HCM and Success Factors BIZx Integration

[Former Member]

Thanks to all who contributed to previous blogs about integrating Success Factors to HCM.  I have followed many of them, but am still having some difficulties.  I am new to web services and use of SSL certificates.

We are extracting Employee Profile using PI 7.1..  The current error we are receiving is 'FAILED_AUTHENTICATIONAuthentication failed, no API login permission(status code = 14)'.  The Success Factors consultant has provided the company id, UID and PW which was placed in the configuration in the IMG.  He says that the UID has been granted API access in SF.   I can connect to the URL he gave 'https://hcm4preview.sapsf.com/' with the credentials.  However, within the PI comm channel, it seems the URL I need to use is 'https://hcm4preview.sapsf.com:443/sfapi/v1/soap'.

The firewall group says they can see the traffic to the endpoint, and there are no denials.

However, when we look in the API log in SF, we do not see the login attempts.

Can the issue be SSL certificates?

Basis uploaded the SSL certificates from success factors into both the 'TrustedCA's and 'WebServiceSecurity' key stores.  They are named sfcert1, sfcert2 and sfcert3.  In the Comm channel for the AXIS adapter, they do not show up, so I have used 'system-key' as shown below.

Is this correct use of the certificates?

All replies are appreciated - Thank you.

Robin Aufleger

[Former Member · Accepted solution]

Robin,

The URL which you are using for SOAP AXIS adapter is not correct. Please ask SF consultant to give SOAP URL.

Please find below screenshot.

Regards,

Sagar

[Former Member]

Thank you both for your response,

I did change the URL to: 'https://api4preview.sapsf.com:443/sfapi/v1/soap',

and also worked with the Success Factors consultant - the UID was missing the API login permission role.

Robin

[Former Member]

Great!!!

Which scenario you are implementing in HCM to SF using PI. Its standard scenario or customized?

Regards,

Sagar

[Former Member]

Sagar,

This is the standard employee profile with login, user upsert and logout interfaces.

I'm still not sure about the SSL and how I used 'System-key' key store entry in the comm channel, but I assume it would not work successfully if that was incorrect.

Robin

[Muniyappan]

Hi Robin,

Did you test the web service from soap ui? is it able to get the session id?

i see this thread FAILED_AUTHENTICATION while connecting to Succe... | SCN has the same error description. My guess is that connection is working fine. and you need to do something with user credentials.

Regards,

Muni

[Former Member]

Muni,

Yes there were 2 issues - first was the URL, and the second was API logon permission was not set for the UID in success factors.  It is working successfully now.

[Former Member]

Robin,

Please can you let me know which API logon permission is provided to UID.

Have SF consultant enabled this ": 'https://api4preview.sapsf.com:443/sfapi/v1/soap'" in SF side somewhere?

Because I am getting below error while executing Begin session interface.

Error - "The request element <BeginSession xmlns='http://ATS.online-onboarding.com/Client/HRDataServiceEx'> was not recognized".

Regards,

Sagar

[Former Member]

Sagar,

In his words, he had missed the API login permission in the role setup.

In case you do not have them, I found these resources below very helpful.  They describe the steps for the API setup.

http://help.sap.com/cloud4hr - go to product APIS,

next to SF API's Programmers Guide -

http://help.sap.com/saphelp_cloud4hr/helpdata/en/86/2e8238648a4529abda8f2b8a7fdd3c/frameset.htm

API handbook -

http://help.sap.com/saphelpiis_cloud4hr/en/successfactors_hcm_suite_sfapi_handbook_en.pdf

Robin

[RaghuVamseedhar]

Robin,

It seems SuccessFactors is throwing error as session management is not done on SAP PI.

Solution 1: Install SFSF adapter. Session management by SFSF adapter.

Solution 2: Manage session in SAP PI.