SAP Knowledge Base Article - Public

2659632 - Integration Center to connect to an SFTP public or own SFTP

Symptom

You are using Integration Center to connect to an SFTP not hosted by SAP
Then you are getting an error stating that it is not possible to connect on the SFTP server.

Environment

  • successfactors
  • Integration Center

Reproducing the Issue

Steps

  1. Login to successfactors Instance
  2. Admin Center
  3. Integration Center
  4. Monitor Integrations
  5. Select the Failed Process
  6. Download Event Log


Event log Error message highlighted:

"Cannot connect to sftp://ZZZZZZ@XXX.XXXXXXX.XXX.XX:PPPPP

Could not connect to SFTP server XXX.XXXXXXX.XXX.XX from IP Address YYY.YYY.YYY.YY. Please check to see if IP Address YYY.YYY.YYY.YY is whitelisted by your SFTP server. Contact your IT for more information"

Error's subtitle:
ZZZZZZ = Username
XXX.XXXXXXX.XXX.XX = SFTP Domain name
PPPPP = Port
YYY.YYY.YYY.YY = IP Address of successfactors Datacenter

Sample of Event Log of the error:Event log error.jpg

Cause

You are trying to connect from successfactors Integration Center process to a private or public SFTP server but the successfactors IP is not whitelisted on the public/private server. In other words, when a process in the Integration Center tries to connect on a server outside SAP´s datacenter, it gets refused by the SFTP server.

Resolution

Check with your Local IT team to whitelist the IP Address of successfacrors datacenter. And also check with them if your SFTP is using the Port configured on your Integration (Destination Settings) on Integration Center.

This KBA has a list of all successfactors Data Center: (2395508 - IP addresses to be whitelisted when customer's own SFTP is used with Integration Center) https://launchpad.support.sap.com/#/notes/2395508

Please note, in case the successfactors Datacenter is DC2 and DC2 Preview hosted Instances, there is a Firewall which blocks traffic to external SFTPs. For this case, please check this KBA: 2553334 - DC2 Integration Center Connectiveity to Customers or Third Party SFTP

See Also

Frequently asked questions (FAQ):

Q: My IT Local team already whitelisted the IP address of successfactors datacenter, but the issue was not fixed yet. What else can I do?

A: You need to collect at least the logs from your SFTP server which contains the connections being refused or accepted by your server and provide to successfactors support team to progress on the investigation.

Q: Is there a possibility of the issue is located on the Integration Center or on SAP´s datacenter.

A: Yes, just if successfactors Datacenter is DC2 or DC2 Preview. For all the other Datacenters there is no Outbound whitelisting from Integration Center as it only tries to access the SFTP server, but there is a blocking action on SFTP side.

Keywords

Public SFTP; SFTP owned by customer; Cannot connect to SFTP; whitelisted by your SFTP server , KBA , LOD-SF-INT-INC , Integration Center , LOD-SF-INT , SF Integrations - EC Payroll, Boomi/ HCI, API , How To

Product

SAP SuccessFactors HCM Core all versions