Configure information in SuccessFactors

Set up SuccessFactors API user, permissions, X.509 certificate, and template files for Indeed integration.

 

Who: SuccessFactors administrator

Time: ~45–60 minutes (one-time setup)

Before you start

Confirm you have the Job Requisition mapping spreadsheet and test implementation plan from your Indeed representative (see installation overview).

A SuccessFactors administrator completes this section. If they have Indeed account administrator access to the integration installation page, they can complete it alone. Otherwise, the Indeed account administrator and SuccessFactors administrator complete it together.

For questions about this process, contact your SuccessFactors representative.

---

Step 1: Create a SuccessFactors API user account

Create a SuccessFactors API user account for this integration.

Step 2: Grant permissions to the SuccessFactors API user account

Grant these permissions to the SuccessFactors API user account.

The Employee Central permission applies only if you have access to Employee Central.

Granting permissions to the SuccessFactors API user account

Permission group	Select permission
Recruiting Permissions	Candidate Tagging OData API Application Create and Update Validation Bypass for Required Fields OData API Candidate Create OData API Candidate Export OData API Candidate Update OData API Application Create OData API Application Export REST API to Manage Data Privacy Consent Statement for External Candidates OData API Application Update OData API Requisition Export
Employee Central (only if you have access)	Employee Central Foundation OData API (read-only)
Manage Integration Tools	OData API Attachment Export OData API Attachment Import Access to OData API Data Dictionary
Manage MDF Recruiting Objects	View for 'Job Location' Export for 'Job Location'
Manage System Properties	Picklist Management and Picklists Mappings Set Up
Metadata Framework	Access to non-secured objects

Step 3: Configure IP allowlist

If you use an IP allowlist, go to Admin Center → Password & Login Policy Settings → API Login Exceptions and add these Indeed IP addresses:

• 3.137.9.219
• 3.135.136.228
• 3.137.6.223
• 3.128.63.195
• 3.21.142.42
• 18.219.101.101

Open Password & Login Policy Settings to reach the API Login Exceptions page.

Add the Indeed IP addresses on the API Login Exceptions page.

This integration uses OAuth 2.0. Keep the API administrator password from expiring. If you change it, update the Indeed configuration right away. An expired or wrong password stops the integration.

Track your credential expiry and update credentials on Indeed to keep the integration running without interruption.

Step 4: Locate your API server URL

• Identify your SAP deployment's data center, environment, and location.

  Use the List of SAP SuccessFactors API Servers to find the URL.

Step 5: Create a private X.509 certificate and API key

In SuccessFactors, create a private key (X.509) and client key (API key):

• Go to Admin Center and search for Manage OAuth2 Client Applications.

Search for Manage OAuth2 Client Applications and use Register Client Application to add a new app.

2. Select Register Client Application in the top right.

Register New OAuth2 Client Application form where you enter Application Name and Application URL.

3. Verify Company is pre-filled.

4. In Application Name, enter Indeed Candidate Sync.

5. In Description, add a description.

6. In Application URL, enter https://www.indeed.com/.

7. Select Bind to Users.

8. In User IDs, enter the API user account ID.

9. In X.509 Certificate, select Generate X.509 Certificate.

10. Select Download to save your private key (available only at this step). Then select Register.

11. In Common Name (CN), enter indeed.com.

12. In Validity Days, enter a large number (max 36499; recommended). The integration stops when the certificate expires. Keep valid credentials in the Indeed configuration.

13. Select Generate.

Use Self Assign a new X.509 Certificate to generate the certificate, then download the private key before it disappears.

After registration, the View an existing OAuth Client Application screen shows the Client ID (API key) for Indeed.

Use the downloaded private key in Private Key and the API key in Client ID when you run the Indeed installation.

Step 6: Map job requisition fields from SAP to Indeed fields

Use the job requisition mapping spreadsheet from your Indeed representative to map SAP fields to Indeed fields.

Job requisition mapping spreadsheet: column A lists Indeed fields, column B holds the SAP field paths you enter.

1. In column B, row 2, enter the template name.

2. Map SAP fields in column B to Indeed fields in column A.

3. Go to Admin Center → OData API Data Dictionary.

   Search for JobRequisition and select Search.

4. Select JobRequisition.

5. For each field in column A, enter the full path with periods (.) as separators. All paths start with JobRequisition.

6. Find the field in the Property Name column.

   Some fields come directly from JobRequisition. For picklist or foundation object fields, select the blue link to get the next value.

7. Repeat until you reach the actual field value.

   For more templates, copy rows.

8. Repeat for each job requisition template.

With two templates, the spreadsheet looks like this:

Example of a completed mapping spreadsheet with two templates and their mapped SAP field paths in column B.

11. Download each job requisition template and rename files to their IDs. See How to export Recruiting XML Templates from Manage Templates?.

When editing the mapping sheet:

• Edit only column B. Do not modify other columns.

• Leave the cell in column B empty to skip an optional field.

• For picklist fields, include both the field and picklist location.

  Example: JobRequisition.country.picklistLabels.label instead of JobRequisition.country.

12. Save as fields.csv. Other formats and filenames are not supported.

Step 7: Download job application XML templates

1. In the SAP Provisioning UI, follow How to export Recruiting XML Templates from Manage Templates? to get the job application mapping XML files. Use one XML file per template.

2. Rename each XML file with its template ID. To find template IDs, sign in to SAP for Me and follow the instructions.

   Use the same process for all active job requisition templates.

Step 8: Download candidate profile XML template

1. In the SAP Provisioning UI, follow How to export Recruiting XML Templates from Manage Templates? to obtain the latest candidate profile XML file. The Indeed installation steps use this file.

2. Rename the file to Candidate.xml.

---

Next steps

You have configured SuccessFactors for the Indeed integration.

Completed:

• Created the SuccessFactors API user account
• Granted permissions to the API user account
• Configured IP allowlist (if applicable)
• Located your API server URL
• Created the private X.509 certificate and API key
• Downloaded and mapped job requisition fields from SAP to Indeed fields
• Downloaded job application XML templates
• Downloaded the candidate profile XML template

Next:

• Install the integration with Indeed →

 

このページは役に立ちましたか？