Prerequisites

Please carefully read the following to make sure you are able to complete the setup:

You are an Admin of your SAP SuccessFactors instance. If you are not an admin, you won't even be able to search for and access the configuration pages that are described later on.
- Alternatively: Please contact your SuccessFactors Admin and have them take over the integration setup process.

Overview

Estimated, overall setup time: 30 minutes.

Fundamentally, there are 3 main steps you have to complete to set up the integration:

You have to choose a user that Kombo will connect as,
You have to give a Learning administrator the required permissions and link it to that user,
You have to register an OAuth2 client for that user using the certificate shown in the connection flow.

That's it! The rest of this document is a step-by-step walkthrough of everything you need to know and do to set up the integration.

Find your API domain

Your API domain will depend on which region you are based in. To find it, you have to:

Open the SuccessFactors API URLs list.
Filter for production environments (unless you're trying to connect a preview instance)
Once the filter is applied, find your location and select the API domain. If you are, for example, based in Germany, your production URL would be https://api012.successfactors.eu/
Hint: The resulting “API Server” URL will often look quite similar to the SuccessFactors domain you log in on (the API for pmsalesdemo8.successfactors.com is, for example, located at apisalesdemo8.successfactors.com)

Please note that this is a workaround as there is no direct way to get the API domain via the SuccessFactors UI on your own. SAP shares in their help center that you should reach out to your SAP consultant to get the proper API domain.

Your API endpoint will depend on where your SAP SuccessFactors instance is located. It can be in one of several data centers. Please contact your SAP SuccessFactors representative if you are unsure of which data center to use.

Find your Learning domain

Your Learning domain is the domain of your SAP SuccessFactors Learning instance. It is different from your API domain. To find it:

Use the search bar at the top of the dashboard and search for "Learning Administration" – then click on the first result.
Copy the domain from your browser's address bar, for example yourcompany.lms.hr.cloud.sap, without https:// or anything after the domain.
Paste it into the "Learning Domain" field in the connection flow.

Find your Company ID

Click on your profile picture in the top right corner of SAP SuccessFactors and select "About":
Copy the "Company ID" (for example SFCPART000420) and paste it into the "Company ID" field in the connection flow.

Choose the integration user

Pick an existing SuccessFactors user (or create a new one) that Kombo will connect as, and enter its ID in the "User ID" field in the connection flow. Learning-only (Extended Enterprise) users can't be used. The user needs access to every course you want to sync, for example by being assigned to them.

Create a Learning role

In "Learning Administration", use the left side bar menu to open "System Administration" > "Security" > "Role Management" and click "Add New".
Name the role KOMBO_LMS, set the "Role Type" to ADMIN, and click "Add".
Open the "Permissions" tab, use the "add one or more from list" link, and add:

- People Management: View User, View User Learning History, View Assignment Profile Item, Open Content Network Import, Assign Item To User
- Search: Search Item, Search Completion Status
- Learning Activities: View Completion Status, Add Completion Status, Edit Completion Status
Click "Apply Changes".

Link a Learning administrator

In "Learning Administration", open "System Administration" > "Security" > "Administrators".
Open an existing administrator, or click "Add New" to create one (for example with KOMBO_ADMIN as the "Admin ID").
Set "Related User" to the ID of your integration user and save.
Open the "Assigned Roles" tab, add the KOMBO_LMS role, and click "Add".

Use a separate administrator account, since SAP doesn’t let you change the roles of the administrator you’re signed in as.

Register the OAuth2 client

Use the search bar at the top of the SuccessFactors dashboard and search for "Manage OAuth2 Client Applications" – then click on the first result.
Click "Register Client Application" and enter any "Application Name" (for example Kombo) and any valid "Application URL" (for example https://www.kombo.dev).
Check "Bind to Users" (confirm SAP's message with "OK") and enter the ID of your integration user in "User IDs".
Copy the certificate from the Kombo connection flow and paste it into the "X.509 Certificate" field, then click "Register".
Click "View" on your new client, copy the "API Key", and paste it into the "API Key (Client ID)" field in the connection flow.

Obtaining the Provider ID

Use the search bar at the top of the dashboard and search for "Learning Administration" – then click on the first result:
Use the left side bar menu and navigate to "Content" > "Open Content Network":
In the "Content Provider" section, copy the identifier of the provider you are interested in, specifically the value inside the brackets:Note: The provider must be enabled in SuccessFactors Learning under “System Administration” > “Configuration” > “System Configuration” > “OPEN CONTENT NETWORK”.