SF PLT Instance Referesh Admin
SF PLT Instance Referesh Admin
16 Change History. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
The Instance Refresh tool helps you to create a replication request of SAP SuccessFactors HCM suite and monitor
the status of the request from the source to target instance.
A refresh is the process of copying data and configuration from source to target, without impacting the integrations
in the target. The source is the instance from which data and configurations are copied to the target instance. The
target is the instance to which data and configurations are copied using Instance Refresh. Essentially, admin should
have access to both the source and target instances.
Note
During an instance refresh, replication excludes certain data such as attachments, audit logs, and so on.
• You can create a refresh request by choosing the target instance on any future preferred date of refresh. Log
in to the source instance to launch the Instance Refresh tool through Admin Center from which you can initiate
refresh on a desired target instance.
• You can view the history of all refreshes initiated from the logged in source instance.
• You can view and track the status of already submitted refresh request which has not been completed yet.
• You can cancel the refresh request as long as the status of refresh request is not In Progress.
• You can download the error log file as audit report for any refresh requests that didn't succeeded.
• The admin, who initiates the request, receives email notification alerts containing the instance refresh status
and the subsequent steps.
The Instance Refresh tool has some limitations that you must know before using the tool.
• The Instance Refresh tool cannot be used to refresh SAP SuccessFactors Onboarding 1.0. Please contact
Technical Support to refresh SAP SuccessFactors Onboarding 1.0.
When you schedule an instance refresh request where the source instance has SAP SuccessFactors
Onboarding 1.0 enabled and the target instance has SAP SuccessFactors Onboarding enabled, the target's
SAP SuccessFactors Onboarding 1.0 configuration is replaced with a blank configuration.
• Refresh is supported only when the source and target instances are in the same data center.
• The instance refresh tool doesn't support refreshes from Preview to Production environment during the
blackout period for Preview upgrade.
• During an instance refresh, the Enable Personalized Recommendations setting for Learning is disabled on your
refreshed target instance. To ensure learners have access to personalized recommendations, re-enable the
setting on your target instance.
• The instance refresh tool doesn't support refreshing the following modules:
• Recruiting Marketing
• Workforce Analytics
• Canvas Reports
• Open Text
• Integration Center Jobs
• Intelligent Service Center
• OAuth Configurations
• Employee Central - Timesheet Integration
• SAP SuccessFactors Instance Refresh tool does not support Joule.
• Only user data, permission data, and configurations are migrated from the source to the target tenant
during Instance Refresh.
• Joule integration settings remain on the source tenant and are not transferred.
• Ensure that you save necessary user data, permission data, and configurations from the target tenant
before the refresh.
• Reconfigure permissions and run user-related configurations in the target tenant as needed.
Related Information
You can perform a refresh for instances that are in different environments.
You can refresh the SAP SuccessFactors HCM suite, SAP SuccessFactors Learning or combination of SAP
SuccessFactors HCM suite and SAP SuccessFactors Learning product with:
Note
The Enable Instance Refresh Tool for SAP SuccessFactors Learning switch must be enabled for your instance
from Provisioning to use this feature.
Remember
As a customer, you don't have access to Provisioning. To complete tasks in Provisioning, contact your
implementation partner or Account Executive. For any non-implementation tasks, contact Technical Support.
For information on how to manage instances using the Instance Refresh and the Instance Synchronization tools
refer to the link in the Related information.
Related Information
There are some important notes to keep in mind while using the instance refresh tool.
• After refreshing the target instance using the instance refresh tool, it cannot be reverted using the tool.
• Make sure to have enough lead time for activities that you wish to perform after refreshing the target instance.
It is recommended to schedule the refresh request at least seven days in advance.
• The Instance Refresh Tool supports source tenants with schema sizes of 650 GB and beyond, thus providing
increased efficiency. You can find the details of schema size under Manage Data Storage Total Usage, and
you can calculate the refresh qualified tenant size using the formula: Total Usage - (minus) Audit Data.
Note
When you do an instance refresh on SAP SuccessFactors Learning tenant, the final export file excludes the
unnecessary Performance History (PH) tables. This optimization allows the export size validation to be set
to a schema size limit that aligns with the BizX settings (that is 650 GB).
• Since the refresh activity is a one to one wipe-out of the target instance and replace with the source instance,
any customizations present in the target instance are overwritten. These customizations include, but are not
limited to:
• Any existing configurations present only in the target instance (For example, from ongoing
implementations or other related activities).
• Any Configuration Change requests (CCOR) that was only performed in the target instance.
• Any other configuration only present in the target for testing purposes
• If the instance refresh request for SAP SuccessFactors HCM suite, or SAP SuccessFactors Learning, or a
combination of both fails, then the next refresh will be blocked until the failed application is restored to its
original state.
