SF PLT Managing User Info en
SF PLT Managing User Info en
1 Change History. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
2 User Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
2.1 Different IDs in SAP SuccessFactors HXM Suite. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8
Global User ID. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Assignment ID. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
2.2 About Technical User. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Learn about changes to the documentation for Managing User Information in recent releases.
2H 2022
New Added information about SAP Success Overview of SAP SuccessFactors Work
Factors Workforce SCIM API. force SCIM API [page 157]
Mapping Between SCIM Users and
ODATA User [page 166]
Added Added information about account ID. Viewing Login Accounts [page 33]
New Added information about general display Enabling the Adoption of General Display
name. Name [page 67]
Important Notes About General Display
Name Adoption [page 68]
Defining a Name Format [page 82]
Configuring the Name Format Using Le
gal Entity [page 83]
Configuring the Name Format Using Peo
ple Profile [page 83]
Refreshing General Display Name [page
84]
New Added information about SAP Global Different IDs in SAP SuccessFactors HXM
User ID. Suite [page 8]
Global User ID [page 11]
Added Added field requirements of gender, gen Field Requirements for the User Data File
eral display name, and pronouns. [page 94]
Added information about data type vali
dation of the hire date and exit date.
Added a gender pronoun limitation of
Writing Assistant.
Added Added information about third-party in Exporting User Data [page 91]
tegration using the exported user data
file.
Added Added information about resetting pass Resetting Password of Login Accounts
words of login accounts. [page 39]
1H 2022
Added When you switch login account, you can Changing Login Accounts [page 34]
now also update the password-related
settings of the login account accordingly.
New Added information about enabling the Hiding Usernames in the UI [page 65]
"Hide Username in the UI" feature.
Added Added information about assignment Different IDs in SAP SuccessFactors HXM
UUID. Suite [page 8]
Added Added a note about importing profile Importing Profile Photos [page 148]
photos for employees with multiple em
ployments.
New Added information about a new per Importing Extended User Information
mission Hide the Option to Import by [page 138]
Overwriting Existing Data for Background
Information.
In SAP SuccessFactors, user information consists of basic user information and extended user information. If you
are managing users in Employee Central, there are even more user information elements. This administration guide
is mainly focused on managing basic and extended user information for users that are not managed in Employee
Central.
Basic user information is what you must provide for a user when adding the user to the system. It contains data
like employee name, gender, address. Basic user information is required for functionality, reporting, administration
tasks, and most importantly, permissions.
Extended user information consists of supplemental data about the user, and is classified into three types:
• Personal information
• Background information
• Trend information
Once the SAP SuccessFactors system is live, admins need to perform ongoing administrative and maintenance
activities to keep it running smoothly. Among these activities, an essential one is user information management,
which involves actions like adding users, managing user accounts, and updating user information. You can find
information about most of the user management related tasks in this guide.
For details about managing Employee Central users, please see http://help.sap.com/hr_ec.
Related Information
This table describes the IDs used in the SAP SuccessFactors HXM Suite.
Where is it dis
Can it be Can it be used for Can it be used for played on People
ID Description changed? SSO? integration? Profile?
We recommend
that you adopt user
ID for system inte
gration.
Note
The supported
characters for
users_sys_id
are: A-Z, a-z,
0–9, -, _,. , @.
Username This is the field that Yes Yes Yes Live Profile User In
a user uses to sign formation
in. It can be differ
ent from User ID or
Person ID but for
simplicity it’s often
the same value.
2.1.1 Global User ID
Global User ID uniquely identifies a user across SAP business applications and services. It replaces the need for a
correlation of different external user identifiers.
Characteristics
• The global user ID is optional. It can be empty when you create a new user account.
• The global user ID is a mutable attribute. It's not recommended but you can update it through APIs or UIs.
• The global user ID is case-sensitive.
• The global user ID is unique. Don’t reuse global user IDs.
• The global user ID is the default solution for establishing a common user identifier in integration scenarios.
Value Format
You can provide values for global user IDs. Make sure that the values follow this format:
• The value contains a maximum of 36 characters. It can contain alphanumeric characters ([A-Z][a-z][0-9]) and
the characters minus-sign (-), plus-sign +, underscore (_), forward-slash (/), double-colon (:), dot (.). Don't use
the email format or the at-sign (@).
• Use a neutral identifier that doesn’t contain sensitive data (e.g. the name of a person).
• Use a GUID.
Global user IDs can be communicated to SAP SuccessFactors from below two data sources:
Related Information
2.1.2 Assignment ID
Assignment ID is an identifier assigned to the work relationship between a person and the company. The
relationship could be an employment relationship, contingent relationship, pensioner relationship, intern, global
assignment, or others. A person can have one or many work relationships with a company at the same time, for
example, concurrent employments or home and host assignment in a global assignment.
Note
Currently, assignment ID is not supported in some SAP SuccessFactors areas, for example, Learning,
Compensation, Onboarding 1.0, and data protection and privacy features. This might cause display
inconsistencies across the HXM Suite. Refer to the Important Notes about Assignment ID to find the specific
areas impacted by assignment ID as well as the areas where assignment ID is not supported. This document
will be regularly updated to reflect the latest development of assignment ID.
Caution
Before you change assignment IDs, we recommend that you evaluate the risks associated with the
inconsistencies. If assignment ID is not supported in the SAP SuccessFactors areas you've enabled, please
don't make any changes to assignment ID at this time.
The system automatically generates assignment IDs for users created prior to the Q3 2019 release, and their
default values are the same as the current user IDs. However, in the Employee Central-enabled instances, if you
have used a business rule to generate assignment IDs, the system then creates assignment IDs based on the
rule and the assignment IDs might be different from the user IDs. When you create new users using the user
management tools such as Employee Import, Manage Users, or OData APIs, assignment IDs for these users are
also added to the system.
Previously, when you wanted to change user IDs in some cases, such as employee relocation or going live on
Employee Central or another HRIS system, a support ticket was needed. The user ID conversion process was
costly and time-consuming. In addition to this, user ID conversion wasn’t supported in Employee Central, Metadata
Framework, or SAP HANA database.
Now, you can use assignment ID to identify users and change it if needed.
Assignment ID is a unique identifier in Employee Central and assigned to the Employee Central object employment.
It is a multiple purpose field. Currently assignment ID supports two main scenarios. One is the Platform use case
of managing users with the Manage Users, Employee Import, Import Extended User Information admin tools, and
OData APIs. The other is the integration use case of the Employee Central to SAP ERP system or SAP S/4HANA
(SAP ERP/S/4). In the Employee Central integration use case, the assignment ID is equal with the SAP ERP/S/4
PERNR (personnel number). Employee Central is responsible for ensuring the assignment ID matches the SAP
ERP/S/4 PERNR format and determines an assignment ID by using rules during all processes where a new
employment is created. As a result, the assignment ID (8 digit max) is generated and replicated to the integrated
SAP ERP/S/4 system .
For more information, refer to Using Assignment ID in Employee Central Integration with SAP ERP HCM.
Note
You must decide for one scenario and are not allowed not switch between the two scenarios.
You can use the Check Tool to find any missing or inconsistent assignment IDs in the system. Any fix would result in
the update to your data in Employee Central. We recommend selecting the check available under the Employee
Central Core Employment Information section.
Differentiating Between Person ID, UUID, User ID, and Assignment ID [page 14]
Read the following table to find the differences and relationships between person ID, UUID, user ID, and
assignment ID.
Read the following table to find the differences and relationships between person ID, UUID, user ID, and assignment
ID.
Person ID (person-id-external) A unique identifier of a person Yes UUID and person ID are in a
in Employee Central. Person
one-to-one relationship.
ID identifies a natural person.
An employee generally has User ID and assignment ID are
only one person ID through in a one-to-one relationship.
out their time at the company,
since this ID is associated to One person ID is associated to
each person. one or more user IDs and as
Related Information
This section describes the impact of assignment ID on user management tools such as Manage Users, Employee
Import, Import Extended User Information, and OData APIs.
Differentiating Between Person ID, UUID, User ID, and Assignment ID [page 14]
Import and Export Tools [page 17]
OData API [page 19]
Manage Users [page 21]
Important Notes About Assignment ID [page 22]
There’s an Assignment ID column in the user data file of import and export tools.
Note
By default, the user data template contains the Assignment ID column. If you don't want to include assignment
ID in the user data file, select Exclude Assignment ID Column from the User Data Template in Admin Center
Platform Feature Settings .
When you add or update user data using Employee Import, user ID is required while assignment ID is optional in
the template. Note that assignment ID is in the last column. If you don’t input a value in the Assignment ID column,
the system will populate the value from user ID to assignment ID after the import job completes. If you provide
assignment ID for new users in the import file, make sure that assignment ID and user ID be the same. Otherwise,
the user won’t be imported.
When you export a user data file using Employee Export, the export file includes an assignment ID column with
values.
For more information about Employee Import and Employee Export, see Managing Basic User Data by Using a Data
File.
When adding or updating personal information, background information, or trend information using Import
Extended User Information, you should either provide user ID or assignment ID in the import file, and they should be
the same as the corresponding user ID or assignment ID that already exists in the system.
When you export user data file using Export Extended User Information, the export file includes an assignment
ID column with values. Note that assignment ID is in the last column in the import and export file for personal
information.
When you add or update user data in Provisioning Manage Scheduled Jobs Create New Job Delta
Employees Import , you should first download the user data template where assignment ID is in the last column.
Currently, user ID is required while assignment ID is optional in the template. If you don’t input a value in the
Assignment ID column, the system will populate the value from user ID to assignment ID after the import job
completes. If you provide assignment ID for new users in the import file, make sure that assignment ID and user ID
be the same. Otherwise, the users won’t be imported.
When you export user information using Delta Employees Export, the export file includes an assignment ID column
with values.
Remember
As a customer, you don't have access to Provisioning. To complete tasks in Provisioning, contact your
implementation partner or Account Executive. For any non-implementation tasks, contact Product Support.
When adding or updating personal information, background information, or trend information in Provisioning
Manage Scheduled Jobs Create New Job Live Profile Import , you should either provide user ID or assignment
ID in the import file, and they should be the same as the corresponding user ID or assignment ID that already exists
in the system.
When you export user data file using Live Profile Export, the export file includes an assignment ID column with
values. Note that assignment ID is in the last column in the import and export file for personal information.
Remember
As a customer, you don't have access to Provisioning. To complete tasks in Provisioning, contact your
implementation partner or Account Executive. For any non-implementation tasks, contact Product Support.
Related Information
Differentiating Between Person ID, UUID, User ID, and Assignment ID [page 14]
Assignment ID in User Management [page 16]
OData API [page 19]
You can enable assignment ID for OData API by adding the assignmentIdExternal property to an entity or by
navigating to an entity that has this property.
Tip
For existing records, when you enable the assignmentIdExternal property, it has the same as userId. For newly
created records, assignment ID value is the same as userId except when a business rule is enabled in Employee
Central for generating assignment IDs automatically. For more information, see Auto-generating Assignment ID
for Employees on Global Assignment or Concurrent Employment.
You can add assignment ID to the User entity by enabling the assignmentIdExternal field in the data model:
Note
If you don't see the field in the Standard section, contact Product Support to schedule a job with job
type Synchronize Business Configuration in Provisioning. This job synchronizes the BCUI elements with the
company data model.
Remember
As a customer, you don't have access to Provisioning. To complete tasks in Provisioning, contact
your implementation partner or Account Executive. For any non-implementation tasks, contact Product
Support.
We recommend that you set the Visibility attribute of the field to View to disable upsert operations.
To see the property in the entity immediately, refresh the OData metadata. To do so, go to Admin
Center OData API Metadata Refresh and Export or run query https://<API-endpoint-URL>/odata/v2/
refreshMetadata.
Note
We recommend that you set the Visibility attribute of the field to View to disable upsert operations.
To see the property in the entities immediately, refresh the OData metadata. To do so, go to Admin
Center OData API Metadata Refresh and Export or run query https://<API-endpoint-URL>/odata/v2/
refreshMetadata.
Many OData API entities have one or multiple navigation properties that point to User records. If
assignmentIdExternal is enabled for User in your instance, you can retrieve assignment ID information from
associated entities using the $expand option. Here's an example:
https://<API-endpoint-URL>/odata/v2/
Form360Rater(formContentId=123L,formDataId=345L)?
$expand=participantUser&$select=participantUser/assignmentIdExternal
Changing assignment IDs is only possible using the convertAssignmentIdExternal function import. For more
information, see convertAssignmentIdExternal.
Related Information
Differentiating Between Person ID, UUID, User ID, and Assignment ID [page 14]
Assignment ID in User Management [page 16]
Import and Export Tools [page 17]
Manage Users [page 21]
Important Notes About Assignment ID [page 22]
Using BCUI
When Show User ID field in Manage Users is selected in Provisioning, there’s an Assignment ID field as well as a User
ID field on Manage Users .
Note
Please be aware that even if there’s no assignment ID or user ID field displayed on the Manage Users page when
you’re creating new users, the system will still assign the two IDs to them. In this case, the initial value of user ID
and assignment ID is the same as the value you enter in the User Name field.
Currently, whether the User ID or Assignment ID field is displayed on Manage Users is controlled by Show User
ID field in Manage Users in Provisioning. This option is disabled by default. Once it’s enabled, the two fields are
displayed next to each other.
Remember
As a customer, you don't have access to Provisioning. To complete tasks in Provisioning, contact your
implementation partner or Account Executive. For any non-implementation tasks, contact Product Support.
On the Quick Add or Detailed Add Users page, if you enter a value in the User ID field, the value will be automatically
populated to the Assignment ID field.
You can work with implementation partners or Support to customize the label name of assignmentIdExternal in the
data model. We recommend that the label name be "Assignment ID".
For more information about Manage Users, see Managing Basic User Data by Using the UI.
Related Information
Differentiating Between Person ID, UUID, User ID, and Assignment ID [page 14]
Read this to find the areas that are impacted by assignment ID as well as the areas where assignment ID is not
supported.
Caution
Before you change assignment IDs, we recommend that you evaluate the risks associated with the
inconsistencies. If assignment ID is not supported in the SAP SuccessFactors areas you've enabled, please
don't make any changes to assignment ID at this time.
Read the table to find the changes caused by assignment ID in the following areas.
Data Subject Information Report If user ID appears in a Data Subject Information report, then,
as of the Q4 2019 release, assignment ID will also appear in the
report for certain modules.
Employee Central Imports Employee Central Imports now supports employee data im
port using assignment ID. You can use assignment ID while
importing data for employees having concurrent employment
or global assignment. For details, see here.
For details, see OData API [page 19] and the API references in
SAP SuccessFactors Employee Central OData API: Reference
Guide.
