# SuccessFactors prerequisites
Before you connect to SuccessFactors, we recommend that you first do the following:
Configure an integration service user (ISU). This is a unique user, whose sole purpose is connecting to Workato.
Assign to the ISU a role that includes the following permissions:
General User Permission
This permission includes:
User login
describe
SFAPI user login
describe
Login method (password)
describe
Manage System Properties
This permission includes:
Picklist management
describe
Picklists mappings set up
describe
Employee Central API
This permission includes:
Employee central foundation SOAP API
describe
Employee central HRIS SOAP API
describe
Employee central foundation OData API (read-only)
describe
Employee central HRIS OData API (read-only)
describe
Employee central foundation OData API (editable)
describe
Employee central HRIS OData API (editable)
describe
Manage Integration Tools
This permission includes:
- Allow admin to access OData API through basic authentication
- describe
Recruiting Permissions
This permission includes:
- OData API job requisition create
- describe
Manage User
This permission includes:
- User account OData entity
- describe
For more information on how to configure permission roles and groups, see Role-based permissions in SAP (opens new window).
Register Workato as an OAuth 2.0 client application.
When you register, select the Bind to technical user option, and provide the ISU user ID.
See Registering Your OAuth 2.0 Client Application (opens new window).
Authentication
The SuccessFactors connector enables you to authenticate using either Basic or OAuth2 methods. However, SAP SuccessFactors recommends that you use Oauth2.
Last updated: 6/25/2024, 7:45:56 PM