SAP SuccessFactors Integration

The SAP SuccessFactors integration synchronizes employee data from your SAP SuccessFactors tenant into Uslimato. When an employee leaves the organization, Uslimato can automatically trigger an offboarding process to reclaim assigned IT assets.

Prerequisites

• Interface Hub must be enabled in your plan (Professional or Enterprise)
• An SAP BTP (Business Technology Platform) account with access to your SuccessFactors tenant
• An OAuth2 App Registration in SAP BTP with the following:
  • API URL (your SuccessFactors API endpoint, e.g. https://api15.sapsf.com)
  • Company ID (your SuccessFactors company identifier)
  • Client ID (OAuth2 application client ID)
  • Client Secret (OAuth2 application client secret)
• The app registration needs the following OData API permissions:
  • EmpEmployment (read) -- employee records and employment status
  • PerPersonal (read) -- personal information (name, email)
  • EmpJob (read) -- job information and department

Setting up SAP BTP OAuth2 Credentials

1. Log in to your SAP BTP Cockpit at cockpit.hanatrial.ondemand.com or your productive environment
2. Navigate to Security > OAuth > Register Client
3. Create a new OAuth2 client:
   • Application Name: e.g. "Uslimato Integration"
   • Grant Type: Client Credentials
   • Scope: odata_v2 (for OData API access)
4. Note the Client ID and Client Secret
5. In SuccessFactors Admin Center, ensure the API user has read permissions for the required OData entities
6. Verify the API URL for your data center (e.g. https://api15.sapsf.com, https://api4.sapsf.eu)

Tip: Consult your SAP SuccessFactors administrator for the correct API URL and company ID. These vary by data center region.

Configure the Connector

1. In Uslimato, open Integrations (admin permission required)
2. Click Configure on SAP SuccessFactors
3. Enter:
   • API URL -- your SuccessFactors API endpoint
   • Company ID -- your SuccessFactors company identifier
   • Client ID -- OAuth2 client ID from SAP BTP
   • Client Secret -- OAuth2 client secret from SAP BTP
4. Offboarding Process (optional) -- select a process template to trigger when an employee leaves
5. Click Test Connection -- verifies credentials and API access
6. Set the sync interval (depends on your plan: Professional from 60 min, Enterprise from 30 min)
7. Enable the integration

Synchronization

Automatic Sync

After activation, Uslimato automatically syncs employee data at the configured interval. The sync:

1. Fetches active and recently terminated employees from SuccessFactors via OData API
2. Matches employees by email address against existing Uslimato users
3. Updates user metadata (name, department, position) for matched records
4. Detects employment terminations since the last sync
5. Triggers the configured offboarding process for terminated employees (if set)

Manual Sync

Use the Sync Now button on the integrations page to trigger a sync at any time.

Polling Model

Unlike Microsoft connectors that support webhooks, the SAP SuccessFactors integration uses a polling model. Uslimato periodically queries the SuccessFactors API at the configured interval to detect changes.

Offboarding Automation

The key feature of the SAP SuccessFactors integration is automated offboarding. When the sync detects that an employee's employment status has changed to terminated:

1. Uslimato identifies all IT assets assigned to that employee
2. The configured offboarding process is started for each asset
3. The process follows the defined workflow steps (e.g., asset return, data wipe, reassignment)
4. Process progress is tracked in the Movements view

Configuring the Offboarding Process

1. First, create a process template in Processes that defines your offboarding workflow
2. In the SAP SuccessFactors connector configuration, select this process as the Offboarding Process
3. If no process is selected, termination events are logged but no automated action is taken

Note: The offboarding process is started once per affected asset. If an employee had 3 assigned assets, 3 separate process instances are created.

Troubleshooting

Connection Test Fails

• Verify that the API URL matches your SuccessFactors data center
• Ensure the Company ID is correct (case-sensitive)
• Check that the OAuth2 client credentials are valid and not expired
• Confirm that the API user has the required OData entity permissions

No Employees Found

• Ensure the OData API permissions include EmpEmployment and PerPersonal
• Check that the API user is not restricted to a subset of employees
• Verify that your SuccessFactors instance has active employee records

Offboarding Not Triggering

• Confirm that an offboarding process is selected in the connector configuration
• Check that the termination date in SuccessFactors falls within the sync window
• Review the sync log for error details
• Ensure the affected employee's email matches a Uslimato user

Security

• SAP credentials are stored encrypted
• Credentials are decrypted server-side only and never returned via the API
• All sync operations are protected by tenant isolation
• All changes are logged in the audit log
• OAuth2 tokens are requested per-sync and never persisted

Field Mapping

The default field mapping from SuccessFactors to Uslimato:

SuccessFactors Field	Uslimato Field
PerPersonal.firstName + lastName	User Display Name
PerEmail.emailAddress	User Email
EmpJob.department	Department
EmpJob.jobTitle	Position
EmpEmployment.terminationDate	Triggers offboarding

Additional SuccessFactors metadata is stored alongside the user: Employee ID, company ID, last sync timestamp.