• If the source instance has (Single Sign-on) SSO setup and target has Non-SSO setup, make sure that a
Non-SSO admin account is maintained in the source instance, before refreshing your target instance. This
admin account allows you to access the target instance after refresh, by customer or partner.
• Only Employee Profile Emails and Recruiting Emails are masked as a part of the refresh. This is applicable only
if you have populated the Mask Recruiting Candidate Email Address and Mask Employee Profile Email Address
fields during the submission of the request.
• It is important to take a backup of the setting if Career Site integrated with Identity Authentication Service is
configured on your target instance.
Note
To create a backup of the setting go to Target > Admin Center > Manage Service Provider Configuration for
Identity Authentication Service (IAS). Note that post refresh you have to manually revert this in the target
instance.
• The tool doesn't support restoration of the URLs under Provisioning > Company Settings > Enable Employee
Central V2 Timesheets. If you have this configured in your target instance, save the URL displayed while
accessing Time and Attendance page in the target instance, and open a case with support LOD-SF-PLT to
reconfigure this back in Provisioning.
Remember
As a customer, you don't have access to Provisioning. To complete tasks in Provisioning, contact your
implementation partner or Account Executive. For any non-implementation tasks, contact Technical
Support.
The Instance Refresh process generally transfers SAP SuccessFactors Generative AI configurations and
settings to the target system. However, in some specific cases, you may need to manually perform certain
tasks to ensure the complete functionality.
• After the Instance Refresh process, the AI-Assisted skills data from the source instance are replicated to the
target instance.
Related Information
Advanced Encryption
Things to Know Before Refreshing the Target Instance [page 14]
Post Refresh Activities [page 36]
The Instance Refresh status work flow shows the end to end flow of the refresh process.
Context
To view the simplified version of the workflow in the Instance Refresh tool:
Procedure
Results
The Instance Refresh Status Workflow appears. The status types are as follows:
Validation in Progress Displayed when a set of validation checks is being executed to ensure NA
that the refresh can be successfully submitted for execution. Some of the
parameters that are validated on the source and target instances are:
Validation Failed Displayed when the validation check fails, and the refresh could not be Download the error log
submitted. file and contact SAP
Cloud Support with the
log file.
Note
It is not recommended to access the target instance when the refresh is
in the In Progress status until the status is Completed on the scheduled
date.
Completed with Errors Displayed when the refresh is scheduled for more than one product in the Download the error log
same request and the refresh fails or reverts for one of the products. file and contact SAP
Cloud Support with the
Example log file.
If you try to refresh SAP SuccessFactors Learning and HCM Suite and
one of the refresh conditions occur:
Note
The Enable Instance Refresh Tool for SAP SuccessFactors Learning
switch must be enabled for your instance from Provisioning to use this
feature.
Remember
As a customer, you don't have access to Provisioning. To complete
tasks in Provisioning, contact your implementation partner or Account
Executive. For any non-implementation tasks, contact Technical
Support.
Completed with Displayed when one or more of the conditions occur during the refresh: Download the error log
Warnings file and contact SAP
• Rebuilding of indexes fails, this failure can slow down the search
Cloud Support with the
process. log file.
• Masking the internal users with provided input parameter are
successful, while creating the refresh request fails. This failure can
result in sending emails to real users with reference to test job
executions.
• Traces of audit logs are present in the target instance from the source
instance after refresh is complete. These logs might appear in your
audit reports and the target instance functions as expected.
Instance Stabilization Displayed when the basic refresh on your target instance is complete and NA
in Progress one or more of the following activities are being performed:
Note
Failure of any one of the activities can result in changing the status of
Instance Refresh request to Completed with Warning. If all the activities
are completed without a failure then the request is Successful.
Failed Displayed when one of these conditions occurs: Download the error log
file and contact SAP
• The target instance refresh fails.
Cloud Support with the
• The target instance is not fully refreshed or reverted. log file.
• The target instance is down.
Reverted Displayed when the refresh did not execute successfully. In this case, there Download the error log
is no change in target instance data and configuration. file and contact SAP
Cloud Support with the
log file.
Note
You can cancel the request only when the status of the request is
Scheduled or Validation In Progress.
Post-Refresh Activities Displayed when a user sync job is triggered to sync the user data between NA
in Progress HCM Suite and SAP SuccessFactors Learning.
Note
If you select HCM Suite and SAP SuccessFactors Learning for refresh
without selecting Anonymize Rest of the Sensitive Fields, the user sync
fails.
