SAP Knowledge Base Article - Public

2776016 - How to set up Two Factor Authentication between IAS and BizX SuccessFactors - BizX Platform

Symptom

There is a requirement within an organisation for 2FA (Two Factor Authentication)

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental." 

Environment

 SAP SuccessFactors HCM Suite

Resolution

Configuring the IAS Tenant for 2FA

  • Within the IAS Tenant, navigate to Applications > Choose Application > Authentication and Access > Risk-Based Authentication


Risk Based Authentication.png

  • Selecting a 'Default Setting' of Two Factor Authentication will apply it for everyone
  • Otherwise, you can define a 'Rule' for a specific target audience

Creating Rule.png

  • There are many different types of Rules to choose from, it's entirely up to you based on your organisation
  • For instance, here I have created a group in IAS called RiskBased and assigned Users to it

Rule Set.png

  • The above scenario would result in anyone that is part of the RiskBased group being prompted for Two Factor Authentication
  • Everyone else would just be prompted for Single Factor Authentication

1st Factor.png

2nd Factor.png

Pairing IAS User Profile to Mobile Authenticator

  • Once the user/s are set to login to SuccessFactors via IAS 2FA as outlined above, they must activate it
  • This is done via their IAS Profile and pairing it with their Mobile Authenticator

Examples of Mobile Authenticators:

    • SAP Authenticator
    • Google Authenticator
  • Scroll Down the Profile to the Two Factor Authentication section
  • Click Activate > Open SAP Authenticator on Mobile Device > click Add account > Scan QR Code on screen
  • That's it! You're SAP Authenticator will now start displaying codes that will be used for the Two Factor Authentication login process

Activate 2FA.png

2FA QR Code.png

See Also

2674264 - Configuring SSO between Corporate IDP, IAS Tenant and BizX Instance when using IAS as a proxy to Corporate IDP - BizX Platform

2674232 - Configuring SSO between IAS Tenant and BizX Instance - BizX Platform

Keywords

Two-Factor, Two-Factor Authentication, 2FA, IAS with 2FA, IAS Two-Factor , KBA , LOD-SF-PLT , Foundational Capabilities & Tools , LOD-SF-PLT-IAS , Identity Authentication Services (IAS) W BizX , LOD-SF-PLT-SAM , SAML SSO First Time Setup , How To

Product

SAP SuccessFactors HCM Suite all versions