SF PLT Managing User Info en
SF PLT Managing User Info en
SF PLT Managing User Info en
16 Synchronizing User Account from SAP SuccessFactors to SAP Identity Provisioning Service in
Real Time. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131
1H 2020
Added information on maximum and It sets the maximum and minimum time Configuring Password and Login Policy
[page 52]
minimum password age (in days) frame of password change.
Added information on the Employee If the Enable Control on Employee Import Permissions for Importing Users [page
in Role-Based Permissions option is not 93]
Import permission
enabled, then the permission is granted
using the Manage Employee Import tool.
If the option is enabled, then the
Employee Import permission is granted
from Manage Permission Roles.
Added information on users_sys_id The supported characters for Different IDs in SAP SuccessFactors HXM
users_sys_id are: A-Z, a-z, 0-9, -, _, ., and Suite [page 14]
@.
Added a topic on Hide Username in the UI You can enable theHide Username in the Hide Username in the UI [page 61]
UI feature from Admin Center
Platform Feature Settings to hide user
name on the Global Header and the em
ployee quickcard as well as the search
user interfaces that have adopted People
Search.
Added information about technical user Technical User is now used in the integra About Technical User [page 130]
tion between SAP SuccessFactors and
Best Practice.
Added information on the Process You can use Process inactive Employees Importing User Data [page 94]
inactive Employees option in Employee to update inactive users to the system.
Import
Updated information on the areas im The Employee Central OData API entity Important Notes About Assignment ID
pacted by Assignment ID EmpEmployment now include Assign [page 25]
ment ID in the response whether or not
the field is configured in Succession Data
Model.
Updated information on the areas im Recruiting Management provides Assign Important Notes About Assignment ID
pacted by Assignment ID ment ID support for Data migration tem [page 25]
plates, ODATA APIs, and Candidate Pro
file User Interface.
Updated information about assignment Assignment ID is an identifier assigned to Assignment ID [page 16]
ID definition the work relationship between a person
and the company. The relationship could
be an employment relationship, contin
gent relationship, pensioner relationship,
intern, global assignment, or others.
Added a topic on how to Synchronizing You can synchronize user account Synchronizing User Account from SAP
User Account from SAP SuccessFactors changes, for example, changes in the SuccessFactors to SAP Identity Provi
to SAP Identity Provisioning Service in login name, status, and email fields, from sioning Service in Real Time [page 131]
Real Time SAP SuccessFactors to SAP Identity Pro
visioning Service (IPS) in real time.
Q4 2019
Added topics on how to manage login ac A login account is used for authenticating Managing Login Accounts [page 34]
counts users when they log into a system, and
Differentiating Between Person, User,
includes information such as login name,
login method, and locale. You can man and Login Account [page 35]
age login accounts using the Manage
Viewing Login Accounts [page 36]
Login Accounts tool.
Changing Login Accounts [page 37]
Added information on Include form data The trend information export file, by de Exporting Extended User Information
– Only applicable to Export Extended fault, only includes those ratings that Data [page 105]
Data with User Attributes have been entered manually in People
Profile or the ones that are imported, and
does not include ratings that come from
forms. If you want to include rating data
coming from forms in the export file, se
lect Include form data – Only applicable
to Export Extended Data with User
Attributes and then click the Export
Extended Data with User Attributes but
ton.
Added a topic to describe the IDs used Read the table in the topic to find out dif Different IDs in SAP SuccessFactors HXM
across SAP SucceessFactors HXM Suite. ferent identifiers in SAP SucceessFactors Suite [page 14]
HXM Suite.
Added a topic about background infor To export attachments for background Exporting Attachments [page 115]
mation attachment export. information, schedule a Live Profile Ex
port job using Manage Scheduled Jobs in
Provisioning.
Added information on resetting user When users log into the system after ad Resetting User Passwords [page 59]
passwords mins reset passwords, a Password
Change window pops up, requiring users
to update their passwords themselves.
Please note that in Employee Central-en
abled instances, the password that gets
updated is the password of the login ac
count, and might not be the password of
the main user on the homepage.
Added a topic on how to restore a data You can restore a data model version Succession Data Model [page 32]
model version from Provisioning.
Restoring a Data Model Version [page
32]
Added a topic on technical user A technical user is a special user created About Technical User [page 130]
for integrating SAP SuccessFactors with
other SAP products and solutions.
Removed a note about date formats in The note "For Employee Import, all date Field Requirements for the User Data File
Employee Import fields in the import file must follow the [page 69]
mm/dd/yyyy format." is now removed,
because starting with Q4 2019, multiple
date formats are supported in the Hire
Date and Exit Date fields for Employee
Import, Basic User Import, and Employee
Export.
Added information about Specify The default locale and date format are Importing User Data [page 94]
Character Encodings, Locale, and Date "English(United States)" and "MM/dd/
Format in Employee Import yyyy". Other available locales in your sys
tem depend on the configuration of Lan
guage Packs in Provisioning, and the date
format will match the locale you select.
Please note that we only support multiple
date formats in the Hire Date and Exit
Date fields.
Updated the information about the im The Employee Central Integration with Important Notes About Assignment ID
pacted areas of assignment ID ERP and Employee Central Payroll areas [page 25]
are impacted by assignment ID.
Added a note about the Welcome If you are adding new users via Manage Notification Triggers [page 43]
Message Notification with Reset Password User, Employee Import, or OData API in
Support notification EC-off instances, make sure that the
Welcome Message Notification with Reset
Password Support notification is enabled.
Otherwise, these newly added users
might not receive welcome e-mails.
Added a note about e-mail size We don't have character limitation for e- Configuring e-mail Notifications [page
mail, but if your e-mail size (including e- 42]
mail header and body) exceeds 20 MB,
the e-mail cannot be delivered.
Q3 2019
Added a section to introduce assignment Assignment ID is an identifier assigned to Assignment ID [page 16]
ID a person to define the relationship be
Differentiating Between Person ID, UUID,
tween the person and a company. It can
be used to identify users. User ID, and Assignment ID [page 18]
Added a note on the field name of back If there are duplicate field names for Background Information in the Extended
ground elements in data model background elements in the data model, User Information Import [page 102]
the import job will fail.
Added a list of supported locales in the These locales are supported in the user Date Formats for Different Locales [page
import file of extended user information extended information import process in 108]
the system.
Updated topics about how to use assign There is an Assignment ID column added Managing Basic User Data by Using a
ment ID for employee import and ex in the user data file. Note that assign
Data File [page 63]
tended user information import ment ID and user ID should be the same
for new users. Managing Extended User Information by
Using Data Files [page 99]
Updated information on the "Import by Select Import by overwriting existing data Importing Extended User Information
overwriting existing data (Recommended (Recommended for optimized [page 109]
for optimized performance)" import op performance) to overwrite the existing
tion employee data with the import data. This
is the recommended option to improve
task efficiency. Before, it was named as
"Import by overwriting existing data but
skipping unchanged data (Recom
mended)".
Added information on the import job of Import jobs on the same background in Background Information in the Extended
background information formation cannot be run concurrently to User Information Import [page 102]
avoid data conflicts. The current job will
wait in the queue and not start until the
previous job completes.
Added a note on the improved perform Starting in Q3 2019, we have universally Managing Basic User Data by Using a
ance of Employee Import and Basic User enabled the delta mode in Employee Im Data File [page 63]
Import port and Basic User Import. Only the new
and changed fields will be imported. The
delta mode helps reduce import time and
improve import performance. Before,
when you updated user information us
ing Employee Import or Basic User Im
port, all records were updated.
Added a note on security scan for basic In Employee Central-enabled instances, Personal Information in the Extended
and extended user import you can now prevent the import of unse User Information Import [page 100]
cured content. This applies to basic and
extended user import. When the "Secur
ity Scan of User Inputs" option is ena
bled, and fields containing unsecured
scripts, such as cross-site scripting, are
detected, the import ignores the fields.
The fields skipped are reported in the im
port status e-mail.
Added topics on user login data purge Login records will automatically be User Login Data Purge [page 128]
purged after one year. Additionally, a limit
Exporting Login Data with Ad Hoc Report
of 100 thousand login audit records for a
user and a limit of 50 million login audit [page 128]
records for all users in a company have
also been defined. When one of the two
limits is reached, older audit records are
purged even though they were created
less than a year ago.
Added information about CSV Injection If you want to enable the CSV Injection Exporting User Data [page 66]
Protection
Protection for instances created prior to
Q2 2019, contact SAP Cloud Support.
Added a note about the ^AssignmentId When you import background or trend in Creating an Import File for Extended User
column header for background or trend formation, and your import file includes Information [page 104]
information import an "assignment ID" column, then the col
umn header should be specified like ^As
signmentId. The header name is case-in
sensitive, and other characters such as
quotation marks or whitespace aren't
supported here. For example,^"Assign
mentId" as the column header will cause
an error during the import process.
Manage User showing option labels in On the Manage User screen, picklist op Managing Basic User Data by Using the
picklists tions now display option labels along with UI [page 40]
option IDs. This makes it easier for you to
understand and choose the options.
Added information on Excel Injection Pro As of Q2 2019, the CSV Injection Protec Exporting User Data [page 66]
tection tion is enabled for all NEW instances by
default. If the User Data file (.csv) con
tains insecure content, the content is
added as an apostrophe in the fields and
will not trigger a command. Old instances
are not impacted by this change, but if
you are still using the insecure content in
the file for some purpose, you should
stop using it and find other ways. We do
not recommend you add insecure con
tent into the Use Data file.
Q1 2019
Added information about header valida The headers of the import file for ex Editing Extended User Information in the
Import File [page 107]
tion tended user information must be ele
ment names that are configured in the
data model.
Improved the content structure of the Removed unclickable topicheads, and Managing Extended User Information by
whole chapter created topic links instead. Using Data Files [page 99]
Added information about a new import When you import background informa Importing Extended User Information
option tion, a new import option of Import by [page 109]
overwriting existing data but skipping
unchanged data (Recommended) is avail
able.
Added information about the new pop-up If you choose to overwrite existing data Importing Extended User Information
window when importing extended user informa [page 109]
tion, a pop-up window is displayed, ask
ing for confirmation.
Added topics about configuring e-mail You can configure e-mail notification set Configuring e-mail Notifications [page
notification and consolidated notifica- tings in the E-Mail Notification Template
42]
tions Settings tool in Admin Center. You can
also consolidate notifications by setting Understanding Consolidated e-mail Noti
the time interval. fications [page 46]
Updated the topic with max file size limi Two places in Provisioning and the data Attachments to Extended User Informa
tations model control the max file size allowed tion [page 112]
for attachments. Follow the smaller one
when you import attachments.
Updated the topic with a note for the The permission for importing extended Importing Extended User Information
role-based permission user information needs to follow target [page 109]
population settings.
Updated the topic with a note for not run Do not run multiple import jobs at the Importing Extended User Information
ning multiple jobs at the same time same time, especially when you overwrite [page 109]
existing data. Or, it might lead to data dis
crepancy.
Added more topics in the E-mail Notifica- Refer to the table in the Notification Trig Notification Triggers [page 43]
tion section gers topic for what event triggers what e-
mail notification in SAP SuccessFactors. E-mail Body for Notifications [page 44]
Refer to the tables in the E-mail Body for
Notifications topic for the variable codes
and predefined e-mail bodies that you
can use to customize your notification
template.
Enhanced the topics with login-related in If the Manager field is left empty for an Adding Users [page 46]
formation employee, the employee is not able to log
in to the system. So please either assign Field Requirements for the User Data File
an active manager for the employee, or [page 69]
enter "NO_MANAGER" for this field in the
import file. If you are using UI to manage
users, select "No Manager" for this field.
Added a topic on the supported date for In Import Extended User Information, you Date Formats for Different Locales [page
mats can select the locale information accord 108]
ing to the language you are using in the
import file. To meet the habits of users
using different languages, the date for
mat is also different. Refer to the table in
this topic for the supported date formats.
Q4 2018
Added information about the Export Admins can choose to export only one Exporting Extended User Information
selected background information option. section of the background information Data [page 105]
using this option.
In SAP SuccessFactors, user information consists of basic user information and extended user information. If you
are managing users in Employee Central, there are even more user information elements. This administration guide
is mainly focused on managing basic and extended user information for users that are not managed in Employee
Central.
