SAP's identity authentication service is replacing the single sign-on function. Avoid the last minute rush by switching to the SAP IAS.

SAP’s Identity Authentication Service: What You Need to Know

You may have already heard that SAP is requiring all customers to move to the Identity Authentication Service (IAS) by the end of 2022. But why is this so important and how will it affect you?

One point of access

First off, SAP will be discontinuing the Single Sign-On (SSO) function in SAP’s SuccessFactors Platform so you will need alternative log-in access, which is where IAS comes in. This is a good thing because IAS will now act as the “one stop shop” for access to all of your SAP products. Customers can now connect the sign-on process for their users instead of setting up SSO for each product. It will make for a much better day-to-day experience.

Although SAP has not given a definitive date for when they will force current SSO customers to move to IAS, we encourage everyone to consider doing this sooner rather than later to avoid any last-minute rush.

Internal vs. external learners

Customers who are already using the integrated external learner solution can continue to use the solution. Those who want to start offering Learning to users that are not employees have two alternatives in place with the integrated external user feature:

  1. SAP SuccessFactors Learning customers can create users as internal users in the SAP SuccessFactors Platform and use Platform authentication.
    • Recommended for users with a worker relationship, such as contingent workers.
    • Mobile, theming and Jam integration is available.
  2. SAP SuccessFactors Learning customers can create users as Learning only users in Learning and not in the SAP SuccessFactors Platform.
    • Recommended for non-workers such as customers, distributors or partners.
    • Does not currently support mobile, theming or Jam integration. 
    • Authentication for external Learning only users is currently native to Learning, but will be migrating to the SAP Cloud Platform Identity Authentication Service.

SAP’s IAS is REQUIRED for Stories in People Analytics

While it is true that IAS is not required for all SAP products just yet, it is required to implement Stories which allows customers to build dynamic analytic reports and dashboards. So, before you embark on an implementation of Stories, you must have IAS enabled.

It is a five-step process to implement and enable IAS

The process of migrating to IAS requires tasks to be performed in the SAP SuccessFactors Admin Center, the Identity Provisioning Service Administration Console, and in the Identity Authentication Service Administration Console. These steps are as follows:

  1. Initiate IAS upgrade in Upgrade Center (UC)
  2. Set up corporate identity provider (IDP) in IAS
  3. Configure log-in options, user groups, and password policies in IAS
  4. Configure Identify Provisioning Service (IPS) settings and setup sync jobs
  5. Enable IAS in UC

Timing is critical for SAP IAS

As I mentioned before, SAP is requiring all customers to move to IAS before the end of the year. It is best to start now to ensure that your users’ experiences are not impacted. New implementations are no longer being supported by SAP.

Our team at GP Strategies can help you decide the right path when enabling IAS for all your SAP products. Get in touch!

About the Authors

Kevin Slepecki