3419621 - IPS error when trying to connect to SuccessFactors: "400 The SSL certificate error"

Symptom

The IPS sync job is failing with the error below:

Caused by: HTTP operation failed invoking https://<SF API Server>.cert.successfactors.com/rest/iam/scim/v2/Users?startId=initial&count=100&filter=active%20eq%20%22true%22 with statusCode: 400 and body
<html>
<head><title>400 The SSL certificate error</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The SSL certificate error</center>
<hr><center>server</center>
</body>
</html>

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

Environment

SAP SuccessFactors HCM Suite

Reproducing the Issue

run IPS job.

Cause

Invalid certificate being used.

Resolution

Please make sure a valid certificate is used in Identity Provisioning > Source Systems > Outbound Certificates tab :

Pasted image.png

The certificate in here with an "Active" status needs to be the one which is imported in SuccessFactors following the instructions from Upgrade to X.509 Certificate-Based Authentication for Incoming Calls | SAP Help Portal.

Note: please don't enable the option "Automatic Regeneration" as it won't work for the SuccessFactors type of connection. When the certificate expires you need to generate a new one and import the new one into SuccessFactors again.

Keywords

ips, ssl, certificate, 400, html, ias, sync, read, sf, api, authentication, outbound, error,, x.509, 509, source, target, ias, ips, sf, successfactors, The SSL certificate error, 400 Bad Request, Bad Request, 400 The SSL certificate error, with statusCode: 400 and body, HTTP operation failed invoking , KBA , LOD-SF-INT-ODATA , OData API Framework , BC-IAM-IPS , Identity Provisioning Service (IPS) , Problem

Product

SAP SuccessFactors HCM Suite all versions

Attachments

Pasted image.png
Pasted image.png
Pasted image.png