Basic user information is what you must provide for a user when adding the user to the system. It contains data like
employee name, gender, address. Basic user information is required for functionality, reporting, administration
tasks, and most importantly, permissions.
Extended user information consists of supplemental data about the user, and is classified into three types:
● Personal information
● Background information
● Trend information
Once the SuccessFactors system is live, admins need to perform ongoing administrative and maintenance
activities to keep it running smoothly. Among these activities, an essential one is user information management,
which involves actions like adding users, managing user accounts, and updating user information. You can find
information about most of the user management related tasks in this guide.
For details about managing Employee Central users, please see http://help.sap.com/hr_ec.
Related Information
This table describes the IDs used in the SAP SuccessFactors HXM Suite.
Where is it dis
Can it be Can it be used for Can it be used for played on People
ID Description changed? SSO? integration? Profile?
We recommend
that you adopt user
ID for system inte
gration.
Note
The supported
characters for
users_sys_id is:
A-Z, a-z, 0-9, -,
_, ., @.
Username This is the field that Yes Yes Yes Live Profile User In
a user uses to sign formation
in. It can be differ-
ent from User ID or
Person ID but for
simplicity it is often
the same value.
2.2 Assignment ID
Assignment ID is an identifier assigned to the work relationship between a person and the company. The
relationship could be an employment relationship, contingent relationship, pensioner relationship, intern, global
assignment, or others. A person can have one or many work relationships with a company at the same time, for
example, concurrent employments or home and host assignment in a global assignment.
Currently, assignment ID is not supported in some SAP SuccessFactors areas, for example, Learning,
Compensation, Onboarding, and data protection and privacy features. This might cause display inconsistencies
across the suite. See Important Notes about Assignment ID to find the specific areas impacted by assignment
ID as well as the areas where assignment ID is not supported. This document will be regularly updated to
reflect the latest development of assignment ID.
Caution
Before you change assignment IDs, we recommend that you evaluate the risks associated with the
inconsistencies. If assignment ID is not supported in the SAP SuccessFactors areas you've enabled, please
don't make any changes to assignment ID at this time.
The system automatically generates assignment IDs for users created prior to the Q3 2019 release, and their
default values are the same as the current user IDs. However, in the Employee Central-enabled instances, if you
have used a business rule to generate assignment IDs, the system then creates assignment IDs based on the rule
and the assignment IDs might be different from the user IDs. When you create new users using the user
management tools such as Employee Import, Manage Users, or OData APIs, assignment IDs for these users are
also added to the system.
Previously, when you wanted to change user IDs in some cases, such as employee relocation or going live on
Employee Central or another HRIS system, a support ticket was needed. The user ID conversion process was costly
and time-consuming. In addition to this, user ID conversion wasn’t supported in Employee Central, Metadata
Framework, or SAP HANA database.
Now, you can use assignment ID to identify users and change it if needed.
Differentiating Between Person ID, UUID, User ID, and Assignment ID [page 18]
Read the following table to find the differences and relationships between person ID, UUID, user ID, and
assignment ID.
Read the following table to find the differences and relationships between person ID, UUID, user ID, and assignment
ID.
Person ID (person-id-external) A unique identifier of a person Yes UUID and person ID are in a
in Employee Central. Person
one-to-one relationship.
ID identifies a natural person.
An employee generally has User ID and assignment ID are
only one person ID throughout in a one-to-one relationship.
their time at the company,
since this ID is associated to One person ID is associated to
each person. one or more user IDs and as
This section describes the impact of assignment ID on user management tools such as Manage Users, Employee
Import, Import Extended User Information, and OData APIs.
Related Information
Differentiating Between Person ID, UUID, User ID, and Assignment ID [page 18]
Important Notes About Assignment ID [page 25]
When Show User ID field in Manage Users is selected in Provisioning, there’s an Assignment ID field as well as a User
ID field on Manage Users .
Note
Please be aware that even if there’s no assignment ID or user ID field displayed on the Manage Users page when
you’re creating new users, the system will still assign the two IDs for them. In this case, the initial value for user
ID or assignment ID is the same as the value you enter in the User Name field.
Currently, whether the User ID or Assignment ID field is displayed on Manage Users is controlled by Show User ID
field in Manage Users in Provisioning. This option is disabled by default. Once it’s enabled, the two fields are
displayed next to each other.
As a customer, you don't have access to Provisioning. To complete tasks in Provisioning, contact your
implementation partner. If you're no longer working with an implementation partner, contact SAP Cloud
Support.
On the Quick Add or Detailed Add Users page, if you enter a value in the User ID field, the value will be automatically
populated to the Assignment ID field.
You can work with implementation partners or Support to customize the label name of assignmentIdExternal in the
data model. We recommend that the label name be "Assignment ID".
For more information about Manage Users, see Managing Basic User Data by Using the UI.
Related Information
There’s an Assignment ID column in the user data file of import and export tools.
Note
By default, the user data template contains the Assignment ID column. If you don't want to include assignment
ID in the user data file, select Exclude Assignment ID Column from the User Data Template in Admin Center
Platform Feature Settings .
When you add or update user data using Employee Import, user ID is required while assignment ID is optional in
the template. Note that assignment ID is in the last column. If you don’t input a value in the Assignment ID column,
the system will populate the value from user ID to assignment ID after the import job completes. If you provide
assignment ID for new users in the import file, make sure that assignment ID and user ID be the same. Otherwise,
the user won’t be imported.
When you export a user data file using Employee Export, the export file includes an assignment ID column with
values.
For more information about Employee Import and Employee Export, see Managing Basic User Data by Using a Data
File.
When adding or updating personal information, background information, or trend information using Import
Extended User Information, you should either provide user ID or assignment ID in the import file, and they should
be the same as the corresponding user ID or assignment ID that already exists in the system.
When you export user data file using Export Extended User Information, the export file includes an assignment ID
column with values. Note that assignment ID is in the last column in the import and export file for personal
information.
For more information about Import Extended User Information and Export Extended User Information, see
Managing Extended User Information by Using Data Files .
When you add or update user data in Provisioning Manage Scheduled Jobs Create New Job Delta
Employees Import , you should first download the user data template where assignment ID is in the last column.
Currently, user ID is required while assignment ID is optional in the template. If you don’t input a value in the
Assignment ID column, the system will populate the value from user ID to assignment ID after the import job
completes. If you provide assignment ID for new users in the import file, make sure that assignment ID and user ID
be the same. Otherwise, the users won’t be imported.
When you export user information using Delta Employees Export, the export file includes an assignment ID column
with values.
Remember
As a customer, you don't have access to Provisioning. To complete tasks in Provisioning, contact your
implementation partner. If you're no longer working with an implementation partner, contact SAP Cloud
Support.
When adding or updating personal information, background information, or trend information in Provisioning
Manage Scheduled Jobs Create New Job Live Profile Import , you should either provide user ID or assignment
ID in the import file, and they should be the same as the corresponding user ID or assignment ID that already exists
in the system.
When you export user data file using Live Profile Export, the export file includes an assignment ID column with
values. Note that assignment ID is in the last column in the import and export file for personal information.
Remember
As a customer, you don't have access to Provisioning. To complete tasks in Provisioning, contact your
implementation partner. If you're no longer working with an implementation partner, contact SAP Cloud
Support.
Related Information
You can enable assignment ID for OData API by adding the assignmentIdExternal property to an entity or by
navigating to an entity that has this property.
Tip
For existing records, when you enable the assignmentIdExternal property, it has the same as userId. For newly
created records, assignment ID value is the same as userId except when a business rule is enabled in Employee
Central for generating assignment IDs automatically. For more information, see Auto-generating Assignment ID
for Employees on Global Assignment or Concurrent Employment.
You can add assignment ID to the User entity by enabling the assignmentIdExternal field in the data model:
Note
If you don't see the field in the Standard section, contact SAP Cloud Support to schedule a job with job type
Synchronize Business Configuration in Provisioning. This job synchronizes the BCUI elements with the
company data model.
Note
We recommend that you set the Visibility attribute of the field to View to disable upsert operations.
To see the property in the entity immediately, refresh the OData metadata. To do so, go to Admin Center OData
API Metadata Refresh and Export or run query https://<API-endpoint-URL>/odata/v2/
refreshMetadata.
Note
We recommend that you set the Visibility attribute of the field to View to disable upsert operations.
To see the property in the entities immediately, refresh the OData metadata. To do so, go to Admin Center
OData API Metadata Refresh and Export or run query https://<API-endpoint-URL>/odata/v2/
refreshMetadata.
Many OData API entities have one or multiple navigation properties that point to User records. If
assignmentIdExternal is enabled for User in your instance, you can retrieve assignment ID information from
associated entities using the $expand option. Here's an example:
https://<API-endpoint-URL>/odata/v2/
Form360Rater(formContentId=123L,formDataId=345L)?$expand=participantUser&
$select=participantUser/assignmentIdExternal
Changing assignment IDs is only possible using the convertAssignmentIdExternal function import. For more
information, see convertAssignmentIdExternal.
Related Information
Read this to find the areas that are impacted by assignment ID as well as the areas where assignment ID is not
supported.
Caution
Before you change assignment IDs, we recommend that you evaluate the risks associated with the
inconsistencies. If assignment ID is not supported in the SAP SuccessFactors areas you've enabled, please
don't make any changes to assignment ID at this time.
Read the table to find the changes caused by assignment ID in the following areas.
Data Subject Information Report If user ID appears in a Data Subject Information report, then,
as of the Q4 2019 release, assignment ID will also appear in the
report for certain modules.
Employee Central Imports Employee Central Imports now supports employee data import
using assignment ID. You can use assignment ID while import
ing data for employees having concurrent employment or
global assignment. For details, see here.
Employee Central OData API Employee Central OData API entities EmpEmployment and
EmpGlobalAssignment now support assignment ID with
the new <assignmentIdExternal> property. You can enable
it by adding the <assignmentIdExternal> field to the corre
sponding HRIS elements for employment information and
global assignment information in the Manage Business
Configuration (BCUI) tool.
For details, see OData API [page 23] and the API references in
SAP SuccessFactors Employee Central OData API: Reference
Guide.
Employee Central Integration with ERP Integration of Employee Central with SAP S/4HANA on-prem
ise or SAP ERP systems transfers assignment ID if it is enabled
in Employee Central. For more information, see Using Assign
ment ID in Employee Central Integration with ERP.
Employee Central Payroll Integration of Employee Central with Employee Central Payroll
transfers assignment ID if it is enabled in Employee Central. For
more information, see Optional: Using the Employee Central
Assignment ID External as PERNR.
Onboarding 2.0 Onboarding 2.0 supports assignment ID external for the follow
ing OData API entities: createOnboardee and
initiateOnboardingForUser. It also supports assign
ment ID external for all the events.
Note
Onboarding 2.0 solution is available to interested users as
a BETA version.
Platform - Data Protection and Privacy Changing assignment ID adds complexity and may impact
data protection and privacy features.
Platform - HXM Suite OData API The User entity now supports assignment ID with the new
<assignmentIdExternal> property. Learn how to enable it
in OData API [page 23].
Platform - Instance Refresh Tool The Instance Refresh self-service tool now supports assign
ment ID. The Overview tab of the Instance Refresh Center page
displays the assignment ID instead of User ID in the Requested
By column for each refresh request.
Note
The Instance Refresh Center page displays the user ID
when a user does not have an assignment ID.
Platform - Metadata Framework ● On the Manage Data page, audit information now displays
assignment ID instead of the user ID.
● The Import and Export Data tool now supports the assign
ment ID as an Identity Type. You can choose between user
ID and assignment ID in the new Identity Type field. The
identity type you select will be included in the exported
template and data, and it will be used to validate the user
information during data import.
Platform - Presentations Assignment ID, in addition to User ID, can be included on Pre
sentations Talent Card and customized slides.
Platform - Proxy Management In the proxy import file, you can now identify users by Assign
ment ID or by User ID. In the proxy report, you can now see col
umns for both Assignment ID and User ID.
Platform - Role-based Permission You can use the Assignment ID field when importing static per
mission groups to your system. When you download the most
recent version of the static group excel document, the
Assignment ID displays.
Reporting and Analytics The Reporting and Analytics products support reporting on the
Assignment IDs that the sub-domain schemas in "Live Data"
and "Advanced Reporting" data sets support.
