Configure information in SuccessFactors

Set up SuccessFactors API user, permissions, X.509 certificate, and template files for Indeed integration.

 

Who: SuccessFactors administrator

Time: ~45–60 minutes (one-time setup)

Before you start

Confirm you have the Job Requisition mapping spreadsheet and test implementation plan from your Indeed representative (see installation overview).

A SuccessFactors administrator with Indeed account administrator access to the integration installation page can complete this section alone. Otherwise, the SuccessFactors administrator and Indeed account administrator complete it together.

For questions about this process, contact your SuccessFactors representative.

---

Step 1: Create a SuccessFactors API user account

Create a SuccessFactors API user account for this integration.

Step 2: Grant permissions to the SuccessFactors API user account

Grant these permissions to the SuccessFactors API user account.

The Employee Central permission applies only if you have access to Employee Central.

Granting permissions to the SuccessFactors API user account

Permission group	Select permission
Recruiting Permissions	Candidate Tagging OData API Application Create and Update Validation Bypass for Required Fields OData API Candidate Create OData API Candidate Export OData API Candidate Update OData API Application Create OData API Application Export REST API to Manage Data Privacy Consent Statement for External Candidates OData API Application Update OData API Requisition Export
Employee Central (only if you have access)	Employee Central Foundation OData API (read-only)
Manage Integration Tools	OData API Attachment Export OData API Attachment Import Access to OData API Data Dictionary
Manage MDF Recruiting Objects	View for 'Job Location' Export for 'Job Location'
Manage System Properties	Picklist Management and Picklists Mappings Set Up
Metadata Framework	Access to non-secured objects

Step 3: Configure IP allowlist

If you use an IP allowlist, go to Admin Center → Password & Login Policy Settings → API Login Exceptions and add these Indeed IP addresses:

• 3.137.9.219
• 3.135.136.228
• 3.137.6.223
• 3.128.63.195
• 3.21.142.42
• 18.219.101.101

Open Password & Login Policy Settings to reach the API Login Exceptions page.

Add the Indeed IP addresses on the API Login Exceptions page.

This integration uses OAuth 2.0. To prevent interruptions, track credential expiration dates and keep the API administrator password from expiring. If you change the password, update the Indeed configuration immediately — an expired or incorrect password stops the integration.

Step 4: Locate your API server URL

• Identify your SAP deployment's data center, environment, and location.

  Use the List of SAP SuccessFactors API Servers to find the URL.

Step 5: Create a private X.509 certificate and API key

In SuccessFactors, create a private key (X.509) and client key (API key):

1. Go to Admin Center and search for Manage OAuth2 Client Applications.

   

   Search for Manage OAuth2 Client Applications and use Register Client Application to add an app.

2. Select Register Client Application in the top right.

   

   Register New OAuth2 Client Application form where you enter Application Name and Application URL.

3. Verify that Company shows a pre-filled value.

4. Enter Indeed Candidate Sync in Application Name.

5. Add a description in Description.

6. Enter https://www.indeed.com/ in Application URL.

7. Select Bind to Users.

8. Enter the API user account ID in User IDs.

9. Select Generate X.509 Certificate in X.509 Certificate.

10. Select Download to save your private key (available only at this step), then select Register.

11. Enter indeed.com in Common Name (CN).

12. Enter a large number in Validity Days. The maximum is 36499, and Indeed recommends using it. The integration stops when the certificate expires. Keep valid credentials in the Indeed configuration.

13. Select Generate.

    

    Use Self Assign a new X.509 Certificate to generate the certificate, then download the private key before it disappears.

    

    After registration, the View an existing OAuth Client Application screen shows the Client ID (API key) for Indeed.

Use the downloaded private key in Private Key and the API key in Client ID when you run the Indeed installation.

Step 6: Map job requisition fields from SAP to Indeed fields

Use the job requisition mapping spreadsheet from your Indeed representative to map SAP fields to Indeed fields.

Job requisition mapping spreadsheet: column A lists Indeed fields, column B holds the SAP field paths you enter.

1. Enter the template name in column B, row 2.

2. Map SAP fields in column B to Indeed fields in column A.

3. Go to Admin Center → OData API Data Dictionary.

   Search for JobRequisition and select Search.

4. Select JobRequisition.

5. Enter the full path for each field in column A, using periods (.) as separators. All paths start with JobRequisition.

6. Find the field in the Property Name column.

   Some fields come directly from JobRequisition. For picklist or foundation object fields, select the blue link to get the next value.

7. Repeat until you reach the actual field value.

   For more templates, copy rows.

8. Repeat for each job requisition template.

With two templates, the spreadsheet looks like this:

Example of a completed mapping spreadsheet with two templates and their mapped SAP field paths in column B.

11. Download each job requisition template and rename files to their IDs. See How to export Recruiting XML Templates from Manage Templates?.

When editing the mapping sheet:

• Edit only column B. Do not modify other columns.

• Leave the cell in column B empty to skip an optional field.

• For picklist fields, include both the field and picklist location.

  Example: JobRequisition.country.picklistLabels.label instead of JobRequisition.country.

12. Save as fields.csv. Other formats and file names are not supported.

Step 7: Download job application XML templates

1. Follow How to export Recruiting XML Templates from Manage Templates? in the SAP Provisioning UI to get the job application mapping XML files. Use one XML file per template.

2. Rename each XML file with its template ID. To find template IDs, sign in to SAP for Me and follow the instructions.

   Use the same process for all active job requisition templates.

Step 8: Download candidate profile XML template

1. Follow How to export Recruiting XML Templates from Manage Templates? in the SAP Provisioning UI to obtain the latest candidate profile XML file. The Indeed installation steps use this file.

2. Rename the file to Candidate.xml.

---

Next steps

You have configured SuccessFactors for the Indeed integration.

Completed:

• Created the SuccessFactors API user account.
• Granted permissions to the API user account.
• Configured IP allowlist (if applicable).
• Located your API server URL.
• Created the private X.509 certificate and API key.
• Downloaded and mapped job requisition fields from SAP to Indeed fields.
• Downloaded job application XML templates.
• Downloaded the candidate profile XML template.

Next:

• Install the integration with Indeed →

 

Was this page helpful?