SAP Knowledge Base Article - Public

3660504 - Error "validation_failed" when testing OIDC authentication to SuccessFactors APIs

Symptom

When testing OIDC authentication to SuccessFactors APIs, you are able to get the access token from IAS endpoint, but the error below happens when trying to get the SuccessFactors token:

{
    "error": "validation_failed",
    "error_description": "Unexpected configuration error."
}

Environment

  • SAP SuccessFactors HCM Suite
    • OData API

Reproducing the Issue

  1. Configure an OIDC application in IAS for SuccessFactors following the official documentation.
  2. Perform the first API call to the IAS endpoint to retrieve an access token.
  3. Use the retrieved access token to make a second API call to obtain the SuccessFactors token.
  4. Observe the error message:
    {
        "error": "validation_failed",
        "error_description": "Unexpected configuration error."
    }

Cause

OIDC configuration in IAS is not correctly set up.

Resolution

First, please ensure all steps from the official documentation (Register Your Own Application to Communicate with SAP SuccessFactors HCM Suite with OpenID Connect) are properly followed.

Afterwards, please confirm the following additional configurations in IAS:

  1. Navigate to "Charged Applications" > select your created OIDC application >  go to "Subject Name Identifier" and ensure it is set to "User ID".
  2. Go to "User & Authorizations" > "User Management", locate the user being used to log in to IAS (the first API call), and ensure that the user has a "Login Name" with a value matching the corresponding SuccessFactors username.

Keywords

OIDC, SuccessFactors, validation_failed, unexpected configuration error, IAS, access token, authentication issue, ODATA, OAuth, Subject Name Identifier, User ID, Login Name, OpenID Connect , KBA , LOD-SF-INT-ODATA-OAU , ODATA OAUTH Authentication , Problem

Product

SAP SuccessFactors HCM Suite all versions