Time In general, Time screens display the user's real name (that is,
first name and last name) rather than their user ID. So the
average user won't see anything different even if their user ID is
changed in the background.
For technical users that run the Check Tool and monitor back
ground jobs, however, there will be a new column called
Assignment ID that will show any changed user IDs.
Solutions Notes
Compensation and Variable Pay Compensation and Variable Pay do not currently use or sup
port assignment ID. The only identifier that is supported is user
ID.
Employee Central Document Generation Employee Central Document Generation does not support as
signment ID.
Learning Learning does not currently use or support assignment ID. The
only mutable identifier it supports is person_id_external.
Platform - Data Protection and Privacy Customers using data protection and privacy features are ad
vised not to use assignment ID as a changeable user identifier,
due to current limitations. Assignment ID is not fully supported
across the HXM Suite.
Platform - Instance Synchronization Tool Instance Synchronization does not support assignment ID.
Platform - Role-Based Permissions Dynamic permission group creation does not support assign
ment ID.
Reward and Recognition Reward and Recognition does not support the assignment ID.
Related Information
Differentiating Between Person ID, UUID, User ID, and Assignment ID [page 18]
Assignment ID in User Management [page 20]
Note
If you’re using an HRIS system, before you make any user changes, make sure that there is no HRIS Sync Job
running in the background. Modifying user data during the HRIS sync might lead to data discrepancies. Please
contact your Implementation Partner to know the scheduled time for the HRIS sync jobs of your system. If you
are no longer working with an Implementation Partner, contact SAP Cloud Support.
Understand the prerequisites. Prerequisites for Managing User Information [page 31]
Add users by using a data file. Importing User Data [page 94]
Send welcome emails to new users. Sending Welcome E-mails Manually [page 49]
Manage basic user information by using the UI. Managing Basic User Data by Using the UI [page 40]
Managing basic user information by using a Managing Basic User Data by Using a Data File [page 63]
data file.
Managing extended user information. Adding or Updating Extended User Information [page 103]
Validate user data by using the Check Tool. Using the Check Tool [page 122]
Manage users by using OData APIs. Managing Users by Using OData APIs [page 121]
Related Information
User Information Management is a fundamental activity in the SAP SuccessFactors system. You need to ensure
that all user fields your company needs are included and defined with required information in the data model.
Make sure that you have included all user data fields in the data model for your system. Setting up data model with
required information is a standard part of nearly all SAP SuccessFactors implementations and most likely already
done for your system.
If you want to configure changes and add user data fields in the data model, you can use the Business
Configuration UI (BCUI). This tool enables you to maintain the data model from your end-user UI, instead of
maintaining these elements in the XML file and contacting SAP Could Support who has access to Provisioning. For
more information, see Setting Up and Using Business Configuration UI (BCUI).
Related Information
The Data Model describes how data elements are structured in a database. It also defines the properties these
elements possess and their relationships to each other.
Everytime you import data model from Provisioning, the system automatically saves the import file as a backup.
You can restore a data model from the backup version list. Please note that the list displays a limited number of
data model versions.
When you import data model, you should write some comments. This helps you track data model changes.
Context
Remember
As a customer, you don't have access to Provisioning. To complete tasks in Provisioning, contact your
implementation partner. If you're no longer working with an implementation partner, contact SAP Cloud
Support.
Procedure
Results
Depending on whether or not you are managing users in Employee Central, you need different tools to perform the
same user management task.
Refer to the following table to choose the correct tool depending on your system configuration.
Add or update basic user Employee Self-Service and Manager Self- Manage Users New User Expoerience for
information by using the Service
Employee Central
UI
Managing Basic User
Data by Using the UI
[page 40]
Add or update basic user Import Employee Data Basic User Employee Import Importing Employee Data
information by using a
Import
data file Importing User Data
[page 94]
Add or update extended Import Extended User Information, Import Extended User Employee Central Imports
user information Import Employee Data Extended Information
Adding or Updating Ex
Import , or Import Employee Data
tended User Information
Background Import
[page 103]
Download extended user Export Extended User Information Exporting Extended User
information Information Data [page
105]
Validate your user data Check Tool User Management Using the Check Tool
[page 122]
If you’re looking for information about managing Employee Central users, please see http://help.sap.com/hr_ec.
Related Information
A login account stores the information that can be used for authenticating users when they log into a system. You
can manage login accounts using the Manage Login Accounts tool.
Context
A login account is used for authenticating users when they log into SAP SuccessFactors. It includes information
such as login name, login method, and login locale.
If you have Employee Central enabled for your instance, the system automatically selects the user of the home
employment, primary employment, or earliest active employment as the main user on the homepage in the cases
of global assignments, concurrent employment, or contingent workers, respectively.
A person can have multiple users but only one login account.
Person refers to a natural person, while user refers to employment. A person might have more than one user, for
example, in the cases of global assignments or concurrent employment, but only one login account. But please
note that in some special cases, a person (for example, dependents in the Employee Central-enabled instance)
doesn't have login account.
A login account is active as long as the person has at least one active user. It stores the following key information:
● Login name: Login name is unique. By default, the login name in a login account is the same as the username
of the first employment. For example, if the username of a person's first user is "Cgrant", then the person's
default login name will also be "Cgrant". A login account is linked with the user whose username is the same as
login name. If the linked user's username, password, login method or locale is changed using import tools, UI,
or API, then the relevant information in a login account is changed accordingly.
Currently, you can use either login name or username to log into SAP SuccessFactors, but we recommend that
you use login name.
● Login method: Login method is either SSO (single sign-on) or PWD (password).
Note
The login method specified in a login account works only when the company has enabled Partial
Organization SSO. Otherwise, a person always accesses the system using the login method specified by the
company-level setting in Provisioning.
Related Information
Prerequisites
You have the Manage Login Accounts permission from Manage Permission Roles Administrator Permissions
Manage User .
Procedure
On the Search Results page, you can find the account information such as login name, login method, login
locale, and account status. Please note that the login method might be displayed as blank, and that is because
it has empty value in the database.
3. If you want to notify employees about their login account information, select the accounts and then choose
Send Email Notification.
As an administrator, you can change an employee's login account when the employee has more than one users.
Prerequisites
You have the Manage Login Accounts permission from Manage Permission Roles Administrator Permissions
Manage User .
Procedure
The person can now log into the system using the new login name.
Results
The person's login account is successfully changed. The system will automatically send the person an email if Login
Account Changed Notification has been enabled in E-Mail Notification Template Settings.
Related Information
As an administrator, you can notify employees of their login account information or changes to their login accounts.
Prerequisites
● You have the Manage Login Accounts permission from Manage Permission Roles Administrator
Permissions Manage User .
● Login Account Notification and Login Account Changed Notification are enabled in Admin Center E-Mail
Notification Template Settings .
Context
You can use the following two types of e-mail notification templates:
● Login Account Notification: Use this template to inform employees of their login account information
including login name and login locale.
● Login Account Changed Notification: Use this template to notify employees that their login accounts have
been changed.
Procedure
Results
The e-mail notifications are sent, and you will receive an e-mail about the notification delivery status.
You can manage basic user information by using the end-user UI in Admin Center. The admin tools provide handy
and intuitive methods for you to add users, search users, and update users one by one.
Context
If you want to make bulk changes to multiple users in one go, SuccessFactors can also fulfill your requirements. You
can use the file-based import tools or the API-based methods to manage users. For more information, see
Managing Basic User Data by Using the UI [page 40].
About Picklists in Manage User
On the Manage User page, picklist options (for example, country/region and state) now display option labels along
with option IDs. This makes it easier for you to understand and choose the options.
Please note that the Manage user page displays the picklist in the same order as the picklists are configured in data
model. We recommend that you set the parent picklist fields on top of the child picklist fields, and make sure that
the parent picklist field is visible if child picklist is configured as visible in the Manage user page.
Remember
As a customer, you don't have access to Provisioning. To complete tasks in Provisioning, contact your
implementation partner. If you're no longer working with an implementation partner, contact SAP Cloud
Support.
Refer to the tasks in the following topics to manage basic user data by using the UI.
Enable the system e-mail notification for a user so that the user can receive relevant system e-mails on certain
events or changes to their information, such as welcome messages and reset password notifications.
Prerequisites
You have the role-based permission of Change User Email Notification under Manage User admin permissions.
Procedure
1. Go to Admin Center.
2. In the tools search field, type Change User Email Notification.
3. Search the user that you want to enable the notification for.
4. Select the checkbox for e-mail notification.
5. Click Save The Setting.
Now the user can receive system e-mails on certain events or changes to their information.
Task overview: Managing Basic User Data by Using the UI [page 40]
E-mail notifications are sent to users automatically to alert them of events or changes to their information. You can
select the notifications that you want to send by turning the corresponding templates on, and customize the e-mail
templates to meet your business needs.
Context
Note
We don't have character limitation for e-mail, but if your e-mail size (including e-mail header and body) exceeds
20 MB, the e-mail cannot be delivered.
Procedure
1. To configure e-mail notifications, go to Admin Center, and in the Tools Search field, enter E-Mail Notification
Template Settings.
Results
After you enabled an e-mail notification, the target recipient receives the corresponding notification sent by the
system automatically on certain events. Refer to the table for what event triggers what e-mail notification in SAP
SuccessFactors.
User Import Notification When the Employee Import job com User who launched the Employee Import
pletes job
Live Profile Import Notification When the Import Extended User Use who launched the Import Extended
Information job completes User Information job
Welcome Message Notification When a new user is added to the system Newly added users
Welcome Message Notification with Re When a new user is added to the system Newly added users
set Password Support
Note
If you are adding new users via
Manage User, Employee Import, or
OData API in EC-off instances, make
sure that this notification is enabled.
Otherwise, these newly added users
might not receive welcome e-mails.
Forget Password Support Notification When user clicks Forgot Password User
Reset Password Support Notification When user requests to reset password User
based on Knowledge Based Authentica and Knowledge Based Authentication is
tion turned on
Reset Password Lockout Notification When user attempts to reset password User
but fails to answer security questions
Reset Password Successful Notification When user resets password successfully User
Reset Password Support Notification When user request to reset password User
You can use the predefined e-mail body for your notifications, or customize it according to your business need.
Refer to the tables for variable codes and predefined e-mail bodies, based on which you can make your own
changes.
Variable Codes
In the e-mail body, you can use variable codes to encode information that is not available at the moment, for
example, employee name, employee password, and login URL. When the notification is sent by the system, the
variable codes are replaced by real information of the employee automatically.
[[LOGIN_URL]] The URL through which a new employee can log in to the sys
tem.
[[SET_PASSWORD_URL]] The URL through which a new employee can set password
when the employee logs in for the first time.
[[RESET_PASSWORD_URL]] The URL through which an employee can reset his or her pass
word.
E-mail Bodies
You can use or customize the notifications based on the following predefined e-mail templates:
Username: [[EMP_USERNAME]]
[[LOGIN_URL]]
[[SIGNATURE]]
Username: [[EMP_USERNAME]]
[[SET_PASSWORD_URL]]
[[SIGNATURE]]
Password Changed Notification Please be advised that your password for PerformanceMan
ager has been changed.
[[SIGNATURE]]
Reset Password Support Notification based on Knowledge You can reset your password at the following URL: [[RE
Based Authentication
SET_PASSWORD_URL]]
[[SIGNATURE]]
Reset Password Lockout Notification We've noticed you recently attempted to reset your password
but have failed to answer your reset password questions suc
cessfully. Please try again in 5 minutes.
[[SIGNATURE]]
Reset Password Successful Notification You have successfully updated your password. If you did not
perform this request, please contact your administrator imme
diately.
[[SIGNATURE]]
You can use this feature to send out consolidated notifications for the same recipient into one single e-mail at
specific time intervals.
You can configure the consolidated interval from the Email Template Notification page by specifying the "Interval For
Consolidated Emails (In Hours Starting From 12:00am):" setting.
For e-mail notifications listed on the Email Template Notification page that do not have the option to set up a
customized interval, you can select the default interval from the Interval For Consolidated Emails (In Hours Starting
From 12:00am): drop down menu, at the bottom of the Email Template Notification page.
Note
Here you are selecting the time interval (in hours). For example, if you select 6 from the dropdown menu,
consolidated e-mail notifications will be sent out every 6 hours.