Employee Central Integration with ERP Integration of Employee Central with SAP S/4HANA on-prem
ise or SAP ERP systems transfers assignment ID if it is enabled
in Employee Central. For more information, see Using Assign
ment ID in Employee Central Integration with ERP.
Employee Central Payroll Integration of Employee Central with Employee Central Payroll
transfers assignment ID if it is enabled in Employee Central. For
more information, see Optional: Using the Employee Central
Assignment ID External as PERNR.
Platform - Data Protection and Privacy Changing assignment ID adds complexity and may impact
data protection and privacy features.
Platform - Instance Refresh Tool The Instance Refresh self-service tool now supports assign
ment ID. The Overview tab of the Instance Refresh Center page
displays the assignment ID instead of User ID in the Requested
By column for each refresh request.
Note
Platform - Metadata Framework • On the Manage Data page, audit information now displays
assignment ID instead of the user ID.
• The Import and Export Data tool now supports the assign
ment ID as an Identity Type. You can choose between user
ID and assignment ID in the new Identity Type field. The
identity type you select will be included in the exported
template and data, and it will be used to validate the user
information during data import.
Platform - Presentations Assignment ID, in addition to User ID, can be included on Pre
sentations Talent Card and customized slides.
Platform - Proxy Management In the proxy import file, you can now identify users by Assign
ment ID or by User ID. In the proxy report, you can now see
columns for both Assignment ID and User ID.
Platform - Role-based Permission You can use the Assignment ID field when importing static
permission groups to your system. When you download the
most recent version of the static group excel document, the
Assignment ID displays.
Reporting and Analytics The Reporting and Analytics products support reporting on the
Assignment IDs that the sub-domain schemas in "Live Data"
and "Advanced Reporting" data sets support.
Time In general, Time screens display the user's real name (that is,
first name and last name) rather than their user ID. So the
average user won't see anything different even if their user ID is
changed in the background.
For technical users that run the Check Tool and monitor
background jobs, however, there will be a new column called
Assignment ID that will show any changed user IDs.
Solutions Notes
Compensation and Variable Pay Compensation and Variable Pay do not currently use or sup
port assignment ID. The only identifier that is supported is user
ID.
Employee Central Document Generation Employee Central Document Generation does not support as
signment ID.
Learning Learning does not currently use or support assignment ID. The
only mutable identifier it supports is person_id_external.
Onboarding 1.0 Currently, Onboarding 1.0 does not support assignment ID. It is
using user ID as login name.
Platform - Data Protection and Privacy Customers using data protection and privacy features are ad
vised not to use assignment ID as a changeable user identifier,
due to current limitations. Assignment ID is not fully supported
across the HXM Suite.
Platform - Instance Synchronization Tool Instance Synchronization does not support assignment ID.
Platform - Role-Based Permissions Dynamic permission group creation does not support assign
ment ID.
Reward and Recognition Reward and Recognition does not support the assignment ID.
Related Information
Differentiating Between Person ID, UUID, User ID, and Assignment ID [page 14]
Assignment ID in User Management [page 16]
Import and Export Tools [page 17]
OData API [page 19]
Manage Users [page 21]
A technical user is a special user created for integrating SAP SuccessFactors with other SAP products and
solutions.
A technical user is generated during data migration process of the existing instances, or when a new instance is
created. It is not a real person, and will be granted permissions to access data required for integration using APIs. It
is now used in the integration between SAP SuccessFactors and Best Practice.
Please note that a technical user cannot be purged in the system or exported using Employee Export, or API. It
won't be included in reports. You cannot use technical user to log into SAP SuccessFactors.
Note
If you’re using an HRIS system, before you make any user changes, make sure that there is no HRIS Sync Job
running in the background. Modifying user data during the HRIS sync might lead to data discrepancies. Please
contact your Implementation Partner to know the scheduled time for the HRIS sync jobs of your system. If you
are no longer working with an Implementation Partner, contact Product Support.
Understand the prerequisites. Prerequisites for Managing User Information [page 28]
Add users by using a data file. Importing User Data [page 121]
Send welcome emails to new users. Sending Welcome E-mails Manually [page 54]
Manage basic user information by using the UI. Managing Basic User Data by Using the UI [page 43]
Managing basic user information by using a Managing Basic User Data by Using a Data File [page 88]
data file.
Managing extended user information. Adding or Updating Extended User Information [page 131]
Validate user data by using the Check Tool. Using the Check Tool to Solve Issues [page 171]
Manage users by using OData APIs. Managing Users with OData APIs [page 154]
Remove users from the system. Setting User Status to Inactive [page 48]
Related Information
User Information Management is a fundamental activity in the SAP SuccessFactors system. You need to ensure
that all user fields your company needs are included and defined with required information in the data model.
Make sure that you have included all user data fields in the data model for your system. Setting up data model with
required information is a standard part of nearly all SAP SuccessFactors implementations and most likely already
done for your system.
If you want to configure changes and add user data fields in the data model, you can use the Business
Configuration UI (BCUI). This tool enables you to maintain the data model from your end-user UI, instead of
maintaining these elements in the XML file and contacting SAP Could Support who has access to Provisioning. For
more information, see Setting Up and Using Business Configuration UI (BCUI).
Remember
As a customer, you don't have access to Provisioning. To complete tasks in Provisioning, contact your
implementation partner or Account Executive. For any non-implementation tasks, contact Product Support.
Related Information
Depending on whether or not you are managing users in Employee Central, you need different tools to perform the
same user management task.
Refer to the following table to choose the correct tool depending on your system configuration.
Add or update basic user Employee Self-Service and Manager Self- Manage Users New User Experience for
information by using the Service
Employee Central
UI
Managing Basic User
Data by Using the UI
[page 43]
Add or update basic user Import Employee Data Basic User Employee Import Importing Employee Data
information by using a
Import
data file Importing User Data
[page 121]
Add or update extended Import Extended User Information, Import Extended User Employee Central Imports
user information Import Employee Data Extended Information
Adding or Updating Ex
Import , or Import Employee Data
tended User Information
Background Import
[page 131]
Download extended user Export Extended User Information Exporting Extended User
information Information [page 133]
Validate your user data Use User Management checks in the Check Tool admin tool. Using the Check Tool to
Solve Issues [page 171]
If you’re looking for information about managing Employee Central users, please see SAP SuccessFactors
Employee Central.
Related Information
The Data Model describes how data elements are structured in a database. It also defines the properties these
elements possess and their relationships to each other.
Everytime you import data model from Provisioning, the system automatically saves the import file as a backup.
You can restore a data model from the backup version list. Please note that the list displays a limited number of
data model versions.
As a customer, you don't have access to Provisioning. To complete tasks in Provisioning, contact your
implementation partner or Account Executive. For any non-implementation tasks, contact Product Support.
When you import data model, you should write some comments. This helps you track data model changes.
Context
Remember
As a customer, you don't have access to Provisioning. To complete tasks in Provisioning, contact your
implementation partner or Account Executive. For any non-implementation tasks, contact Product Support.
Procedure
Results
A login account stores the information that can be used for authenticating users when they log into a system. You
can manage login accounts using the Manage Login Accounts tool.
Context
A login account is used for authenticating users when they log into SAP SuccessFactors. It includes information
such as login name, login method, and login locale.
If you have Employee Central enabled for your instance, the system automatically selects the user of the home
employment, primary employment, or earliest active employment as the main user on the homepage in the cases
of global assignments, concurrent employment, or contingent workers, respectively.
A person can have multiple users but only one login account.
Person refers to a natural person, while user refers to employment. A person might have more than one user, for
example, in the cases of global assignments or concurrent employment, but only one login account. But please
note that in some special cases, a person (for example, dependents in the Employee Central-enabled instance)
doesn't have login account.
A login account is active as long as the person has at least one active user. It stores the following key information:
• Login name: Login name is unique. By default, the login name in a login account is the same as the username
of the first employment. For example, if the username of a person's first user is "Cgrant", then the person's
default login name will also be "Cgrant". A login account is linked with the user whose username is the same as
login name. If the linked user's username, password, login method or locale is changed using import tools, UI,
or API, then the relevant information in a login account is changed accordingly.
Currently, you can use either login name or username to log into SAP SuccessFactors, but we recommend that
you use login name.
• Login method: Login method is either SSO (single sign-on) or PWD (password).
Note
The login method specified in a login account works only when the company has enabled Partial
Organization SSO. Otherwise, a person always accesses the system using the login method specified by the
company-level setting in Provisioning.
As a customer, you don't have access to Provisioning. To complete tasks in Provisioning, contact
your implementation partner or Account Executive. For any non-implementation tasks, contact Product
Support.
• Login locale: Login locale is the language that you use to log into the system, and the system user interface is
displayed in your login locale.
Related Information
Prerequisites
You have the Manage Login Accounts permission from Manage Permission Roles Administrator Permissions
Manage User .
Procedure
Related Information
As an administrator, you can change an employee's login account when the employee has more than one users.
Prerequisites
You have the Manage Login Accounts permission from Manage Permission Roles Administrator Permissions
Manage User .
Procedure
If you want to update the password-related settings of the login account accordingly, select the Update the
password-related settings of the login account accordingly. option.
Results
The person's login account is successfully changed. The system will automatically send the person an email if Login
Account Changed Notification has been enabled in E-Mail Notification Template Settings.
Related Information
As an administrator, you can notify employees of their login account information or changes to their login accounts.
Prerequisites
• You have the Manage Login Accounts permission from Manage Permission Roles Administrator
Permissions Manage User .
• Login Account Notification and Login Account Changed Notification are enabled in Admin Center E-Mail
Notification Template Settings .
Context
You can use the following two types of e-mail notification templates:
Procedure
Results
The e-mail notifications are sent, and you will receive an e-mail about the notification delivery status.
Related Information
You can update details of a login account on the Manage Login Accounts page.
Prerequisites
You have the Manage Login Accounts permission from Manage Permission Roles Administrator Permissions
Manage User .
Context
If you’ve enabled the Login Account Notification or the Login Account Changed Notification in the E-Mail Notification
Template Settings admin tool, you can also choose to send e-mail notification to the account users after you update
their account details.
Procedure
You can edit login name, login method, language, and time zone.
4. Choose Send notification to the account user if needed.
5. Choose OK.
Results
The system locks an account when a user exceeds the number of allowable logon attempts that is set in your
password policy. Once the account is locked, the user cannot log in again until admins reset the account.
Prerequisites
You have the role-based permission of Reset User Account under Manage User admin permissions.
Procedure
1. Go to Admin Center.
2. In the tools search field, type Reset User Account.
3. Search the user whose account you want to reset.
Type the Name, Username, or Job Code. While you’re typing, a list appears, displaying all the matching users
for you to select.
4. In the search results, select the user whose account you want to reset.
5. Click Reset Selected Users.
Results
The account is unlocked. You can see a confirmation message at the top of the page.
You can now reset password of one or more login accounts on the Manage Login Accounts page.
Prerequisites
You have the Manage Login Accounts permission from Manage Permission Roles Administrator Permissions
Manage User .
You've enabled the Password Changed Notification template under Admin Center Email Notification Templates
Settings .
Procedure
You can reset passwords of more than one user all at once. If you reset password for a single user, you can
choose to use a system-generated password or input a password directly. If you reset passwords for more than
one user, you can only use system-generated passwords.
When you reset passwords for login accounts using system-generated passwords, the Send notification to the
account user option is selected and grayed out by default.
4. Choose OK.
Related Information
Login records include the login details such as first login date and last login date as well as the user information
(such as user ID and user name) and manager information (such as the manager's user ID and manager's user
name). Login records will automatically be purged after one year. Additionally, a limit of 100,000 login audit records
for a user and a limit of 50 million login audit records for all users in a company have also been defined. When one
of the two limits is reached, older audit records are purged even though they were created less than a year ago.
Therefore, we recommend that you perform a backup beforehand using ad hoc report.
Related Information
Context
For detailed steps on how to create a Table report, see Creating a Table Report.
Procedure
Recommendation
If you want to generate a report on what data you should back up before it’s purged, do as follows:
• In the Columns section, choose Total Logins from Employee Login Detail as well as other columns that
you want to report, for example, User Name (if selected, the report displays total logins per username).
Then select Group By to define aggregates. In the Define Aggregates dialogue box, choose Total Logins
as Aggregate Column and COUNT or SUM as Function.
Note
Please don't select both Total Logins and Access Date. Otherwise the total logins is displayed as 1
for each row.
• In the Filters section, choose Access Date from Employee Login Detail and define access date By Rule.
You can add a rule, for example, less than “2019-06-07”, to back up the login records prior to this date.
Recommendation
5. Save the report and then go back to the reports list to select Run Report.
Related Information
You can manage basic user information by using the end-user UI in Admin Center. The admin tools provide handy
and intuitive methods for you to add users, search users, and update users one by one.
Context
If you want to make bulk changes to multiple users in one go, SAP SuccessFactors can also fulfill your
requirements. You can use the filebased import tools or the API-based methods to manage users.
On the Manage Users page, picklist options (for example, country/region and state) now display option labels along
with option IDs to help you better understand and choose the options.
Please note that the Manage Users page displays the picklist in the same order as the picklists are configured in
data model. We recommend you set the parent picklist fields on top of the child picklist fields. Make sure that the
parent picklist field is visible if child picklist is configured as visible in the Manage Users page.
If a field is defined in the sysVisibleUserDirectorySetting section of the Succession Data Model, the field displays on
the Manage User page.
Remember
As a customer, you don't have access to Provisioning. To complete tasks in Provisioning, contact your
implementation partner or Account Executive. For any non-implementation tasks, contact Product Support.
Refer to the tasks in the following topics to manage basic user data by using the UI.
Prerequisites
Before you begin, please make sure that the following settings are done in Provisioning:
Option Status
Remember
As a customer, you don't have access to Provisioning. To complete tasks in Provisioning, contact your
implementation partner or Account Executive. For any non-implementation tasks, contact Product Support.
Context
When adding a user in the system, you can choose whether to send the user a system welcome e-mail immediately
after the user is added. SAP SuccessFactors provides predefined welcome e-mail notification templates for you to
use. Or, if you want to customize the e-mail content to meet your business needs, see Enabling and Customizing
Welcome Email Template [page 55].
Procedure
1. Go to Admin Center.
2. In the tools search field, type Manage Users.
3. Click Add New User, and select Quick Add or Detailed Add Users.
Option Description
Quick Add Select this option if you want to fill in only the required fields
of user data for new users.
1. Fill in all the blanks. Each row contains all the required
information for a user. One user is created in the system
immediately after you finish one row.
2. Optional: Click the Add More Details button to provide
extra user information.