An email notification is sent to you on every status change of the instance refresh request. The notification is sent
to the email ID saved in the contact information for business on the Employee Profile page. To check the contact
information, in your source instance go to People Profile Contact Details .
As a pre-validation check, we've integrated Check Tool in the email notifications. The email notification displays the
result of the checks that were last run using the Check Tool.
Note
We recommend that you run the checks using Check Tool just before you submit an instance refresh request
and fix the errors and problems in the source instance to avoid replicating the same issues in the target
instance, post refresh.
You can view your company's entitled refreshes including the number of completed, scheduled, and remaining
refreshes.
Prerequisites
Make sure either the View Refresh Requests or the Manage Refresh permission is enabled.
Context
Every company is entitled to two refreshes per tenant for a calendar year. For example, if your company has five
tenants including production and non-production tenants, then every year your company is entitled to get 10
refreshes as a part of the standard purchase.
SAP SuccessFactors Implementation Partners have their own tenants and can perform refreshes from their own
refresh entitlement quota. For Implementation partner resellers, the entitled refreshes are calculated for their
customers based on the number of tenants the customers have. When Implementation Partners perform refreshes
from their tenant into customer tenants, the refresh entitlement is counted towards the customer’s entitlement
quota.
Let us consider an example where an Implementation Partner has 5 tenants of their own and 10 tenants from 3
different customers (Customer1 has 3 tenants, Customer2 has 3 tenants, and Customer3 has 4 tenants). Totally,
Implementation Partner has 15 tenants in their ecosystem.
Implementation Partners are entitled to do 10 refreshes per calendar year. Their customers are entitled based on
the number of tenants they have. Considering the above example: Customer1 is entitled to 6 refreshes per calendar
year, Customer2 is entitled to 6 refreshes per calendar year, and Customer3 is entitled to 8 refreshes per calendar
year.
Note
Refresh Entitlement is application only for SAP SuccessFactors HCM suite refreshes and only for the refreshes
that are triggered using the instance refresh self-service tool.
Procedure
1. Go to Admin Center.
The Instance Management page appears with the Full Copy (Instance Refresh) option selected.
3. Choose Next.
4. Choose View Refresh Entitlement.
Results
• Total: Gives a count of the total number of refreshes allocated to your company.
• Completed: Gives a count of all refreshes that are completed while using the self-service Instance Refresh tool,
with status Successful and Completed with warning. This includes refreshing only SAP SuccessFactors HCM
suite, or a combination of both SAP SuccessFactors HCM suite and SAP SuccessFactors Learning product.
• Remaining: Gives a count of all the remaining refreshes after successful refreshes.
• Scheduled: Gives a count of all the refreshes that are currently scheduled in your instance.
Remember
• You can't carry forward any unused refreshes from the current year to the next or subsequent years.
• There's no restriction on the refreshed tenants. For example, all 10 refreshes could be used to refresh
the same target instance.
• You can't refresh your instance after you’ve exhausted your limit of the entitled refreshes.
• You can't view Scheduled Refresh Count forSAP SuccessFactors Learning.
Before you refresh any target instance, you must know certain points that can impact your target instance.
Integration Center • All integrations defined in Integration Center are copied from source to target instance.
• Existing scheduled jobs related to Integration Center are deleted.
• Destination Settings and Source Settings configurations of Integration Center are not
copied to the target instance after refresh.
• Integration Center does not copy Security Center artifacts from source to the target
instance to avoid inconsistency or corruption of data during instance refresh. Security
Center artifacts related to target instance will be restored after instance refresh.
Integration Service Registration Subscriptions in Event Subscription Management or ISC – Event Connector might be ab-
Center sent in the target company after an instance refresh. Configurations in Integration Service
Registration Center might be absent in the target company after an instance refresh. In such
scenarios, create the subscriptions manually using the corresponding views. If a significant
number of subscriptions are missing, reach out to Support at LOD-SF-INT-INC-FWK.
Onboarding • Documents in the Print Forms Service (PFS) are not copied to the target instance.
• DocSign Configuration is not copied to target instance after refresh. Make a note of
DocuSign account ID and the associated email address.
• Process definition for Onboarding /Offboarding is not copied to your target instance.
• If the target instance has Onboarding and source instance has Onboarding 1.0, then post
refresh, the target instance's configurations are overwritten with the source instance's
configurations.
Note
Before refreshing an instance having Onboarding integrated with SAP SuccessFactors
HCM suite, make sure that the ReportID set for Ad Hoc Reports Export jobs are existing
in both the source and target instances.
These report Ids are required as a part of job configuration in Provisioning. For more
information on scheduling an Ad Hoc Reports Export job, see KBA 2193439 in the
Related Information section.