When new employees are hired in your company, you need to add them as users in the system and add their
information for future maintenance or reference.
Prerequisites
Before you begin, please make sure that the following settings are done in Provisioning:
Option Status
Remember
As a customer, you don't have access to Provisioning. To complete tasks in Provisioning, contact your
implementation partner. If you're no longer working with an implementation partner, contact SAP Cloud
Support.
Also, make sure that you have the role-based permission of Manage Users under Manage User admin permissions.
When adding a user in the system, you can choose whether to send the user a system welcome e-mail immediately
after the user is added. SAP SuccessFactors provides predefined welcome e-mail notification templates for you to
use. Or, if you want to customize the e-mail content to meet your business needs, see Enabling and Customizing
Welcome Email Template [page 48].
Procedure
1. Go to Admin Center.
2. In the tools search field, type Manage Users.
3. Click Add New User, and select Quick Add or Detailed Add Users.
Option Description
Quick Add Select this option if you want to fill in only the required fields
of user data for new users.
1. Fill in all the blanks. Each row contains all the required
information for a user. One user is created in the system
immediately after you finish one row.
2. Optional: Click the Add More Details button to provide
extra user information.
3. Click I’m Done, Go Back to Manage Users to finish add
ing users. A pop-up window appears asking whether
you want to send welcome e-mails now.
4. Choose Yes, Send Emails Now or No, Send Emails Later
accordingly.
Detailed Add Users Select this option if you want to add detailed user informa
tion for new users.
1. Fill in the required fields and any additional fields in the
General Information, Contact Information, and Other
Information sections.
2. Optional: Select Send welcome email to this new user so
a welcome e-mail is sent immediately after the user is
added to the system. You can also choose to do this
later.
3. Click Save to create the user in the system.
Note
Make sure you have assigned an active manager to the new user, or filled the field as "No Manager". If the
field is left empty, the user is not able to log in to the system.
The new user is also added to the Everyone (All Employees) default permission group in Role-Based Permissions
automatically. That means the user is granted with the most basic permissions, such as permission to log in to
SuccessFactors. Org Chart will also be refreshed to reflect the changes shortly.
Next Steps
Sometimes you want to make further changes to new users after initially adding them, so you don't want to send
welcome e-mails immediately. You can send them later. For more information, see Quick AddSending Welcome E-
mails Manually [page 49].
Task overview: Managing Basic User Data by Using the UI [page 40]
Email notifications are sent to users automatically to alert them of events or changes to their information. You can
select the notifications to send by turning each notification on or off, and customize the email template to meet
your business needs.
Context
If you enable the welcome email template, welcome emails will be sent automatically to new users when they are
added to the system.
Procedure
1. Go to Admin Center.
2. In the tools search field, type E-mail Notification Templates Settings.
3. Select the checkbox for Welcome Message Notification to turn it on.
4. Click Welcome Message Notification.
5. Scroll down to the bottom of the page to update the email template.
6. Click Save Changes.
The automatic welcome emails are turned on. Every time when a new user is added to the system, he or she will
receive a welcome email automatically. However, if you choose to turn off the template, you can still send the
welcome emails manually. For steps, see Sending Welcome E-mails Manually [page 49].
If you didn't choose to automatically send welcome e-mails to new users when adding them in the system, you can
still send welcome e-mails manually afterwards.
Prerequisites
You have the role-based permission of Send System Message Email Notification under Manage User admin
permissions.
Context
Welcome e-mails usually contain login information for the first time users. You can customize the content and
format of welcome e-mails to meet your business needs.
Procedure
1. Enable e-mail notification so that users can receive system e-mails. Usually, the notification is enabled by
default for new users. But if you want to change the settings, see Enabling System E-mail Notification [page
41].
2. Go to Admin Center.
3. In the tools search field, type Send User Welcome Email.
4. Select whether you want to send the e-mails to a user group or a single user by choosing the following options:
Option Description
5. Customize the Email Subject and Email Body. Usually, the Email Body contains usernames, passwords, and a
link that users can use to login to SuccessFactors and set their own passwords.
6. Search the group or user that you want to send the e-mail to.
Results
When a user receives the welcome e-mail, he or she can log in to SuccessFactors through the link that is provided in
the e-mails.
Task overview: Managing Basic User Data by Using the UI [page 40]
User information might vary from time to time. For example, an employee has a new manager, or an employee
leaves the organization. User information should be updated regularly in the system to reflect the latest
information.
Prerequisites
You have the role-based permission of Manage Users under Manage User admin permissions.
Procedure
1. Go to Admin Center.
2. In the tools search field, type Manage Users. On this page, a list displays all the users in the system with
columns of their detailed information.
Note
More columns are collapsed in the right side. If you want to see them in the user list, click in the right of
the header line, and select the columns you want to display.
3. Optional: If the list is long and you want to search the user that you need to update, choose one of the following
ways:
Quick search Search by using only names or usernames. Type the name
or username in the search box. While you’re typing, a list ap
pears, displaying all the matching users. Select the user you
want from the list.
Advanced search Search in more fields. Click Advanced User Search. Fill in the
fields and click Search.
4. Optional: You can select Show Active users only or Show External 360 Rater to control the scope of both the
user list and search results.
5. Click the name of the user that you want to update.
6. Make your changes in the pop-up window.
Note
7. Click Save.
Task overview: Managing Basic User Data by Using the UI [page 40]
The system locks an account when a user exceeds the number of allowable logon attempts that is set in your
password policy. Once the account is locked, the user cannot log in again until admins reset the account.
Prerequisites
You have the role-based permission of Reset User Account under Manage User admin permissions.
Procedure
1. Go to Admin Center.
2. In the tools search field, type Reset User Account.
3. Search the user whose account you want to reset. Type the Name, Username, or Job Code. While you’re typing,
a list appears, displaying all the matching users for you to select.
Results
The account is unlocked. You can see a confirmation message at the top of the page.
Task overview: Managing Basic User Data by Using the UI [page 40]
You can configure the password and login policy settings for your company by using the Admin Center
Password & Login Policy Setting tool.
Prerequisites
You have the Manage System Properties Password & Login Policy Settings role-based permission.
Context
Note
Minimum Password Age (in days) controls when password can be changed again based on the latest
password change, preventing users from changing password too frequently. Maximum Password Age (in
days) controls how frequently the passwords can be changed. If you enter a valid number of days in the
maximum field, for example, 60, the system will notify all users to change their passwords every 60 days
and apply the validity period to the new passwords.
If you want to disable the two features, enter "-1" in the fields. Every time you change this value from -1 to a
value >0, or change it back to -1, users are asked for password reset upon their next login. However, simply
Task overview: Managing Basic User Data by Using the UI [page 40]
Using username, user ID, or email as default password introduce security risks. Starting from June 19, 2020, you
can’t use username, user ID, or email as default password when creating new jobs in Employee Import, Bulk
Employees Import, or Delta Employees Import, or adding new users in Manage Users. The import jobs that you
submitted prior to this date aren’t affected.
Functionality Impacted
● The Employee Import tool that is placed in both Admin Center of the instances that haven’t enabled Employee
Central and the Manage Scheduled Job page in Provisioning.
● The Bulk Employees Import tool that is placed in the Manage Scheduled Job page in Provisioning
● The Delta Employees Import that is placed in the Manage Scheduled Job page in Provisioning
● The Manage Users tool in Admin Center
This affects users created by Employee Import, Bulk Employees Import, Delta Employees Import, and Manage Users
and using SAP SuccessFactors password authentication. Integrated external learners, onboardees, and users using
SSO authentication aren’t impacted.
Note
In instances that have been migrated to SAP Identity Authentication Service(IAS), the password policies are
handled within IAS and SAP SuccessFactors policies aren’t relevant.
What’s the Specific Product Behavior Change About Default Password After
June 19, 2020 ?
● Before June 19, 2020, you could specify username, user ID, email, or "System Generated" as the default
password for new users when creating new jobs in Employee Import, Bulk Employees Import, or Delta
Employees Import.
After June 19, 2020, to improve security, when creating new jobs,you can only use “System generated” as
default password, and the username, user ID, email options aren’t supported anymore. However, the
submitted jobs that you created through Provisioning Manage Scheduled Job prior to June 19, 2020
aren’t affected, regardless of whether you specified username, user ID, email, or “System generated” as the
default password option. For better security, we recommend that you enable Use System Generated Password
by Default in Admin Center Platform Feature Settings to override the default password settings to be
“System Generated” in all import jobs created through Provisioning.
● Before June 19, 2020, if you created new users in Manage Users, username was the default password for new
users. After June 19, 2020, “System generated” becomes the default password option.
With “System generated” as the default password option, how to ensure that new users can
reset password using emails.
If you’re creating new jobs in Employee Import, Bulk Employees Import, or Delta Employees Import, or adding new
users in Manage Users, be aware that only “System generated” is supported as the default password option after
June 19, 2020. To ensure that new users can reset password using a link in an email, perform the following steps:
Prerequisites: New users have a valid email address and can receive email notifications.
1. Enable the Welcome Message Notification with Reset Password Support template in Admin Center E-mail
Notification Template Settings .
2. Select the Send Welcome Message to New Users option in the Employee Import, Bulk Employees Import, or
Delta Employees Import in Provisioning or select Send welcome email to new users in Manage Users pages.
Result: New users will receive a welcome email containing the Set Password link after the import job completes.
1. Add a “PASSWORD” column (column heading: PASSWORD; column label: PASSWORD) in the import file and
then provide valid passwords for new users in the column.
2. Select Use a system generated random password as the default password in Employee Import in Admin Center.
3. Import your file.
4. Inform new users their initial passwords offline.
Caution
For better security, ask your users to reset passwords after first-time login.
How to change the existing password settings to be “System generated” in the submitted
import jobs.
If the submitted jobs that you created before June 19, 2020 in Provisioning Manage Scheduled Job specify
username, user ID, or email as the default password, then to improve security, you’re recommended to change the
password setting to be “System Generated” for the submitted jobs and then update the email settings if necessary
to ensure that new users can reset password using a link in an email.
1. Go to Admin Center Platform Feature Settings and enable the Use System Generated Password by
Default option to override the existing password setting to be "System Generated".
2. If the Send Welcome Message to New Users option isn’t selected in the submitted jobs, then you should go to
Admin Center Platform Feature Settings and enable the Send Welcome Message option to override the
existing welcome email setting to be "enabled".
Note
Once the Use System Generated Password by Default and Send Welcome Message options are selected, the
default password and welcome message configuration in the new and existing import jobs are “System
Generated“and “enabled” respectively.
3. Enable the Welcome Message Notification with Reset Password Support template in Admin Center E-mail
Notification Template Settings .
Notes
Recommendation
We recommend that you review the internal communication process about new account creation in your
company, for example, how to inform new employees of their initial login passwords, and then update it if
necessary.
If your SuccessFactors system has integrated with third-party applications using a default password that is
specified as username/userid/email, we recommend you to change this kind of integration because of security
risk. You can use a password that isn’t the same as username/userid/email in the import file for integration.
● Users can reset passwords themselves by using the set password link (valid in 1-30 days, according to your
company-level password policy setting) in the welcome email notification
● Users can reset passwords themselves by navigating to Options Password in the system
● Admins can reset password for these users using Admin Center Reset User Passwords and deliver new
passwords to users offline. See the Related Links section on how to reset user passwords.
Password Changed Notifications with a set password link will be sent to users when the Password Changed
email notification with the [[SET_PASSWORD_URL]] token has been enabled in E-mail Notification Template
Settings and the option of user email notification is turned on in Admin Center Change User Email
Notification .
Parent topic: Managing Basic User Data by Using the UI [page 40]
Related Information
Sometimes users might forget their passwords and can’t log in to SuccessFactors, so they need to reset
passwords. You can either allow users to reset their own passwords or you reset their passwords in Admin Center
on request.
Task overview: Managing Basic User Data by Using the UI [page 40]
It is convenient if users can reset their own passwords whenever they forget them. The system can generate a new
temporary password when users retrieve a forgotten password.
Context
To allow users to reset their own passwords, you need to first enable the forget password function in the company
password policy. Then, turn on the system email notification so users can receive retrieving password emails sent
by the system. You can also customize the email template to meet your business needs.