3. Click I’m Done, Go Back to Manage Users to finish add
ing users. A pop-up window appears asking whether
you want to send welcome e-mails now.
4. Choose Yes, Send Emails Now or No, Send Emails Later
accordingly.
Detailed Add Users Select this option if you want to add detailed user informa
tion for new users.
1. Fill in the required fields and any additional fields in
the General Information, Contact Information, and Other
Information sections.
2. Optional: Select Send welcome email to this new user
so a welcome e-mail is sent immediately after the user
is added to the system. You can also choose to do this
later.
3. Click Save to create the user in the system.
Note
Make sure you have assigned an active manager to the new user, or filled the field as "No Manager". If the
field is left empty, the user is not able to log in to the system.
The new user is also added to the Everyone (All Employees) default permission group in Role-Based Permissions
automatically. That means the user is granted with the most basic permissions, such as permission to log in to SAP
SuccessFactors. Org Chart will also be refreshed to reflect the changes shortly.
Next Steps
Sometimes you want to make further changes to new users after initially adding them, so you don't want to
send welcome e-mails immediately. You can send them later. For more information, see Sending Welcome E-mails
Manually [page 54].
Task overview: Managing Basic User Data by Using the UI [page 43]
User information might vary from time to time. For example, an employee has a new manager, or an employee
leaves the organization. User information should be updated regularly in the system to reflect the latest
information.
Prerequisites
You have the role-based permission of Manage Users under Manage User admin permissions.
Procedure
1. Go to Admin Center.
2. In the tools search field, type Manage Users. On this page, a list displays all the users in the system with
columns of their detailed information.
Note
More columns are collapsed in the right side. If you want to see them in the user list, click in the right of
the header line, and select the columns you want to display.
Option Description
Quick search Search by using only names or usernames. Type the name
or username in the search box. While you’re typing, a list
appears, displaying all the matching users. Select the user
you want from the list.
Advanced search Search in more fields. Click Advanced User Search. Fill in the
fields and click Search.
4. Optional: You can select Show Active users only or Show External 360 Rater to control the scope of both the
user list and search results.
5. Click the name of the user that you want to update.
6. Make your changes in the pop-up window.
Note
7. Click Save.
Task overview: Managing Basic User Data by Using the UI [page 43]
For data protection and privacy, you may be required to completely purge inactive users from your system along
with all their data, based on a single, common retention time.
Context
For more information about how to do a full purge of inactive users and their data, see Purging Inactive Users and
All Data.
Task overview: Managing Basic User Data by Using the UI [page 43]
Users in SAP SuccessFactors can have either an active or inactive status. By default, the status of all of users is set
to active when they are initially added to SAP SuccessFactors. If you want to freeze a user account, you can set the
user as inactive in the system.
Prerequisites
Before you use the UI-based method to deactivate a user who is a manager, you need to do a manager transfer,
which forwards in-progress forms to a new manager. To set up a manager transfer, use the Automatic Manager
Transfer tool in Performance Management.
Context
Setting a user as inactive means that no changes can be made to the account. You can change user status one by
one using the UI, or modify multiple user statuses in a file and upload it to SAP SuccessFactors.
Procedure
Note
If any of the deactivated users are managers, you can configure automatic manager transfer using the
import options.
Task overview: Managing Basic User Data by Using the UI [page 43]
Enable the system e-mail notification for a user so that the user can receive relevant system e-mails on certain
events or changes to their information, such as welcome messages and reset password notifications.
Prerequisites
You have the role-based permission of Change User Email Notification under Manage User admin permissions.
Procedure
1. Go to Admin Center.
2. In the tools search field, type Change User Email Notification.
3. Search the user that you want to enable the notification for.
4. Select the checkbox for e-mail notification.
5. Click Save The Setting.
Results
Now the user can receive system e-mails on certain events or changes to their information.
Task overview: Managing Basic User Data by Using the UI [page 43]
The system can send e-mail notifications to users automatically to alert them of events or changes to their
information. You can select notification templates and customize them to meet your business needs.
Procedure
Note
4. Optional: Set the interval for sending out consolidated e-mail. Select the default notification interval from the
Interval For Consolidated Emails (In Hours Starting From 12:00am): dropdown list at the bottom of the Email
Template Notification page or from the Customize Settings for Form Templates dialog box.
5. Save your changes.
Results
After you enabled an e-mail notification, the target recipient receives the corresponding notification sent by the
system automatically on certain events. Refer to the table for what event triggers what e-mail notification in SAP
SuccessFactors.
User Import Notification When the Employee Import job com User who launched the Employee Import
pletes job
Live Profile Import Notification When the Import Extended User User who launched the Import Extended
Information job completes User Information job
Welcome Message Notification When a new user is added to the system Newly added users
Welcome Message Notification with Re When a new user is added to the system Newly added users
set Password Support
Note
Forget Password Support Notification When user clicks Forgot Password User
Reset Password Support Notification When user requests to reset password User
based on Knowledge Based Authentica and Knowledge Based Authentication is
tion turned on
Reset Password Lockout Notification When user attempts to reset password User
but fails to answer security questions
Reset Password Successful Notification When user resets password successfully User
Reset Password Support Notification When user request to reset password User
You can use the predefined e-mail body for your notifications, or customize it according to your business need.
Refer to the tables for variable codes and predefined e-mail bodies, based on which you can make your own
changes.
Variable Codes
In the e-mail body, you can use variable codes to encode information that is not available at the moment, for
example, employee name, employee password, and login URL. When the notification is sent by the system, the
variable codes are replaced by real information of the employee automatically.
[[LOGIN_URL]] The URL through which a new employee can log in to the sys
tem.
[[SET_PASSWORD_URL]] The URL through which a new employee can set password
when the employee logs in for the first time.
[[RESET_PASSWORD_URL]] The URL through which an employee can reset his or her pass
word.
E-mail Bodies
You can use or customize the notifications based on the following predefined e-mail templates:
Username: [[EMP_USERNAME]]
[[LOGIN_URL]]
[[SIGNATURE]]
Welcome Message Notification with Reset Password Support Welcome to SAP SuccessFactors!
Username: [[EMP_USERNAME]]
[[SET_PASSWORD_URL]]
[[SIGNATURE]]
Password Changed Notification Please be advised that your password for PerformanceMan
ager has been changed.
[[SIGNATURE]]
Forget Password Support Notification You can access the PerformanceManager application at the
following URL: [[LOGIN_URL]]
Reset Password Support Notification based on Knowledge You can reset your password at the following URL: [[RE
Based Authentication
SET_PASSWORD_URL]]
[[SIGNATURE]]
Reset Password Lockout Notification We've noticed you recently attempted to reset your password
but have failed to answer your reset password questions suc
cessfully. Please try again in 5 minutes.
[[SIGNATURE]]
Reset Password Successful Notification You have successfully updated your password. If you did not
perform this request, please contact your administrator imme
diately.
[[SIGNATURE]]
You can configure the consolidated interval from the Email Template Notification page by specifying the "Interval For
Consolidated Emails (In Hours Starting From 12:00am):" setting.
Note
Here you are selecting the time interval (in hours). For example, if you select 6 from the dropdown menu,
consolidated email notifications will be sent out every 6 hours.
If you didn't choose to automatically send welcome e-mails to new users when adding them in the system, you can
still send welcome e-mails manually afterwards.
Prerequisites
You have the role-based permission of Send System Message Email Notification under Manage User admin
permissions.
Context
Welcome e-mails usually contain login information for the first time users. You can customize the content and
format of welcome e-mails to meet your business needs.
Procedure
1. Enable e-mail notification so that users can receive system e-mails. Usually, the notification is enabled by
default for new users. But if you want to change the settings, see Enabling System E-mail Notification [page
49].
2. Go to Admin Center.
3. In the tools search field, type Send User Welcome Email.
4. Select whether you want to send the e-mails to a user group or a single user by choosing the following options:
Option Description
Results
When a user receives the welcome e-mail, he or she can log in to SAP SuccessFactors through the link that is
provided in the e-mails.
Email notifications are sent to users automatically to alert them of events or changes to their information. You can
select the notifications to send by turning each notification on or off, and customize the email template to meet
your business needs.
Context
If you enable the welcome email template, welcome emails will be sent automatically to new users when they are
added to the system.
Procedure
1. Go to Admin Center.
2. In the tools search field, type E-mail Notification Templates Settings.
3. Select the checkbox for Welcome Message Notification to turn it on.
4. Save your changes.
Results
The automatic welcome emails are turned on. Every time when a new user is added to the system, he or she
will receive a welcome email automatically. However, if you choose to turn off the template, you can still send the
welcome emails manually. For steps, see Sending Welcome E-mails Manually [page 54].
You can choose to reset passwords for a single user or a group of users.
Prerequisites
You have the role-based permission of Reset User Passwords under Manage User admin permissions.
Procedure
Option Description
Reset individual user password (with supplied password) To reset one user's password to a specific new one.
Reset individual user password To reset one user's password to a system-generated one.
Reset group of users passwords To reset passwords for a specific group of users to system-
generated passwords at once.
3. Search the user or a specific group of users. Select the users that you want to reset passwords for.
4. Conditional: Type the new password if you're using the Reset individual user password (with supplied password)
option.
5. Click Reset User Passwords.
Results
Users receive system e-mail notifications once their passwords are reset. When users log into the system, a
Password Change window pops up, requiring users to update their passwords. Please note that in Employee
Central-enabled instances, the password that gets updated is the password of the login account, and might not be
the password of the main user on the home page.
If "security questions" have been enabled in the instance, users must choose security questions before they enter
the new password.
Task overview: Managing Basic User Data by Using the UI [page 43]
E-mail notifications are sent to users automatically to alert them of events or changes to their information. You can
select the notifications to send by turning each notification on or off, and customize the e-mail template to meet
your business needs.
Context
Enable the Password Changed Notification in the E-Mail Notification Templates page in Admin Center so users can
be notified when their passwords are reset by admins. For more information, see Configuring E-Mail Notifications
[page 50].
Sometimes users might forget their passwords and can’t log in to SAP SuccessFactors, so they need to reset
passwords. You can either allow users to reset their own passwords or you reset their passwords in Admin Center
on request.
Task overview: Managing Basic User Data by Using the UI [page 43]
It is convenient if users can reset their own passwords whenever they forget them. The system can generate a new
temporary password when users retrieve a forgotten password.
Context
To allow users to reset their own passwords, you need to first enable the forget password function in the company
password policy. Then, turn on the system email notification so users can receive retrieving password emails sent
by the system. You can also customize the email template to meet your business needs.
E-mail notifications are sent to users automatically to alert them of events or changes to their information. You can
select the notifications to send by turning each notification on or off, and customize the e-mail template to meet
your business needs.
Context
Enable the Reset Password Successful Notification in the E-Mail Notification Templates page in Admin Center so
users can receive retrieving password e-mails after they reset their passwords. You can also customize the e-mail
template if needed. For more information, see Configuring E-Mail Notifications [page 50].
If you want to allow users to reset their own passwords, you can enable this function by updating your company
password policy.
Procedure
1. Go to Admin Center.
2. In the tools search field, type Password & Login Policy Settings.
3. Select Enable Forget Password feature, and choose one of the following options:
Reset Password using a URL accessed through an email link The user receives a system email containing a link through
which they can reset the password.
Reset passwords using security questions accessed through The user receives a system email containing a link where
email link the user must answer security questions correctly before
resetting the password.
Reset passwords using security questions accessed through The user is redirected to the security question page where
the system the user must answer correctly before resetting the pass
word.
For more information about password settings, see Configuring Password and Login Policy [page 59].
You can configure user management-related password and login policy settings for your company by using the
Password & Login Policy Settings admin tool.
Prerequisites
You have the Manage System Properties Password & Login Policy Settings permission.
Procedure
Options Descriptions
Maximum Successive Failed Login Attempts Set to 0 to disable this option. The system locks a user
account if successive failed login attempts exceed what the
policy allows, within a 1-minute period.
Case Sensitive (recommended) If this option isn't checked, upper case characters and lower
case character are considered as one type of characters.
Mixed Case required If this option is checked, the password must contain both
upper case characters and lower case characters. This
option is ignored if Case Sensitive isn't checked.
Alpha characters required If this option is checked, the password must contain upper
case characters, lower case characters, or both.
Nonalpha characters required If this option is checked, the password must contain
numeric characters, special characters, or both.
Enable password history policy History policy rejects passwords that are identical to a
recently used password. Enter a number from 2 through 10.
Enforce Password Encryption Turning this option OFF from ON forces all users to
change their passwords. Turning this option ON disables the
Forgot Your Password feature for password retrieval through
emails.
Enable Forget Password feature Use this option to enable the forget password feature.
Specify detailed forget password settings. Please note that
Reset Password using a URL accessed through an email link
the URL link expires in 30 minutes.
Reset passwords using security questions accessed
through email link
Reset passwords using security questions accessed
through the system
Enable Forgot Username feature Allows users to retrieve their username by having it sent to
their email address.
Set Welcome Password and Reset Password link expiration Expiration can be up to 30 days, please enter a value from 1
(in days) through 30. Changing this setting affects all links that have
yet to expire. Please note that this setting only impact the
password resetting link in the welcome emails.
Password Expiration for Long-Time Unused Passwords (in This option is to expire passwords that have not been
years) used to log in the system longer than the number of years
that you select from the dropdown. To disable this option,
choose N/A.
Enable CAPTCHA for the Forgot Password page You can specify how many consecutive attempts of sending
resetting password emails from the Forgot Password page
are allowed within one minute before the system prompts
a CAPTCHA. To disable this option, choose N/A from the
dropdown.
Task overview: Managing Basic User Data by Using the UI [page 43]
To better protect your account security, we now provide a set of best practices of password policy settings.
As an admin user, you can check the new password policy settings through Admin Center Company Settings
Password & Login Policy Settings . We recommend that you adopt the following password policy settings.
• Enter at least 6 in the Minimum Length and the Maximum Length fields.
• The password must contain at least two kinds of the following characters: numeric character, special character,
upper case characters, or lower case characters.
• Enter a number larger than 0 in the Maximum Successive Failed Login Attempts field.
As an admin user, if you predefine passwords for users in the import user file using Employee Import, Bulk
Employees Import, and Delta Employees Import, ensure that the passwords comply with password policy settings.
If not, you receive warnings in the import status email.
As an end user, if your password is predefined by your system admin using Employee Import, Bulk Employees
Import, and Delta Employees Import, you must reset your password when you log in the system for the first time.
You can follow the steps in the reset password popup to reset your password. When you change your password, the
existing behavior is that the system checks whether your new password is compliant with password policy settings.
