SAP SuccessFactors Integration Reference

SAP SuccessFactors Components Certified for Integration with Oracle Access Governance

The SAP SuccessFactors components that you can integrate with are listed below.

Certified Components
Component Type	Component
System	SAP SuccessFactors

Supported Configuration Modes for SAP SuccessFactors Integrations

Oracle Access Governance integrations can be setup in different configuration modes depending on your requirement for on-boarding identity data, and provisioning accounts.

SAP SuccessFactors Orchestrated System supports the following modes:

Authoritative Source
You can use SAP SuccessFactors as an authoritative (trusted) source of identity information for Oracle Access Governance.
Managed System
You can manage SAP SuccessFactors accounts, and groups.

Supported Operations When Provisioning To SAP SuccessFactors

When you provision an account from Oracle Access Governance to SAP SuccessFactors certain operations are supported.

The SAP SuccessFactors Orchestrated System supports the following account operations when provisioning a user:

Create User
Only an Employee with an Employee ID is supported.
Update User
Enable User
Employee cannot be enabled. The underlying User associated with the Employee will be enabled.
Disable User
Employee cannot be disabled. The underlying User associated with the Employee will be disabled.
Add Group
Note

Currently only static groups are supported. Dynamic groups are not supported.
Remove Group
Note

Currently only static groups are supported. Dynamic groups are not supported.

For more details see Oracle Access Governance Integration Functional Overview and Integrate with SAP SuccessFactors.

Default Supported Attributes

Oracle Access Governance supports the following default SAP SuccessFactors attributes.

Default Attributes for SAP SuccessFactors - Authoritative Source
Entity	SAP SuccessFactors Account Attribute	Oracle Access Governance Account Attribute	Oracle Access Governance Identity attribute display name	Supported Module User/Employee
User	UserEntity.userId	uid	Unique Id	User & Employee
	UserEntity.username	name	Employee user name	User & Employee
	UserEntity.email	email	Email	User & Employee
	UserEntity.country	country	Country	User & Employee
	UserEntity.state	state	State	User & Employee
	UserEntity.city	city	City	User & Employee
	UserEntity.citizenship	citizenship	Citizenship	User & Employee
	UserEntity.empId	employeeNumber	Employee number	User & Employee
	UserEntity.jobLevel	jobLevel	Job level	User & Employee
	UserEntity.married	married	married	User & Employee
	UserEntity.status	status	Status	User & Employee
	UserEntity.businessPhone	phone	Phone	User & Employee
	UserEntity.cellPhone	mobile	Mobile	User & Employee
	UserEntity.firstName	firstName	First name	User & Employee
	UserEntity.lastName	lastName	Last name	User & Employee
	UserEntity.gender	gender	Gender	User & Employee
	UserEntity.salutation	salutation	Salutation	User & Employee
	UserEntity.middleName	middleName	Middle name	User & Employee
	PerPersonal.personIdExternal	externalPersonId	External person id	User & Employee

Employee	EmpJob.managerId	managerUid	Manager	Employee
	EmpJob.company	company	Company	Employee
	EmpJob.department	department	Department	Employee
	EmpJob.jobCode	jobCode	Job Code	Employee
	EmpJob.division	division	Division	Employee
	EmpJob.location	location	Location	Employee
	EmpJob.businessUnit	businessUnit	Business unit	Employee
	EmpJob.payScaleArea	payScaleArea	Payscale area	Employee
	EmpJob.employmentType	employmentType	Employment type	Employee
	EmpJob.isFulltimeEmployee	isFulltimeEmployee	Full-time employee	Employee
	EmpEmployment.startDate	startDate	Start date	Employee
	EmpEmployment.endDate	endDate	End date	Employee
	EmpEmployment.isContingentWorker	isContingentWorker	Contingent worker	Employee

Default Attributes for SAP SuccessFactors - Managed System
Entity	SAP SuccessFactors Account Attribute	Oracle Access Governance Account Attribute	Oracle Access Governance Identity attribute display name	Transformation	Updateable Field
User	UserEntity.userId	uid	Unique Id	No	No
	UserEntity.username	name	User login	Yes	No
	UserEntity.password	password	Password	No	Yes
	UserEntity.email	email	Email	Yes	Yes
	UserEntity.country	country	Country	No	Yes
	UserEntity.state	state	State	No	Yes
	UserEntity.city	city	City	No	Yes
	UserEntity.citizenship	citizenship	Citizenship	No	Yes
	UserEntity.empId	employeeNumber	Employee number	No	No
	UserEntity.jobLevel	jobLevel	Job level	No	Yes
	UserEntity.married	married	Marital status	No	Yes
	UserEntity.status	status	Status	Yes	Yes
	UserEntity.firstName	firstName	First name	Yes	Yes
	UserEntity.lastName	lastName	Last name	Yes	Yes
	UserEntity.gender	gender	Gender	No	Yes
	UserEntity.salutation	salutation	Salutation	No	Yes
	UserEntity.middleName	middleName	Middle name	No	No
	UserEntity.businessPhone	phone	Phone	No	Yes
	UserEntity.cellPhone	mobile	Mobile	No	Yes
	UserEntity.fax	fax	Fax	No	Yes
	PerPersonal.personIdExternal	externalPersonId	External person id	No	No

Group	groupId_staticGroup	groups	Groups	No	No
Dynamic Group	groupId_dynamicGroup	dynamicGroups	Dynamic Groups	No	No

Note

For Managed System mode, only User related attributes are supported. Employee provisioning is not supported.

Default Matching Rules

In order to map accounts to identities in Oracle Access Governance you need to have a matching rule for each orchestrated system.

The default matching rule for the SAP SuccessFactors orchestrated system is:

Default Matching Rules
Mode	Default Matching Rule
Authoritative Source Identity matching checks if incoming identities match an existing identity or are new.	Screen value: `User login = Employee user name` Attribute name: `Account.UserEntity.username = Identity.Name`
Managed System Account matching checks if incoming accounts match with existing identities.	Screen value: `User login = Employee user name` Attribute name: `Account.UserEntity.username = Identity.Name`