If you want to allow users to reset their own passwords, you can enable this function by updating your company
password policy.
Procedure
1. Go to Admin Center.
2. In the tools search field, type Password & Login Policy Settings.
3. Select Enable Forget Password feature, and choose one of the following options:
Option Description
Reset Password using a URL accessed through an email link The user receives a system email containing a link through
which they can reset the password.
Reset passwords using security questions accessed through The user receives a system email containing a link where the
email link user must answer security questions correctly before reset
ting the password.
Reset passwords using security questions accessed through The user is redirected to the security question page where
the system the user must answer correctly before resetting the pass
word.
Task overview: Allowing Users to Reset Their Own Passwords [page 57]
Next task: Enabling and Customizing Reset Password E-mail Template [page 58]
E-mail notifications are sent to users automatically to alert them of events or changes to their information. You can
select the notifications to send by turning each notification on or off, and customize the e-mail template to meet
your business needs.
Context
Enable the Reset Password Successful Notification so users can receive retrieving password e-mails after they reset
their passwords. You can also customize the e-mail template if needed. For more information, see Configuring e-
mail Notifications [page 42].
Task overview: Allowing Users to Reset Their Own Passwords [page 57]
If you don't want users to reset passwords themselves because of security issues, or users prefer to contact
admins when they forget passwords, you can reset the passwords for them.
Context
Before resetting passwords, first you must turn on the email notifications so that users can get notified when their
passwords are reset. Then, reset passwords according to user requests.
E-mail notifications are sent to users automatically to alert them of events or changes to their information. You can
select the notifications to send by turning each notification on or off, and customize the e-mail template to meet
your business needs.
Context
Enable the Password Changed Notification so users can be notified when their passwords are reset by admins. For
more information, see Configuring e-mail Notifications [page 42].
You can choose to reset passwords for a single user or a group of users.
Prerequisites
You have the role-based permission of Reset User Passwords under Manage User admin permissions.
Procedure
1. Go to Admin Center.
2. In the tools search field, type Reset User Passwords.
3. Choose one of the following ways to reset passwords:
Option Description
Reset individual user password (with supplied password) To reset one user's password to a specific new one.
Reset individual user password To reset one user's password to a system-generated one.
Reset group of users passwords To reset passwords for a specific group of users to system-
generated passwords at once.
4. Search the user or a specific group of users. Select the users that you want to reset passwords for.
5. Conditional: Type the new password if you're using the Reset individual user password (with supplied password)
option.
6. Click Reset User Passwords.
Results
Users receive system e-mail notifications once their passwords are reset. When users log into the system, a
Password Change window pops up, requiring users to update their passwords. Please note that in Employee
Central-enabled instances, the password that gets updated is the password of the login account, and might not be
the password of the main user on the homepage.
If "security questions" have been enabled in the instance, then users will be prompted to choose security questions
before they enter the new password.
Previous task: Enabling and Customizing Password Changed E-mail Template [page 59]
Related Information
You can enable theHide Username in the UI feature from Admin Center Platform Feature Settings to hide
username on the Global Header and the employee quickcard as well as the search user interfaces that have
adopted People Search.
User interfaces that are affected by the Hide Username in the UI option
By default, this option is off. Once you enable it, the username will be hidden on the Global Header and employee
quickcard, and you cannot run a username search or see username in the search results in the following search
interfaces:
Note
In all the above search interfaces except the Person Search in Data Subject Information, user cannot be
searched by username unless their username is the same as user ID. In Person Search in Data Subject
Information, however, user cannot be searched out by username even though their username is the same as
user ID.
User interfaces that are NOT affected by the Hide Username in the UI option
The following interfaces aren't affected by the Hide Username in the UI option, and administrators can continue
using username to search for users even though this option is enabled. .
● Search interfaces in the following admin tools : Reset User Account, Reset User Passwords, Send User
Welcome Email, Change Email Notification Setting, Manage Support Access, Manage Permission Group,
Manage Role-Based Permission Access, Manage Employee Group, User Role Search, View User Permission,
Parent topic: Managing Basic User Data by Using the UI [page 40]
To add or update user data for multiple users in one go, you can upload a user data file that contains all your
changes to SuccessFactors.
Context
You can upload or download a user data file by using the Employee Import or Employee Export tools. These tools
can be accessed in the following ways:
Admin Center Manage Users Import Users User Admin Center Manage Users Export Users User
We have universally enabled the delta mode in Employee Import and Basic User Import. The delta mode considers
the rows changed in the import file. Only the data records that have actual changes will be imported, and the
unchanged rows will not be updated to the system again. The delta mode helps reduce import time and improve
import performance. Before, when you updated user information using Employee Import or Basic User Import, all
records were imported.
A user data file is a Comma-Separated Value (CSV) file that contains basic information about your users, such as
username and manager hierarchy, as well as any additional information that your company uses. Prepare your own
user data file before you upload it to the system.
Context
If you are preparing a user data file for the first time, you can start by downloading an import file template, and view
it to see what fields to include. You can also download all existing user data in the system and make changes based
on it.
Task overview: Managing Basic User Data by Using a Data File [page 63]
If you want to create a new user data file, we recommend that you download the template and use it as the basis for
your file. The template includes all required formatting, header rows, and data columns.
Prerequisites
● You have the role-based permission of Employee Export under Manage User admin permissions.
● If you do NOT want to include assignment ID in the template, select the Exclude Assignment ID Column from
the User Data Template checkbox in Admin Center Platform Feature Settings . This checkbox is not
selected by default.
Context
The template is stored in the system and you can download it at any time. Use the template so that your file can be
formatted correctly to upload.
Procedure
1. Go to Admin Center.
2. In the tools search field, type Employee Export.
3. Optional: If you want a file containing only the required fields, omitting any empty or custom fields, select Short
format: only system fields.
4. If your file uses languages with specific character types, like Chinese characters, select the correct encoding
from the Character Encoding dropdown menu so that the system can recognize the characters.
5. Click Export Template to download the template.
Results
Now you can add your user data to the template you downloaded.
Related Information
If you want to change user data, download the existing user data first. Make your changes in the downloaded file,
then upload it back to SuccessFactors.
Prerequisites
You have the role-based permission of Employee Export under Manage User admin permissions.
Context
When you download a user data file, you are downloading the data that is currently stored in SuccessFactors.
Note
As of Q2 2019, the CSV Injection Protection is enabled for all NEW instances by default for greater system
security. If the User Data file (.csv) contains insecure content, the content is added as an apostrophe in the
fields and will not trigger a command. Old instances are not impacted by this change, but if you are still using
the insecure content in the file for some purpose, you should stop using it and find other ways. We do not
recommend you add insecure content into the Use Data file.
If you want to enable the CSV Injection Protection for instances created prior to Q2 2019, contact SAP Cloud
Support.
Procedure
1. Go to Admin Center.
2. In the tools search field, type Employee Export.
3. Expand the Specify Export Options section and select any of the following options:
Option Description
Short format: only system fields To get a file containing only the required fields, omitting any
empty or custom fields.
Include additional identifiers To get a file containing extra identifiers, like PERSON_GUID
and PERSON_ID_EXTERNAL.
4. Expand the Specify File Language Format and Batch/Scheduled Processing Options section.
a. If your file uses languages with specific character types, like Chinese characters, select the correct
encoding from the Character Encoding dropdown menu so that the system can recognize the characters.
b. Select Export as a batch process if you have a large number of records. By selecting this, you can continue
working on other tasks in SuccessFactors while the export runs. Check back later to see if it is completed.
5. Expand the Specify Compensation Data Updating Options section. Select the option in it if you want to include
compensation data in the exported file.
6. Click Export User File to start the export.
Related Information
To upload your user data file, the file must be formatted correctly and have all required fields.
Caution
We recommend that you use the provided template for creating your own user data file. The template can be
exported from the system anytime. All fields are case-sensitive. If you don't populate a field, please don't
include the field in the user data file. Blank fields wipe out existing data in the database.
Read the following tips before preparing the user data file:
● File Format
The file must be in the Comma-Separated Value (*.csv) format.
● Header Rows
The first two rows of the data file template are header rows. Row 1 is a header row that displays the system keys
that are used to organize user data. Row 2 is a header row that displays the column labels identifying employee
data, which is displayed in SuccessFactors.
Do not change row 1. Replicate this row exactly as you see it in the template. Note that all texts are in
uppercase. You can customize row 2 to meet your company needs. Both the two rows are required.
Note
Currently, the "User ID" column is required while "Assignment ID" is optional in the user data file. If you do
not input a value in "Assignment ID", the system will populate the value from user ID to assignment ID after
the import job completes.
● Employee Order
The order of the employees in your file is important. A manager's and HR representative's user IDs must exist
in the database before you add an employee, because employees are added to the system in the order that
they appear in your file. Add employees in your file in the following order:
1. Managers
2. HR representatives
3. Employees
Note
User data files contain sensitive information. When you download a user data file, you're removing the data
from a secure environment. We recommend that you take precautions to safeguard this information.
Related Information
Refer to the tables to make sure that the values you entered in your user data file meet the requirements.
The following table describes the data columns required for the user data file. You must include these columns in
your user data file.
USERID The unique identifier of the user entity. Must be the second column in the file.
USERNAME The unique username assigned to the Must be unique in the system.
employee.
Must be from 1 through 100 characters
long.
The USERNAME is used to log into Can be changed as needed, for example,
SuccessFactors. when a person marries and wants to use
a different name.
FIRSTNAME The employee's first name. This name Must be from 1 through 128 characters
will be displayed in SuccessFactors. long.
LASTNAME The employee's last name. This name Must be from 1 through 128 characters
will be displayed in SuccessFactors. long.
EMAIL The complete e-mail address of the Must be a complete e-mail address, for
example [email protected].
employee.
● Manager’s USERID.
Note
Don't use the manager’s
username.
Note
Enter NO_MANAGER for any
employee without a manager.
Don't leave this field empty,
otherwise the user is not able to
log in to the system.
● HR representative's USERID.
Note
Don't use the HR
representative's username.
● NO_HR = No HR representative is
assigned to the employee.
Note
Enter NO_HR for any employee
without an HR representative.
You can't leave this column
empty.
DEPARTMENT The department in which the employee Can be renamed to use as a filter when
searching for employees.
works.
TIMEZONE The time zone in which the employee If you don't specify a value, Eastern
works.
Standard Time (EST) is used by default.
The following table describes the optional data columns of the user data template. Some columns in your file might
be different.
MI The employee's middle name. This name Must be from 1 through 128 characters
will be shown in SuccessFactors. long.
JOBCODE The code assigned to the employee’s job Must be an existing job code.
role.
DIVISION The division in which the employee Can be renamed to use as a filter when
searching for employees.
works.
LOCATION The location where the employee works. Can be renamed to use as a filter when
searching for employees.
Used as a filter for finding employees.
EMPID The employee's employee ID. Must not be longer than 256 characters.
TITLE The employee's title. Must not be longer than 256 characters.
BIZ_PHONE The employee's work phone number. Must not be longer than 256 characters.
FAX The employee's fax number. Must not be longer than 256 characters.
ADDR1 The employee's address. Must not be longer than 256 characters.
ADDR2
CITY
STATE
ZIP
COUNTRY
REVIEW_FREQ Frequency of the employee's perform Must not be longer than 256 characters.
ance reviews, for example Annual.
LAST_REVIEW_DATE The date of the employee's last review. Must not be longer than 256 characters.
CUSTOM01-CUSTOM15 Customizable fields that can be used You can create up to 15 custom fields.
across modules for filtering, reporting,
permissions, and administrative tasks.
MATRIX_MANAGER The employee's dotted line manager. The USERID of the employee’s dotted
line manager.
DEFAULT_LOCALE The default locale used by the system for If blank, the value defined for your com
this user. Usually the locale value coin pany is used.
cides with the user's language and coun
try, for example en_US or en_UK. Note
The language of the locale value
must have been enabed in Provision
ing. If a disabled language is used in
this field, the system language on the
UI will be incorrect.
PROXY The person who acts on behalf of the em The USERID of the proxy.
ployee.
Can include multiple proxy holders. The
syntax is to separate the proxy holder IDs
with pipe (|) characters. Example: admin|
sholmes423|smaddox666.
