we try to use Cloud Platform Identity Authentication Service (IAS) for Successfactors (SF) SSO. We've tested the proxy scenario successful, where authentication is happening on Identity Provider (IdP) side and you're redirected to the IdP. But with this scenario you're loosing functionality of IAS like IP Restriction, Condiotional Authentication and One Time Password.
In order to make use of the additional features we want to use this scenario. Authentication is happening against IAS, during first login minimaster user record is created on IAS but passwords stays in Corporate User Store:
I've followed this configuration guide for AS JAVA User Store.
When I try to login to SF the IAS login screen apears. But it seems that authentication is not redirected to Corporate User Store. On the Cloud Connector logs I don't see any traffic.
Any idea which config to change on IAS that will make use of the connected AS JAVA User Store?