3419621 - IPS error when trying to connect to SuccessFactors: "400 The SSL certificate error"

Symptom

The IPS sync job is failing with the error below:

Caused by: HTTP operation failed invoking https://api68sales.cert.successfactors.com/rest/iam/scim/v2/Users?startId=initial&count=100&filter=active%20eq%20%22true%22 with statusCode: 400 and body
<html>
<head><title>400 The SSL certificate error</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The SSL certificate error</center>
<hr><center>server</center>
</body>
</html>

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

Environment

SAP SuccessFactors HXM Suite

Cause

Invalid certificate being used.

Resolution

Please make sure you are using a valid certificate in Identity Provisioning > Source Systems > Outbound Certificates tab in IPS:

The certificate in here with an "Active" status needs to be the one which is imported in SuccessFactors following the instructions from Upgrade to X.509 Certificate-Based Authentication for Incoming Calls | SAP Help Portal.

Note: please don't enable the option "Automatic Regeneration" as it won't work for the SuccessFactors type of connection. When the certificate expires you need to generate a new one and import the new one into SuccessFactors again.

Keywords

ips, ssl, certificate, 400, html, ias, sync, read, sf, api, authentication , KBA , LOD-SF-INT-ODATA , OData API Framework , BC-IAM-IPS , Identity Provisioning Service (IPS) , Problem

Product

SAP SuccessFactors HCM suite all versions