Skip to content
Security and identity / Human resources

OneLogin and Success Factors integration

Plan how OneLogin and Success Factors should share data across your business. Work with Stacksync engineers on record mapping, system access, and the requirements for running the integration.

  • Scope your workflow with an integration engineer
  • Review the systems, records, and updates you need

Teams building with Stacksync

Plan the connection your business needs

Explore a OneLogin and Success Factors integration with a Stacksync engineer. Stacksync support for OneLogin and Success Factors is not established by the connector documentation reviewed for this page. Start with one record and the update your business needs to identify an implementation path.

01 / Business process

Start with one meaningful update

Identify the record that changes in OneLogin or Success Factors, where it needs to appear, and which team depends on it.

02 / Data access

Establish the available connection

Bring the objects, account editions, and required directions. An engineer can review the connector path, permissions, and field access.

03 / Success criteria

Define a result you can verify

Agree on record matching, acceptable delay, expected volume, and how your team will resolve failed updates.

Technical referenceAvailable documentation, candidate record relationships, and questions for your technical review.

What records can you sync?

Explore the record types and read/write requirements for each system.

OneLoginConnection and object support require review

Record types to review with Stacksync

Record typeCoverage and requirements
UsersConfirm support for this record type and the direction you need.
RolesConfirm support for this record type and the direction you need.
Apps (app instances)Confirm support for this record type and the direction you need.
GroupsConfirm support for this record type and the direction you need.
Mappings (mapping rules)Confirm support for this record type and the direction you need.
EventsConfirm support for this record type and the direction you need.

Discuss OneLogin requirements

Success FactorsConnection and object support require review

Record types to review with Stacksync

Record typeCoverage and requirements
UserConfirm support for this record type and the direction you need.
PerPersonConfirm support for this record type and the direction you need.
EmpEmploymentConfirm support for this record type and the direction you need.
EmpJobConfirm support for this record type and the direction you need.
EmpCompensationConfirm support for this record type and the direction you need.
Foundation Objects (FODepartment, FOLocation, FOCostCenter)Confirm support for this record type and the direction you need.

Discuss Success Factors requirements

Connection requirements and limits

OneLogin

Integration interface
OneLogin API (REST, v1 and v2 resource endpoints on <subdomain>.onelogin.com) plus the Event Webhook (Event Broadcaster) for event delivery
Authentication
Confirm the credentials, API plan, and permissions required for OneLogin.
Change detection
Confirm how Stacksync detects changes for this connector and the objects you need.
Read access
Confirm with Stacksync
Write access
Confirm with Stacksync

Limitations to check

  • Confirm Stacksync support for OneLogin and the record types your workflow needs.
  • Review write-back, deletion handling, update timing, and account limits with the integration team.

Success Factors

Integration interface
OData V2 and V4 REST APIs (plus legacy SFAPI / Compound Employee SOAP API)
Authentication
Confirm the credentials, API plan, and permissions required for Success Factors.
Change detection
Confirm how Stacksync detects changes for this connector and the objects you need.
Read access
Confirm with Stacksync
Write access
Confirm with Stacksync

Limitations to check

  • Confirm Stacksync support for Success Factors and the record types your workflow needs.
  • Review write-back, deletion handling, update timing, and account limits with the integration team.

Prepare your technical review

Use the worksheets and reference checks to capture record identity, ownership, and the result your business expects.

Implementation reference

Record identity and field ownership

Use these data-model references to describe the records your connection needs. They are planning examples; connector availability and supported operations must be established before implementation.

Download the mapping worksheet

CSV · No email required · Record matching, ownership, and test cases

Business processUsers PerPerson

Approved worker-to-account handoff: Success Factors PerPerson provides context for OneLogin Users. These are related records, not equivalent entities.

OneLogin
Object support to establish
Success Factors
Object support to establish

Record identity

Link the employment/person identity to the directory tenant and user ID; support rehires without creating duplicate accounts.

Field ownership

HR effective dates and access-owner approval govern provisioning or deactivation; a record update alone is not an access authorization.

Fields to include

  • Source record reference
  • Destination record reference
  • Approved handoff state
  • Duplicate-detection key
Record matchingUsers User

Compare whether OneLogin Users and Success Factors User describe the same application user or identity in your business.

