Reference letters. Clear. Fair. Compliant.
Product · Integration

SAP SuccessFactors self-service in minutes

Connect ZeugnisPilot via OAuth 2.0 to your SuccessFactors tenant. Personal master data comes directly from Employee Central — no Excel exports, no manual maintenance.

  • OAuth 2.0 client_credentials — standard grant
  • AES-256-encrypted credentials
  • Multi-tenant for groups
It's that simple

Connected in three steps

1. OAuth configuration in SF Admin Center

In SuccessFactors Admin Center → OAuth Configurations: create a new API client, note the client ID, generate a secret. Takes about 3 minutes.

2. Enter fields in /admin/integrationen

Enter tenant URL (e.g. api4.successfactors.eu), company ID, client ID + secret. Choose the module (Employee Central / LMS / Recruiting).

3. Test connection — done

One click on "Test connection" — we fetch an OAuth token from the SF tenant. On OK the integration is active and the wizard can pull SF master data.

Six concrete advantages

What the integration delivers

Employee Central native

Personal master data, employment data, position, hiring/leaving date directly from the central SF module. No Excel exports.

OAuth 2.0 client_credentials

Standard grant without SAML complexity. Works on all SF data centres (DC2, DC4, DC8, DC10, DC12 etc.).

Multi-tenant capable

One ZeugnisPilot instance, any number of SF tenants — one SF config per user account. Ideal for groups with separated business units.

Encrypted credentials

Client secret is encrypted with AES-256-GCM on Swiss servers. Never returned to the browser — not even when editing.

Module flexible

Even if you use Recruiting or LMS instead of Employee Central — the integration can be aligned to the respective module.

Read-only by design

ZeugnisPilot NEVER writes back to SuccessFactors. Read access is sufficient — your SF admin retains full control.

Who benefits especially

Typical use cases

  • Groups with SF as HR backbone: uniform master data across locations — the generator pulls them automatically, instead of HR distributing Excel exports.
  • Swiss subsidiaries of international groups: SF central, reference local under Swiss law. Best of both worlds.
  • HR shared service centres: several subsidiaries with different SF companies — one config per account, one workflow per client.
FAQ

Frequently asked questions

Which SuccessFactors modules are supported?
Primarily Employee Central — that is the source of personal master data. LMS and Recruiting are prepared as data sources, but not all fields are mapped automatically. On request, we deliver customer-specific mapping.
Which OAuth grant is needed?
client_credentials. In SF Admin Center → OAuth Configurations → new client → allow grant type "Client Credentials". The more commonly used SAML bearer grant is also supported but more complex to set up.
What permissions must the API client have?
Read access to the user entities (User, EmpJob, EmpEmployment, FOCorporateAddressDEU, etc.). Exact permission set in our setup docs — no write rights required.
What happens with a data centre change?
SuccessFactors tenant URLs can change (DC2 → DC12). Simply update the tenant URL in /admin/integrationen — no new setup, no new client.
How is DPA/GDPR handled?
ZeugnisPilot pulls only data necessary for the reference. Processing takes place in Switzerland, an order processing agreement (DPA) is provided on request. No data export outside Switzerland.
Can I test the integration without immediately creating references?
Yes. "Test connection" makes a pure auth call and fetches a token — no data is transferred. You can validate the tenant before the first reference is created.

Connected in a few minutes

Create OAuth client in SF Admin Center, enter values in /admin/integrationen, test connection — done. No long onboarding.