CUSTOM_MANAGER The employee's custom manager. The USERID of the employee’s custom
manager.
SECOND_MANAGER The employee's second manager. The USERID of the employee’s second
manager.
NICKNAME The nickname of the user. Must be from 1 through 128 characters
long.
SUFFIX The suffix of the user, for example, "Sr." Must be from 1 through 128 characters
and "Jr.". long.
SALUTATION The salutation of the user. Must be from 1 through 128 characters
long.
ASSIGNMENT_ID_EXTERNAL The assignment ID of the user ● Be the last column in the file
● For new users, assignment ID must
be the same as user ID.
● Can only be changed using the con
vertAssignmentIdExternal function
import.
Related Information
Not all characters can be used in all fields of the User Data File, or in the information appearing on the Log On page.
Specifically, the following table shows which characters can be used where.
0 through 9 Numerals Y Y Y Y
_ Underscore Y Y Y Y
- Hyphen N Y Y Y
@ At sign N Y Y Y
. Period N Y Y Y
~ Tilde N N Y Y
! Exclamation mark N N Y Y
# Pound sign N N Y Y
$ Dollar sign N N Y Y
% Percent sign N N Y Y
& Ampersand N N Y Y
* Asterisk N N Y Y
+ Plus sign N N Y Y
` Accent grave N N Y Y
? Question mark N N Y Y
= Equal sign N N N Y
^ Caret N N N Y
( Left Parenthesis N N N Y
) Right Parenthesis N N N Y
, Comma N N N Y
/ Slash N N N Y
; Semicolon N N N Y
[ Left bracket N N N Y
] Right bracket N N N Y
: Colon N N N Y
{ Left braces N N N Y
} Right braces N N N Y
\ Back slash N N N Y
| Pipe sign N N N Y
Space N N N N
Related Information
Refer to this table to find the mapping relationship among the Time Zone ID, short name, and long name.
Related Information
Permissions are required if you want to upload user data using the Employee Import tool.
Context
You can manage the access permission to Employee Import using the following methods:
● If the Enable Control on Employee Import in Role-Based Permissions option is not enabled from Admin
Center Platform Feature Settings , then you should use the Manage Employee Import tool in Admin Center
to grant admins the import permission.
Note
The Enable Control on Employee Import in Role-Based Permissions option is not enabled by default, and is
only shown in the instances that don't have Employee-Central enabled.
● If the Enable Control on Employee Import in Role-Based Permissions option is enabled from Admin Center
Platform Feature Settings , then admins should have the Employee Import role-based permission from
Manage Permission Roles Manage User to access the Employee Import tool.
Note
You cannot specify a target population for the Employee Import role-based permission. Admins with this
permission can import data for all users.
Task overview: Managing Basic User Data by Using a Data File [page 63]
To update the system with your user data changes, you can upload a user data file to SAP SuccessFactors.
Prerequisites
To upload your user data file, the file must be formatted correctly and have all required fields. For more information
about how to format your file, see General Tips for the User Data File [page 67] and Field Requirements for the User
Data File [page 69].
Context
You can only access the Employee Import tool in systems that do not have Employee Central enabled. If you have
enabled Employee Central, you need to choose a different tool to import basic user information. For more
information, see Choosing a Tool for User Management [page 33].
Procedure
Option Description
Send welcome email to new users To automatically send welcome e-mails to new users, E-mail
template needs to be enabled beforehand. If you haven't en
abled it, a warning is displayed. For steps the enable the e-
mail template, see Enabling and Customizing Welcome
Email Template [page 48].
Validate Manager and HR fields To ensure that each employee record has a valid manager
and HR representative.
Process inactive Employees To update the information of inactive employees to the sys
tem.
Note
You cannot use Employee Import to add inactive users to
the system.
Re-activate purged users To reactivate purged users in the system if the users are ac
tive in the user data file.
The default locale and date format are "English(United States)" and "MM/dd/yyyy". Other available locales in
your system depend on the configuration of Language Packs in Provisioning, and the date format will match
the locale you select. Please note that we only support multiple date formats in the Hire Date and Exit Date
fields.
7. Optional: If you want to update compensation forms, expand the Specify Compensation form updating options
section to select compensation options.
8. Optional: Click Validate Import File to validate your user data file. If any errors are found, the errors are
displayed on the top of the page. Please correct the errors before importing.
9. Click Import User File to import your user data.
Results
After the file is uploaded, the SuccessFactors user database is updated with the information from that file. You
receive an e-mail notification with the results of the upload, including any errors. If any errors occurred, you need to
correct them in the file and then upload it again. If that doesn't resolve the problem, contact SAP Cloud Support.
See Common Errors and Troubleshooting [page 97] for descriptions of and solutions for the most common errors.
Task overview: Managing Basic User Data by Using a Data File [page 63]
You can update employees’ matrix or custom managers by importing a CSV file.
Prerequisites
You have the Matrix Manager and Custom Manager Relationship Import permission under Manage User Data admin
permissions.
You use matrix managers or custom managers to maintain dotted reporting lines or backup management. In
addition to using the standard user data file to import and export the matrix and custom manager, you can also
update the information with the Matrix Manager and Custom Manager Import admin tool.
Matrix managers can be displayed in both Org Chart and Succession Org Chart, while custom managers can only
be displayed in the Succession Org Chart and the Job Relationships portlet of the employee’s People Profile.
Procedure
1. Create a CSV file with the employee user ID, manager user ID, manager type, and so on. To differentiate the
manager types, use the following codes:
○ EX: Matrix Manager
○ EC: Custom Manager
In the CSV file, you can also specify whether the matrix manager information is to be displayed in the Org Chart
or Succession Org Chart. However, to display the manager, make sure that you have enabled the display in the
Org Chart Configuration admin tool and have configured XML definition for the chart.
2. Determine how you want to update the information and format the CSV file accordingly:
○ The simple CSV file without the ACTION column updates any existing matrix or custom manager
information of the employee. See the following sample CSV file:
Sample Code
USERID,MGR_USERID,RELATIONSHIP,ORG_CHART_DISPLAY
cgrant1,athompson1,EX,TRUE
cgrant2,dcortez,EX,FALSE
cgrant3,aaaa,EC,FALSE
In this example, for user cgrant1 and cgrant2, any existing matrix manager information will be overwritten;
for user cgrant3, the previous custom manager information will be overwritten.
○ A CSV file with the ACTION column supports incremental addition to or removal of existing matrix or
custom manager information. See the following sample:
Sample Code
USERID,MGR_USERID,RELATIONSHIP,ORG_CHART_DISPLAY,ACTION
cgrant1, athompson1, EX, TRUE, ADD
cgrant2, dcortez, EX, FALSE, REMOVE
cgrant3, aaaa, EC, FALSE, REMOVE
Note
You can also import multiple manages for the same employee. Simply create multiple lines for the
employee in the CSV file.
3. Upload the file through Admin Center Matrix Manager and Custom Manager Import
The matrix or custom manager information of the relevant employees has been updated. If you have configured to
show matrix or custom manager in the Org Chart and Succession Org Chart, they are shown with a dotted
reporting line.
Note
In the Succession Org Chart, the dotted line appears only when the position has an incumbent.
Related Information
After the file upload is complete, you will receive an e-mail notification. This e-mail contains the results of your
upload, including any errors that occurred.
You might see some of these common error messages in the e-mail notification. To correct these and any other
errors, update the data file and then upload it again. If you're still having trouble uploading the data file, contact
SAP Cloud Support.
Missing required field. Required information was not provided. Fill in all required information and upload
the file again. For more information about
required fields, see Field Requirements
for the User Data File [page 69].
Username already exists. There's a duplicate username. Remove duplicate users and upload the
file again.
Manager Cycle detected with this man There are manager cycles in the user hi Make sure that the employee's own
ager ID — <manager id>. erarchy.
USERID is not listed instead of the man
ager's USERID.
Invalid Manager ID. The manager's UserID listed for the em Make sure that the manager's USERID
ployee doesn't exist in the database.
exists in the database.
Related Information
To add or update extended user data for multiple users in one go, you can upload user data files respectively for
personal information, trend information, and background information.
● Personal information
● Background information
● Trend information
Note
● We recommend that you perform periodic exports of all three data files and save these outside of the
application, in case you ever need to refer to historical data and need to restore old records that are
deleted. SAP SuccessFactors does not retain historical records that are deleted, so back up this
information regularly.
● We recommend that any time you do manual import of any profile data, you export a backup of the data
first. This way if a mistake is made (usually withOverwrite Existing Data option), then you can easily
recover.
● Remember that all the options and file types discussed here also apply to the FTP process. You can import
or export these files on an automated schedule, and can choose what format and options to select just like
we could do with manual import or export.
Parent topic: Managing Extended User Information by Using Data Files [page 99]
Related Information
Personal information consists of supplemental "one-to-one" data about a user— that is, data for which there is only
one record for each employee.
Note
● This type of extended user information is not the same "personal information" and "job information" data
that is included in SAP SuccessFactors Employee Central. For information about how to import data to
Employee Central, please see here.
● In Employee Central-enabled instances, you can prevent the import of unsecured content by enabling the
Security Scan of User Inputs option. This applies when you import basic user information using Import
Employee Data, and when you import personal information using Import Extended User Information or the
Live Profile Import job in Provisioning.
The Security Scan of User Inputs option can be enabled in Admin Center Platform Feature Settings .
Once it is enabled, the unsecure scripts, such as cross-site scripting, will be identified and ignored in the
import. The fields skipped are reported in the import status e-mail.
Personal information in your instance is defined by standard elements and userinfo elements in Succession Data
Model. Every employee has a database record for each personal information field in your instance, even if it is blank.
You can limit employees (rows) and data fields (columns) to import by omitting them from the import file. For
example, if you don’t want to import date, remove the date column from the import file. If you include an
employee and a column in the import, it will overwrite any existing data, even if left blank.
Related Information
Trend information consists of "one-to-many" rating data from your talent review process— that is, data for which
there may be multiple records for each employee.
● Performance
● Potential
● Competency
● Objective
It may also include up to two custom rating types, if defined in the Succession Data Model for your instance.
Each type of trend information (such as performance ratings) can include multiple records for each employee
(such as for each performance review cycle).
The trend information export only includes those ratings that have been entered manually in the employee profile
or the ones that are imported. It does not include ratings that come from forms. (You can, however, include form
ratings in a report.)
Related Information
Background information consists of supplemental "one-to-many" background data about a user— that is, data for
which there may be multiple records for each employee.
Background information is entirely customized and different in every instance. It is defined by the background
elements in the Succession Data Model.
Note
If there are duplicate field names for background elements in the data model, the import job will fail.
Each type of background information (such as education) can include multiple records for each employee (such as
for different educational degrees).
The background information import file can include multiple sections, on for each type of background data. You can
limit the import to certain sections and exclude others, but you must include all columns for each included section.
Note
Import jobs on the same background information cannot be run concurrently to avoid data conflicts. The
current job will wait in the queue and not start until the previous job completes.
Related Information
When you import the file for the background information, the system automatically validates the file content to
ensure correctness of the definition.
Before you import the file, you can select the Stop import if invalid users found checkbox and the import stops when
invalid user data is found. If you haven’t selected the checkbox, the import continues but the invalid user data isn’t
imported into the system.
Note
In the data model file, you might have defined a maximum number of data entries for a background data
element. For example, a user can only have up to three pieces of education information. However, this
maximum limit doesn’t apply to data file import and the system doesn’t verify whether the imported user
entries exceed the limit.
When a user has permission to import extended user information, he or she can import all background data for
all users. The import is not limited by the Employee Data permission defined in Manage Permission Roles.
Prerequisites
You have the role-based permissions of Export Extended User Information and Import Extended User Information
under the Manage User admin permissions.
Procedure
1. Create an import file in CSV format, either by exporting the existing data or by exporting a template.
2. Add or update data in the CSV file.
Note
In the import CSV file, either user ID or assignment ID should be provided, and they should be the same as
the corresponding user ID or assignment ID that already exists in the system.
3. Import data in the CSV file to the system. You can choose either an "incremental" import that only adds new
data or an "overwrite" import that replaces all existing records.
Task overview: Managing Extended User Information by Using Data Files [page 99]
Related Information
Create a CSV import file that you can use to add or update extended user information.
