2091967 - SSO: Links in email notifications are taking to the Successfactors login screen - Platform

SAP Knowledge Base Article - Public

2091967 - SSO: Links in email notifications are taking to the Successfactors login screen - Platform

Symptom

  • This article is an overview of SSO deep links.

  • Links in email notifications are taking to the Successfactors login screen.

Environment

  • BizX Platform

Resolution

  • Deep links are supported at SuccessFactors and below are few mandatory steps we need ensure so that the deep links works without any issues.
     
  • System generated email notifications will reach to users from different modules as per the functionality.
     
  • Before a user tries to access the links in the notification, user must ensure that he/she has already logged in their internal portal from where the SSO the authentication starts. Technically this means that there must be an active session of customer’s internal portal in the same browser in which user accesses the link from notification.
     
  • If there is no active session in the browser, users will be redirected to the “Deeplink IDP Login redirect" URL configured in the SSO configuration.
     
  • If there is no URL configured for “Deeplink IDP Login redirect" in the SSO configuration, the request will redirect the user to SuccessFactors login page which is default session timeout URL.
     
  • Further it is recommended to configure customers “Internal SSO URL” (from where the SSO authentication starts) in the Deeplink IDP Login redirect so that whenever there is no active session while accessing the link in notification, users will be redirected to the internal SSO link which will trigger users to authenticate themselves and creates a session required.

Keywords

KBA , sf platform , LOD-SF-PLT , Foundational Capabilities & Tools , Problem

Product

SAP SuccessFactors HCM Core all versions