3447162 - Process to Align Learning IAS tenant with HCM IAS Tenant

If the IAS tenant configured in Learning differs from the HCM/BizX IAS tenant, this article goes over the steps required to align the two tenants.

SAP SuccessFactors Learning

The following steps require multiple actions to be taken first before engaging SAP Support to complete the process. Please make sure to follow the steps closely:

1. [This first step is only available in 1H2025 & prior 2H2024 version will require service request; LMS IAS change alignment not possible prior to 2H2024] Go to Learning Administration > System Administration > Configuration > System Configuration > Edit SAP CLOUD IDENTITY SERVICES > Change activateIASAuthentication to false and Apply Changes.
2. Log in to the IPS system that the Learning system is currently integrated with. Select Identity Provisioning > Source System > Select the "LMS Tenant" Source System record > Jobs > Disable all jobs.
3. Still in the "LMS Tenant" Source System record > Properties > set the value of lms.user.filter as userName eq "UserDoesNotExist". Go to back to Jobs and select "Run Now" on the Resync Job. This jobs will remove all users that do not have the username of "UserDoesNotExist" in the IAS tenant.
   • In case the lms.user.filter does not exist, create a new one with key user.filter and value userId eq "UserDoesNotExist" and save changes.
4. Still in the "LMS Tenant" Source System record, select "Export" and save a backup. Afterwards, select "Delete" to remove the Source System.
5. Select Identity Provisioning > Target System > Select the "LMS Tenant" IAS Target System and select "Export". Afterwards, select "Delete" to remove the Target System.
6. Select Identity Providers > Authentication Providers > select the entry for the "LMS Tenant" > select "Delete" to remove the authentication provider.
7. Select Application & Resources > Applications > select the "LMS Tenant" application > Edit > Rename the Display Name field by appending "_Old".

After the above steps are completed, navigate to Upgrade Center in BizX and run the job - "Re-sync Learning Identity Authentication Service Integration". 

This upgrade performs a re-synchronisation of the existing Identity Authentication (IAS) tenant that is integrated with SuccessFactors Learning. The re-sync process automatically uses the latest IAS tenant linked to your SuccessFactors Platform system — it is not possible to select a different IAS tenant for this activity. It is important to note that both the SuccessFactors Platform and Learning systems must be paired with the same IAS tenant for the integration to function correctly.

This upgrade option is available only if you have previously completed the “Initiate SAP Cloud Identity Services - Identity Authentication Integration for Learning-Only Users” job and if the Identity Authentication for SuccessFactors Learning is currently deactivated. You should initiate the re-sync only after executing the “Change SuccessFactors Identity Authentication Service Integration” job.

Afterwards, complete these steps:

1. Migrating Learning Users to Identity Authentication
2. Identity Authentication Activation
   • Note on activation last steps: if receiving Identity Configuration user authentication failed, refer to KBA 3436066, ensuring to update the LMS Identity config file metadata provider ACS entries accordingly

Please note that when changing IAS in the upgrade centre. If the desired IAS is not displaying, please follow this KBA - 3084273 - How to allow SuccessFactors and IAS integration across regions and/or tenant type

SAP SuccessFactors Learning and SAP Cloud Identity Services Integration Overview

Identity Authentication Service,  change upgrade for IAS, SAP, Cloud, Identity, Services, Identity, Authentication, Integration, Learning,Only,  , KBA , LOD-SF-LMS-IAS , LMS IAS Integration for External User , LOD-SF-LMS-EXT , Sites and External Users , LOD-SF-LMS , Learning Management System , Problem