- \n
- A JumpCloud administrator account<\/li>\n\n\n\n
- JumpCloud SSO Package or higher or SSO add-on feature<\/li>\n\n\n\n
- A SuccessFactors administrator account<\/li>\n\n\n\n
- Your SuccessFactors domain and company names<\/li>\n\n\n\n
- Your SuccessFactors API server name<\/a><\/li>\n<\/ul>\n\n\n\n
<\/a>Considerations<\/strong><\/p>\n\n\n\n
- \n
- The Identity Management integration uses the SuccessFactors SCIM API<\/li>\n\n\n\n
- The attributes that are returned from the SAP SuccessFactors SCIM API can be controlled in the SCIM API configuration within the SAP SuccessFactors admin console<\/li>\n\n\n\n
- Syncing groups and custom attributes is not supported<\/li>\n<\/ul>\n\n\n\n
Creating a new JumpCloud Application Integration<\/strong><\/h2>\n\n\n\n
- \n
- Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n
- Go to\u00a0USER AUTHENTICATION\u00a0<\/strong>>\u00a0SSO<\/strong> Applications<\/strong>.<\/li>\n\n\n\n
- Click + Add New Application<\/strong>.<\/li>\n\n\n\n
- Type the name of the application in the Search <\/strong>field and select it.<\/li>\n\n\n\n
- Click Next<\/strong>.<\/li>\n\n\n\n
- In the Display Label<\/strong>, type your name for the application. Optionally, you can enter a Description<\/strong>, adjust the User Portal Image and choose to hide or Show in User Portal<\/strong>.<\/li>\n<\/ol>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\")
<\/p><\/div>Note:<\/strong> \nIf this is a Bookmark Application, enter your sign-in URL in the Bookmark URL<\/strong> field.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- Optionally, expand Advanced Settings<\/strong> to specify a value for the SSO IdP URL<\/strong>. If no value is entered, it will default to https:\/\/sso.jumpcloud.com\/saml2\/<applicationname><\/kbd>.<\/li>\n<\/ol>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\")
<\/p><\/div>Warning:<\/strong> \nThe SSO IdP URL<\/strong> is not editable after the application is created. You will have to delete and recreate the connector if you need to edit this field at a later time.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
- \n
- Click Save Application<\/strong>.<\/li>\n\n\n\n
- If successful, click:\n
- \n
- Configure Application<\/strong> and go to the next section <\/li>\n\n\n\n
- Close<\/strong> to configure your new application at a later time <\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n
Configuring the Identity Management Integration<\/strong><\/h2>\n\n\n\n
To configure SuccessFactors<\/strong><\/h3>\n\n\n\n
Follow the prerequisites in the Overview of SAP SuccessFactors Workforce System for Cross-Domain Identity Management API<\/a> article.<\/p>\n\n\n\n
Enable the SCIM API user attributes<\/strong><\/h4>\n\n\n\n
Control which SCIM user attributes are returned from the SuccessFactors SCIM API. Read Managing Workforce SCIM API Attributes<\/a> to learn more.<\/p>\n\n\n\n
- \n
- Log in to SuccessFactors as an admin for your organization.<\/li>\n\n\n\n
- Go to Admin Center<\/strong> >Manage Workforce SCIM API Attributes<\/strong>.<\/li>\n\n\n\n
- In the User Attributes<\/strong> category, enable the attributes you want returned from the SCIM API. At a minimum, ensure the following attributes are enabled:\n
- \n
- externalId<\/li>\n\n\n\n
- locale<\/li>\n\n\n\n
- displayName<\/li>\n\n\n\n
- nickName<\/li>\n\n\n\n
- title<\/li>\n\n\n\n
- phoneNumbers<\/li>\n\n\n\n
- personIdExternal<\/li>\n\n\n\n
- employeeNumber<\/li>\n\n\n\n
- emails<\/li>\n\n\n\n
- department<\/li>\n\n\n\n
- division<\/li>\n\n\n\n
- manager<\/li>\n\n\n\n
- empId<\/li>\n<\/ul>\n<\/li>\n\n\n\n
- Save your changes<\/li>\n<\/ol>\n\n\n\n<\/p><\/div>Note:<\/strong> \n
First name and last name are returned by default.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
Create an account for the integration<\/h4>\n\n\n\n
- \n
- Create an account for the integration.<\/li>\n\n\n\n
- Assign Read Users<\/strong> role to the account.<\/li>\n\n\n\n
- Set the authorization method to Basic Authentication<\/kbd>.<\/li>\n\n\n\n
- Securely store the user credentials, like in the JumpCloud Password Manager<\/a>.<\/li>\n<\/ol>\n\n\n\n
Base64 encode the credentials<\/h4>\n\n\n\n
- \n
- Access the credentials for the integration account. <\/li>\n\n\n\n
- Use a tool or commands to base64 encode the credentials:\n
- \n
- Mac<\/strong> – run the following command in the terminal:
base64 <<< <username>@<companyID>:<password><\/kbd><\/li>\n\n\n\n- Windows<\/strong> – run the following command in PowerShell:
$Text = \u2018<username>@<companyID>:<password>\u2019<\/em>
$Bytes = [System.Text.Encoding]::Unicode.GetBytes($Text)<\/em>
$EncodedText =[Convert]::ToBase64String($Bytes)<\/em>
$EncodedText<\/em><\/kbd><\/li>\n<\/ul>\n<\/li>\n\n\n\n- Securely store the encoded credentials, like in the JumpCloud Password Manager<\/a>. This value will be needed when configuring JumpCloud.<\/li>\n<\/ol>\n\n\n\n
To configure JumpCloud<\/strong><\/h3>\n\n\n\n
- Windows<\/strong> – run the following command in PowerShell:
- Mac<\/strong> – run the following command in the terminal:
- Set the authorization method to Basic Authentication<\/kbd>.<\/li>\n\n\n\n
- In the User Attributes<\/strong> category, enable the attributes you want returned from the SCIM API. At a minimum, ensure the following attributes are enabled:\n
- Close<\/strong> to configure your new application at a later time <\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n
- If successful, click:\n
- Click Save Application<\/strong>.<\/li>\n\n\n\n
- Go to\u00a0USER AUTHENTICATION\u00a0<\/strong>>\u00a0SSO<\/strong> Applications<\/strong>.<\/li>\n\n\n\n
- Log in to the JumpCloud Admin Portal<\/a>.<\/li>\n\n\n\n
![](\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\"){kind=icon}
<\/p><\/div>