Staffbase’s HR integrations offer connectivity with multiple HR systems. You can establish a connection between Staffbase and SAP SucessFactors for the HR Integration. You need to prepare your SAP SuccessFactors environment before configuring the HR integration in Staffbase. This includes creating a system account, assigning permissions, and ensuring access to required employee data. Proper configuration prevents mapping issues, ensures reliable data retrieval for widgets, and supports secure data handling.
Prerequisites
- You have administrator permissions in SAP SuccessFactors
- You have identified which widgets you want to use:
- Absence
- Payslip
Create or Identify a System Account
Use a Super Admin system account for the integration.
This account is used to:
- Authenticate the connection
- Provide access to employee data
- Retrieve HR data for widgets
Configure Permissions for the Integration
Assign the following permissions to the system account required for any integration:
- API access: Manage Integration Tools:
- OData API Basic Authentication or the equivalent OAuth/OData API access
- Company data: View access to Foundation Object: Company (FOCompany)
Employee data: View access to:
- User
- PerPerson
- PerEmail
- EmpJob
- EmpEmploymentTermination
Configure Permissions for Widgets
Based on your organization’s requirements, configure additional permissions based on the widgets you use:
-
Payslip
- EmployeePayrollRun: View/Read access to EmployeePayrollRunResults
- PayrollRun: View/Read access to EmployeePayrollRunResultsItems
-
Absence
- TimeOff: Time Management Object Permissions > Employee Time > View
- TimeOffBalance: Time Management Object Permissions > Time Account > View and access to PerPerson as used for the employee reference
Restrict Sensitive Data (Recommended)
Limit access to sensitive or unnecessary fields in the Employee model, such as:
- Date of birth
- Gender
- SSN
- Marital status
- Home location
- Ethnicity
- Avatar
To configure field-level restrictions: User Permission > Employee Central Effective Dated Entities
To apply the restriction: Disable broad Employee Central HRIS OData API (read-only)
Collect Required Configuration Specifications
Keep the following information ready before adding the HR integration in Staffbase:
- API Server URL: The API endpoint URL of SAP SuccessFactors. This is where the Staffbase platform directs the API calls.
- Username and Password: Credentials of the API user or service account. For example, a Service User in SAP SuccessFactors with required permissions.
- Company ID: A unique identifier for your organization within the HR system. It is used during authentication to ensure API requests are routed to the correct company environment.
- Client ID: A public identifier provided during API registration. It is used to authorize API requests.
- Client Secret: A private key paired with the Client ID. It is required to authenticate API calls.
Tip: Store all credentials securely. Rotate secrets and tokens regularly according to your organization’s security policies.
Comments
0 comments
Please sign in to leave a comment.