Successfactor: Test Connection Failure

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Hi All,

We are trying to connect to Successfactor from SailPoint. We have followed the steps from the connector documentation and Successfactor team has generated the x.509 certificate and client ID. When we are initiating the connection, we are getting the below error:

[ ConnectorException ] [ Possible suggestions ] Ensure configuration parameters are correct with a valid format, Ensure active network connectivity between Source and Target system. [ Error details ] java.lang.RuntimeException: Authorization failed for SOAP

We have entered the below parameters for configuration:

a. Base URL : We have entered API URL for Successfactor.

b. Username

c. Password

d. Client ID: Provided by Successfactor team

e. Private Key: <Private key taken from x.509 certificate provided by successfactor team. Certificate in .pem format>

f. Company ID:

Any pointer or help will be highly appreciated.

2

Hi @saurabh1503 Authorization failed implies permission error on the SF side. Check https://documentation.sailpoint.com/connectors/identityiq/successfactors/help/integrating_successfactors/required_permission.html#success_factor_3747465645_1843868 for required permissions and maybe test with Postman first?

3

Thanks @j_place : I have validated with the customer and found that all the permissions are granted as per the documentation. The only thing I am suspecting is that they have not yet loaded the accounts in successfactor. Could that be one of the reason for the error? Note: I am able to preview Groups and Roles.

Thanks & Regards
Saurabh Bhardwaj

4

Hi @saurabh1503

To find out if it’s the application side authorisation issue can you use tools like curl or Postman to manually test the API connection using the same credentials and parameters outside of SailPoint to confirm that they work as expected.

5

Hi @Sourabh and @vinnysail

For testing SF, I would strongly recommend Postman over curl, as it’s a pain to interface with SF, you need SAML to generate the token. Postman can automate it.

1 Like