What is IAS / IPS?
SAP Cloud Identity Services, within SAP Business Technology Platform (BTP), is a prerequisite for Joule and other SAP cloud solutions.
It comprises of two components: Identity Authentication Services (IAS), responsible for authentication / logging user in. Identity Provisioning Services (IPS), is a companion tool to IAS, used to sync users from the source (e.g. SAP SuccessFactors HCM) to the target (e.g. IAS), for them to be authenticated / logged in.
These services offer advanced identity management features, multifactor and risk-based authentication, as well as a robust and secure user login experience, using open industry standard protocols (e.g. SCIM, SAML, OAuth).
Why migrate to IAS / IPS?
Basic Authentication and third-party corporate identity provider (IdP) direct integration with SAP SuccessFactors HCM suite will reach end of maintenance and support on June 2, 2025, and be deleted on November 1, 2026. See: Community Blog.
After June 2, 2025, users of those customers still using the old SSO certificate and not integrated with SAP Cloud Identity Services – IAS, will no longer be able to access SAP SuccessFactors HCM suite causing downtime for the system.
Once the depreciation date is reached, SAP will no longer support the use of Basic Authentication (username and password); and third-party corporate identity providers (IdP) direction integration with SuccessFactors without SAP Cloud Identity Services as proxy.
Basic authentication provides customers with less security than the common methods of authentication used by many cloud applications, since there are no additional mechanisms to verify the user, and passwords are often reused across multiple accounts and applications, increasing the risk of hacking.
Third-party corporate identity provider (IdP) allows direct integration with SAP SuccessFactors HCM suite in exchange for Identity Authentication as the main or proxy IdP will unify the user login experience across all SAP applications. It also enables the harmonization of UI and API authentication for SAP applications to the same platform to facilitate better authorization management for users. Moreover, this will reduce maintenance efforts between SAP SuccessFactors HCM suite and corporate identity providers since there are pre-built integrations and provisioning of Identity Authentication to SAP SuccessFactors HCM suite and other SAP applications.
How to migrate to IAS / IPS?
SAP SuccessFactors HCM
Customers can follow the step-by-step E-learning to learn how to integrate SAP SuccessFactors HCM with SAP Cloud Identity Services.
If customers need additional support, they can register to attend regular Office Hours featuring topic-specific experts.
Attendees will need to Sign-Up to the SAP Learning Hub with a valid s-user to register.
Note that this migration can be done via the Upgrade Center, without SAP Consultants and should involve the customer’s IT department. This is not generally an activity that HR Admins can do on their own.
SAP SuccessFactors HCM tenants provisioned after Dec 9, 2022, are already pre-provisioned with IAS/IPS.
SAP Ariba and Fieldglass
Customers can watch these Session 1 and Session 2 to be introduced to IAS/IPS concepts from an SAP Ariba and Fieldglass perspective. Note that these recordings are hosted in the ON24 platform and registration is required.
If customers need additional support, they can register to regular Office Hours featuring topic-specific experts. Attendees will need to Sign-Up to the SAP Learning Hub with a valid s-user to register.
What is IAS / IPS? SAP Cloud Identity Services, within SAP Business Technology Platform (BTP), is a prerequisite for Joule and other SAP cloud solutions. It comprises of two components: Identity Authentication Services (IAS), responsible for authentication / logging user in. Identity Provisioning Services (IPS), is a companion tool to IAS, used to sync users from the source (e.g. SAP SuccessFactors HCM) to the target (e.g. IAS), for them to be authenticated / logged in. These services offer advanced identity management features, multifactor and risk-based authentication, as well as a robust and secure user login experience, using open industry standard protocols (e.g. SCIM, SAML, OAuth).Why migrate to IAS / IPS? Basic Authentication and third-party corporate identity provider (IdP) direct integration with SAP SuccessFactors HCM suite will reach end of maintenance and support on June 2, 2025, and be deleted on November 1, 2026. See: Community Blog. After June 2, 2025, users of those customers still using the old SSO certificate and not integrated with SAP Cloud Identity Services – IAS, will no longer be able to access SAP SuccessFactors HCM suite causing downtime for the system. Once the depreciation date is reached, SAP will no longer support the use of Basic Authentication (username and password); and third-party corporate identity providers (IdP) direction integration with SuccessFactors without SAP Cloud Identity Services as proxy. Basic authentication provides customers with less security than the common methods of authentication used by many cloud applications, since there are no additional mechanisms to verify the user, and passwords are often reused across multiple accounts and applications, increasing the risk of hacking. Third-party corporate identity provider (IdP) allows direct integration with SAP SuccessFactors HCM suite in exchange for Identity Authentication as the main or proxy IdP will unify the user login experience across all SAP applications. It also enables the harmonization of UI and API authentication for SAP applications to the same platform to facilitate better authorization management for users. Moreover, this will reduce maintenance efforts between SAP SuccessFactors HCM suite and corporate identity providers since there are pre-built integrations and provisioning of Identity Authentication to SAP SuccessFactors HCM suite and other SAP applications. How to migrate to IAS / IPS? SAP SuccessFactors HCM Customers can follow the step-by-step E-learning to learn how to integrate SAP SuccessFactors HCM with SAP Cloud Identity Services. If customers need additional support, they can register to attend regular Office Hours featuring topic-specific experts. Attendees will need to Sign-Up to the SAP Learning Hub with a valid s-user to register. Note that this migration can be done via the Upgrade Center, without SAP Consultants and should involve the customer’s IT department. This is not generally an activity that HR Admins can do on their own. SAP SuccessFactors HCM tenants provisioned after Dec 9, 2022, are already pre-provisioned with IAS/IPS. SAP Ariba and Fieldglass Customers can watch these Session 1 and Session 2 to be introduced to IAS/IPS concepts from an SAP Ariba and Fieldglass perspective. Note that these recordings are hosted in the ON24 platform and registration is required. If customers need additional support, they can register to regular Office Hours featuring topic-specific experts. Attendees will need to Sign-Up to the SAP Learning Hub with a valid s-user to register. Read More Technology Blog Posts by SAP articles
#SAP
#SAPTechnologyblog
