Setup for SAP SuccessFactors

This page explains how to connect SAP SuccessFactors tenants to SAP Cloud ALM.

Currently the following monitoring application are supported for SAP SuccessFactors:

Update: Switch to Certificate-based Authentication for Endpoints

SAP SuccessFactors will delete the access to APIs based on HTTP Basic Authentication on November 20, 2026. (SAP Help)

Hence, SAP Cloud ALM now supports the usage of certificate-based authentication for monitoring endpoints to SAP SuccessFactors.

Please adjust your existing endpoints accordingly before November 20, 2026.

Setup Videos

The following videos demonstrate the setup steps to set up Integration & Exception Monitoring for SAP SuccessFactors.

A textual step by step description for all setup steps is provided in the sections below the videos.

 

Set Up Integration & Exception Monitoring for SAP SuccessFactors

  • Prerequisites for this video:

Set Up Business Process Monitoring for SAP SuccessFactors

  • Prerequisites for this video:
    • Create an SFAPI user in SAP SuccessFactors as described under SAP SuccessFactors SFAPI User
    • You need a user with the role "Business Process Monitoring Administrator" in SAP Cloud ALM

Prerequisites

Technical Prerequisites

  • You need to obtain the SAP Cloud ALM Service Key to connect to the SAP Cloud ALM system
  • Enable SFAPI usage
    • In order to use the SFAPI, SAP SuccessFactors must enable the API for your company instance. This is usually done during the initial implementation. If this was not done, please contact your SAP SuccessFactors support representative to enable the SFAPI for your instance.

Required Authorizations

  1. Your personal user needs the permissions:
    1. Manage Integration Tools > Access to Integration Service Registration Center UI
    2. Admin Center > Manage Permission Roles > Access to X.509 Certificate Mapping
  2. Create a new user for the SFAPI in SAP SuccessFactors and assign the settings and authorizations listed under SAP SuccessFactors SFAPI User
  3. Your personal user in SAP Cloud ALM needs the role 
    1. 'Landscape Management Security Administrator' (to create and download a certificate) 
    2. Or 'Landscape Management Security Viewer' (to download an existing certificate)

Setup Steps in SAP SuccessFactors

Enable Monitoring Data PUSH to SAP Cloud ALM

This step is only needed if you use integrations for which we can collect messages.

You find supported scenarios in the table Available Monitoring Content on the Integration & Exception Monitoring page for SAP SuccessFactors.

  1. Go to "Admin Center"
  2. In the "Tools Search", search for Integration Service Registration Center
  3. In the following screen select "SAP Cloud ALM"
  4. Enter the following values:
    1. System Type: Enter the role of the SAP SuccessFactors system as DEV, TEST or PROD (you must use these specific values instead of other free form role types).
    2. Description: Enter a description, e.g. "SAP SuccessFactors tenant XXX"
    3. Endpoint: SAP Cloud ALM service key parameter "Api" without /api
    4. OAuth URL: SAP Cloud ALM service key parameter "url" + /oauth/token
    5. Client ID: SAP Cloud ALM service key parameter "clientid"
    6. Client Secret: SAP Cloud ALM service key parameter "clientsecret"
  5. Click "Register"
  6. Click "OK"

Note: To deactivate your instance, click "Deregister".

The registration will create an entry for this SAP SuccessFactors instance in the Landscape Management application of SAP Cloud ALM, if it doesn't already exist.

Create HTTP Endpoint

Map SAP Cloud ALM Certificate in SAP SuccessFactors

To use X.509 Certificate-Based Authentication for incoming calls to SAP SuccessFactors you first have to map the SAP Cloud public certificate in SAP SuccessFactors.

  1. Log on to SAP Cloud ALM and open the Landscape Management application
  2. Open the Configuration panel
  3. In the section 'Certificates' click the 'Download' button to download the Cloud ALM public certificate
    • If no certificate exists, click the 'Generate' button to create one
      • Enter a password for the certificate. It is needed later in the endpoint creation.
      • Press 'Generate Certificate'
    • You need the role 'Landscape Management Security Admin' to generate a certificate

This certificate needs to be uploaded into SAP SuccessFactors.

