SuccessFactors prerequisites

Before you connect to SuccessFactors, we recommend that you first do the following:

1

Configure an integration service user (ISU). This is a unique user, whose sole purpose is connecting to Workato.

2

Assign to the ISU a role that includes the following permissions:

• General User Permission

• This permission includes:

  • User login

  • describe

  • SFAPI user login

  • describe

  • Login method (password)

  • describe

• Manage System Properties

• This permission includes:

  • Picklist management

  • describe

  • Picklists mappings set up

  • describe

• Employee Central API

• This permission includes:

  • Employee central foundation SOAP API

  • describe

  • Employee central HRIS SOAP API

  • describe

  • Employee central foundation OData API (read-only)

  • describe

  • Employee central HRIS OData API (read-only)

  • describe

  • Employee central foundation OData API (editable)

  • describe

  • Employee central HRIS OData API (editable)

  • describe

• Manage Integration Tools

• This permission includes:

  • Allow admin to access OData API through basic authentication
  • describe

• Recruiting Permissions

• This permission includes:

  • OData API job requisition create
  • describe

• Manage User

• This permission includes:

  • User account OData entity
  • describe

For more information on how to configure permission roles and groups, see Role-based permissions in SAP (opens new window).

Register your OAuth 2.0 client application

Complete the following steps to register Workato as an OAuth 2.0 client application:

1

Sign in to your SAP SuccessFactors instance.

2

Go to Admin Center > API Center > OAuth Configuration for OData. You can also access the tool by searching Manage OAuth2 Client Applications in the action search.

3

Click Register Client Application

4

Provide a callback URL in the Application URL field. Use one of the following URLs:

• https://www.workato.com/oauth/callback
• https://app.workato.com/oauth/callback

5

Select Bind to user, then enter the ISU user ID.

6

Click Generate X.509 Certificate and complete the required fields.

7

Click Generate, then download and save the certificate.

8

Click Register to save your registration. Save the API Key, which serves as the client ID.

Refer to Registering Your OAuth 2.0 Client Application (opens new window) for more information.

Authentication

The SuccessFactors connector enables you to authenticate using either Basic or OAuth 2.0 methods. However, SAP SuccessFactors recommends that you use OAuth 2.0.