Benefitfocus sample API call structure:
Partner can run the “getSFIDPCertType” API call, check if the certType in the response is SHA-1

Sample call
GET https://apisalesdemo8.successfactors.com/odata/v2/getSFIDPCertType?acsurl='https://www.secure-enroll.com/sso/saml'



Response
<?xml version="1.0" encoding="utf-8"?>
<d:getSFIDPCertType m:type="SFOData.getSFIDPCertType" xmlns:d="http://schemas.microsoft.com/ado/2007/08/dataservices" xmlns:m="http://schemas.microsoft.com/ado/2007/08/dataservices/metadata">
    <d:errorMessage m:null="true"></d:errorMessage>
    <d:result>{"acsurl":"https://www.secure-enroll.com/sso/saml","certType":"sha1","module":""}</d:result>
    <d:status>Success</d:status>
</d:getSFIDPCertType>

Once this response is received, and it is confirmed that SHA-1 based certificate is used, please update the certType to SHA-2 and module to Benefitfocus accordingly in the SAP SuccessFactors tenant.
Sample call
POST https://apisalesdemo8.successfactors.com/odata/v2/updateSFIDPCertType 
Request body
{
"acsurl": "https://www.secure-enroll.com/sso/saml",

"module":"benefitfocus",

"certType":"sha2"
}

Response
<?xml version="1.0" encoding="utf-8"?>
<d:updateSFIDPCertType m:type="SFOData.updateSFIDPCertType" xmlns:d="http://schemas.microsoft.com/ado/2007/08/dataservices" xmlns:m="http://schemas.microsoft.com/ado/2007/08/dataservices/metadata">
    <d:errorMessage m:null="true"></d:errorMessage>
    <d:status>Success</d:status>
</d:updateSFIDPCertType>