  1. Log on to SAP SuccessFactors
  2. Go to Security Center > X.509 Public Certificate Mapping
  3. Click 'Add'
  4. Enter the following values:
    1. Configuration Name: e.g. Cloud ALM Certificate Mapping
    2. Integration Name: Business Technology Platform
    3. Certificate File: Upload the certificate .pem file you downloaded from SAP Cloud ALM
    4. Login Name: Enter the previously created user for the SFAPI

Endpoint for Exception Monitoring

The endpoint only needs to be created to support the PULL data collection of exceptions.

Please note: Currently, the PUSH monitoring setup creates an additional cloud service in Landscape Management. If you activated the PUSH data collection in the previous step, you should create the endpoint for this cloud service. If you didn't activate the PUSH data collection please create the endpoint for the SAP SuccessFactors HCM tenant that was synchronized automatically from SAP.

  1. Open the Landscape Management application from the launchpad
  2. Select your SAP SuccessFactors service (Service type "SAP SuccessFactors HCM")
  3. On the tab "Endpoints" press the "Add" button to create a new endpoint
  4. Enter a description
  5. Choose the use-case "Exception Monitoring"
  6. The Root URL will be adjusted automatically*
  7. Choose "ClientCertificateAuthentication" and enter:
    • Certificate Key Store Location: Choose the certificate that you uploaded into SAP SuccessFactors
    • Certificate Key Store Password: Enter the password that you provided when you generated the certificate
  8. Perform a Connection Check
  9. Click "Save".

* If the endpoint Root URL field is not filled automatically or you want to still use BASIC authentication, please follow the steps below to find the correct API URL.

  1. Select your SAP SuccessFactors service (Service type "SAP SuccessFactors HCM")
  2. Check the value for the field "System ID" in the properties (e.g. DC33STD or DC57PREV)
  3. Open SAP Help List of SAP SuccessFactors API Servers for different Data Centers. 
  4. If the "System ID" value ends with STD, use the API Server for the Production environment. 
  5. If the "System ID" value ends with PREV, use the API Server for the Preview environment

Endpoint for Business Process Monitoring

After the creation of the end-point the data collection will be scheduled automatically.

  1. Open the Landscape Management application from the launchpad
  2. Select your SAP SuccessFactors service (Service type "SAP SuccessFactors HCM")
  3. On the tab "Endpoints" press the "Add" button to create a new endpoint
  4. Enter a description
  5. Choose the use-case "Business Process Monitoring"
  6. The Root URL will be adjusted automatically*
  7. Choose "ClientCertificateAuthentication" and enter:
    • Certificate Key Store Location: Choose the certificate that you uploaded into SAP SuccessFactors
    • Certificate Key Store Password: Enter the password that you provided when you generated the certificate
  8. Perform a Connection Check
  9. Click "Save".
  10. After the successful activation, the data collection will start, and the SAP SuccessFactors tenant will appear in the Configuration pane in the Business Process Monitoring application. 

* If the endpoint Root URL field is not filled automatically or you want to still use BASIC authentication, please follow the steps below to find the correct API URL.

  1. Select your SAP SuccessFactors service (Service type "SAP SuccessFactors HCM")
  2. Check the value for the field "System ID" in the properties (e.g. DC33STD or DC57PREV)
  3. Open SAP Help List of SAP SuccessFactors API Servers for different Data Centers. 
  4. If the "System ID" value ends with STD, use the API Server for the Production environment. 
  5. If the "System ID" value ends with PREV, use the API Server for the Preview environment

Next Steps

After creating the endpoint in SAP Cloud ALM, you have to perform the following steps to activate the monitoring use-cases:

  • Integration & Exception Monitoring: The data collection for SAP SuccessFactors messages is activated automatically, but you still have to Activate Monitoring Data Collection for SAP SuccessFactors exceptions
  • Business Process Monitoring: Data collection is activated automatically

Troubleshooting & Customer Support

To troubleshoot any issues with the setup or the data collection for SAP SuccessFactors, please follow the Troubleshooting for SAP SuccessFactors page

Should this information not suffice to address your problem please open an incident.