3428312 - SSO login page shows up when accessing Internal Career Site powered by CSB - Recruiting Marketing

• When trying to access Internal Career Site powered by CSB, the SSO login page appears instead of accessing directly.
• Users are required to manually enter credentials.

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

• SAP SuccessFactors Recruiting Marketing
• SAP SuccessFactors Recruiting Management

1. Log into SuccessFactors through SSO.
2. Click on 'Careers' on SuccessFactors home page.
3. The IAS SSO login page appears.

Cause 1 - Login Name

The Login Name configured for BizX, CSB and RCM applications in IAS doesn't match.

Cause 2 - Conditional Authentication (Corporate Identity Provider)

When using Corporate Identity Provider in IAS, the Conditional Authentication configured for BizX, CSB and RCM applications is inconsistent.

Cause 3 - Common Super Domain

After the enablement of the Common Super Domain (*.accounts.cloud.sap), the Redirect URLs / Endpoint URLs in CSB and RCM haven't been updated.

For Cause 1 - Login Name:

1. Go to IAS Administration Console > Applications & Resources > Applications.
2. Check the following applications:
   • SuccessFactors
   • Career Site Builder
   • Recruiting Management
3. Ensure that the Subject Name Identifier is set to Login Name.

For Cause 2 - Conditional Authentication (Corporate Identity Provider):

1. Go to IAS Administration Console > Applications & Resources > Applications.
2. Check the following applications:
   • SuccessFactors
   • Career Site Builder
   • Recruiting Management
3. Select 'Conditional Authentication'.
4. To use Corporate IdP, ensure that the Default Identity Provider is set to the third-party identity provider instead of 'Identify Authentication' (if you're not using any vendor, such as Azure, for example, then it should always be set as "Identity Authentication")
5. If Authentication Rules are configured, make sure that the rule is consistent for the same Email Domain/User Type/User Group/IP Range.

For Cause 3 - Common Super Domain:

To find out whether IAS is configured on common super domain, refer to the KBA 3436066 - SSO Configurations with IAS On common super domain cloud.sap.

To adopt the common super domain, update the Tenant Name in CSB and RCM from "[tenantId].accounts.ondemand.com" to "[tenantId].accounts.cloud.sap". This will update the Redirect URLs / Endpoint URLs automatically.

• RCM - Admin Center > Manage Service Provider Configuration for Identity Authentication Service (IAS)
• CSB - Manage Career Site Builder > Settings > IDP Configuration

If users are unable to log into the career site after manually entering credentials, re-import the metadata for RCM and CSB applications in IAS. For more information, refer to the KBA 2844889 - ICS - Unable to login to the Internal Career Site - Recruiting Marketing

• KBA 2769123 - Internal Career Site Powered by CSB - Recruiting Management
• KBA 2844889 - ICS - Unable to login to the Internal Career Site - Recruiting Marketing
• KBA 3436066 - SSO Configurations with IAS On common super domain cloud.sap
• KBA 3242514 - AADSTS50011 error occurs after redirected to Microsoft Entra ID (Azure AD) as Corporate Identity Provider

internal, career, site, IAS, ICS, employee, RMK, CSB, SSO, login, IDP, Careers, identity provider, SAML 2.0, username, redirect, single-sign-on , KBA , LOD-SF-RMK-ICS , Internal Career Site Builder (CSB, IAS, etc ...) , LOD-SF-RMK , Recruiting Marketing , Problem