Checking the certificate type in SAP SuccessFactors


Using the function import of SAP SuccessFactors, you can check the certificate type currently used for SSO. This OData API function import is fully documented at https://help.sap.com/viewer/28bc3c8e3f214ab487ec51b1b8709adc/latest/en-US/8d5e8e93f4be4c1dadda42626940cc45.html 
Sample call for OpenText OTDS configuration. The sample calls here are made against OpenText’s demo tenant, SFPART050885 on DC8.The same process must be followed for any SAP SuccessFactors tenant integrated with OpenText.
GET https://apisalesdemo8.successfactors.com/odata/v2/getSFIDPCertType?acsurl='https://pkaur-otds.eastus.cloudapp.azure.com:8443/otdsws/login’
Response
<?xml version="1.0" encoding="utf-8"?>
<d:getSFIDPCertType m:type="SFOData.getSFIDPCertType" xmlns:d="http://schemas.microsoft.com/ado/2007/08/dataservices" xmlns:m="http://schemas.microsoft.com/ado/2007/08/dataservices/metadata">
    <d:errorMessage m:null="true"></d:errorMessage>
    <d:result>{"acsurl":"https://pkaur-otds.eastus.cloudapp.azure.com:8443/otdsws/login","certType":"sha1","module":""}</d:result>
    <d:status>Success</d:status>
</d:getSFIDPCertType>




Updating the certType to SHA-2 in SAP SuccessFactors tenant


After completing the configuration settings on OTDS tenant, please update the module name and the certType on the connected SAP SuccessFactors tenant. The below sample call is for the OpenText demo tenant configuration. 
POST https://apisalesdemo8.successfactors.com/odata/v2/updateSFIDPCertType 
Request body
{
"acsurl": "https://xecm012.idea.eimdemo.com/otdsws/login/",
"module":"opentext",
"certType":"sha2"
}


Response
<?xml version="1.0" encoding="utf-8"?>
<d:updateSFIDPCertType m:type="SFOData.updateSFIDPCertType" xmlns:d="http://schemas.microsoft.com/ado/2007/08/dataservices" xmlns:m="http://schemas.microsoft.com/ado/2007/08/dataservices/metadata">
    <d:errorMessage m:null="true"></d:errorMessage>
    <d:status>Success</d:status>
</d:updateSFIDPCertType>