Ad Hoc reports are included for the SAP SuccessFactors HCM suite product refreshes,
hence if the report is only existing in the target instance and not in source, the reports
are deleted after refresh.
Mobile 1. For any change in the application data, for example, org changes, it might take up to 1
day for the changes to be visible.
2. Post refresh, if there are any new users added in the target instance, then the new users
must activate the device to use the SAP SuccessFactors application.
Learning • Quick guide images, Company logos, and Custom thumbnails are not restored. Take a
backup of these files, to restore it in the target instance after refresh.
• Custom labels, custom pages, or reports unique to the target instance are not restored.
Export the labels, pages and reports, to restore it in the target instance after refresh.
• All configuration property files in System Administration> Configuration> System
Configuration of the target system are restored.
Note
Post refresh, if you encounter issues with AI-assisted capabilities, we recommend
disabling and enabling the following configuration properties:
• AI-assisted skill association for Open Content Network items:
[Link][defau
lt] ( System Administration System Configuration OPEN CONTENT
NETWORK .
• AI-assisted skill inference for learning items: enableSkillInference
Goal Management If the latest version of Goal Management is enabled in the source instance, then after in-
stance refresh, the same version is enabled in the target instance and cannot be reverted to
the legacy version.
Platform If legacy picklists are not migrated to MDF picklists in the source system but are migrated
in the target system, then post refresh, the migrated picklists in the target is overwritten
with the legacy pick lists. To avoid overwrite, you can cancel the scheduled refresh. Please
inform Technical Support that the source and target instances have different type of picklist
by creating a support ticket to get guidance on the next steps.
Administrators can choose to either retain or clear the Global User ID during data replication
to a target instance. Retaining the Global User ID, especially when source and target share an
Identity Authentication Service (IAS), reduces the time and effort required for an initial full
user data synchronization.
People Analytics • Table Reports, Spreadsheet, Dashboard, Pixel Perfect Talent Card (PPTC), Classic Re-
ports, and List Views can be refreshed using the Instance Refresh Tool.
• Stories in People Analytics aren't copied from the source instance to the target instance
during the Instance Refresh. However, if the target instance has Stories in People Analyt-
ics, then the connection will be retained and post-refresh all the stories will exist under
All Reports.
Note
If the source instance has Stories in People Analytics enabled and the target in-
stance doesn't, then post-refresh you have to manually enable Stories in the target
instance.
• Ensure you have added the following property in IPS - SAP Analytics Cloud target
system:
Name Value
[Link] true
ities
• Ensure you don't change any IPS properties or transformations in the IPS source or
target systems.
• Don't invoke IPS Reset in either the IPS source or target systems, as doing so erases all
user's contexts. Losing user's contexts in IPS, skips user delete operations from the SAP
Analytics Cloud target.
• Cancel scheduled IPS recurring jobs before the instance refresh starts. This ensures IPS
jobs stop and don't run during or immediately after the instance refresh. For Stories, it's
recommended to run the IPS RESYNC job right after the instance refresh.
• Advanced Reporting in Employee Central is not supported via Instance Refresh Tool. Ei-
ther you can perform or request the Customer Support to place an Advanced Reporting
Metadata refresh.
• Canvas Reports and Workforce Analytics are not supported by the Instance Refresh
tool. It is important that you specify that Canvas Reports and Workforce Analytics are
implemented in your target instance. This is to ensure that post-refresh, the connection
to Canvas Reports and Workforce Analytics are re-established in the target instance.
Related Information
Before refreshing your target instance, you must pair your target instance with the source instance. The pairing is a
one-time task with a three-step process.
Prerequisites
• Identify the source and the target tenants in each pairing relationship.
• Enable the following permissions:
• Manage Refresh
• Admin access to MDF OData API
• Manage Integration Tools
• Manage Business Process Engine
• Enable Generic Object
Procedure
The Instance Management page appears with the Full Copy (Instance Refresh) option chosen.
3. Choose Next.
Instance Pair Wizard opens with the Select Target Details step active on it.
6. Select the target data center and target environment.
7. Enter the target Company ID.
Note
To know your target instance company ID, go to Source Instance > User ID on the global header of your
instance > Show Version Information.
The generated token is valid only for one hour from the time it has been generated. If the token expires, you
must regenerate the authentication token again.
Note
If the token is invalid or has expired, an error occurs and you must generate a new token to pair the tenants.
Results
Pairing the target instance with the source instance is successful. You can now find the target instance details in
Create Instance Refresh Request page to refresh the target instance from your source instance.
Related Information
Allows you to request a new instance refresh from a source instance on a selected target instance.
Prerequisites
Caution
Once the instance refresh is complete, you can't revert the changes in the target instance.