Using username, user ID, or email as default password introduce security risks. Starting from June 19, 2020,
you can’t use username, user ID, or email as default password when creating new jobs in Employee Import, Bulk
Employees Import, or Delta Employees Import, or adding new users in Manage Users. The import jobs that you
submitted prior to this date aren’t affected.
Functionality Impacted
• The Employee Import tool that is placed in both Admin Center of the instances that haven’t enabled Employee
Central and the Manage Scheduled Job page in Provisioning.
• The Bulk Employees Import tool that is placed in the Manage Scheduled Job page in Provisioning
• The Delta Employees Import that is placed in the Manage Scheduled Job page in Provisioning
• The Manage Users tool in Admin Center
Remember
As a customer, you don't have access to Provisioning. To complete tasks in Provisioning, contact your
implementation partner or Account Executive. For any non-implementation tasks, contact Product Support.
Users Impacted
This affects users created by Employee Import, Bulk Employees Import, Delta Employees Import, and Manage Users
and using SAP SuccessFactors password authentication. Integrated external learners, onboardees, and users using
SSO authentication aren’t impacted.
Note
In instances that have been migrated to SAP Identity Authentication Service(IAS), the password policies are
handled within IAS and SAP SuccessFactors policies aren’t relevant.
• Before June 19, 2020, you could specify username, user ID, email, or "System Generated" as the default
password for new users when creating new jobs in Employee Import, Bulk Employees Import, or Delta
Employees Import.
After June 19, 2020, to improve security, when creating new jobs,you can only use “System generated”
as default password, and the username, user ID, email options aren’t supported anymore. However, the
submitted jobs that you created through Provisioning Manage Scheduled Job prior to June 19, 2020
aren’t affected, regardless of whether you specified username, user ID, email, or “System generated” as the
default password option. For better security, we recommend that you enable Use System Generated Password
by Default in Admin Center Platform Feature Settings to override the default password settings to be
“System Generated” in all import jobs created through Provisioning.
• Before June 19, 2020, if you created new users in Manage Users, username was the default password for new
users. After June 19, 2020, “System generated” becomes the default password option.
With “System generated” as the default password option, how to ensure that new users can
reset password using emails.
If you’re creating new jobs in Employee Import, Bulk Employees Import, or Delta Employees Import, or adding new
users in Manage Users, be aware that only “System generated” is supported as the default password option after
June 19, 2020. To ensure that new users can reset password using a link in an email, perform the following steps:
Prerequisites: New users have a valid email address and can receive email notifications.
1. Enable the Welcome Message Notification with Reset Password Support template in Admin Center E-mail
Notification Template Settings .
2. Select the Send Welcome Message to New Users option in the Employee Import, Bulk Employees Import, or
Delta Employees Import in Provisioning or select Send welcome email to new users in Manage Users pages.
Result: New users will receive a welcome email containing the Set Password link after the import job completes.
(Not recommended) Set initial password for new users in import file if they can’t receive emails.
If your users don’t have a valid email address or can’t receive email notifications, you might consider the following
workaround:
1. Add a “PASSWORD” column (column heading: PASSWORD; column label: PASSWORD) in the import file and
then provide valid passwords for new users in the column.
2. Select Use a system generated random password as the default password in Employee Import in Admin Center.
3. Import your file.
4. Inform new users their initial passwords offline.
Caution
For better security, ask your users to reset passwords after firsttime login.
If the submitted jobs that you created before June 19, 2020 in Provisioning Manage Scheduled Job specify
username, user ID, or email as the default password, then to improve security, you’re recommended to change the
password setting to be “System Generated” for the submitted jobs and then update the email settings if necessary
to ensure that new users can reset password using a link in an email.
1. Go to Admin Center Platform Feature Settings and enable the Use System Generated Password by
Default option to override the existing password setting to be "System Generated".
2. If the Send Welcome Message to New Users option isn’t selected in the submitted jobs, then you should go to
Admin Center Platform Feature Settings and enable the Send Welcome Message option to override the
existing welcome email setting to be "enabled".
Note
Once the Use System Generated Password by Default and Send Welcome Message options are selected,
the default password and welcome message configuration in the new and existing import jobs are “System
Generated“and “enabled” respectively.
3. Enable the Welcome Message Notification with Reset Password Support template in Admin Center E-mail
Notification Template Settings .
Notes
Recommendation
We recommend that you review the internal communication process about new account creation in your
company, for example, how to inform new employees of their initial login passwords, and then update it if
necessary.
If your SAP SuccessFactors system has integrated with third-party applications using a default password that is
specified as username/userid/email, we recommend you to change this kind of integration because of security
risk. You can use a password that isn’t the same as username/userid/email in the import file for integration.
If some users were created with username/userid/email as the default password and use these passwords for
login, ask them to reset their passwords as soon as possible using one of the following three methods:
• Users can reset passwords themselves by using the set password link (valid in 1-30 days, according to your
company-level password policy setting) in the welcome email notification
• Users can reset passwords themselves by navigating to Options Password in the system
• Admins can reset password for these users using Admin Center Reset User Passwords and deliver new
passwords to users offline. See the Related Links section on how to reset user passwords.
Password Changed Notifications with a set password link will be sent to users when the Password Changed
email notification with the [[SET_PASSWORD_URL]] token has been enabled in E-mail Notification Template
Settings and the option of user email notification is turned on in Admin Center Change User Email
Notification .
You can hide usernames in the UI, including Global Header, quickcard, org charts, people profile, and Change Audit
reports.
Prerequisites
You have the Administrator Manage System Properties Platform Feature Settings permission.
Procedure
Results
Task overview: Managing Basic User Data by Using the UI [page 43]
Next task: Enabling the Adoption of General Display Name [page 67]
You can enable the Hide Username in the UI feature to hide username on the Global Header and the employee
quickcard as well as the search user interfaces that have adopted People Search.
User interfaces that are affected by the Hide Username in the UI option
By default, this option is off. Once you enable it, the username will be hidden on the Global Header and employee
quickcard, and you cannot run a username search or see username in the search results in the following search
interfaces:
Note
In all the above search interfaces except the Person Search in Data Subject Information, user cannot be
searched by username unless their username is the same as user ID. In Person Search in Data Subject
Information, however, user cannot be searched out by username even though their username is the same as
user ID.
User interfaces that are NOT affected by the Hide Username in the UI option
The following interfaces aren't affected by the Hide Username in the UI option, and administrators can continue
using username to search for users even though this option is enabled. .
• Search interfaces in the following admin tools : Reset User Account, Reset User Passwords, Send User
Welcome Email, Change Email Notification Setting, Manage Support Access, Manage Permission Group,
Manage Role-Based Permission Access, Manage Employee Group, User Role Search, View User Permission,
You can use the same name format across SAP SuccessFactors HXM Suite.
Prerequisites
• You have the Administrator Permissions Manage System Properties Company System and Logo
Settings permission.
• Additional prerequisites for Employee Central customers. Details for the following prerequisites will be covered
in topics later in the guide section.
• You've configured a name format for Legal Entity or People Profile.
• If you've configured a name format for People Profile, we recommend that you enable the Admin Center
Company System and Logo Settings Enable the name format selected in Configure People Profile to
apply globally option.
Note
If you need to configure different name formats for different legal entities, don’t enable the option. If
you expect to have a global name format for all legal entities, enable the option.
Procedure
Results
• Please note that the displayName field can't be seen or configured in the Succession Data Model, nor can it be
modified in Manage Business Configuration.
Task overview: Managing Basic User Data by Using the UI [page 43]
Related Information
Before you start using General Display Name, understand the following important notes and how they impact your
SAP SuccessFactors system.
Here's a table of modules and features that partially support General Display Name (with limitations) or fully
support General Display Name but require your extra attention (with notes). For example, Career Development
supports General Display Name, but legacy development goals don't. Please note that it's NOT a full list of modules
and features that support General Display Name.
Note
Note
Recruiting Job Postings The Job Posting Report and the Job
Status Report in Admin Center My
Reports Manage My Reports shows
the individual's display name rather than
the legal or formal name.
Employee Central Position Management With the adoption of the General Display
Name, your employees' names are no
longer sorted by surname, name. Your
employees' names are sorted depending
on the name format you've configured.
360 Reviews 360 Reviews 360 Reviews admin tools haven't yet
supported showing the General Display
Name.
Note
• HR Manager Info
• Matrix Manager Info
• User Sys Info
Analytics Workforce Analytics The General Display Name field has been
adopted only in:
• HR Manager Info
• Matrix Manager Info
• User Sys Info
• Title
• Originator
• Employee
Time Tracking Clock In Clock Out The General Display Name is supported
in the following pages:
Note
Here's a table of modules and features that don't support General Display Name. If a module isn't listed in the table,
it supports General Display Name fully or partially.
Module
Onboarding 1.0
Related Information
You can define a name format to be used in a legal entity or in People Profile. Depending on your business needs,
you can define a single name format to be used across the company, or define different name formats for different
legal entities.
Prerequisites
After you enabled General Display Name, the Visibility field of the Admin Center Configure Object Definitions
Legal Entity DisplayNameFormat toDisplayNameFormat attribute is set to Editable. Don’t modify this field
value.
Context
With the General Display Name feature, it’s now possible to define different name formats to better reflect how
names are used across the global regions. Please be aware that some screens show names of employees from
different regions, and therefore with different name formats. To help end users better differentiate what part of
the display name is the first name and what part is the last name, we recommend that you use separators or
capitalization. Here are some examples:
• If you configure a name format with Last Name followed by First Name, then separate them with a comma. The
result could be the following:
• Alex Thompson
• Grant, Carla
With that, users can see that either the first part "Alex" is the first name or the part after the comma "Carla". To
configure separators, see details in Visualizing the Editable Separator for Name Formats.
• Always have the last name in capital letters. The result could be the following:
• Alex THOMPSON
• GRANT Carla
With that, user can see that "Alex" and "Carla" are the two first names, even if displayed in different ways.
For name format of locales other than EN_US, please use the customization options to do what’s appropriate for
your target locale.
Procedure
After preparing a name format for the General Display Name, you can now configure the name format using the
Manage Data admin tool.
Context
You have two options for configuring your name format. You can choose to configure it in Legal Entity or in People
Profile. If you configure the name format in both, and you also enabled the Admin Center Company System and
Logo Settings Enable the name format selected in Configure People Profile to apply globally option, the system
will display the name format configured in People Profile.
Procedure
After preparing a name format for the General Display Name, you can now configure the name format using the
Configure People Profile admin tool.
Context
You have two options for configuring your name format. You can choose to configure it in Legal Entity or in People
Profile. If you configure the name format in both, and you also enabled the Admin Center Company System and
Logo Settings Enable the name format selected in Configure People Profile to apply globally option, the system
will display the name format configured in People Profile.
1. Go to Admin Center Configure People Profile General Settings Choose Name Format .
2. Select the name format you've prepared.
3. Save your changes.
Employee Central customers who have updated configurations of general display name, for example, by changing
the legal entity or the name format, must refresh general display name to trigger changes to the general display
name.
Prerequisites
• You have the Administrator Permissions Manage System Properties Company System and Logo
Settings permission.
• You've configured a name format with Legal Entity or People Profile.
Context
This task is for Employee Central customers only. Customers who haven't enabled Employee Central don't need to
refresh the general display name and won't see the Refresh General Display Name button.
Procedure
Results
You've successfully triggered the refresh of the general display name. An HRIS sync job is triggered. You can check
the job status under Admin Center Scheduled Job Manager .
Pronouns like "she/her/her" are more and more used as designations in emails and profiles. To enable pronouns,
you need to configure a PersonPronouns picklist.
Prerequisites
• You have the Administrator Permissions Metadata Framework Configure Object Definitions permission.
• You have the Administrator Permissions Manage System Properties Manage Employee Files
permission.
• You have configured the pronouns standard element in Succession Data Model or Manage Business
Configuration.
Procedure
Next Steps
To display pronouns on People Profile and quickcards, you also need to enable the Admin Center Configure
People Profile General Settings Allow employees to maintain their pronouns option.
Task overview: Managing Basic User Data by Using the UI [page 43]
Previous task: Enabling the Adoption of General Display Name [page 67]
Before you start using pronouns, understand the following important notes and how they impact your SAP
SuccessFactors system.
Here's a table of modules and features that partially support pronouns (with limitations) or fully support pronouns
but require your extra attention (with notes). It's not a full list of modules and features that support pronouns.
Note
To add or update user data for multiple users in one go, you can upload a user data file that contains all your
changes to SAP SuccessFactors.
Context
You can upload or download a user data file by using the Employee Import or Employee Export tools. These tools
can be accessed in the following ways:
Admin Center Manage Users Import Users User Admin Center Manage Users Export Users User
We have universally enabled the delta mode in Employee Import and Basic User Import. The delta mode considers
the rows changed in the import file. Only the data records that have actual changes will be imported, and the
unchanged rows will not be updated to the system again. The delta mode helps reduce import time and improve
import performance. Before, when you updated user information using Employee Import or Basic User Import, all
records were imported.
A user data file is a Comma-Separated Value (CSV) file that contains basic information about your users, such as
username and manager hierarchy, as well as any additional information that your company uses. Prepare your own
user data file before you upload it to the system.
Context
If you are preparing a user data file for the first time, you can start by downloading an import file template, and view
it to see what fields to include. You can also download all existing user data in the system and make changes based
on it.
Task overview: Managing Basic User Data by Using a Data File [page 88]
If you want to create a new user data file, we recommend that you download the template and use it as the basis for
your file. The template includes all required formatting, header rows, and data columns.
Prerequisites
• You have the role-based permission of Employee Export under Manage User admin permissions.
• If you do NOT want to include assignment ID in the template, select the Exclude Assignment ID Column
from the User Data Template checkbox in Admin Center Platform Feature Settings . This checkbox is not
selected by default.
Context
The template is stored in the system and you can download it at any time. Use the template so that your file can be
formatted correctly to upload.
Procedure
1. Go to Admin Center.
2. In the tools search field, type Employee Export.
3. Optional: If you want a file containing only the required fields, omitting any empty or custom fields, select Short
format: only system fields.
4. If your file uses languages with specific character types, like Chinese characters, select the correct encoding
from the Character Encoding dropdown menu so that the system can recognize the characters.
5. Click Export Template to download the template.
Results
Now you can add your user data to the template you downloaded.
Related Information
If you want to change user data, download the existing user data first. Make your changes in the downloaded file,
then upload it back to SAP SuccessFactors.
Prerequisites
You have the role-based permission of Employee Export under Manage User admin permissions.
Context
When you download a user data file, you’re downloading the data that is currently stored in SAP SuccessFactors.