OneLogin
Object support to establish
Success Factors
Object support to establish

Record identity

Use the immutable user ID within the tenant or directory. Do not equate an application user with a CRM customer contact.

Field ownership

Identity and application owners approve account lifecycle and access changes; synchronize only approved attributes.

Fields to include

  • Source user ID
  • Tenant reference
  • Account status
  • Group references

Architecture decision

Choose how to connect your systems

Choose a method around one example record and the update your business needs. Use Users / PerPerson to review record matching and confirm Stacksync support for the required operations. Compare ongoing sync, a custom workflow, and a scheduled export against that requirement.

Stacksync managed sync

Best fit
Review compatibility with a Stacksync engineer using an example of the records and updates you need.
Operating responsibility
Fits ongoing record synchronization when the required operations are supported. Add workflow steps for approvals or business actions that go beyond copying fields.
Before you choose
Check record matching: Link the employment/person identity to the directory tenant and user ID; support rehires without creating duplicate accounts. Verify field coverage, deletion handling, and how changes are detected.

Native vendor integration

Best fit
A vendor-built integration may fit if it supports your OneLogin and Success Factors record types.
Operating responsibility
Can reduce setup for a supported workflow. You may need another method for records or business steps it does not cover.
Before you choose
First check whether either vendor offers this integration. If available, verify Users / PerPerson, update direction, account tier, and related-record handling.

Custom API or workflow

Best fit
Consider explicit orchestration for the Users / PerPerson handoff.
Operating responsibility
Provides control over business steps; the team owns credentials, version changes, error queues, and reconciliation.
Before you choose
Verify endpoint permissions, pagination, quotas, duplicate detection, and failure recovery. Separate reading history from actions that send messages, grant access, or post transactions.

File or scheduled snapshot

Best fit
Consider for a one-time OneLogin / Success Factors migration or a reporting need with an explicit freshness window.
Operating responsibility
Can simplify a bounded transfer; later changes and deletion history require another extraction or a separately designed incremental process.
Before you choose
Record the extraction cutoff, source IDs, encoding, date/number formats, and reconciliation totals.

Workflow reference

From a business event to the right update

Open a workflow to see its trigger, record relationships, and expected result.

Worker or employee process handoff

Starting event: A change to the selected Users or PerPerson record needs a defined result in the other system.

  1. Start with OneLogin Users and Success Factors PerPerson. Use the record-matching and field-ownership rules from your mapping worksheet.
  2. Resolve organization, position, manager, and effective-date context before dependent changes.
  3. Test a normal update and one failed or repeated update in the supported direction. Keep both record IDs with the test results.

Expected result: Test a future-dated joiner, a mover, and a leaver with protected-account exceptions before applying access changes.

If it fails: Reconcile effective dates before applying a delayed change; route ambiguous termination or access changes for review.

Application user or identity sync test

Starting event: A change to the selected Users or User record needs a defined result in the other system.

  1. Start with OneLogin Users and Success Factors User. Use the record-matching and field-ownership rules from your mapping worksheet.
  2. Resolve tenant and group references and establish a protected administrative-account policy.
  3. Test a normal update and one failed or repeated update in the supported direction. Keep both record IDs with the test results.

Expected result: Test a renamed login, disabled account, missing group, and a user existing in two tenants.

If it fails: Review access impact before retrying a lifecycle change; reconcile current identity state and retain an approval trail.

Manage approved account changes across OneLogin and Success Factors

Starting event: An approved identity change in OneLogin needs to be reflected in the Success Factors process.

  1. Identify the tenant and immutable user ID in OneLogin; determine whether User or PerPerson has a legitimate relationship to that user.
  2. Separate reporting identity context from actions that create users, grant access, or deactivate accounts. Document the approval and effective date before any action.
  3. Keep identity attributes separate from customer contacts and exclude attributes unnecessary for the process.

Expected result: A rename preserves identity; an unapproved access change is withheld; a future-dated change waits until its approved time.

If it fails: Review current permissions and approval before retrying. A stale event must not restore access that has since been removed.