Procedure
The Instance Management page appears with the Full Copy (Instance Refresh) option chosen.
3. Choose Next.
Note
The source instance information like, data center, environment, company ID are auto populated in the
Create Instance Refresh Request page.
Note
If you do not find any of your target information like data center, environment, or company ID for selection
you must pair your target instance with the logged in source instance.
7. Choose the environment of the target instance from the Target Environment drop-down list.
8. Choose the company ID of the target instance from the Target Company ID drop-down list.
Note
• Instance Refresh using the self-service tool is not supported if the Target Company ID is a productive
tenant. The validation check fails and the instance refresh request is not submitted. You receive
an email notification with the status Validation Failed. This is applicable when you refresh only SAP
SuccessFactors HCM suite product.
Note
If your desired schedule date is unavailable, please select another available date for it.
• Enter an email ID in the Mask Recruiting Candidates Email Address text box, to overwrite or mask the
external candidates email address in the target instance with the email address of your choice.
Note
Masking email ID of external or internal candidates is possible only when the source instance is
enabled with SAP SuccessFactors Recruiting feature.
• Optional: Enter an email ID in the Mask Employee Profile Email Address text box, to overwrite or mask
the Employee Profile email address in the target instance with the email address of your choice.
• Do not delete global user IDs: When you select this option, the system keeps global user IDs during the
instance refresh. If you don't select it, the system deletes the global user IDs. This option is unchecked
by default.
• To mask personally identifiable information apart from email addresses of employee profiles and
recruiting candidates, choose Anonymize Sensitive Information.
Do Not Anonymize Select the option when you don't want any fields to be
anonymized in the target instance after you submit a
Anonymize All Supported Fields Select the option when you want to anonymize all fields
in the target instance after you submit a new instance
refresh request from a source instance on a selected
target instance.
Anonymize Selective Fields Select this option when you want to anonymize
selected fields in the target instance after you submit a
new instance refresh request from a source instance on
a selected target instance.
Caution
The basic refresh of your target instance will be completed in a couple of hours. In addition to this, depending
on your company's data volume, instance stabilization activities like deleting the NoSQL data, deleting the
audit logs, rebuilding of the solr indexes, and so on can take longer duration.
Note
If your instance exceeds the threshold limit, you can contact SAP Cloud Support for completing the refresh
request.
If you encounter an error while submitting the refresh request, try submitting it for individual products. If
you are still unable to submit the refresh for an individual product, please contact SAP Cloud Support.
Results
The status of the instance refresh request appears in the Overview page.
The details of the instance refresh request that you can find in the Overview tab are:
Scheduled Date The scheduled date for the refresh of the target instance.
Requested By The user ID of the person who has requested the refresh. To
view their details choose the business card icon.
Note
The Business Card icon is displayed only when you have
the Manage User permission. For details on the permis-
sion, see List of Role-Based Permission in Related Infor-
mation section.
Next Steps
To check the status of the instance refresh request click the question markicon button under the Refresh Status
column for the identified instance refresh request. The Refresh Status Information window appears with the error
list.
Related Information
Pairing the Source Tenant to the Target Tenant in Instance Refresh [page 20]
Instance Refresh Data Anonymization Fields [page 29]
You can refresh your production tenant during the implementation phase, prior to deployment with necessary
approvals from the administrator.
Prerequisites
• Ensure that both the source and target instances must be present in the same data center.
• The source and the target tenants are paired.
• Ensure that you can select the production tenant in the target tenant drop down when submitting a refresh
request.
• You have the Administrator Approve Production Tenant Refresh Request permission to approve the
refresh request. Administrators with this new role based permission can only approve refreshes for live
production tenants.
• You have enabled the Manage Refresh and View Refresh Requests permission to trigger and view the refreshes
respectively.
• You must open a ticket or incident (using the component LOD-SF-PLT-CGC) requesting to enable the
Admin Center Manage Permission Roles Edit Role for SuperAdmin Manage Instance Refresh Approve
Production Tenant Refresh Request option in your instance. For further assistance, contact Technical
Support.
Context
Production tenant refreshes are irreversible and requires approval from an administrator. We've introduced two
levels of approvals to schedule the refresh request. Administrators with Instance Refresh Tool (IRT) refresh
permissions can choose a production tenant as the refresh target and configure additional options such as the
refresh date and data anonymization before submitting their request. After each refresh, SAP will disable the
refresh functionality to protect production tenant data and prevent accidental refreshes.
Note
You must initiate a manual refresh for SAP SuccessFactors instances with Learning Management System (LMS)
integration.
Procedure
1. Go to Admin Center Instance Refresh Center Create New Request Create Instance Refresh Request
page.
