3783235 - Username/login name Behavior in Legacy vs Enhanced People Search

Symptom

When “Hide Usernames in the UI” is disabled, people search displays username/login name for all employees to users who do not have the “Login Name” permission in role-based permissions (RBP) when using Legacy People Search
In instance, where the Enhanced People Search is enabled, the same configuration respects RBP and does not display username/login name in people search for unauthorized users.
Login Name/ Username Behavior in Legacy vs Enhanced People Search

Environment

SAP SuccessFactors HCM Suite

Reproducing the Issue

Go to Company System and Logo Settings.
Disable “Hide Usernames in the UI”.
In RBP Troubleshooting, verify an affected user only has “Login Name” permission for self.
Sign in as the affected user and search for other employees in people search.
Observe that username/login name appears in parentheses for all employees.

(using the Legacy People Search)

Cause

In legacy people search, the username field visibility only respects the “Hide Usernames in the UI” setting and does not enforce field-level RBP/target population permissions. This is a known behavior in the legacy code path.

Resolution

You can use the option Hide Username in the UI to deactivate employees' usernames and login names in People Search if you don't want to search for certain employees with these names or you don't need them to be displayed in a search result. Note that the legacy People Search doesn't support the login name. Refer Hiding Usernames and Login Names in People Search | SAP Help Portal

If immediate prevention is required on legacy people search, enable “Hide Usernames in the UI” to suppress usernames globally.

Additionally, you can opt to use the updated feature for Enhanced People Search (Elastic Search). This implementation correctly enforces field-level permissions for username/login name:

To know more about it, please refer to KBA 3728404 - Enhanced People Search Enablement and Re-indexing Schedule.
After Enhanced People Search is enabled, configure RBP so only designated roles have the “Login Name” permission under Account Data and define the appropriate target population.
If authorized users must see login names, ensure “Hide Usernames in the UI” is disabled after Enhanced People Search is active - allow up to 30 minutes for RBP/target population cache to reflect permission changes.
With Enhanced People Search, the Login Name replaces the Username in the global header search results (displayed in brackets after the user's name). If a user does not have permission to view the Login Name, the bracketed field appears blank. Refer: Enhanced People Search is Now Available | SAP Help Portal and Permissions for Configuring People Search | SAP Help Portal

Keywords

people search, legacy people search, enhanced people search, elastic search, solr, username visibility, login name, hide usernames in the ui, rbp, role-based permissions, target population, permission cache delay, account data permission, search results, data privacy, username, login name, , KBA , LOD-SF-PLT-SRH , Search , How To

Product

SAP SuccessFactors HCM Suite 2605