365Fanatic / Product updates / Entra
Microsoft Entra · Provisioning

Workload identity-based authentication for SAP SuccessFactors provisioning integrations

Preview May 2026
SummaryDetailedTimelineProduct updatesThis weekMC SummaryMC DetailedPnP Search

Microsoft Entra is introducing workload identity–based authentication for SAP SuccessFactors provisioning. This new capability allows the Microsoft Entra provisioning service to authenticate to SAP SuccessFactors using Entra workload identity and short‑lived tokens instead of static credentials (username and password). 

This change helps customers transition to a more secure authentication model in preparation for SAP’s plan to deprecate basic authentication for SuccessFactors APIs by November 2026. 

What’s changing 

  • Customers can switch existing provisioning configurations from basic authentication to workload identity–based authentication directly through updated connectivity settings in the provisioning experience, without needing to recreate or restart their configuration. 
  • This method removes the need to store long-lived credentials and uses a standards-based authentication method between Entra and SAP SuccessFactors through SAP Cloud Identity Services. 

This capability applies to the following provisioning scenarios:  

What this means for you 

  • If you are currently using basic authentication for any of the above SAP SuccessFactors provisioning integrations, you must upgrade to workload identity-based authentication before November 2026 to ensure uninterrupted operation of the integrations. 
  • No immediate action is required, but we recommend planning your migration early to avoid last-minute disruption. 

The new method improves security by:  

  • Eliminating stored passwords 
  • Using short-lived, verifiable tokens 
  • Aligning with SAP’s supported authentication model 

Recommended action 

  • Evaluate the new authentication option once available in your tenant 
  • Plan and test migration of existing provisioning jobs to workload identity-based authentication 
  • Update any internal documentation or operational processes that reference basic authentication 

Additional information 

For detailed configuration guidance and step-by-step instructions visit https://aka.ms/EntraSAPSFConnectivityGuide.

Terms in this update

View at Microsoft ↗ All Entra updates

This is in the weekly digest for week 40 · What changed this week? →

More Entra updates

PreviewJune 2026 Prevent unauthorized changes to AD groups with AD group enforcement Generally availableJune 2026 SCIM 2.0 APIs for Microsoft Entra ID in US Gov cloud Generally availableMay 2026 Account Discovery Generally availableMay 2026 Cross tenant group synchronization allows organizations to synchronize security groups across Microsoft Entra tenants PreviewApril 2026 Account Discovery Generally availableApril 2026 Prefetch Workday termination data to customize account disable logic

Text by Microsoft, from Microsoft's documentation. Features and dates may change. Terms and the timeline are added by 365Fanatic.