Note
As of Q2 2019, the CSV Injection Protection is enabled for all NEW instances by default for greater system
security. If the User Data file (.csv) contains insecure content, the content is added as an apostrophe in the
fields and doesn't trigger a command. Old instances aren’t impacted by this change. If you’re still using the
insecure content in the file for some purpose, stop using it and find other ways. We don’t recommend you add
insecure content into the Use Data file.
If you want to enable the CSV Injection Protection for instances created before Q2 2019, contact Product
Support.
Procedure
1. Go to Admin Center.
2. In the tools search field, type Employee Export.
3. Expand the Specify Export Options section and select any of the following options:
Option Description
Short format: only system fields To get a file containing only the required fields, omitting any
empty or custom fields. Don't select this option if you want
to include User Compensation Data.
Include additional identifiers To get a file containing extra identifiers, like PERSON_GUID
and PERSON_ID_EXTERNAL.
4. Expand the Specify Character Encodings, Locale, Date Format, and Batch Process Option section.
a. If your file uses languages with specific character types, like Chinese characters, select the correct
encoding from the Character Encoding dropdown menu so that the system can recognize the characters.
b. Select Export as a batch process if you have a large number of records. By selecting this option, you can
continue working on other tasks in SAP SuccessFactors while the export runs. Check back later to see if it’s
completed.
Note
If Read Audit is turned on in your instance, you get a one-time download link that expires in 24 hours when
you export the user data file as a batch. Export again if the link is expired.
5. Expand the Specify Compensation Data Updating Options section. Select the option in it if you want to include
compensation data in the exported file.
6. Click Export User File to start the export.
Next Steps
If you're using the user data files for third-party integration, as a best practice, please configure your integration to
read column header instead of column number.
Related Information
To upload your user data file, the file must be formatted correctly and have all required fields.
Caution
We recommend that you use the provided template for creating your own user data file. The template can
be exported from the system anytime. All fields are case-sensitive. If you don't populate a field, please don't
include the field in the user data file. Blank fields wipe out existing data in the database.
Read the following tips before preparing the user data file:
• File Format
The file must be in the Comma-Separated Value (*.csv) format.
• Header Rows
The first two rows of the data file template are header rows. Row 1 is a header row that displays the system keys
that are used to organize user data. Row 2 is a header row that displays the column labels identifying employee
data, which is displayed in SAP SuccessFactors.
Caution
Do not change row 1. Replicate this row exactly as you see it in the template. Note that all texts are in
uppercase. You can customize row 2 to meet your company needs. Both the two rows are required.
Note
Currently, the "User ID" column is required while "Assignment ID" is optional in the user data file. If you do
not input a value in "Assignment ID", the system will populate the value from user ID to assignment ID after
the import job completes.
• Employee Order
The order of the employees in your file is important. A manager's and HR representative's user IDs must exist
in the database before you add an employee, because employees are added to the system in the order that
they appear in your file. Add employees in your file in the following order:
Note
User data files contain sensitive information. When you download a user data file, you're removing the data
from a secure environment. We recommend that you take precautions to safeguard this information.
Related Information
Refer to the tables to make sure that the values you entered in your user data file meet the requirements.
The following table describes the data columns required for the user data file. You must include these columns in
your user data file.
USERID The unique identifier of the user entity. Must be the second column in the file.
Note
USERNAME The unique username assigned to the Must be unique in the system.
employee.
Must be from 1 through 100 characters
The USERNAME is used to log into SAP long.
SuccessFactors.
Can be changed as needed, for example,
when a person marries and wants to use
a different name.
FIRSTNAME The employee's first name. This name is Must be from 1 through 128 characters
displayed in SAP SuccessFactors. long.
LASTNAME The employee's last name. This name is Must be from 1 through 128 characters
displayed inSAP SuccessFactors. long.
EMAIL The complete e-mail address of the Must be a complete email address, for
example [email protected].
employee.
• Manager’s USERID.
Note
Note
Note
• NO_HR = No HR representative is
assigned to the employee.
Note
DEPARTMENT The department in which the employee Can be renamed to use as a filter when
searching for employees.
works.
TIMEZONE The time zone in which the employee If you don't specify a value, Eastern
works.
Standard Time (EST) is used by default.
The following table describes the optional data columns of the user data template. Some columns in your file might
be different.
MI The employee's middle name. This name Must be from 1 through 128 characters
is shown in SAP SuccessFactors. long.
JOBCODE The code assigned to the employee’s job Must be an existing job code.
role.
DIVISION The division in which the employee Can be renamed to use as a filter when
searching for employees.
works.
LOCATION The location where the employee works. Can be renamed to use as a filter when
searching for employees.
Used as a filter for finding employees.
HIREDATE The date on which the employee was The data type is date. There will be vali
hired. dation check on the value. For example,
"last year" and "22/44/2022" are invalid
values.
EMPID The employee's employee ID. Must not be longer than 256 characters.
TITLE The employee's title. Must not be longer than 256 characters.
BIZ_PHONE The employee's work phone number. Must not be longer than 256 characters.
FAX The employee's fax number. Must not be longer than 256 characters.
ADDR1 The employee's address. Must not be longer than 256 characters.
ADDR2
CITY
STATE
ZIP
COUNTRY
REVIEW_FREQ Frequency of the employee's perform Must not be longer than 256 characters.
ance reviews, for example Annual.
LAST_REVIEW_DATE The date of the employee's last review. Must not be longer than 256 characters.
CUSTOM01-CUSTOM15 Customizable fields that can be used You can create up to 15 custom fields.
across modules for filtering, reporting,
permissions, and administrative tasks.
MATRIX_MANAGER The employee's dotted line manager. The USERID of the employee’s dotted
line manager.
DEFAULT_LOCALE The default locale used by the system for If blank, the value defined for your com
this user. Usually the locale value coin pany is used.
cides with the user's language and coun
try/region, for example en_US or en_UK. Note
PROXY The person who acts on behalf of the em The USERID of the proxy.
ployee.
Can include multiple proxy holders. The
syntax is to separate the proxy holder
IDs with pipe (|) characters. Example: ad
min|sholmes423|smaddox666.
CUSTOM_MANAGER The employee's custom manager. The USERID of the employee’s custom
manager.
SECOND_MANAGER The employee's second manager. The USERID of the employee’s second
manager.
EXITDATE The date on which the user exits the The data type is date. There will be vali
company or the date on which the em dation check on the value. For example,
ployment is terminated in Employee Cen "last year" and "22/44/2022" are invalid
tral. values.
NICKNAME The nickname of the user. Must be from 1 through 128 characters
long.
SUFFIX The suffix of the user, for example, "Sr." Must be from 1 through 128 characters
and "Jr.". long.
SALUTATION The salutation of the user. Must be from 1 through 128 characters
long.
ASSIGNMENT_ID_EXTERNAL The assignment ID of the user • Be the last column in the file
• For new users, assignment ID must
be the same as user ID.
• Can only be changed using the con
vertAssignmentIdExternal function
import.
ASSIGNMENTUUID Assignment UUIDs are "meaningless" IDs We recommend that you leave this field
of assignments. Assignment UUIDs are empty and the system will generate
Version 4 UUIDs of 32 characters, using UUIDs for new users. Please note that
all uppercase letters and no "-". For ex you can't update existing assignment
ample, UUIDs.
FDF7921CD3C242F59963B30E8895D0
4A.
PERSON_ID_EXTERNAL A unique identifier of a person in Em This field value can be changed.
ployee Central. You can define PersonI
dExternal through a rule or enter it on
the UI for new hires. Please note that Per
sonIdExternal is labeled as "person ID" in
many places.
Person ID identifies a natural person. An
employee generally has only one person
ID throughout their time at the company,
since this ID is associated to each per
son.
PRONOUNS Designations such as "she/her/her" that The picklist code for pronouns must be
your employees want to display. PersonPronouns.
Note
DISPLAYNAME An employee name that is configured or Import and export are supported for both
imported by an admin to be displayed Employee Central instances and non-Em
on UIs or other communication channel ployee Central instances. But we don't
such as message, alert, email, and so on. recommend that you update the values
of the field through import if Employee
Note Central is enabled, because your updated
values will be overwritten by HRIS sync
DISPLAYNAME is automatically ena
or when you refresh the general display
bled in the Succession Data Model.
name.
You can see this element in the Busi In the import file, you can provide a new
ness Configuration UI, but your up general display name or update the cur
dates to the element in BCUI won't rent display name of an employee.
take effect. This field is used for If you leave this field empty,
General Display Name. Please note the system calculates the value
that DISPLAYNAME here has noth according to message key
ASSIGNMENTDISPLAYHEADER A title that is configured and imported This field can be left empty.
by administrators to differentiate multi
ple employments. If Employee Central is Note
on and employment differentiator is con
Please do not configure sensitive or
figured, this is synced with employment
differentiator. restricted field for employment dif
ferentiator.
Note
Header .
Related Information
6.1.5 Supported Characters
Not all characters can be used in all fields of the User Data File, or in the information appearing on the Log On page.
Specifically, the following table shows which characters can be used where.
0 through 9 Numerals Y Y Y Y
_ Underscore Y Y Y Y
- Hyphen N Y Y Y
@ At sign N Y Y Y
. Period N Y Y Y
~ Tilde N N Y Y
! Exclamation mark N N Y Y
# Pound sign N N Y Y
$ Dollar sign N N Y Y
% Percent sign N N Y Y
& Ampersand N N Y Y
* Asterisk N N Y Y
+ Plus sign N N Y Y
` Accent grave N N Y Y
? Question mark N N Y Y
= Equal sign N N N Y
^ Caret N N N Y
( Left Parenthesis N N N Y
) Right Parenthesis N N N Y
, Comma N N N Y
/ Slash N N N Y
; Semicolon N N N Y
[ Left bracket N N N Y
] Right bracket N N N Y
: Colon N N N Y
{ Left braces N N N Y
} Right braces N N N Y
\ Back slash N N N Y
| Pipe sign N N N Y
Space N N N N
Refer to this table to find the mapping relationship among the Time Zone ID, short name, and long name.
Related Information
Permissions are required if you want to upload user data using the Employee Import tool.
Context
You can manage the access permission to Employee Import using the following methods:
• If the Enable Control on Employee Import in Role-Based Permissions option is not enabled from Admin
Center Platform Feature Settings , then you should use the Manage Employee Import tool in Admin Center
to grant admins the import permission.
Note
The Enable Control on Employee Import in Role-Based Permissions option is not enabled by default, and is
only shown in the instances that don't have Employee-Central enabled.
Note
You cannot specify a target population for the Employee Import role-based permission. Admins with this
permission can import data for all users.
Task overview: Managing Basic User Data by Using a Data File [page 88]
To update the system with your user data changes, you can upload a user data file to SAP SuccessFactors.
Prerequisites
To upload your user data file, the file must be formatted correctly and have all required fields. For more information
about how to format your file, see General Tips for the User Data File [page 93] and Field Requirements for the User
Data File [page 94].
Remember
As a customer, you don't have access to Provisioning. To complete tasks in Provisioning, contact your
implementation partner or Account Executive. For any non-implementation tasks, contact Product Support.
Context
You can only access the Employee Import tool in systems that do not have Employee Central enabled. If you
have enabled Employee Central, you need to choose a different tool to import basic user information. For more
information, see Choosing a Tool for User Management [page 28].
Option Description
Send welcome email to new users To automatically send welcome emails to new users, Email
template needs to be enabled beforehand. If you haven't
enabled it, a warning is displayed. To enable the email tem
plate, see Enabling and Customizing Welcome Email Tem
plate [page 55].
Validate Manager and HR fields To ensure that each employee record has a valid manager
and HR representative.
Process inactive Employees To update the information of inactive employees to the sys
tem.
Note
Re-activate purged users To reactivate purged users in the system if the users are
active in the user data file.
5. Optional: If your updates include manager changes, expand the Specify Form routing options section to specify
the automatic manager transfer and automatic document removal options. For more information about each
option, see Configuring Document Transfer in Form Templates.
6. Optional: Expand the Specify Character Encodings, Locale, and Date Format section.
The default locale and date format are "English(United States)" and "MM/dd/yyyy". Other available locales in
your system depend on the configuration of Language Packs in Provisioning, and the date format will match
the locale you select. Please note that we only support multiple date formats in the Hire Date and Exit Date
fields.
7. Optional: If you want to update compensation forms, expand the Specify Compensation form updating options
section to select compensation options.
8. Optional: Click Validate Import File to validate your user data file. If any errors are found, the errors are
displayed on the top of the page. Please correct the errors before importing.
9. Click Import User File to import your user data.
Results
After the file is uploaded, the SAP SuccessFactors user database is updated with the information from that file. You
receive an email notification with the results of the upload, including any errors. If your updates include manager
changes, you receive another email notification with the results of document transfer, including lists of users whose
forms have been transferred or failed to transfer.
Task overview: Managing Basic User Data by Using a Data File [page 88]
You can update employees’ matrix or custom managers by importing a CSV file.
Prerequisites
• You have the Matrix Manager and Custom Manager Relationship Import permission under Manage User Data
admin permissions.
• matrixManager and customManager have been configured in Succession Data Model.
Context
You use matrix managers or custom managers to maintain dotted reporting lines or backup management. In
addition to using the standard user data file to import and export the matrix and custom manager, you can also
update the information with the Import Matrix Manager and Custom Manager Relationships admin tool.
Matrix managers and custom relationships can show in both the Company Organization Chart, Succession Org
Chart, home page, and People Profile. If the Show Custom Manager Relationships in Company Organization Chart
(for Company Organization Chart, Home Page, and Mobile People Profile) option has been enabled in the Company
System and Logo Settings admin page, the matrix or custom manager are shown with a dotted reporting line.
Procedure
1. Create a CSV file with the employee user ID, manager user ID, manager type, and so on. To differentiate the
manager types, use the following codes:
In the CSV file, you can also specify whether the matrix manager information is to be displayed in the Company
Organization Chart or Succession Org Chart. However, to display the manager, make sure that you’ve enabled
the display in the Org Chart Configuration admin tool and have configured XML definition for the chart.
2. Determine how you want to update the information and format the CSV file accordingly:
• The simple CSV file without the ACTION column updates any existing matrix or custom manager
information of the employee. See the following sample CSV file:
Sample Code
USERID,MGR_USERID,RELATIONSHIP,ORG_CHART_DISPLAY
cgrant1,athompson1,EX,TRUE
cgrant2,dcortez,EX,FALSE
cgrant3,aaaa,EC,FALSE
In this example, for user cgrant1 and cgrant2, any existing matrix manager information will be overwritten;
for user cgrant3, the previous custom manager information will be overwritten.
