Symptom
The IPS sync job is failing with the error below:
Caused by: HTTP operation failed invoking https://<SF API Server>.cert.successfactors.com/rest/iam/scim/v2/Users?startId=initial&count=100&filter=active%20eq%20%22true%22 with statusCode: 400 and body
<html>
<head><title>400 The SSL certificate error</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The SSL certificate error</center>
<hr><center>server</center>
</body>
</html>
"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."
Environment
SAP SuccessFactors HCM Suite
Reproducing the Issue
run IPS job.
Cause
Invalid certificate being used.
Resolution
- Go to Identity Provisioning > Source Systems > Outbound Certificates tab:
- Check if the certificate maintained there is Active and Not Expired:
- If no certificate presented there, click on the Generate button by following the Generate Certificate section.
- If showing as Expired, click on the Generate button by following the Generate Certificate section.
- If showing as Inactive, click on the Activate button.
- If showing as Active and Not Expired, continue to the step below.
- If no certificate presented there, click on the Generate button by following the Generate Certificate section.
- Click on the Down Arrow icon to Download the aligned certificate.
- Go to SuccessFactors > Security Center > X.509 Public Certificate Mapping and upload the certificate there by following the instructions from Upgrade to X.509 Certificate-Based Authentication for Incoming Calls | SAP Help Portal.
- Refer to Manage Certificate Validity & Subscribe for Expiring Outbound Certificate Notification to avoid future disruptions.
Keywords
ips, ssl, certificate, 400, html, ias, sync, read, sf, api, authentication, outbound, error,, x.509, 509, source, target, ias, ips, sf, successfactors, The SSL certificate error, 400 Bad Request, Bad Request, 400 The SSL certificate error, with statusCode: 400 and body, HTTP operation failed invoking , KBA , LOD-SF-INT-SCI , SCIM API , BC-IAM-IPS , Identity Provisioning Service (IPS) , Problem
Product
Attachments
| Pasted image.png |
| Pasted image.png |
| Pasted image.png |
| Pasted image.png |
SAP Knowledge Base Article - Public