Note
If you select and proceed with the refresh of your production tenant as the target tenant result in the
complete and irreversible deletion of all data, including transactional data, general audit, read audit, and
change audit logs, as well as configurations within the production tenant. This action is irreversible.
Note
The refresh request is canceled if it is not approved within 24 hours of the scheduled date.
A pop up message appears, requesting you to select the Acknowledgment and Acceptance. Click Ok to
proceed.
4. Click on Refresh Status to see the refresh status information as a pop up.
The list of designated reviewers with the Approve Production Tenant Refresh Request permission appears in the
Refresh Status Information pop up.
5. Click the ellipsis button under the Action column for the identified instance refresh request, and then click
Approve or Reject.
When you select Approve, a Production Tenant Refresh Request Requires Review pop up appears.
Note
Click Submit on the pop up after you acknowledge and agree to proceed with the production tenant refresh.
After submission, the Refresh Status appears as Validation In Progress in the Refresh Status column.
Related Information
Procedure
The Instance Management page appears with the Full Copy (Instance Refresh) option chosen.
3. Choose Next.
4. Choose Create New Request.
Note
If the refresh status is In Progress, Validation in Progress, Post Refresh Activities in Progress, Scheduled, or
Instance Stabilization in Progress, deletion will not occur.
Know the generic names of all the fields that are anonymized in the refreshed target instance.
Data anonymization is a type of information sanitization with the intent of privacy protection. It is a process of
either encrypting or removing personally identifiable information from data sets, so that the people whom the data
describe remains anonymous.
You can anonymize data in your target instance using Instance Refresh. There are different types of anonymizing
your data. The types used in Instance Refresh are:
• Deterministic Anonymization, in this type of anonymization, the actual value is replaced with any alpha-
numeric value in the target instance. For example, If Place of Birth is London, it can be anonymized as 12E3RT.
If the Nationality is Indian, it can be anonymized as 258935.
• Fixed Value, in this type of anonymization, the actual value is replaced with a predefined value
in the target instance. For example, If Email ID is [Link]@[Link], it is anonymized to
dummy@[Link]. If Address1, Address2, and Address3 is 91 Talbot Street, San Lorenzo, CA
94580, it is anonymized as address1, address2, address3.
• Null Value, in this type of anonymization, the actual value is replaced with a blank in the target instance. For
example, the photo of a user is anonymized by keeping it empty in the target instance.
• Random Date In this type of anonymization, the actual date is replaced with a random date. For example, if
Date of Birth is 22-Oct-84, it can be anonymized with some other random date as 14-Nov-79.
• Random Gender, in this type of anonymization, the gender is anonymized as Male in the target instance
irrespective of any gender value in the source instance. For example, If the Gender is Female, it is anonymized
as Male. If the Gender is Male, it is still anonymized as Male in the target instance.
• Randomize, in this type of anonymization, any value related to compensation or Benefit rate is anonymized to
a random numeric value. For example, if the employee compensation is 45 it can be anonymized to 23.
• Randomize Percentage, in this type of anonymization, the value related the Employee direct deposit amount
is anonymized to value range from 0 to 100 in the target instance. For example, if the employee direct deposit
amount is 450000 it can be anonymized as 100.
• Based on User Key, in this type of anonymization some of the user management fields are anonymized with
the fixed or null type. The fields are:
• Address fields, where any value in the fields ADDR1, ADDR2, and ADDR3 are anonymized with the value
address1, address2, and address3 respectively.
• Email ID, where any value in the field is anonymized with the value dummy@[Link].
• Gender, irrespective of any gender (Male or Female) in the field is anonymized with the value Male.
• Business phone number and Fax number, is anonymized to any other random number.
• Shuffling Column Values, in this type of anonymization, the actual value of a user in a table can take the value
of some other user from the same column. See the example table before and after anonymization:
Before Anonymization
User ID First Name Last Name Middle Name
After Anonymization
User ID First Name Last Name Middle Name
The table lists all the fields with the generic name that are anonymized for the Recruiting Management, Employee
Central and, User Management fields.
Type of Anonymiza-
Module Generic Field Label Generic Field ID tion Fixed Value Details
User Management User ID | First Name User ID | First Name | Last Shuffling Column Val-
| Last Name | Middle Name | Middle Name ues
Name
Employee Central Date of Birth | Date of Date of Birth | Date of Random Date
Death | Married Since Death | Married Since
Employee Central Email Emergency Contact Email Fixed or Null If an email address is
present, then it is up-
dated to
dummy@successfactor
[Link].
Employee Central Email Is Address Same as Em- Fixed Value If the value is present,
ployee then it is updated to 0
(zero).
