SAP’s Identity Authentication Service: What You Need to Know
You may have already heard that SAP will require all customers to move to the Identity Authentication Service (IAS) by the end of 2022. But why is this so important and how will it affect you?
One Point of Access for All Products
First off, SAP will be discontinuing the Single Sign-On (SSO) function in SAP’s SuccessFactors Platform so you’ll need alternative log-in access, which is where IAS comes in. This is a good thing because IAS will now act as the “one-stop shop” for access to all of your SAP products. Customers can now connect the sign-on process for their users instead of setting up SSO for each product. This will make for a much better day-to-day experience.
Although SAP has not given a definitive date for when they will force current SSO customers to move to IAS, we encourage everyone to consider doing this sooner rather than later to avoid any last-minute rush.
IAS and Internal vs. External Learners in SAP SuccessFactors Learning
Customers who are already using the integrated external learner solution can continue to use it. Those who want to start offering learning to non-employee users have two alternatives in place via the integrated external user feature:
SAP SuccessFactors Learning customers can create users as internal users in the SAP SuccessFactors Platform and use its authentication system.
This is recommended for users with a working relationship, such as contingent workers.
Mobile, theming, and SAP Jam integration are also available.
SAP SuccessFactors Learning customers can opt to create Learning-only users in Learning rather than the SAP SuccessFactors Platform.
This is recommended for non-workers such as customers, distributors, or partners.
This method does not currently support mobile, theming, or SAP Jam integration.
Authentication for external Learning-only users is currently native to Learning but will be migrating to the SAP CI Identity Authentication Service.
SAP’s IAS Is Required for Stories in Workforce Analytics
While it’s true that IAS isn’t required for all SAP products just yet, it’s already specifically required when implementing Stories in SAP SuccessFactors Workforce Analytics. Stories allow customers to build dynamic analytics reports and dashboards. So, before you embark on implementing Stories, you must have IAS enabled.
The Five-step Process to Implement and Enable IAS
The process of migrating to IAS requires tasks to be performed in the SAP SuccessFactors Admin Center, the Identity Provisioning Service (IPS) Administration Console, and in the Identity Authentication Service (IAS) Administration Console. These steps are as follows:
Initiate IAS upgrade in Upgrade Center (UC)
Set up corporate identity provider (IDP) in the IAS administration console
Configure log-in options, user groups, and password policies in the IAS administration console
Configure Identity Provisioning Service (IPS) settings and setup sync jobs within the IPS administration console
Enable IAS in UC
Timing Is Critical for SAP IAS
The end of SAP’s deadline draws near: SAP requires all customers to move to IAS. Starting now will help ensure that users experience minimal disruption and new implementations are no longer being supported by SAP.
About the author
Kevin Slepecki is a Technical Lead at Effective People.
Kevin has been with Effective People since 2009 and has extensive experience with implementing multiple customer integrations between SuccessFactors and systems such as Kronos and custom payroll systems using Dell Boomi.