SAP Knowledge Base Article - Public

3058230 - How to setup logout, timeout or invalid URL redirect on SuccessFactors IAS integrated instances

Symptom

  • How to change the session timeout redirect URL on instance with IAS integrated;
  • How to change the invalid login redirect URL on instance with IAS integrated;
  • How to change the logout redirect URL on instance with IAS integrated;
  • How to change the invalid manager redirect URL on instance with IAS integrated;
  • After logout not being redirect to login page;

Environment

SAP SuccessFactors HXM Suite

Resolution

On IAS enabled instances, you can control the logout, session timeout, invalid manager and invalid login from the Admin Center's Manage SAML SSO Settings.

To determine the redirect URLs for your instance follow the below steps:

  1. Log as an Admin user to your instance; (Make sure that user has permission Manage Security -> Manage SAML SSO Settings)
  2. Navigate to Admin Center -> Company Settings -> Manage SAML SSO Settings;
  3. Click Set Non SAML Redirect Pages;
  4. On the page you will see the checkbox for each of the URLs:
    • Redirect URL when logout
    • Redirect URL when session timeout
    • Redirect URL for Invalid Login
    • Redirect URL for Invalid Manager
  5. The ones that you want to customize, check the checkbox and enter the URL just below;

Note about redirect to login page:

  • If you want to be redirected to the login page again, you can insert your SuccessFactors login page to the URL desired;
  • For logout, you should not face issues as on you trigger SF logout and logout on IAS should be trigger killing the session and allowing other user to login;
  • For session timeout, we advise that you first align the timeout period on IAS, as if the timeout happens only on SuccessFactors and you trigger a login, the user will be automatically logged in via the IAS session (this behavior could be desired, but that depends on customer business case);
  • We do not advise to do this on either Invalid Login or Manager, as it will likely generates a infinite loop for the end user as there is an IAS session open and IAS will try to authenticate the same user.

Keywords

KBA , LOD-SF-PLT-IAS , Identity Authentication Services (IAS) With BizX , How To

Product

SAP SuccessFactors HXM Core 2011