Recruiting Candidate Email Post RCM Candidate Profile Fixed Value If an email address is
Conversion Conversion present, then it is up-
dated to
dummy@successfactor
[Link].
Recruiting Candidate Email RCM Candidate Email Ad- Fixed or Null If an email address is
dress present, then it is up-
dated to
dummy@successfactor
[Link].
Recruiting Offer Information RCM Offer Detail Info Fixed or Null If an email address is
present, then it is up-
dated to
dummy@successfactor
[Link].
Recruiting Agency Email RCM Agency Info Fixed or Null If an email address is
present, then it is up-
dated to
dummy@successfactor
[Link].
Recruiting Contact Email RCM Secondary Candi- Fixed or Null If an email address is
date Email present, then it is up-
dated to
dummy@successfactor
[Link].
Onboarding Primary Email RCM Primary Email Fixed or Null If an email address is
present, then it is up-
dated to
dummy@successfactor
[Link].
Note
Some of the previous field names have been merged with new field label names for Recruiting:
Once you receive an email notification with refresh status as Successful, you must perform certain activities.
• Delete the data from the Data Replication Monitor to keep the target instance clean. For more information, see
the Employee Central Data Replication Monitor link in the Related Information section.
• Ensure that the integrated systems that replicate data from HCM Suite run a full sync to keep the data
consistent and integrations working seamlessly.
• Certain jobs are deleted, copied, or restored to the target instance to process the job data based on the
configuration.
For example, certain jobs that don't have an impact on any other integrated systems are copied from the
source to the target instance. After the refresh, these jobs must be scheduled based on the configurations
and data in the refreshed target instance. There are certain jobs, like FTP jobs, that have an impact on other
integrated systems, where the FTP endpoints and credentials on the production instance can be different from
those on the preview instance. In such cases, a backup of the target instance is taken before refreshing it. After
the refresh, all the jobs are restored in the target instance. Jobs scheduled in the source or target but don’t
need to be copied or restored after the refresh are deleted from the target instance.
• Post refresh, references to all the attachments from the source instance are copied to the target instance.
However, the content of all the attachments are replaced with dummy content. If necessary, post refresh, you
can manually upload your attachments. This is applicable only to the attachments that are available in SAP
SuccessFactors HCM suite and not to SAP SuccessFactors Learning.
Note
If the source instance is using a third-party storage provider to store attachments, for example OpenText,
then these attachments aren’t copied from source to target instance, post instance refresh. To view your
company’s document storage vendor, go to Admin Center Configure Document Management .
• Only Employee Profile emails and Recruiting emails (internal and external candidates) are masked as part of
the refresh process. If you've enabled Employee Central in the source instance and have set business emails for
some users, then post refresh, you must import Business email to mask Employee Central - business emails.
This avoids the masked email in user data file (employee profile emails) to be overwritten with live email.
• After your target instance is refreshed successfully, a backup of your target instance (which was taken before
refreshing) is kept for 10 days. This is applicable for both manual refresh and refresh using the Instance Refresh
self-service tool.
• Ensure that the PGP Keys are restored as part of the post refresh activity.
Career Explorer Post refresh, if Career Explorer isn’t available in the target instance, then you must enable
the required permissions to see Career Explorer in the target instance. For more information
on enabling Career Explorer, see the related link section.
• Enable PFS using the same credentials as the source instance. To enable PFS, see the
Enabling Print Forms Service link in the Related Information section.
• Upload the forms. To upload forms, see the Uploading a Document Template link in the
Related Information section.
• Set up DocuSign using the target instance credentials that you noted before refresh.
To set up DocuSign, see the Setting Up DocuSign for Onboarding link the Related
Information section.
• Deploy BPE schema in your target instance. To deploy BPE schema, see the Deploying
Onboarding Process Definition link in the Related Information section.
Post-refresh:
• The Onboarding Dashboard will display copied Onboarding New Hire records from the
source system to the target system.
• All tasks for New Hires will be marked as completed.
• It's recommended that you run the Onboarding Process Closure Job to remove all the
Onboarding processes that are copied from the source instance.
• To reuse the Onboarding processes that are copied from the source instance to the
target instance, it's recommended that you restart or cancel the Onboarding process
from the Onboarding Dashboard by choosing Restart.
Identity Provisioning Service When your target instance SAP SuccessFactors HCM suite is integrated with SAP Cloud
(IPS) Identity Services - Identity Authentication, the Identity Provisioning Service (IPS) admin
must verify IPS template where refreshed target instance is the source system and then
do a manual resync in IPS. This configuration allows users to access the refreshed target
instance. To configure the IPS job with proper user:
• Ensure that all user entities are synched to IAS using IPS. Run a resync job in the source
systems to ensure that the users are synced. See Managing Job Log Jobs from Identity
Provisioning in the Related Information section.