Production readiness

Test the behavior your business depends on

Keep both record IDs with the expected and actual result. Reconcile the same filters and time window in each system.

Users / PerPerson

Test case

Test a future-dated joiner, a mover, and a leaver with protected-account exceptions before applying access changes.

Expected result

The expected worker or employee relationship is preserved with no duplicate action or unintended write.

Users / User

Test case

Test a renamed login, disabled account, missing group, and a user existing in two tenants.

Expected result

The expected application user or identity relationship is preserved with no duplicate action or unintended write.

Direction and permissions

Test case

Bring an example source record and the intended destination operation to the compatibility review. Confirm the supported route before granting write access.

Expected result

Only an approved, supported direction and permitted fields are written.

Freshness and reconciliation

Test case

Measure source and destination times for the selected records under normal load and a burst. Reconcile IDs and values using the same filters and cutoff.

Expected result

The process meets its agreed freshness target and reconciliation has no unexplained differences.

Failure recovery

Find the cause. Restore the data flow.

Start with the failed record and the destination error, then inspect the source value, field requirements, and access.

Rejected or repeated worker or employee change

Investigate

Inspect OneLogin Users and Success Factors PerPerson, their IDs, and the destination error.

Next action

Reconcile effective dates before applying a delayed change; route ambiguous termination or access changes for review.

Rejected or repeated application user or identity change

Investigate

Inspect OneLogin Users and Success Factors User, their IDs, and the destination error.

Next action

Review access impact before retrying a lifecycle change; reconcile current identity state and retain an approval trail.

A record type or update is unavailable

Investigate

Check the OneLogin and Success Factors connector guides, account permissions, and any operations marked On Request.

Next action

Ask the integration team to confirm a supported way to handle that record. Verify whether it needs connector configuration or a separate workflow step.

Source and destination disagree after a retry

Investigate

Compare current source values, destination validation, identity mappings, and any side effects already completed.

Next action

Stacksync issue retry reads the current source state. Decide the intended state before retrying or reverting; reconcile downstream effects separately.

Read the Stacksync issues dashboard guide for retry and revert behavior.

How updates move between OneLogin and Success Factors

See how each system detects changes and which updates the other system can receive. Each direction has its own permissions and record requirements.

OneLogin Success Factors Direction requires confirmation

Detect changesConfirm how Stacksync detects changes for this connector and the objects you need.

Apply updatesConfirm that Stacksync can create or update the records you need in Success Factors.

Success Factors OneLogin Direction requires confirmation

Detect changesConfirm how Stacksync detects changes for this connector and the objects you need.

Apply updatesConfirm that Stacksync can create or update the records you need in OneLogin.

Update timing and record limits

  • Measure initial-load and ongoing-change latency separately. Source detection, selected objects, account limits, and destination validation determine the observed delay.
  • Review write-back, deletion handling, update timing, and account limits with the integration team.
  • Review write-back, deletion handling, update timing, and account limits with the integration team.

Prepare OneLogin and Success Factors access

Set up both accounts before testing the mapping. Use test records where available, and identify the account administrator who can approve access and help resolve setup errors.

OneLogin setup checklist

  • Identify the OneLogin account, edition, environment, and business objects the integration must access.
  • Confirm a Stacksync connector or implementation path for OneLogin, including read/write support, authentication, and initial-load limits.

Success Factors setup checklist

  • Identify the Success Factors account, edition, environment, and business objects the integration must access.
  • Confirm a Stacksync connector or implementation path for Success Factors, including read/write support, authentication, and initial-load limits.

Prepare to go live

Record the fields each system can update, the first-load cutoff, both record IDs, the expected update delay, and who handles errors. Complete the tests before production before expanding to more records.

Use the OneLogin and Success Factors planning worksheet to capture these decisions. Record the access owner in the worksheet and enter credentials only in the connection setup.

Talk to an engineer · Review current pricing

Security and control for your integrations

Use SSO and SCIM to manage access, secure connection options to reach your systems, and record-level retry and revert controls to resolve sync errors.

Explore security controls
FAQ

OneLogin and Success Factors integration FAQ

Find the right integration path

Walk through your OneLogin and Success Factors records, field mappings, and requirements with an integration engineer.