3452048 - Unable to login to SuccessFactors after Common Super Domain(CSD) activation

Unable to login to SuccessFactors after CSD activation/upgrade

SAP SuccessFactors HXM Suite

1. You have requested the CSD migration upgrade to be made available in upgrade center

2. You Activate/Enable IAS by running the "Activate SuccessFactors Identity Authentication Service Integration" upgrade ( see step 3. Enable SAP SuccessFactors to SAP Cloud Platform IAS Integration in KBA - 2791410 ) on the same day as you plan to run the CSD migration upgrade

3. Within a few hours of completing the Activate IAS upgrade - you successfully run the Common Super Domain migration upgrade from the upgrade center. 

4. You are then unable to login to SuccessFactors - you are correctly directed to your IAS login but it will not login in.

The CSD migration upgrade was not able to confirm the IAS active flag in SPC and so does not update IAS Admin > Applications & Resources > your SuccessFactors App > SAML 2.0 Configuration details with the new Common Super Domain metadata

We are currently working on resolving this so as soon as the Activate IAS upgrade is complete the active flag is available for the CSD migration upgrade.

Workaround:

Manually update your SF app with the SuccessFactors CSD metadata

**Note first check your IAS Admin > Applications & Resources > your SuccessFactors App > SAML 2.0 Configuration to confirm this is your issue - if this is the issue you will see that your Assertion Consumer Service Endpoints are the old SuccessFactors URLs not the CSD URLs.

1. Confirm your CSD URL - please refer to the CSD Migration Guide - from page 30 there is a full list of all Data Center URL Mapping which confirms the new CSD URL for each Production and Preview URL.
   For example if your SF companyID in question was on DC66 Production the old SF URL was https://performancemanager10.successfactors.com therefore you new CSD URL for DC66 Production is https://hcm-ap10.hr.cloud.sap
2. Download the metadata file for your companyID/CSD DC - the metadata file can be downloaded by using your CSD URL along with /saml2/spmetadata?company=yourcomapnyID (ensure you replace "yourcompanyID" with your actual companyID -  Example: by using the above example of DC66 Production you can download metadata file from https://hcm-ap10-preview.hr.cloud.sap/saml2/spmetadata?company=yourcomapnyID
3. Save the metadata file as a .xml
4. In IAS Admin > Applications & Resources > your SuccessFactors App > SAML 2.0 Configuration > click on browse and select the metadata file you just saved. Import and Save this.

You should now see that your Assertion Consumer Service Endpoints URLs have updated to the correct CSD URLs and you should be able to login to SuccessFactors again.

CSD Migration Guide

KBA - 2791410 - Integrating SuccessFactors with Identity Authentication IAS through the Upgrade Center

CSD Migration, IAS login, login, CSD, Common Super Domain , KBA , LOD-SF-PLT-CSD , Common Super Domain for SuccessFactors , Problem