Configuring SuccessFactors Tasks with OAuth Credentials

About Configuring SuccessFactors Tasks with OAuth Credentials

You can pull employee data directly from SuccessFactors into the Qualtrics platform through the use of workflows extraction tasks. However, SuccessFactors requires the configuration of an OAuth2 client in order for Qualtrics to retrieve data from their system. Prerequisite actions must be performed via the SuccessFactors Admin Portal in order to set up Qualtrics extraction tasks for the first time.

Step 1: Create an X.509 Certificate

To generate a new certificate, SuccessFactors recommends using OpenSSL with the following command:

openssl req -nodes -x509 -sha256 -newkey rsa:2048 -keyout private.pem -out public.pem

After running this program, two text files will be generated: public.pem and private.pem, which are highlighted above. To view the contents of these files, you can open them in any text file editor. Alternatively, use the “ls” and “cat” commands in the OpenSSL terminal.

1. public.pem: Contains the public key for the X.509 certificate. This will be used in the Successfactors OAuth client configuration.
2. private.pem: Contains the private key for the X.509 certificate. This will be used while configuring the Qualtrics workflow tasks.

Step 2: Register an OAuth2 Client Application

1. Login to your SuccessFactors Admin Center. Note the API Domain, Company ID, and Username.
   
2. Click API Center.
   
3. Click OAuth Configuration for OData.
   
4. Click Register Client Application.
   
5. Paste the public key generated from the X.509 Certificate into the space provided.
   
6. Click Register.
7. View the newly registered OAuth2 Client Application.
   
8. Copy and save the API Key. This will be used in the third step.
   

Step 3: Configure the SuccessFactors Account in the Qualtrics Task

The above steps have provided you with the information needed to follow the Qualtrics data extraction workflow instructions:

1. Name: Descriptive name for the connection.
2. Username: Your SAP User ID.
3. API Key: Generated by the registered OAuth2 application.
4. Datacenter domain: Domain part of the SuccessFactors Admin Center URL, shown in the first step of registering an OAuth2 application.
5. 509 Certificate Private Key: Private Key value generated by the X.509 certificate set-up. The private key should be in PKCS8 format.
6. Company ID: Company ID for SuccessFactors instance, shown in the first step of registering an OAuth2 application.

Updating SuccessFactors Credentials

You cannot edit a connection once it is added to the workflow. To update the connection settings, you must create a new account and incorporate the necessary edits. Open your workflows task and click Add a user account.

If you are no longer using your previous connection, you can delete it by clicking the three dots on the right-hand side and selecting Remove account.

Troubleshooting Authentication Errors

If the OAuth connection settings are misconfigured, an error message will show when you try to save your credentials. To resolve these issues, reconfigure the task with the corrected credentials following the steps above.

-----BEGIN PRIVATE KEY-----
[key data]
-----END PRIVATE KEY-----

openssl req -nodes -x509 -sha256 
-newkey rsa:2048 -keyout 
private.pem -out public.pem

Troubleshooting Non-Authentication Errors

If the workflow run shows a different error, it could indicate a misconfiguration issue unrelated to OAuth.