Context
By default, the user data template contains the Assignment ID column. However, if you select Exclude Assignment
ID Column from the User Data Template in Admin Center Platform Feature Settings , this column won’t be
included.
Note
When you import background or trend information, and your import file includes an "assignment ID" column,
then the column header should be specified like ^AssignmentId. The header name is case-insensitive, and
other characters such as quotation marks or whitespace aren't supported here. For example,^"AssignmentId"
as the column header will cause an error during the import process.
Procedure
○ To add or update existing extended user information, start by exporting the data from your instance, using
the Export Extended Data only option.
○ To create an import file from scratch and import extended user information for the first time, start by
exporting a CSV template, using the Export Template option.
Next Steps
You can now edit the CSV file to add or update the information and prepare it for import.
Next: Editing Extended User Information in the Import File [page 107]
Prerequisites
You have the role-based permission of Export Extended User Information under the Manage User admin
permissions.
Procedure
○ Personal Information
○ Background Information
○ Trend Information
The trend information export file, by default, only includes those ratings that have been entered manually
in People Profile or the ones that are imported, and does not include ratings that come from forms. If you
want to include rating data coming from forms in the export file, select Include form data – only applicable
to Export Extended Data with User Attributes and then click the Export Extended Data with User Attributes
button.
3. Specify the locale and character encoding you want to use in the export file.
Export as a batch process Select if you want to run the export as a batch job and down
load the latest export file multiple times. Exporting as a
batch allows you to leave the export page and return to pick
up the file later. You will receive notifications once the job
completes. This option is only applicable to the Export
Extended Data Only and Export Extended Data with User
Attributesbuttons. Note that if the number of exported re
cords exceeds 5000, the export will be run as a batch job
even though this option is not enabled.
Valid users only. Select this option if you want to exclude inactive users. If
checked, the export only includes data for active users.
Remove carriage returns and line breaks on export Select this option to remove any carriage returns and line
breaks from the export file.
Export selected background information This option is visible only when you choose to export back
ground information in step 2. If you want to export only a
particular section of background information, select this op
tion and choose the section from the drop-down list.
○ Use the Export Extended Data only to export the data that you want to edit and import again. This option
exports data in exactly the correct format required for import.
○ Use the Export Extended Data with User Attributes to export the data in a more readable report. This option
includes additional user data, such as name and manager, in the export file, to make it easier to read.
Results
All existing data in the system, of the selected type, is extracted and downloaded in CSV format.
Download an extended user information import template so that you can use it to add or update data.
Prerequisites
You have the role-based permission of Export Extended User Information under the Manage User admin
permissions.
1. Go to Admin Center.
2. In the tools search field, type Export Extended User Information.
3. Specify the type of data you want to export.
○ Personal Information
○ Background Information
○ Trend Information
4. Ignore the local and export options. They are irrelevant to the template export.
5. Click Export Template to export the template.
Results
A blank CSV template file is opened. The template contains column headers indicating the user data fields that
should be entered in each column. For background and trend information, there may be more than one row of
headers, one for each type of background or trend element configured in your system. The exact user data fields
available in the template are based on the configuration of your instance's data model.
Next Steps
You can now add rows of data for any existing user in your system. For background and trend information, you can
add multiple rows for each user, one for each type of background or trend element configured in your system.
Add or update extended user information in your CSV file to prepare it for import.
You can use any spreadsheet application to view the data in columns and rows and save in CSV format. The column
headers must be configured in your data model. If you want to use new headers, contact your Implementation
Partner to add them in the data model beforehand.
If you use attachments as part of background or trend information in your system, import them separately. For
more information, see Importing Attachments to Employee Profile [page 111].
In Import Extended User Information, you can select the locale information according to the language you are using
in the import file. To meet the habits of users using different languages, the date format is also different. Refer to
the table for the supported locales and date formats.
Note
Personal, Background, and Trend information all support the same date format standards as indicated in the
following table.
Parent topic: Editing Extended User Information in the Import File [page 107]
Prerequisites
You have the role-based permission of Import Extended User Information under the Manage User admin
permissions.
Note
● If you want to update user data in the system, make sure that the users are included in the target
population of your role-based permission.
● The Employee Data user permissions don't affect the import. As long as you have the Import Extended User
Information role-based permission and define the corresponding target population, you are able to import
user data.
Procedure
1. Go to Admin Center.
2. In the tools search field, type Import Extended User Information.
3. Click Choose File and select the CSV import file you have prepared on your local machine.
4. Specify the type of data contained in your import file.
If you are importing data in a language that uses special character types, such as Chinese, be sure to select the
relevant character encoding so that the data is displayed correctly after import.
It's recommended to use the consistent locale setting with overall language setting. For more information, see
Locale Settings [page 111].
6. Expand the Specify Additional File Options section and set the desired import options.
Always expand and verify the options in this section to make sure that they are correct.
7. Select or deselect the Stop import if invalid users found.
Select this option to stop the import process if an invalid user or reporting relationship is found in the import
file. This is useful when troubleshooting new files to make sure that they are formatted properly. If you haven’t
selected this option, the import continues but the invalid user data isn’t imported into the system.
8. Select the overwrite behavior:
○ Select Import by incrementally adding data if you want to add new records only without deleting any
existing data.
○ Select Import by overwriting existing data if you want to overwrite existing records with data in the import
file, including blank values.
Note
○ For background information, the Import by overwriting existing data option overwrites all data in
each background element that is included in the import file, for all users in your instance, even if
they are not included in the import file.
You do not have to import every background element in your instance; you can import a file that
contains only the background elements you want to update. If you exclude background elements
from the import file, this background data is not impacted or overwritten by the import.
○ For trend information, the Import by overwriting existing data option overwrites all ratings data
(performance, potential, competency, objective, custom1 & custom2) that does not come from
forms, for all users in your instance, even if they are not included in the import file.
○ For personal information, this option is required and is always checked. There is only one record of
personal information per user, so all new records must overwrite the existing ones.
○ For background information, the Import by overwriting existing data (Recommended for optimized
performance) option is selected by default. Select this option to overwrite the existing employee data with
the import data, but if compared with the existing data records, the records in the import file are not
changed, then they will not be added into the system again. This helps optimize performance especially in
the case of small changes, and is the recommended option to improve task efficiency.
9. Click Import Extended User Data File to start the import. If you choose to overwrite existing data with your new
changes for background or trend information, a pop-up window is displayed, asking for confirmation to
overwrite existing data.
The import job needs some time to finish. While one import job is running, do not start another job until the
current one is finished. Otherwise, it leads to data corruption, especially when you run jobs with the option
to overwrite existing data.
Results
The extended user information in the import file is uploaded to the system for relevant users. If you uploaded
background information, you might receive two e-mail notifications, one is for Background Sync, and the other is
for Background Import. This is expected behaviour, because a background sync job is triggered automatically in
the backend as well as the import job.
Previous: Editing Extended User Information in the Import File [page 107]
When you import a file that contains trend or background information, it is recommended that the locale you
specify is consistent with the overall language setting in Options Change Language .
If the settings are not consistent, dates are not parsed correctly by the system.
For example, let's assume English US is selected in the overall setting and English UK is specified in import options.
The US date format is MM/DD/YYYY, while the UK date format is DD/MM/YYYY.
When system parses a date, for example, startDate=04/01/2013 and endDate=04/29/2013, the system first
follows the time format used by the import options, which can only parse startDate as Jan 4th, 2013. The endDate
cannot be parsed. Then the system trys the time format in the overall setting, which can parse the endDate as Apr
29, 2013. Apprently, this is not what is intended.
For the supported locales in the system, refer to Date Formats for Different Locales [page 108].
You can import attachments as part of the extended user information by requesting a scheduled job from
Provisioning.
Task overview: Managing Extended User Information by Using Data Files [page 99]
Related Information
You can attach documents as part of the extended user information on an employee's profile. Attachments can be
added manually by a user from People Profile, or be imported in bulk with a scheduled job from Provisioning.
If configured in the data model for your instance, the Attachment field appears as a column in the CSV import/
export template for extended user information. However, you cannot use the Import Extended User Information
admin tool to import attachments. Instead, you need to prepare a zip file containing your attachments and have
them imported to SAP SuccessFactors with a scheduled job.
Note
The file size of the attachment should be no larger than the following two limitations that are configured in
Provisioning and the data model. If the two max file sizes are different, please follow the smaller one.
● The Attachment max file size setting under Document Attachment in Provisioning
● The max-file-size-KB setting for the data fields that allow attachments in the data model
Related Information
Prepare a zip file containing your attachments and a CSV mapping file and upload it to SFTP so that SAP
SuccessFactors can import them into your system.
Context
Filenames for the zip, CSV, and attachment files must not contain any spaces. Use underscores or dashes. The
system will validate the files and import will fail for files with names that contain spaces.
Remember
As a customer, you don't have access to Provisioning. To complete tasks in Provisioning, contact your
implementation partner. If you're no longer working with an implementation partner, contact SAP Cloud
Support.
Procedure
For example, you might have a background portlet called "Documents" that includes an attachment and a
document name. The CSV might look like this:
Example
Note
The columns in your template may vary. Background elements can contain other data fields, such as dates
or descriptions, in addition to attachments. However, you can only import attachments to a background
element that has an Attachment column in the import template.
Column Description
User ID column The first column in the CSV file should be ^UserId. This
should be the User ID of the employee for whom you are im
porting the attachment.
Background Element ID column The second column in the CSV file should be the background
element ID. This should be the same for every row in your
mapping file. This column identifies the background ele
ment for which you are importing attachments.
Attachment column This can be any column in the CSV file but must be present.
The CSV import template respects the field order that is
configured in your data model. This should be the filename
(including the file extension) of the attachment for that user.
Other columns The CSV import template respects the fields and field order
that are defined in your data model. It may contain columns
for other data fields, such as dates or descriptions.
Example
5. Save the CSV mapping file to the same folder where you saved all your attachments.
6. Select all the files in the folder—attachments and mapping file— and archive them together in a zip file.
Tip
Select all the files and zip them directly, rather than zip the folder that contains them. Zipping the whole
folder can cause issues with the import.
Example
Note
Be sure to include in your request the exact name of the zip file and the SFTP folder where it is located.
Related Information
You can export attachments for background information by scheduling a Live Profile Export job in Provisioning.
Context
Remember
As a customer, you don't have access to Provisioning. To complete tasks in Provisioning, contact your
implementation partner. If you're no longer working with an implementation partner, contact SAP Cloud
Support.
Note
○ Because of large data volume, currently we don't support file encryption when exporting background
information with attachments. Please select None in File Encryption if you’re allowed to access the
unencrypted files.
○ If you want to encrypt the export files for background information, deselect the "Include Attachment"
checkbox.
○ Because of large data volume, the export file will be zipped even if you choose the Unzip export file if it
is zipped checkbox.
○ We recommend that you use the SF hosted SFTP server for better performance.
Results
After the job finishes, one or more zip files consisting of a csv file and attachments will be successfully exported,
and you’ll receive an e-mail about the export results. The name of the exported zip files are
BackgroundDataWithAttachments[file number].zip.
Please note that in the csv file, the "attachment" column contains the corresponding filenames of attachments.
Related Information
Employee photos can be imported in batch through a scheduled job in Provisioning. As a customer, you need to
prepare your photos and a CSV file that maps the photos to existing usernames, and then request a batch upload
job.
Task overview: Managing Extended User Information by Using Data Files [page 99]
Related Information
Before you request a job to batch upload employee photos, you need to prepare the employee photos and a CSV
file that meet the requirements specified.
● Photo size
Each photo must be 2 MB or less. The recommended size is 100 KB.
● Photo format
JPG format only. If your photos are in other formats, convert them into JPG format with a tool
● Aspect ratio
3:4 is preferred for optimal display results.
● Dimension in pixels
The recommend dimension is 180 pixels in width and 240 pixels in height.
● Filenames
The CSV files used by the batch job must meet the following requirements:
● It must contain two columns only: a Username column followed by a Filename column.
Tip
To get the list of employee usernames in the instance, go to the Manage Users tool in Admin Center, or you
can export the full user list with the Employee Export tool in Admin Center.
Caution
If you prepare multiple CSV files for parallel jobs, do not put the same username in more than one file.
Overlapping in usernames can lead to job failure.
