Prerequisites & Data Access
Ensure you have Admin privileges for your SAP SuccessFactors account with permission for the Manage Integration Tools > Manage OAuth2 Client Applications.
Step-by-Step Setup
Step 1: Find API Server
SuccessFactors uses regional API servers
Look up your tenant’s API server in SAP's regional mapping table
Example:
Tenant URL: https://pmsalesdemo8.successfactors.com API Server: https://apisalesdemo8.successfactors.com
✅ Copy this API Server for use during connection
Step 2: Find Username
Log in to SuccessFactors
Click your profile icon (top right)
Copy the value inside parentheses → This is your Username
Step 3: Find Company ID
From the same menu, click Show version information
Copy the Company ID
Step 4: Register OAuth2 Client Application
Use the search bar to search: Manage OAuth2 Client Applications
Select Actions → Manage OAuth2 Client Applications
Click Register Client Application
Enter:
Application Name
Application URL (This can be any URL and is not used in this integration.)
Click Generate X.509 Certificate
Enter Common Name (CN).
Click Generate
Copy the certificate value from the X.509 Certificate field
Step 5: Download Private Key ⚠️
Click Download
❗Caution: The downloaded file contains your private key. This file should be handled securely after the connection process.
Open the file safely and copy only the long encoded key between:
-----BEGIN ENCRYPTED PRIVATE KEY----- …your key here… -----END ENCRYPTED PRIVATE KEY-----
✅ This is your Private Key
⚠️ Do not share—store securely and delete local file after setup
Step 6: Locate API Key
Your API Key is displayed on the Manage OAuth2 Client Applications screen above your X.509 Certificate.
Step 6: Link your SuccessFactors to Drata
In Connections, select SuccessFactors.
Enter:
API Server
Username
Company ID
API Key
Private Key
X.509 Certificate
Click Connect
⏳ Initial authentication may take up to 15 minutes. During this time, requests may return 401 Unauthorized until the integration fully activates.