SAP SuccessFactors provisioning: move from basic auth to workload identity

Entra ID

Who is affected

Organisations using Entra provisioning from SAP SuccessFactors to Active Directory or Entra ID, or writeback to SuccessFactors, with basic authentication.

What to do

1. Open each SuccessFactors provisioning app and check which authentication method it uses.
2. Switch the connectivity settings to workload identity-based authentication and test a provisioning cycle.
3. Remove the stored SuccessFactors service account password once the switch works.

Source

Plan for change - Switch from basic auth to workload identity based auth for SAP SuccessFactors provisioning integrations“If you are currently using basic authentication for any of the above SAP SuccessFactors provisioning integrations, you must upgrade to workload identity-based authentication before November 2026 to ensure uninterrupted operation of the integrations.”

Checked 9 Nov 2026 Link to this deadline