• A CSV file with the ACTION column supports incremental addition to or removal of existing matrix or
custom manager information. See the following sample:
Sample Code
USERID,MGR_USERID,RELATIONSHIP,ORG_CHART_DISPLAY,ACTION
cgrant1, athompson1, EX, TRUE, ADD
cgrant2, dcortez, EX, FALSE, REMOVE
cgrant3, aaaa, EC, FALSE, REMOVE
Note
You can also import multiple manages for the same employee. Simply create multiple lines for the
employee in the CSV file.
3. Upload the file through Admin Center Import Matrix Manager and Custom Manager Relationships .
Results
The matrix or custom manager information of the relevant employees has been updated.
In the Succession Org Chart, the dotted line appears only when the position has an incumbent.
Related Information
After the file upload is complete, you will receive an e-mail notification. This e-mail contains the results of your
upload, including any errors that occurred.
You might see some of these common error messages in the e-mail notification. To correct these and any other
errors, update the data file and then upload it again. If you're still having trouble uploading the data file, contact
Product Support.
Missing required field. Required information was not provided. Fill in all required information and upload
the file again. For more information about
required fields, see Field Requirements
for the User Data File [page 94].
Username already exists. There's a duplicate username. Remove duplicate users and upload the
file again.
Manager Cycle detected with this man There are manager cycles in the user hi Make sure that the employee's own
ager ID — <manager id>. erarchy.
USERID is not listed instead of the man
ager's USERID.
Invalid Manager ID. The manager's UserID listed for the em Make sure that the manager's USERID
ployee doesn't exist in the database.
exists in the database.
Related Information
To add or update extended user data for multiple users in one go, you can upload user data files respectively for
personal information, trend information, and background information.
Extended user information consists of supplemental data about users in your SAP SuccessFactors system, beyond
the "basic" user information such as name, job title, and department.
• Personal information
• Background information
• Trend information
Note
• We recommend that you perform periodic exports of all three data files and save these outside of
the application, in case you ever need to refer to historical data and need to restore old records that
are deleted. SAP SuccessFactors does not retain historical records that are deleted, so back up this
information regularly.
• We recommend that any time you do manual import of any profile data, you export a backup of the data
first. This way if a mistake is made (usually with the Import by overwriting existing data option), then you
can easily recover.
• Remember that all the options and file types discussed here also apply to the FTP process. You can import
or export these files on an automated schedule, and can choose what format and options to select just like
we could do with manual import or export.
Parent topic: Managing Extended User Information by Using Data Files [page 127]
Related Information
Note
• This type of extended user information is not the same "personal information" and "job information" data
that is included in SAP SuccessFactors Employee Central. For information about how to import data to
Employee Central, please see here.
• In Employee Central-enabled instances, you can prevent the import of unsecured content by enabling the
Security Scan of User Inputs option. This applies when you import basic user information using Import
Employee Data, and when you import personal information using Import Extended User Information or the
Live Profile Import job in Provisioning.
Remember
As a customer, you don't have access to Provisioning. To complete tasks in Provisioning, contact your
implementation partner or Account Executive. For any non-implementation tasks, contact Product
Support.
Personal information in your instance is defined by standard elements and userinfo elements in Succession Data
Model. Every employee has a database record for each personal information field in your instance, even if it is blank.
The personal information import file does not include "basic" user information that is included in the Basic
Employee Import file used to add new employees to the system.
You can limit employees (rows) and data fields (columns) to import by omitting them from the import file. For
example, if you don’t want to import date, remove the date column from the import file. If you include an
employee and a column in the import, it will overwrite any existing data, even if left blank.
Related Information
Trend information consists of "one-to-many" rating data from your talent review process— that is, data for which
there may be multiple records for each employee.
• Performance
• Potential
• Competency
• Objective
It may also include up to two custom rating types, if defined in the Succession Data Model for your instance.
Each type of trend information (such as performance ratings) can include multiple records for each employee
(such as for each performance review cycle).
By default, the trend information export only includes those ratings that have been entered manually in People
Profile or the ones that are imported. You can include ratings that come from forms by extra settings.
Background information consists of supplemental "one-to-many" background data about a user— that is, data for
which there may be multiple records for each employee.
Background information is entirely customized and different in every instance. It is defined by the background
elements in the Succession Data Model.
Note
If there are duplicate field names for background elements in the data model, the import job will fail.
Each type of background information (such as education) can include multiple records for each employee (such as
for different educational degrees).
The background information import file can include multiple sections, one for each type of background data. You
can limit the import to certain sections and exclude others, but you must include all columns for each included
section.
Note
Import jobs on the same background information cannot be run concurrently to avoid data conflicts. The
current job will wait in the queue and not start until the previous job completes.
Related Information
When you import the file for the background information, the system automatically validates the file content to
ensure correctness of the definition.
Before you import the file, you can select the Stop import if invalid users found checkbox and the import stops when
invalid user data is found. If you haven’t selected the checkbox, the import continues but the invalid user data isn’t
imported into the system.
Note
In the data model file, you might have defined a maximum number of data entries for a background data
element. For example, a user can only have up to three pieces of education information. However, this
maximum limit doesn’t apply to data file import and the system doesn’t verify whether the imported user
entries exceed the limit.
When a user has permission to import extended user information, he or she can import all background data for
all users. The import is not limited by the Employee Data permission defined in Manage Permission Roles.
Prerequisites
You have the role-based permissions of Export Extended User Information and Import Extended User Information
under the Manage User admin permissions.
Procedure
1. Create an import file in CSV format, either by exporting the existing data or by exporting a template.
Note
In the import CSV file, either user ID or assignment ID should be provided, and they should be the same as
the corresponding user ID or assignment ID that already exists in the system.
3. Import data in the CSV file to the system. You can choose either an "incremental" import that only adds new
data or an "overwrite" import that replaces all existing records.
Task overview: Managing Extended User Information by Using Data Files [page 127]
Related Information
Create a CSV import file that you can use to add or update extended user information.
Context
By default, the user data template contains the Assignment ID column. However, if you select Exclude Assignment
ID Column from the User Data Template in Admin Center Platform Feature Settings , this column won’t be
included.
Note
When you import background or trend information, and your import file includes an "assignment ID" column,
then the column header should be specified like ^AssignmentId. The header name is case-insensitive, and
other characters such as quotation marks or whitespace aren't supported here. For example,^"AssignmentId"
as the column header will cause an error during the import process.
• To add or update existing extended user information, start by exporting the data from your instance, using
the Export Extended Data only option.
• To create an import file from scratch and import extended user information for the first time, start by
exporting a CSV template, using the Export Template option.
2. Save the resulting export file in CSV format.
Next Steps
You can now edit the CSV file to add or update the information and prepare it for import.
Next: Editing Extended User Information in the Import File [page 136]
Prerequisites
You have the role-based permission of Export Extended User Information under the Manage User admin
permissions.
Context
Tip
The system displays the settings you defined for the last export. So you don't need to reset all the settings for
each export.
• Personal Information
• Background Information
• Trend Information
The trend information export file, by default, only includes those ratings that have been entered manually
in People Profile or the ones that are imported, and does not include ratings that come from forms. If you
want to include rating data coming from forms in the export file, select Include form data.
3. Specify the locale and character encoding you want to use in the export file.
If you are exporting data in a language that uses special character types, such as Chinese, be sure to select the
relevant character encoding so that the data is displayed correctly.
4. Specify additional export options by selecting one or more of the following:
Export as a batch process Select if you want to run the export as a batch job and
download the latest export file multiple times. Exporting as
a batch allows you to leave the export page and return to
pick up the file later. You will receive notifications once the
job completes. This option is only applicable to the Export
Extended Data Only and Export Extended Data with User
Attributes buttons. Note that if the number of exported re
cords exceeds 5000, the export will be run as a batch job
even though this option is not enabled.
Valid users only. Select this option if you want to exclude inactive users. If
checked, the export only includes data for active users.
Remove carriage returns and line breaks on export Select this option to remove any carriage returns and line
breaks from the export file.
Export selected background information This option is visible only when you choose to export back
ground information in step 2. If you want to export only
a particular section of background information, select this
option and choose the section from the drop-down list.
• Use the Export Extended Data only to export the data that you want to edit and import again. This option
exports data in exactly the correct format required for import.
• Use the Export Extended Data with User Attributes to export the data in a more readable report. This option
includes additional user data, such as name and manager, in the export file, to make it easier to read.
6. Optional: Go to Admin Center Scheduled Job Manager to monitor the scheduled job of Live Profile
Export for background information or trend information.
When the export of background information or trend information is triggered, a corresponding scheduled job of
Live Profile Export is automatically generated. You can monitor the scheduled job in Admin Center.
If you are exporting personal information, it doesn't trigger any scheduled job. So you can't monitor the
export of personal information as a scheduled job.
Results
All existing data in the system, of the selected type, is extracted and downloaded in CSV format.
Related Information
Download an extended user information import template so that you can use it to add or update data.
Prerequisites
You have the role-based permission of Export Extended User Information under the Manage User admin
permissions.
Procedure
1. Go to Admin Center.
2. In the tools search field, type Export Extended User Information.
3. Specify the type of data you want to export.
• Personal Information
• Background Information
• Trend Information
4. Ignore the local and export options. They are irrelevant to the template export.
5. Click Export Template to export the template.
A blank CSV template file is opened. The template contains column headers indicating the user data fields that
should be entered in each column. For background and trend information, there may be more than one row of
headers, one for each type of background or trend element configured in your system. The exact user data fields
available in the template are based on the configuration of your instance's data model.
Next Steps
You can now add rows of data for any existing user in your system. For background and trend information, you can
add multiple rows for each user, one for each type of background or trend element configured in your system.
You can use any spreadsheet application to view the data in columns and rows and save in CSV format. The column
headers must be configured in your data model. If you want to use new headers, contact your Implementation
Partner to add them in the data model beforehand.
If you use attachments as part of background or trend information in your system, import them separately. For
more information, see Importing Attachments to Employee Profile [page 141].
Previous task: Creating an Import File for Extended User Information [page 132]
Note
Personal, Background, and Trend information all support the same date format standards as indicated in the
following table.
Parent topic: Editing Extended User Information in the Import File [page 136]
Prerequisites
You have Administrator Permissions Manage User Import Extended User Information permission.
Note
• If you want to update user data in the system, make sure that the users are included in the target
population of your role-based permission.
• The Employee Data user permissions don't affect the import. As long as you have the Import Extended User
Information role-based permission and define the corresponding target population, you are able to import
user data.
If you want to hide the option of importing background information by overwriting existing data, you need to
have Administrator Permissions Manage User Hide the Option to Import by Overwriting Existing Data for
Background Information permission.
Context
Tip
The system displays the settings you defined for the last import. So you don't need to reset all the settings for
each import.
Procedure
• Personal Information
• Background Information
• Trend Information
4. Specify the locale and character encoding used in your import file.
If you are importing data in a language that uses special character types, such as Chinese, be sure to select the
relevant character encoding so that the data is displayed correctly after import.
Always expand and verify the options in this section to make sure that they are correct.
6. Select or deselect the Stop import if invalid users found.
Select this option to stop the import process if an invalid user or reporting relationship is found in the import
file. This is useful when troubleshooting new files to make sure that they are formatted properly. If you haven’t
selected this option, the import continues but the invalid user data isn't imported into the system.
7. Select the import behavior:
• Select Import by incrementally adding data if you want to add new records only without deleting any
existing data.
• Only for personal information or trend information: Select Import by overwriting existing data if you want to
replace existing records with data in the import file for all users in your instance.
Note
• For trend information, the Import by overwriting existing data option overwrites all ratings data
(performance, potential, competency, objective, custom1 & custom2) that does not come from
forms, for all users in your instance, even if they are not included in the import file.
• For personal information, this option is required and is always checked. There is only one record of
personal information per user, so all new records must overwrite the existing ones.
• Only for background information: select Import by overwriting existing data Overwrite the data of all
users if you want to replace existing records with data in the import file for all users in your instance.
Note
The overwrite only affects the background elements that are included in the import file for all users in
your instance. Of these background elements, the background data in your instance is replaced by that
in the import file.
If you exclude certain background elements from the import file, this background data is not impacted
by the import. So you do not have to import every background element in your instance; you can
import a file that contains only the background elements you want to update.
If you import a file that contains attachment IDs, do not select this option. Otherwise, the
corresponding attachment files will be deleted.
• Only for background information: select Import by overwriting existing data Overwrite the data of users
in the import file if you want that only for users listed in the import file, data of their background
elements is replaced by the corresponding data in the import file.
Note
This overwrite only affects these specified users' background elements that are included in the import
file. For example, an import file only includes a Languages record of user A and a Education record of
user B. After the import, only user A's Languages record and user B's Education record are replaced.
If you import a file that contains attachment IDs, do not select this option. Otherwise, the
corresponding attachment files will be deleted.
Note
The import job needs some time to finish. While one import job is running, do not start another job until the
current one is finished. Otherwise, it leads to data corruption, especially when you run jobs with the option
to overwrite existing data.
9. Optional: Go to Admin Center Scheduled Job Manager to monitor the scheduled job of Live Profile
Import for background information or trend information.
When the import of background information or trend information is triggered, a corresponding scheduled job
of Live Profile Import is automatically generated. You can monitor the scheduled job in Admin Center.
Note
If you are importing personal information, it doesn't trigger any scheduled job. So you can't monitor the
import of personal information as a scheduled job.
Results
The extended user information in the import file is uploaded to the system for relevant users. If you uploaded
background information, you might receive two email notifications, one is for Background Sync, and the other is
for Background Import. This is expected behavior, because a background sync job is triggered automatically in the
backend as well as the import job.
Previous: Editing Extended User Information in the Import File [page 136]
Related Information
When you import a file that contains trend or background information, it’s recommended that the locale you
specify is consistent with the overall language setting in Settings Change Language .
If the settings aren't consistent, dates aren't parsed correctly by the system.
For example, let's assume English US is selected in the overall setting and English UK is specified in import options.
The US date format is MM/DD/YYYY, while the UK date format is DD/MM/YYYY.
For the supported locales in the system, refer to Date Formats for Different Locales [page 136].
You can import attachments as part of the extended user information by requesting a scheduled job from
Provisioning.
Task overview: Managing Extended User Information by Using Data Files [page 127]
Related Information
You can attach documents as part of the extended user information on an employee's profile. Attachments can be
added manually by a user from People Profile, or be imported in bulk with a scheduled job from Provisioning.
If configured in the data model for your instance, the <attachment> field appears as a column in the CSV import/
export template for extended user information. However, you cannot use the Import Extended User Information
Remember
As a customer, you don't have access to Provisioning. To complete tasks in Provisioning, contact your
implementation partner or Account Executive. For any non-implementation tasks, contact Product Support.
Related Information
Create a zip file containing the attachments you want to import and a CSV mapping file. Then upload the file to your
SFTP server so the attachments can be imported to the system with a scheduled job in Provisioning.
