2088013 - FTP: SF File Transfer Protocols, Secure FTP, SFTP

SAP Knowledge Base Article - Public

2088013 - FTP: SF File Transfer Protocols, Secure FTP, SFTP

Symptom

  • What are the SF File Transfer Protocols?
  • Does SuccessFactors Support Secure FTP?

  • What SFTP method is supported?

  • SuccessFactors “File Transfer” process is the new name for what we used to call the “FTP” process. Why the change? We are moving away from the FTP protocol. We are using more secure protocols to accomplish the same tasks. We have Globalscape SFTP/HTTPS servers setup in all data centers.

  • * Please note: Beginning August 1, 2014 SucessFactors will only support SFTP and HTTPS. Please click here for additional information.*

Environment

  • BizX Platform

Resolution

  • SuccessFactors does support both FTP and SFTP, however as this term can mean a variety of things to different people, please request our Specification Guide to review supported standards.
  • We detect both FTP and  Secure FTP during the transaction by default so implementation settings are then same on the SuccessFactors end regardless of the method used. If you need to send us a SSH key to further automate the process, Customer Success will work with our operations team to make sure this is correctly setup.
  • Please open a case with Customer Success to begin this process.
  • Please plan for 1-4 weeks to implement this. This is not the time required by SuccessFactors but also includes time to allow for your IT department to test and make adjustments as needed, which is often the majority of the time taken.

 

SUCESSFACTORS SUPPORTED FILE TRANSFER PROTOCOLS

 
If the customer is connecting to a SuccessFactors hosted server we support:

SFTP over SSH on port 22. File can be PGP encrypted. We will supply the customer with the name of the server to connect to, a login ID, and a password. If the customer supplies us their SSH public key, we can install it on our server. That will enable key based logins without a password.

HTTPS. Customers can connect to our server using a browser. File can be PGP encrypted. We will supply the customer with the name of the server to connect to, a login ID, and a password.

 

Data Centers

Each SuccessFactors data center has it’s own file transfer server. Depending on what data center the customer is hosted in they will connect to one of the following

sftp4.successfactors.com. Standard U.S. data center.

sftp8.sapsf.com. Premium U.S. data center.

sftp10.successfactors.com. Standard data center in Australia.

prodftp2.successfactors.eu. Premium E.U. data center.

prodftp5.successfactors.eu

All customers using our servers will have two standard folders. /incoming, /outgoing. All data must be in one of these folders or in a subdirectory of these folders. Customers should not create folders or store files outside of these areas.

 

If we are connecting to a customer hosted server we support:

Standard FTP on port 21. File must be PGP encrypted. We will transfer data in BINARY mode only FTP to prevent corruption of the PGP files. To set this up SuccessFactors will need the name or IP address of the server, the login id and the password.

SFTP over SSH on port 22. File can be PGP encrypted. To set this up SuccessFactors will need the name or IP address of the server, the login id and the password. We cannot provide an SSH Key to automate this process. We only support password based logins to customer hosted SFTP.


Note on PGP encryption. Encryption can be done using any PGP or GPG software. The party receiving the files always supplies a PGP Public Key. For files SuccessFactors is importing, we will supply the PGP key. We generate a unique PGP key for each customer instance. Customers with more than one SuccessFactors instance will receive multiple keys. For files SuccessFactors is exporting, the customer needs to supply the PGP key. We can accept multiple PGP keys from a customer. Exported files will be encrypted with ALL the customer keys. ANY individual customer key will be able to decrypt the file.

Note on Passwords. SFTP and HTTPS both encrypt login information. So passwords are never visible during the file transfer process. Any communication between personnel at SuccessFactors and the customer must also be done in a secure fashion.
 

Keywords

KBA , LOD-SF-PLT , Foundational Capabilities & Tools , How To

Product

SAP SuccessFactors HCM Core all versions