SAP Knowledge Base Article - Public

3627877 - Identity Authentication Integration for Learning-Only Users - Job in progress for 5+ days or errors out due to custom domain

Symptom

If IAS is on a custom domain, it can cause the Initiate SAP Cloud Identity Services - Identity Authentication Integration for Learning-Only Users upgrade job in Upgrade Center to error out. LMS-IAS upgrade fails when using custom IAS host URL in Provisioning > Single Sign-On (SSO) Settings > SAML Issuer. 

Environment

  • SAP SuccessFactors Learning
  • SAP SuccessFactors HCM Suite
  • SAP Cloud Identity Services

Reproducing the Issue

  1. Try to run the "Initiate SAP Cloud Identity Services - Identity Authentication Integration for Learning-Only Users" job when BizX-IAS is using a custom IAS domain but the job remains in progress for 5+ days.

Cause

Custom IAS host is not supported for the Identity Authentication Integration for Learning-Only Users job.

Resolution

The "Initiate SAP Cloud Identity Services - Identity Authentication Integration for Learning-Only Users" upgrade job should ran before switching over to use a custom domain on BizX/HCM. If a custom domain is already set, you can take the below steps to temporarily change the asserting party before kicking off the LMS-IAS upgrade job:

Note: Please be careful with this change and do it quickly as the login to HCM will not work while the change is being done. You don't need to wait until the upgrade is completed to change the "SAML Issuer" back to the custom one, you just need to trigger the upgrade and wait a minute or two.
 
1.    Login to SuccessFactors and go to Upgrade Center
2.    In a new incognito window go to Provisioning > Single Sign-On (SSO) Settings > SAML Issuer
3.    Set the default IAS URL in "SAML Issuer" and click on "Update the asserting party"
4.    In Upgrade Center trigger the "Initiate SAP Cloud Identity Services - Identity Authentication Integration for Learning-Only Users" upgrade
5.    Once the upgrade is triggered, wait a minute or two, go to Provisioning again and revert the change you just did: Provisioning > Single Sign-On (SSO) Settings > set the custom IAS host URL back in "SAML Issuer" and click on "Update the asserting party"

Provisioning is only accessible by SAP or Partners. Please make sure to provide approval to follow these steps to SAP Support if you do not have a Partner to make these changes on your behalf.
 
If the upgrade job has already been kicked off and is stuck for 5+ days, please create a case via SAP For Me for SAP Support to work with the Engineering team, please refer to this KBA when creating the case.

Keywords

IAS, upgrade, center, job, stuck, error, custom, domain, learning, learning-only, users, failed , KBA , LOD-SF-LMS-IAS , LMS IAS Integration for External User , Problem

Product

SAP SuccessFactors HCM Suite all versions ; SAP SuccessFactors Learning all versions