Related Information
Users can personalize their profiles by adding profile photos. Employee Profile photos can be added manually by
individual users in the People Profile. Additionally, an admin can request a job or multiple parallel jobs to upload
photos in batch.
Prerequisites
● An SFTP account. For security reasons, we recommend that you use SAP SuccessFactors hosted SFTP server.
In case you don’t have an SFTP account, contact your Partner or SAP Cloud Support.
● Employee photos and a CSV mapping file that meet the requirement specified in File Requirements [page 117].
If you want to request multiple jobs that run in parallel, prepare one CSV file for each job.
Procedure
Note
In the case of parallel jobs, you can create one directory to store all photos and CSV files for all jobs; or you
can create separate directories to store the files needed for each job. Either way, the information you
provide when requesting the job should match that on the SFTP server.
Related Information
Besides using the UI-based and File-based methods to manage user data, you can also use the API-based process.
All fields of both the Basic User Information and Extended User Information are combined into the User Entity.
Context
The operations you can perform by using the User OData API includes Query, Merge/Replace, and Upsert. For
more information on using the API-based process to import and export user data, see User.
Use the check tool to find potential problems and errors in your configuration before you call support about an
issue.
Prerequisites
Assign Access Check Tool and Allow Configuration Export to your role in Role-Based Permissions (RBP). If you want
to use the Quick Fix feature for the checks that have it, assign the Allow Check Tool Quick Fix permission too,
Procedure
1. Go to Admin Center.
2. In the tools search field, type Check Tool.
3. In Application, select the application you want to check.
Tip
For example, to run checks for Time Off, select Time Off.
You see the checks for the application you selected. The description for each check describes the situation you
hope to find in running the check. For example, in running the check Accrual lookup by seniority is consistent,
you hope to find that the lookup is indeed consistent.
4. Click the check the box at top left in the table to run all checks.
5. If you want to run only some checks, select them individually.
Tip
To understand what a check does, right click the Check ID. The system then displays some information on
the check.
6. Click Run Checks to check your applications for the checks you selected.
Evaluate the results and resolve the issues. If you encounter an error you cannot resolve, contact Support by
creating a ticket.
The SAP SuccessFactors check tool helps you identify and resolve issues when your system doesn’t work as you
expect.
If your SAP SuccessFactors applications are behaving in unexpected ways, it is likely that it has a configuration or
data conflict: you have some data that is inconsistent or a configuration error. The check tool quickly identifies
these types of problems so that you can avoid support tickets. You might still need to create a support ticket if the
problem is severe, but even in severe cases, the check tool can save you time because it can export the results of
the check and your configuration for support. The support engineer, therefore, can identify the issue more quickly.
● A list of issues in your configuration or data and the severity of each issue.
● A solution or recommendation to address the issue.
After you run checks in the check tool, it returns the results of the check so that you can resolve issues that it
found.
To see the results of the checks, look in the Results column. If you run the checks multiple times to see how you are
resolving issues, look in the Previous Result column to compare the current results to previous results.
Result Action
No issues found If the tool cannot find issues, you see a green check mark the Result.
Issues found If the tool finds issues, it reports the number of issues and a yellow warning icon or a red alarm
icon.
● The yellow icon indicates a low severity issue. The system proposes a solution.
● The red icon indicates a high severity issue. You must take action, which could include creat
ing a Support ticket.
Related Information
When the check tool reports a serious issue, you might need to contact Support. You can create a Support ticket
from within the check tool.
Prerequisites
Run the check tool. You can find the check tool by going to Admin Center Check Tool . You create the ticket
from the results page of the tool.
Procedure
1. On the results page, look in the Result column for the errors you want to report on.
You usually contact Support for high severity issues not low severity issues.
2. Click the error in the result to open the Detailed Result.
Note
If you cannot click the error, expand the list of checks from the Description column, and then click the error
from the Result column.
The Check Tool includes a Quick Fix feature that you can use to immediately correct issues found during a check
run.
Procedure
1. Run checks as described in Using the Check Tool for one or more components. The tool generates check
results, some of which might be warnings or errors.
2. Select the result of one of the checks where issues were identified. If the check includes a quick fix, you see the
four-step process at the top of the resulting window. You are in step 1, called Found Issues.
3. Choose Step 2 to proceed to Select Correction.
4. The resulting window shows one or more corrections for the issue. Select the one you want and choose Step 3
to proceed to Final Approval.
5. In the Final Approval step, you can opt to change your mind and not carry out the fix. If you want to proceed,
choose Step 4.
6. The system confirms that the fix is now running. Choose Close to complete the procedure. The system verifies
that the fix has run correctly after a short time by running the check again.
Use this procedure if you want to freeze or delete a user account due to the user's unavailability in the company, for
example, when an employee is on maternity leave or when an employee resigns from the company.
Context
To freeze a user account, you can change the user status to inactive in the system. To delete a user account entirely
from the system, besides changing the user status to inactive, you also need to create a purge request for inactive
users and perform a purge to delete all the user data.
Users in SuccessFactors can have either an active or inactive status. By default, the status of all of users is set to
active when they are initially added to SuccessFactors. If you want to freeze a user account, you can set the user as
inactive in the system.
Prerequisites
Before you use the UI-based method to deactivate a user who is a manager, you need to do a manager transfer,
which forwards in-progress forms to a new manager. To set up a manager transfer, use the Automatic Manager
Transfer tool in Performance Management.
Context
Setting a user as inactive means that no changes can be made to the account. You can change user status one by
one using the UI, or modify multiple user statuses in a file and upload it to SAP SuccessFactors.
Note
If any of the deactivated users are managers, you can configure automatic manager transfer using the
import options.
For data protection and privacy, you may be required to completely purge inactive users from your system along
with all their data, based on a single, common retention time.
Context
For more information about how to do a full purge of inactive users and their data, see Purging Inactive Users and
All Data.
Login records include the login details such as first login date and last login date as well as the user information
(such as user ID and user name) and manager information (such as the manager's user ID and manager's user
name). Login records will automatically be purged after one year. Additionally, a limit of 100,000 login audit records
for a user and a limit of 50 million login audit records for all users in a company have also been defined. When one
of the two limits is reached, older audit records are purged even though they were created less than a year ago.
Therefore, we recommend that you perform a backup beforehand using ad hoc report.
Context
For detailed steps on how to create an ad hoc report, see Ad Hoc Report Builder.
Procedure
Recommendation
If you want to generate a report on what data you should back up before it’s purged, do as follows:
○ In the Columns section, choose Total Logins from Employee Login Detail as well as other columns that
you want to report, for example, User Name (if selected, the report displays total logins per username).
Then select Group By to define aggregates. In the Define Aggregates dialogue box, choose Total Logins
as Aggregate Column and COUNT or SUM as Function.
Please don't select both Total Logins and Access Date. Otherwise the total logins is displayed as 1
for each row.
○ In the Filters section, choose Access Date from Employee Login Detail and define access date By Rule.
You can add a rule, for example, less than “2019-06-07”, to back up the login records prior to this date.
Recommendation
5. Save the report and then go back to the reports list to select Run Report.
A technical user is a special user created for integrating SAP SuccessFactors with other SAP products and
solutions.
A technical user is generated duing data migration process of the existing instances, or when a new instance is
created. It is not a real person, and will be granted permissions to access data required for integration using APIs. It
is now used in the integration between SAP SuccessFactors and Best Practice.
Please note that a technical user cannot be purged in the system or exported using Employee Export, or API. It
won't be included in reports. You cannot use technical user to log into SAP SuccessFactors.
You can synchronize user account changes, for example, changes in the status and email fields, from SAP
SuccessFactors to SAP Identity Provisioning Service (IPS) in real time.
Context
If your users have been migrated from SAP SuccessFactors to SAP Identity Authentication Service, you should
enable and configureReal-time User Account Sync from SAP SuccessFactors to SAP IPS to sync user account data
in real time. The user account sync event will be triggered once you change one of the five fields (username, first
name, last name, email address, and status) using the user interface or User API, and then the following fields will
be synchronized from SAP SuccessFactors to SAP Identity Provisioning Service (IPS) by default. Please be aware
that USERNAME, STATUS, FIRSTNAME, LASTNAME, BUSINESSPHONE, EMAIL should be configured as standard
elements in Succession Data Model beforehand.
● STATUS
● USERNAME
● FIRSTNAME
● LASTNAME
● EMAIL
● PERSONIDEXTERNAL
● PERSONGUID
Note
● If the admin user is created from Provisioning, the user cannot be synced to SAP Identity Authentication
Service ( IAS) in real-time. The workaround is to run a batch sync from IPS manually after the admin user is
created in Provisioning.
● If the user is updated from the employee profile page in Employee Central, the change cannot be synced to
IAS in real-time. For example, if email is updated from Edit Contact Information or first name/last name is
updated from Edit Personal Information, the change is not synced to IAS in real-time and it will be synced in
the next scheduled batch sync.
● If the user is updated from scheduled jobs like Employee Import or HRIS Sync, the changes cannot be
synced to IAS in real-time. For example, if the user status is changed to be inactive by Employee Import job,
the change will not be synced to IAS in real-time and it will be synced in the next scheduled batch sync.
Read the following steps on how to enable and configure Real-time User Account Sync from SAP SuccessFactors to
SAP IPS .
Option Description
Destination Page Size Read only and will always have the value 1. Destination Page
Size limits the number of records that will be included in a
Batch-Paging element. When this number is exceeded, a
new Batch-file gets created. By default, the value of the Des
tination Page Size is set to 1.
5. Specify options in the Source Setting tab like below before clicking Next to continue:
Option Value
Connection Name IPS Destination Settings for Real-time User Account Sync
REST API URL * See "Create Identity Provisioning Systems" in Real-Time Pro
visioning (Bundles) to find out how to set this value.
OAuth Configurations Click Click to manage OAuth Configurations. In the new page
on the left side, choose Add and fill in the fields on the con
figuration page.
○ Configuration Name: IPS Configuration for Real-time
User Account Sync
○ OAuth Type: Choose OAuth 2.0
○ Grant Type: Choose Client_Credentials
Calculated URId Can be ignored for now; used only if the URL is dynamic,
which isn’t the case of this integration.
HTTP Method POST. Read only; specifies the HTTP method which should
be used for data replication in integration (for example, GET,
POST). In this integration, this is set to POST.
Payload Format Read only. Each integration needs to specify the data format
in the payload. The data in this integration is transformed in
form of JSON.
Source Page Size 1000 by default. Specifies how many cost centers are read
from the Log API at once. Large page size can yield higher
performance, but complex queries may need small page
size.
Enable diagnostics for Run Now Make sure it's not selected.
6. Check the summary of integration configuration at the Review and Run tab and click Save to save your
configuration.
The real-time user account sync job will run once there is a change in one of the five fields (username, first
name, last name, email address, and status) using the user interface or User API.
Hyperlinks
Some links are classified by an icon and/or a mouseover text. These links provide additional information.
About the icons:
● Links with the icon : You are entering a Web site that is not hosted by SAP. By using such links, you agree (unless expressly stated otherwise in your agreements
with SAP) to this:
● The content of the linked-to site is not SAP documentation. You may not infer any product claims against SAP based on this information.
● SAP does not agree or disagree with the content on the linked-to site, nor does SAP warrant the availability and correctness. SAP shall not be liable for any
damages caused by the use of such content unless damages have been caused by SAP's gross negligence or willful misconduct.
● Links with the icon : You are leaving the documentation for that particular SAP product or service and are entering a SAP-hosted Web site. By using such links, you
agree that (unless expressly stated otherwise in your agreements with SAP) you may not infer any product claims against SAP based on this information.
Example Code
Any software coding and/or code snippets are examples. They are not for productive use. The example code is only intended to better explain and visualize the syntax and
phrasing rules. SAP does not warrant the correctness and completeness of the example code. SAP shall not be liable for errors or damages caused by the use of example
code unless damages have been caused by SAP's gross negligence or willful misconduct.
Gender-Related Language
We try not to use gender-specific word forms and formulations. As appropriate for context and readability, SAP may use masculine word forms to refer to all genders.
SAP and other SAP products and services mentioned herein as well as
their respective logos are trademarks or registered trademarks of SAP
SE (or an SAP affiliate company) in Germany and other countries. All
other product and service names mentioned are the trademarks of their
respective companies.