Prerequisites
The <attachment> field is configured in the Data Model for your instance and appears as a column in the CSV
template for extended user information.
Context
Filenames for the zip, CSV, and attachment files must not contain any spaces. Use underscores or dashes. The
system validates the files and the import fails if files have names with spaces.
Note
The file size of the attachment should be no larger than the following two limitations that are configured in
Provisioning and the data model. If the two max file sizes are different, please follow the smaller one.
• The Attachment max file size setting under Document Attachment in Provisioning
• The max-file-size-KB setting for the data fields that allow attachments in the Data Model
As a customer, you don't have access to Provisioning. To complete tasks in Provisioning, contact your
implementation partner or Account Executive. For any non-implementation tasks, contact Product Support.
Procedure
For example, you might have a background information block called "Documents" that includes an attachment
and a document name. The CSV might look like this:
Example
Note
The columns in your template may vary. Background elements can contain other data fields, such as dates
or descriptions, in addition to attachments. However, you can only import attachments to a background
element that has an Attachment column in the import template.
4. Create a mapping file by filling out one row in the CSV for each attachment you want to import, including the
following information:
Column Description
User ID column The first column in the CSV file should be ^UserId. It
should be the User ID of the employee for whom you are
importing the attachment.
Background Element ID column The second column in the CSV file should be the background
element ID. It should be the same for every row in your
mapping file. This column identifies the background ele
ment for which you’re importing attachments.
Attachment column There must be an Attachment column in the CSV file that
contains the filename (including the file extension) of the
attachment for that user. It isn't necessarily the third column
Other columns The import template reflects the fields and field order that
are defined in the data model. It often contains other col
umns for other fields, such as dates or descriptions.
Example
5. Save the CSV mapping file to the same folder where you saved all your attachments.
6. Select all the files in the folder—attachments and mapping file— and archive them together in a zip file.
Tip
Select all the files and zip them directly, rather than zip the folder that contains them. Zipping the whole
folder can cause issues with the import.
Example
Note
Be sure to include in your request the exact name of the zip file and the SFTP folder where it’s located.
Related Information
Bulk import attachments for background information by scheduling a Live Profile Import job in Provisioning.
Prerequisites
Upload a zip file containing attachments and a CSV mapping file to SFTP.
Context
Remember
As a customer, you don't have access to Provisioning. To complete tasks in Provisioning, contact your
implementation partner or Account Executive. For any non-implementation tasks, contact Product Support.
Procedure
If you are importing data in a language that uses special character types, such as Chinese, be sure to select the
relevant character encoding so that the data is displayed correctly after import.
Select this option to stop the import process if an invalid user or other incorrect data is found in the import
file. This is useful when troubleshooting new files to make sure that they are formatted properly. If you haven't
selected this option, the import continues but the invalid user data isn’t imported into the system.
8. Select Upload attachments along with Data.
9. Select an overwrite behavior:
• Select Import by incrementally adding data if you want to add new records only without deleting any
existing data.
• Select Import by overwriting existing data if you want to overwrite existing records with data in the import
file.
Note
• The overwrite only affects the background elements included in the import file for all users in your
instance. Of these background elements, the background data in your instance is replaced by that
in the import file.
If you exclude certain background elements from the import file, the corresponding background
data is not impacted by the import. So you do not have to import every background element
in your instance; you can import a file that contains only the background elements you want to
update.
10. In the Server Access section, enter the server location where your zip file is located and fill out other required
fields.
11. (Optional) Select Test Connection to test the connection to the FTP location.
12. (Optional) Select Test File Put Permission to test the permission to access the location specified in the File Path
field.
13. In the File Access section, fill out the required fields.
14. Define the Job Occurrence & Notification according to your needs.
15. Submit the job.
Results
This job status is shown as completed in the Scheduled Job Manager in Admin Center and in the Monitor Jobs under
in Provisioning and . The attachments for background information in the import file are uploaded to the system for
relevant users.
Related Information
7.3.4 Exporting Attachments
You can export attachments for background information or a type of background information by scheduling a Live
Profile Export job in Provisioning.
Context
Remember
As a customer, you don't have access to Provisioning. To complete tasks in Provisioning, contact your
implementation partner or Account Executive. For any non-implementation tasks, contact Product Support.
Procedure
Note
• Because of large data volume, currently we don't support file encryption when exporting background
information with attachments. Please select None in File Encryption if you’re allowed to access the
unencrypted files.
• If you want to encrypt the export files for background information, deselect the "Include Attachment"
checkbox.
• Because of large data volume, the export file will be zipped even if you choose the Unzip export file if it
is zipped checkbox.
• We recommend that you use the SF hosted SFTP server for better performance.
6. Optional: If you want to export attachments only for a particular type of background information, in the Job
Parameters section, select Export selected background information and choose the type from the dropdown
list.
7. Submit the job.
This job status is shown as completed in the Scheduled Job Manager in Admin Center and in the Monitor Jobs under
Managing Job Scheduler in Provisioning.
One or more zip files consisting of a CSV file and attachments are exported, and you receive an e-mail about the
export results. The name of the exported zip files are BackgroundDataWithAttachments[file number].zip.
Please note that in the CSV file, the "attachment" column contains the corresponding filenames of attachments.
Related Information
Profile photos of employees can be imported in batch through a scheduled job in Provisioning. As a customer, you
need to prepare your photos and a CSV file that maps the photos to existing usernames, and then request a batch
upload job in Provisioning.
Note
An employee with mutiple employment records (usernames) should only have one profile photo. So if you
import photos for such an employee, we recommend that you only upload a photo for one of the employments.
After the import, all the employments will share the single profile photo.
If you instead upload multiple photos for the employee in one import file, only one photo is selected and shared
by all the employments.
Parent topic: Managing Extended User Information by Using Data Files [page 127]
7.4.1 File Requirements
Before you request a job to batch upload employee photos, prepare the employee photos and a CSV file that meet
the requirements specified. If necessary, compress the large amounts of photos into one or multiple ZIP files.
• Photo size
Each photo must be 2 MB or less. The recommended size is 100 KB.
• Photo format
JPG format only. If your photos are in other formats, convert them into JPG format.
• Aspect ratio
3:4 is preferred for optimal display results.
• Dimension in pixels
The recommend dimension is 180 pixels in width and 240 pixels in height.
• Filenames
The filenames of the photos must not contain spaces. Use dashes or underscores to replace spaces.
• Show the whole face in cropped photos
The profile photos are cropped to a circular shape on the People Profile. To ensure that the whole face is
displayed properly, we recommend that the face is positioned within the circular crop area as follows:
For optimized import performance, you can compress large amounts of photos into one or more ZIP files for a job
of photo upload. The ZIP files must meet the following requirements:
• The filenames of photos in ZIP files must follow the character encoding specified for the job.
• To upload one ZIP file in a job, the ZIP filename must be the same as the name of the CSV mapping file.
• To upload multiple ZIP files in a job, the ZIP filenames must follow the pattern: the CSV filename_sequence
number.
For example, the CSV filename is example.csv. You prepared three ZIP files of photos for a job. The
corresponding three ZIP filenames are example_1.zip, example_2.zip, and example_3.zip.
If the CSV filename includes a date, don't include the date when copying the filename for ZIP files.
For example, if the CSV filename is instance123_photos_210720.csv, the ZIP filename must be
instance123_photos_.zip, or instance123_photos__1.zip and instance123_photos__2.zip for
multiple ZIP files.
The CSV file that maps the photos to existing usernames for the batch job must meet the following requirements:
• It must contain two columns only: a Username column followed by a Filename column.
In each row, enter an existing username in the Username column and a file name in the Filename column to
create a mapping. All names are case-sensitive. Example:
Tip
To get the list of employee usernames in the instance, go to the Manage Users tool in Admin Center, or you
can export the full user list with the Employee Export tool in Admin Center.
Caution
If you prepare multiple CSV files for parallel jobs, do not put the same username in more than one file.
Overlapping in usernames can lead to job failure.
Request a job or multiple parallel jobs to bulk upload profile photos of employees to People Profile.
Prerequisites
• An SFTP account. For security reasons, we recommend that you use SAP SuccessFactors hosted SFTP server.
In case you don't have an SFTP account, contact your Partner or Product Support.
• Employee photos or compressed photos, and a CSV mapping file that meet the requirements specified in File
Requirements [page 149]. If you want to request multiple jobs that run in parallel, prepare one CSV file for each
job.
Context
Users can personalize their profiles by adding profile photos manually to the People Profile page. As an
administrator, you can have the profile photos imported in batch through a job in Provisioning.
Remember
As a customer, you don't have access to Provisioning. To complete tasks in Provisioning, contact your
implementation partner or Account Executive. For any non-implementation tasks, contact Product Support.
Procedure
Note
In the case of parallel jobs, you can create one directory to store all photos and CSV files for all jobs; or
you can create separate directories to store the files needed for each job. Either way, the information you
provide when requesting the job should match that on the SFTP server.
Related Information
Beside managing user information on the UI and using file imports, you can also use the User API to create and
update users. All fields in the Basic User Information and Extended User Information are available in the User
entity.
Prerequisites
Context
You can find detailed examples on how to create and update users in the API reference for the User entity. We
recommend that you use OData API instead of SFAPI to create and update users. SFAPI has been deprecated since
August 2018 and will soon be retired.
Procedure
• To create a user and set the initial password, make an API call to the User entity.
Here's an example request payload of creating a user using the OData API:
Request
URI https://<API-Server>/odata/v2/User
Note
In this example, user password isn’t specified in the request payload. The system generates a random
password and sends it to the user. You can also explicitly include the password value in the payload.
However, this is considered unsafe and therefore not recommended. Upon the first login, all new users are
required to reset the initial password.
• To update user information, you can use upsert, merge, or replace operations and include the user fields in the
payload.
For more information about OData operations, see the SAP SuccessFactors HXM Suite OData API: Developer
Guide.
The following example shows how to reset a user's password using the merge operation:
Request
URI https://<API-Server>/odata/v2/
User('acraig')
Payload {
"password":"Xwe78nyE3"
}
Next Steps
For new users, log into the system and reset the password.
For existing users, if the password is updated by an API admin, they're required to reset the password upon login. If
the password is updated by the user themselves, no action is required.
User
SAP SuccessFactors Workforce SCIM API provides System for Cross-domain Identity Management (SCIM) 2.0
REST APIs to help you better manage user accounts and user groups. For detailed information about these APIs,
see SAP SuccessFactors Workforce SCIM API on SAP API Business Hub.
API Resources
Prerequisites
SCIM APIs don’t support case-sensitive usernames. To use SCIM APIs in this section, disable Enable Non-Case-
Sensitive Username in Provisioning.
Remember
As a customer, you don't have access to Provisioning. To complete tasks in Provisioning, contact your
implementation partner or Account Executive. For any non-implementation tasks, contact Product Support.
Administrator Manage Identity Account and Group Read This permission allows you to query user resources. For exam
ple, you can make below three queries:
Access to SCIM User API
• /rest/iam/scim/v2/Users/{id}
• /rest/iam/scim/v2/Users
• /rest/iam/scim/v2/Users/.search
Administrator Manage Identity Account and Group Edit This permission allows you to delete, post, put, and patch user
resources.
Access to SCIM User API
Administrator Manage User Employee Export This permission allows you to post, put, patch, query user re
sources.
Administrator Manage Identity Account and Group Read This permission allows you to query group resources.
Access to SCIM Group API
Administrator Employee Central Import Entities Phone This permission allows you to update work phone of an em
ployee.
Information, Employee Data Business Phone of Write ac
cess
Administrator Employee Central Import Entities Phone This permission allows you to update fax information of an
employee.
Information, Employee Data Business Fax of Write access
Administrator Employee Central Import Entities Phone This permission allows you to update email information of an
employee.
Information, Employee Data Email of Write access
Related Information
Note
Request
URI https://<api-server>/rest/iam/scim/v2/Users
Request Body
{
"schemas": [
"urn:ietf:params:scim:schemas:extension:successfactors:2.0:U
ser",
"urn:ietf:params:scim:schemas:core:2.0:User",
"urn:ietf:params:scim:schemas:extension:sap:2.0:User",
"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"
],
"externalId": "example_22072201",
"userName": "example_22072201",
"userType": "employee",
"locale": "zh_CN",
"timezone": "CST",
"active": true,
"phoneNumbers": [
{
"value": "12345",
"type": "workPhone",
"primary": true
},
{
"value": "67890",
"type": "homePhone",
"primary": false
}
],
"emails": [
{
"value": "[email protected]",
"type": "workEmail",
"primary": true
},
{
"value": "[email protected]",
"type": "homeEmail",
"primary": false
}
],
"urn:ietf:params:scim:schemas:extension:successfactors:2.0:U
ser": {
"perPersonUuid": "73C9C586F9284B77B6116F0E18BDBFA4",
"personIdExternal": "jreed1",
"loginMethod": "sso"
},
"urn:ietf:params:scim:schemas:extension:sap:2.0:User": {
"userUuid": "example_22072201"
}
}
{
"schemas": [
"urn:ietf:params:scim:schemas:extension:successfactors:2.0:User",
"urn:ietf:params:scim:schemas:core:2.0:User",
"urn:ietf:params:scim:schemas:extension:sap:2.0:User",
"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"
],
"meta": {
"resourceType": "User",
"created": "2022-07-22T06:14:58.000Z",
"lastModified": "2022-07-22T06:14:58.000Z",
"location": "/rest/iam/scim/v2/Users/01ac8431-7c0f-4a70-a8f6-57610214cc5c",
"version": "2.0.0"
},
"id": "01ac8431-7c0f-4a70-a8f6-57610214cc5c",
"externalId": "example_22072201",
"userName": "example_22072201",
"name": {
"formatted": "User 1096",
"familyName": "1096",
"givenName": "User",
"middleName": null,
"honorificPrefix": "Sr. Software Engineer",
},
"locale": "zh_CN",
"timezone": "CST",
"userType": "EMPLOYEE",
"active": true,
"displayName": "User 1096",
"emails": [
{
"type": "workEmail",
"value": "[email protected]",
"primary": true
},
{
"type": "homeEmail",
"value": "[email protected]",
"primary": false
}
],
"title": "Sr. Software Engineer",
"urn:ietf:params:scim:schemas:extension:successfactors:2.0:User": {
"perPersonUuid": "73C9C586F9284B77B6116F0E18BDBFA4",
"loginMethod": "sso",
"personIdExternal": "User1096",
"customFields": [
{
"value": "CF1_001",
"customFieldName": "custom01",
"display": "Preferred Name"
},
{
"value": "CF2_001",
"customFieldName": "custom02",
"display": "Extension"
}
]
},
"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User": {
"department": "N/A",
"division": "N/A",
"manager": {
The following example shows how to replace all the information of a user.
