SAP Knowledge Base Article - Public

3084273 - How to allow SuccessFactors and IAS integration across regions and/or tenant type

Symptom

  • Customer wants to connect Production SuccessFactors tenant to Test IAS tenant (or vice versa).
  • Customer wants to connect SuccessFactors tenant to a different 'region' IAS tenant.
  • The "Initiate SuccessFactors SAP Cloud Platform Identity Authentication Service Integration" upgrade in Upgrade Center does not show desired IAS tenant as an option.
  • When trying to initiate the upgrade and select the "Request New Tenant" option is disabled or grayed out.

Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

Environment

  • SAP SuccessFactors HXM Suite
  • Identity Authentication Service
  • Identity Provisioning Service

Reproducing the Issue

  1. Go to Admin Center
  2. Open the Upgrade Center
  3. Search for upgrade Initiate SuccessFactors SAP Cloud Platform Identity Authentication Service Integration and click Learn More & Upgrade Now;
  4. Click Upgrade Now;
  5. Enter S-User credentials, same as used in the support portal to open incidents for the instance;
  6. A pop-up will appear to select the IAS tenant to integrate with;
  7. By default, this screen will only show IAS tenants matching the SF tenant type (Production or Test) and region (APAC, EU, AMER etc.);

Cause

Customers may want to connect SF and IAS across type and/or region but this is disabled by default.

Resolution

By default, the IAS tenants shown for selection are listed matching the SF tenant type and region. But cross-type and/or cross-region IAS tenants can be allowed by enabling a SF Provisioning setting, please contact customer support if this setting needs to be enabled. Upon enablement, all available IAS tenants will be listed in the Upgrade pop-up, regardless of type and region.

Note:  The upgrade will show a message if IAS tenant belonging to different region is selected-> "The SAP Cloud Platform Identity Authentication Service tenant you've chosen for this upgrade is not in the same region as your SAP SuccessFactors tenant. Are you sure you want to continue?". This is just a warning and the upgrade can be proceeded with by clicking "Yes".

Note for SAP SuccessFactors Support: This is the feature that needs to be enabled in Provisioning (only with customer approval): Provisioning > Company Settings > "Ignore region and type restrictions for Identity Authentication Service integration"

Important Note: Enabling the "Ignore region and type restrictions for Identity Authentication Service integration" setting can also disable the "Create New Tenant" option in the upgrade, that is expected behavior.

See Also

KBA 2791410 - Integrating SuccessFactors with SAP Cloud Identity Authentication Through the Upgrade Center

Guide: Initiating the Upgrade to SAP Cloud Identity Services - Identity Authentication Service

Keywords

Create New Tenant, IAS, not available, not shown, disabled, grayed out, Create New Tenant grayed out, Create New Tenant disabled , KBA , LOD-SF-PLT-IAS , Identity Authentication Services (IAS) With BizX , BC-IAM-IDS , Identity Authentication Service , How To

Product

SAP SuccessFactors HCM Suite all versions