SAP success factors connection issue

[MADHAVREDDY (MADHAVA REDDY PANDHIRI)]

Hi,

I’m getting the below error while connecting to SAP success factor application.

Failed to login! Error code : FAILED_AUTHENTICATION. Error message: Authentication failed. Attempted login from unauthorized ip

Thanks,
Madhav

[MVKR7T (Krishna Mummadi)]

Error says that Authentication failed, check your credentials.

[Remold (Remold Krol)]

It is not the credentials, but the IP address which is the issue.

Within SAP succesfactors a whitelist of IP addresses is configured and your source IP address is not within that whitelist.

Please try to either add the source IP address to the whitelist or remove the whitelist.

– Remold

[MADHAVREDDY (MADHAVA REDDY PANDHIRI)]

Thanks for @Remold your suggestion.

After whitelisted IP address at SAP SuccessFactors end after that configure private key then click on test connection getting the below error.

[ InvalidConfigurationException ] [ Possible suggestions ] Make sure that Client ID and Private key are associated with same Oauth2 Application. [ Error details ] {“errorHttpCode”:“401”,“errorMessage”:“Unable to verify the signature of the SAML assertion. Please ensure that the assertion has a signature and the key pairs match the client ID. For more information, see SAP Help Portal”}

Thanks,
Madhav

[sunnyajmera]

I will suggest to work with SAP Admin to verify below things:

Check if the private key (Client Secret) &being used corresponds to the private part of X-509 Certificate generated and downloaded in your client application in SuccessFactors; Also, check/verify the rest of the connection settings.

[Remold (Remold Krol)]

Also take a look at the SAP SuccessFactors API Reference Guide and especially Authentication Using OAuth 2.0

The documentation contains extensive information and instructions to setup the authentication.

Diving a bit deeper into the error on page OAuth 2.0 Errors, the error you have is:
SAML assertion is verified using the same X.509 certificate that was provided during OAuth client application registration.

SAP SuccessFactors require the public key and the IdentityIQ (the client application) should have the private key. The Private key can be added in the IIQ SuccessFactors Application configuration page.

I hope this brings you a (or multiple) step further

– Remold