Onboarding Basic Auth Login Method Deprecation
A change to the Onboarding new hire authentication process have been implemented by SAP.
As of the 2H 2022 Onboarding provides authentication to the Onboardees with SAP IAS.
Additionally the SAP IAS will use SCIM API (Cross-domain Identity Management).
This improvements are available since 2022, but SAP have announced that Basic Authentication (old access with SFSF) will no longer be supported after June 2, 2025.
Finally, the use of this method will be permanently removed on November 13, 2026.
What does this mean, and how will it change the Onboarding User Experience with IAS integration?
When a new hire is created in SAP SuccessFactors Onboarding, they’re replicated in IAS in real-time.
👉If the New Hire Data Review step is available in the Onboarding process flow, then the new hire’s account is synced to SAP IAS after the “New Hire Review Data” step is completed.
👉If the New Hire Review Data step is not available, then as soon as the Initiate Onboarding step is complete, the new hire’s account is synced to SAP Identity Authentication Service.
Customer Action
It is important to understand your current situation:
- Do you have IAS implemented?
- It’s the SCIM (System Cross-domain Identity Management) activated?
- Are you planning to activate real time Sync for onboardees provisioning?
To clarify the questions above, you can visit this blog.
More resources
| How does IAS for Onboardees work? | |
| Step by Step implementation IAS for onbaordees | |
Even More Resources
- Blog: This blog provides a step-by-step guide on how to make the changes.
Onboarding New Hires Authentication using SAP Identity Authentication Service (IAS). - Authentication Service (IAS).
- Blog:
Migrate to SCIM API for better User Identity Sync between SuccessFactors and IAS/IPS. - Announcement Blog:
Deprecation of Basic Auth/3rd Corporate Identity Provider (IdP) Direct Integration w/SuccessFactors - WNV
Deprecation of Basic Authentication and Third-Party Corporate Identity Provider (IdP) Direct Integration with SAP SuccessFactors HCM suite | SAP Help Portal - Help:
Migration to SAP Cloud Identity Services – Identity Authentication Service | SAP Help Portal
If you encounter any issues during the migration to SAP Cloud Identity Services, create an incident with the component LOD-SF-OBX-IAS.
If your implementation of ONB was previous 2022, surely you have received an email like below:
Customer
Communication
Onboarding Basic Auth Login Method
Deprecation
Issue: Username not defined for Onboardees
The username for the Onboardee it’s empty. This is because the Onboarding Process Variant was…
Activate the IAS for Onboardee > 4of4
This is the last step of a 4 step process described in here. Navigate to…
Real-Time Sync of New Hires from SAP SuccessFactors to IAS > 3of4
This blog is one of the steps to migrate to IAS authentication for Onboardees. Real-time…
Upgrade from OData API to SCIM – IAS for the Onboarding Module > 2of4
This requirement usually happen when you need to enable the IAS as the authentication method…
👉IAS account for Onboardees
From the 2H 2022 release, the onboardee’s account is a SAP IAS one. This IAS…