IP Whitelisting for SF using SAP IAS

[Sebastian_W]

Dear Community,

I'm currently checking the IP Whitelisting Options for a customer.
They are using SAP IAS for the login to SuccessFactors, SAP BTP and SAC.

My questions are now:

What are the (technical) advantages to manage the IP Whitelisting / Restrictions in IAS instead of doing it in SF?

• Is there anything I have to consider?

In SF's IP Restriction Management you can turn off the IP Restrictions for external Onboarding and Learning Users.

• How does SAP IAS handle those cases?
• Are the external ONB and LMS Users also provisioned to IAS?

Would be great to have a discussion and if you can share your experience on that!

Thank you and have a great day,

Sebastian

[CarolynBedi]

Sebastian,

When a SuccessFactors platform tenant is migrated to Identity Authentication, integrated external learners are not migrated and must authentication via the platform with username and password. The ability to migrate integrated external learners to Identity Authentication is on the roadmap. Within Identity Authentication you can set up conditional authentication rules based on e-mail domain, user type, user group, and IP range. See https://help.sap.com/viewer/6d6d63354d1242d185ab4830fc04feb1/Cloud/en-US/0143dce88a604533ab5ab17e639... for more information.