SAP Knowledge Base Article - Public

3419621 - IPS error when trying to connect to SuccessFactors: "The SSL certificate error"

Symptom

The IPS sync job is failing with the error below:

Caused by: HTTP operation failed invoking https://<SF API Server>.cert.successfactors.com/rest/iam/scim/v2/Users?startId=initial&count=100&filter=active%20eq%20%22true%22 with statusCode: 400 and body
<html>
<head><title>400 The SSL certificate error</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The SSL certificate error</center>
<hr><center>server</center>
</body>
</html>

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."

Environment

SAP SuccessFactors HCM Suite

Reproducing the Issue

run IPS job.

Cause

Invalid certificate being used.

Resolution

  1. Go to Identity Provisioning > Source Systems > Outbound Certificates tab:
    Pasted image.pngPasted image.png

  2. Check if the certificate maintained there is Active and Not Expired:

    1. If no certificate presented there, click on the Generate button by following the Generate Certificate section.

    2. If showing as Expired, click on the Generate button by following the Generate Certificate section.

    3. If showing as Inactive, click on the Activate button.
    4. If showing as Active and Not Expired, continue to the step below.

  3. Click on the Down Arrow icon to Download the aligned certificate.

  4. Go to SuccessFactors > Security Center > X.509 Public Certificate Mapping and upload the certificate there by following the instructions from Upgrade to X.509 Certificate-Based Authentication for Incoming Calls | SAP Help Portal.

  5. Refer to Manage Certificate Validity & Subscribe for Expiring Outbound Certificate Notification to avoid future disruptions.

Keywords

ips, ssl, certificate, 400, html, ias, sync, read, sf, api, authentication, outbound, error,, x.509, 509, source, target, ias, ips, sf, successfactors, The SSL certificate error, 400 Bad Request, Bad Request, 400 The SSL certificate error, with statusCode: 400 and body, HTTP operation failed invoking , KBA , LOD-SF-INT-SCI , SCIM API , BC-IAM-IPS , Identity Provisioning Service (IPS) , Problem

Product

SAP SuccessFactors HCM Suite all versions

Attachments

Pasted image.png
Pasted image.png
Pasted image.png
Pasted image.png