets are tied to specific user types. Refer to the guide for instructions on how to define the User Type.

OAuth 2.0:

• Authentication Using OAuth 2.0 | SAP Help Portal.
• KBA 2850646 - How to register for OAuth 2.0 authentication - SuccessFactors Integrations.
• KBA 3031657 - How to generate SAML assertion using SAP-provided offline tool - SuccessFactors.
• KBA 3409876 - How to generate the OAuth Access Token using Postman - OData API.

OIDC:

• Authentication Using OpenID Connect (OIDC) | SAP Help Portal.
• Register Your Own Application to Communicate with SAP SuccessFactors HCM Suite with OpenID Connect | SAP Help Portal.
• Introducing API Authentication with IAS as token provider using OIDC protocol with 2H2024 Release | SAP Community.
• KBA 3532791 - How to authenticate for SuccessFactors using OIDC in IAS.
• KBA 3681224 - How to use client credentials as grant type for OIDC in SuccessFactors API.

learning, lms, integrations, int, hcm, api, token, server, deprecation, replacement, change, oidc, oauth, authenticate, authentication, how, process, migrate, option, implement, document, documentation, instruction, openid, connect , KBA , LOD-SF-LMS-ODA , Web Services OData , LOD-SF-LMS , Learning Management System , LOD-SF-INT , Integrations , LOD-SF-PLT , Platform Foundational Capabilities , How To

SAP SuccessFactors HCM Suite all versions ; SAP SuccessFactors Learning all versions