Note
When you replace a user, include all fields and their values in the request body. Fields not included in the
request body are updated with value null.
Request
URI https://<api-server>/rest/iam/scim/v2/Users/dc93175f-2327-
c212-e12c-00000a746432
"urn:ietf:params:scim:schemas:extension:successfactors:2.0:U
ser",
"urn:ietf:params:scim:schemas:core:2.0:User",
"urn:ietf:params:scim:schemas:extension:sap:2.0:User",
"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"
],
"externalId": "test_211150015",
"userName": "test_211150015",
"userType": "employee",
"locale": "zh_CN",
"timezone": "Asia/Shanghai",
"active": true,
"emails": [
{
"value": "[email protected]",
"type": "work",
"primary": true
}
],
"phoneNumbers": [
{
"value": "12345",
"type": "workPhone",
"display" : null,
"primary": true
}
],
"urn:ietf:params:scim:schemas:extension:successfactors:2.0:U
ser": {
"perPersonUuid": "C5D09007A03F4914A9906346CD0F776D",
"loginMethod": "pwd",
"personIdExternal": "z3"
},
"urn:ietf:params:scim:schemas:extension:sap:2.0:User": {
"userUuid": "testUserUuidqqqqwwwww2"
}
}
Response
{
"schemas": [
"urn:ietf:params:scim:schemas:extension:successfactors:2.0:User",
"urn:ietf:params:scim:schemas:core:2.0:User",
"urn:ietf:params:scim:schemas:extension:sap:2.0:User",
"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"
],
"meta": {
"resourceType": "User",
"created": "2011-09-08T00:16:46Z",
"lastModified": "2022-08-17T09:27:29Z",
"location": "/rest/iam/scim/v2/Users/dc93175f-2327-c212-e12c-00000a746432",
"version": "2.0.0"
},
"id": "dc93175f-2327-c212-e12c-00000a746432",
"externalId": "test_211150015",
"userName": "test_211150015",
"name": {
"formatted": "testFormatted",
The following example shows how to modify some specific information of a user.
Request
URI https://<api-server>/rest/iam/scim/v2/Users/a44857b5-
ad0e-4d45-981d-af3b33974b0c
Response
{
"schemas": [
"urn:ietf:params:scim:schemas:extension:successfactors:2.0:User",
"urn:ietf:params:scim:schemas:core:2.0:User",
"urn:ietf:params:scim:schemas:extension:sap:2.0:User",
"urn:ietf:params:scim:schemas:extension:enterprise:2.0:User"
],
"meta": {
"resourceType": "User",
"created": "2022-07-13T12:54:06Z",
"lastModified": "2022-08-17T08:02:35Z",
"location": "/rest/iam/scim/v2/Users/a44857b5-ad0e-4d45-981d-af3b33974b0c",
"version": "2.0.0"
},
"id": "a44857b5-ad0e-4d45-981d-af3b33974b0c",
"externalId": "testScimExternalId",
"userName": "scimModifyAPIDemo",
"name": {
"formatted": "scimModifyAPIDemoFirstName mi1 scimModifyAPIDemoLastName",
"familyName": "scimModifyAPIDemoLastName",
"givenName": "scimModifyAPIDemoFirstName",
"middleName": "mi1",
"honorificPrefix": "title01"
},
"locale": "en_GS",
"timezone": "CMT-8",
"userType": "EMPLOYEE",
"active": true,
"displayName": "scimModifyAPIDemoFirstName mi1 scimModifyAPIDemoLastName",
"emails": [
{
"type": "work",
"value": "[email protected]",
"primary": true
Request
URI https://<api-server>/rest/iam/scim/v2/Users/
00008b9c-4818-4a0a-8403-a7dd9d6cc53z
Response
The response status 204 (No Content) means that the user was deleted.
Here is a table of data mapping between SCIM user and ODATA user.
id personKeyNav/userAccount
Nav/accountUuid
externalId N/A
userName personKeyNav/userAccount
Nav/username
familyName lastName
givenName firstName
middleName mi
honorificPrefix salutation
honorificSuffix suffix
nickName nickname
title title
userType personKeyNav/userAccount
Nav/userType
preferredLanguage personKeyNav/userAccount
Nav/defaultLocale
locale personKeyNav/userAccount
Nav/defaultLocale
timezone personKeyNav/userAccount
Nav/timeZone
active personKeyNav/userAccount
Nav/accountStatus
primary N/A
display N/A
primary N/A
$ref N/A
type N/A
display N/A
urn:ietf:par personKeyNav/userAccount
ams:scim:schemas:exten Nav/sapGlobalUserId
sion:sap:2.0:User.userUuid
urn:ietf:params:scim:sche personKeyNav/perPerso
mas:extension:successfac nUuid
tors:2.0:User.perPersonUuid
urn:ietf:params:scim:sche N/A
mas:extension:successfac
tors:2.0:User.loginMethod
urn:ietf:params:scim:sche personKeyNav/personIdEx
mas:extension:successfac ternal
tors:2.0:User.personIdExter
nal
display N/A
urn:ietf:params:scim:sche department
mas:extension:enter
prise:2.0:User.department
urn:ietf:params:scim:sche division
mas:extension:enter
prise:2.0:User.division
You can use the Manage Identity Authentication/Identity Provisioning Real Time Sync admin tool to sync user
account changes to Identity Authentication Service in real time.
Prerequisites
• You have the Manage Identity Authentication/Identity Provisioning Real Time Sync permission.
• You have registered Identity Provisioning Service connection in Integration Service Registration Center.
Context
• To know more background information about real-time provisioning, see Real-Time Provisioning: Identity
Authentication.
• To prepare a certificate in Security Center, see the Security Center topic in Related Information.
• To register your tenant for services hosted on SAP Business Technology Platform, see the Registering your
Tenant for an Integration Service topic in Related Information.
Procedure
Note
As of 2H 2022, the Manage Identity Authentication/Identity Provisioning Real Time Sync admin tool only
supports the real-time sync of the Onboardee user account type.
Results
You've successfully enabled the real-time sync of the selected user types.
Get an overview of potential problems and errors in your configuration that you can try to solve yourself before you
contact Product Support about an issue.
Prerequisites
Tip
Refer to Guided Answers for the Check Tool for a guided navigation through the available check tool checks
and more information on each check.
Context
The check tool provides an overview of the issues found in the system. New checks that are being added in a new
release go through a first initial run to return a result. After the initial run, checks are run on a regular basis (at least
monthly). We recommend you open the check tool after the upgrade to a new release to see if issues have been
found by new checks.
In addition to these runs performed by the system, you can also run individual checks after you made changes
to the system, for example, after updating data models or picklists. For more information, refer to the application
specific documentation.
Procedure
The Check Tool page opens displaying the results of the first tab System Health.
2. Depending on the check type of the check you're interested in, select the corresponding tab.
To display all checks, select all result types in the Result Type
search filter and select Go.
Migration Displays the migrations that are still pending, either because
the check tool couldn't automatically migrate all issues or
because new issues have been found after the last run. We
recommend you solve these in a timely manner.
Note
The detail view opens to the right side of the screen with more information on the check and on how to solve
the issue.
4. Evaluate the results and resolve the issues. If the check provides a quick fix that you can use to immediately
correct issues found during a check run, select the Quick Fix button.
5. If you encounter an error you can’t resolve, contact Product Support by creating a ticket.
Next Steps
To verify that you've solved the underlying issue, select the checkbox for the corresponding checks and choose Run
Checks. You can also wait until the next automatic run to see if the issue has been solved.
Note
If the check you selected requires one or more prechecks (checks that need to be run successfully first), the
prechecks are run first even if you haven't selected them.
Related Information
The SAP SuccessFactors check tool helps you identify and resolve issues when your system doesn’t work as you
expect.
If your SAP SuccessFactors applications are behaving in unexpected ways, it is likely that it has a configuration
or data conflict: you have some data that is inconsistent or a configuration error. The check tool quickly identifies
these types of problems so that you can avoid support tickets. You might still need to create a support ticket if the
problem is severe, but even in severe cases, the check tool can save you time because it can export the results of
the check and your configuration for Product Support. The support engineer, therefore, can identify the issue more
quickly.
• A list of issues in your configuration or data and the severity of each issue.
• A solution or recommendation to address the issue.
Trigger the execution of individual checks to find potential issues in the system, or to check if an issue has been
solved in the meantime.
Prerequisites
Context
In addition to the job runs performed automatically by the system, you can also run individual checks. For example:
Procedure
The Check Tool page opens displaying the results of the first tab System Health.
2. Depending on the check type of the check you want to perform, select the corresponding tab.
A list of checks is displayed in the results table according to the predefined selection criteria.
3. Optional: If the check you're searching for is not listed in the results table, adjust the selection criteria and
choose Go.
You get a list of checks that fulfill the selection criteria you've entered.
4. Select the corresponding checks, and choose Run Checks from the top right of the results table.
Note
Please note that for checks on the Validation tab, you can only select one row at a time. Execution of
multiple checks at once is not possible.
Also, for validation checks you need to enter the required input parameters when running a check.
Note
If the check you selected requires one or more prechecks (checks that need to be run successfully first),
the prechecks are run first even if you haven't selected them.
Next Steps
The check type groups those checks that have a common purpose. On the Check Tool page, each tab represents a
check type.
System Health Checks that run without parameters and • Automatic initial run at the begin
check configuration and data issues that
ning of a new release
need to be fixed.
• Periodic runs (usually monthly)
The predefined selection criteria displays
only those that have returned errors or
warnings after the last run. We recom
mend you solve these in a timely manner.
Migration Checks that perform an automatic mi • Automatic initial run at the begin
gration of features. ning of a new release
Validation Checks which need one or more parame Only triggered through user
ters for execution, for example:
• A specific template
• A specific user
• A specific time frame
After you run checks in the check tool, it returns the results of the check so that you can resolve issues that it
found.
The results of a check are displayed in the Result column. If you run the checks multiple times to see how you’re
resolving issues, you can select a previous result from the History dropdown list.
Note
To display the History dropdown list, click on a check. On the details screen that opens on the right side of the
page, expand the header. The History dropdown list is directly below the check title.
Result Action
No issues found If the tool can’t find issues, you see a green check mark in the Result column.
Issues found If the tool finds issues, it reports the number of issues and a yellow warning icon or a red alarm
icon.
• The yellow icon indicates a low severity issue. The system proposes a solution.
• The red icon indicates a high severity issue. You must take action, which could include
creating a support ticket.
Pending migrations If the tool finds pending migrations that need to be completed by the user, you can see a yellow
warning icon or a red alarm icon in the Status column on the Migration tab.
Completed If the tool finds no issues with migration, or the migration has already been completed, you see a
green check mark in the Status column on the Migration tab.
Note
• The maximum text size of a cell is limited, which can result in the text being truncated in the Result or
Details column. Select the Export Results button to download the check results and view the complete text.
• The downloaded check result table can display a maximum number of 10,000 rows.
Related Information
Creating Product Support Tickets from the Check Tool [page 176]
When the check tool reports a serious issue that you can't solve, you might need to contact Product Support. You
can create a support ticket from within the check tool.
Prerequisites
You've run the check tool. You can find the check tool by going to Admin Center Check Tool . You create the
ticket from the details page of the tool.
The detail view opens to the right side of the screen with more information on the check and on how to solve
the issue.
2. On the Result tab, scroll down to the results table to look for the errors you want to report on.
You usually contact Product Support for high severity issues not low severity issues.
3. On the Check Information tab, under Need Assistance?, copy the component ID.
Export the configuration information from your system and attach it to the Support ticket created from the check
tool. This information can help Support identify the issue of a check you can't solve yourself.
Prerequisites
You have the Administrator Permissions Check Tool Allow Configuration Export permission.
Context
Note
Procedure
The legacy check tool UI opens with a list of all applications for which you can use the check tool.
If the application has the export configuration feature enabled, you can see an information message at the
bottom of the page with a link.
4. Choose the Export Configuration link in the information message.
Results
The system downloads a file with the configuration information for the application you’ve selected.
Next Steps
Attach the downloaded file to the Support ticket you created from the check tool.
The check tool includes a quick fix feature that you can use to immediately correct issues found during a check run.
Prerequisites
The checks which you want to solve with a quick fix have run and provide a check result with error or warning.
Procedure
The details screen opens on the right side of the page with more information about the check. If the check
includes a quick fix, the Quick Fix button is displayed on the Result tab, under Proposed Solution.
3. Choose Quick Fix to start fixing the issue.
A third screen opens to the right side, with step 1, called Select Correction, that shows one or more corrections
for the issue.
4. Select the correction you want to carry out and choose Step 2 to proceed to Final Approval.
In the Final Approval step, you can opt to change your mind and not carry out the fix.
The system verifies that the fix has run correctly after a short time by running the check again.
Get an overview of all checks available in the system by exporting a CSV file.
Procedure
A CSV file with all checks available in the system is downloaded, including check descriptions and application
area.
Note
The list includes also checks that you can’t access from the user interface if you don’t have the
corresponding applications set up, or if you lack the required permissions.
Hyperlinks
Some links are classified by an icon and/or a mouseover text. These links provide additional information.
About the icons:
• Links with the icon : You are entering a Web site that is not hosted by SAP. By using such links, you agree (unless expressly stated otherwise in your agreements
with SAP) to this:
• The content of the linked-to site is not SAP documentation. You may not infer any product claims against SAP based on this information.
• SAP does not agree or disagree with the content on the linked-to site, nor does SAP warrant the availability and correctness. SAP shall not be liable for any
damages caused by the use of such content unless damages have been caused by SAP's gross negligence or willful misconduct.
• Links with the icon : You are leaving the documentation for that particular SAP product or service and are entering an SAP-hosted Web site. By using such links,
you agree that (unless expressly stated otherwise in your agreements with SAP) you may not infer any product claims against SAP based on this information.
Example Code
Any software coding and/or code snippets are examples. They are not for productive use. The example code is only intended to better explain and visualize the syntax and
phrasing rules. SAP does not warrant the correctness and completeness of the example code. SAP shall not be liable for errors or damages caused by the use of example
code unless damages have been caused by SAP's gross negligence or willful misconduct.
Bias-Free Language
SAP supports a culture of diversity and inclusion. Whenever possible, we use unbiased language in our documentation to refer to people of all cultures, ethnicities, genders,
and abilities.
SAP and other SAP products and services mentioned herein as well as
their respective logos are trademarks or registered trademarks of SAP
SE (or an SAP affiliate company) in Germany and other countries. All
other product and service names mentioned are the trademarks of their
respective companies.