• Before doing the IPS resync, you need to verify IPSADMIN and corresponding per-
missions in the refreshed target instance. See Manage Properties from Identity
Provisioning in the Related Information section.
• If you have set up real-time user sync, you need to verify and update the integration
configuration for the business scenario Real-time User Account Sync from SAP Suc-
cessFactors to SAP IPS. For more information, refer to the Related Information section.
• If there are no users with the permission to export user data with one of the conditions,
perform the corresponding action.
Condition Action
You’re able to log in to the refreshed target Create users with the permission to export
instance. user data. To create users with this permission,
see Granting Permissions and Setting API
Login Exceptions from SAP SuccessFactors
HCM Suite OData API: Developer Guide in
the Related Information section.
No one is able to log in to the refreshed target You can perform one of the following options:
instance. • Your IAS admin must change the login
name of a user in IAS to that of a
known SAP SuccessFactors admin from
the source instance. To change the login
name, see List and Edit User Details
from Identity Authentication in the Re-
lated Information section.
Learning When your Learning Target System is integrated with Identity Authentication and Identity
Provisioning Services (initiated or activated) and user data was synched to Identity Authenti-
cation from Learning prior to refresh, all Learning-only users must be removed from Identity
Authentication and a full sync run to keep the data consistent.
• Ensure that all user entities have User Source System populated.
• Remove Learning-only users by setting [Link] to: username eq "xxx" in Identity
Provisioning> Source Systems> Learning> Properties tab, where “xxx” is a username
that doesn’t exist. On the Jobs tab, select the Run Now action.
Note
If Identity Authentication was activated, a password must be established for a learn-
ing-only user to access the Target system. An Identity Authentication administrator
can set the initial password for existing users. For users created after the refresh,
the Identity Provisioning transformation rule to send mail can be enabled.
When your Learning Target System is integrated with Identity Authentication and Identity
Provisioning Services (initiated or activated), Child applications (Learning sites) in Identity
Authentication will inherit the Learning Application settings. Any overrides required must
be configured in Identity Authentication since each site copied from source will be created
as a new application in Identity Authentication. You can choose to manually delete Identity
Authentication child applications left over from the original target instance data.
If your Learning Target System integration with Identity Authentication and Identity Provi-
sioning Services wasn’t initiated, you can proceed with the setup process if such integration
is needed.
Integration Center Destination settings need to be manually maintained and the integration has to be explicitly
saved.
People Analytics For Stories in People Analytics, run the IPS sync twice. In the first run the IPS will read the
users once and delete the delta users and in the second run, it will create the users correctly
with the new information and Person UUID that came from the source.
If the IPS Sync fails with an Authentication Error, check if the source instance and the target
instance have the same password for the user. If they don't match, you can run a Read job to
confirm if it fails to read users. If yes, update the password in IPS.
Note
If you do not know the password, reset it on SAP SuccessFactors and update it in the IPS
source system and IAS source system.
Fundamentally, users who were already synced before the instance refresh should be re-
moved from SAP Analytics Cloud. New user records in SAP SuccessFactors should sync
successfully. To achieve the correct deletion, creation, and updating of users from the SAP
SuccessFactors tenant after an instance refresh, please review the following steps:
Note
If you're already using SCIM IPS connectors, we strongly recommend migrating to per-
mission-based user sync after an instance refresh. This approach limits user sync to
only those with Report Center permissions. For detailed migration instructions, please
refer to the "Migrating to Permission-Based User Sync for Stories in People Analytics"
topic. You can also check the enablement configurations section in the "Implementing
Design Principle" guide.
• Ensure the refreshed SAP SuccessFactors system doesn't have any duplicate email IDs.
If duplicates exist, update each user with unique email IDs before invoking IPS RESYNC.
• Do not invoke IPS Reset or modify any properties or transformations in the IPS source
or target. Ensure the IPS SAC target properties are updated as mentioned in the "Things
to Know" section, with [Link] set to true.
• Run the IPS RESYNC job two to three times and ensure it completes without any errors.
• With each sync, ensure there are no errors, especially during read operations from the
SAP SuccessFactors source. If there's any error in reading users from the source, IPS
won't delete any users in the connected target systems, such as SAP Analytics Cloud.
Related Information
Download the error log file to find more details on the error status of the instance refresh request.
Prerequisites
Either the View Refresh Requests or the Manage Refresh permission must be enabled.
Context
When the status of your refresh request is in Validation Failed, Completed with Warnings, Failed, or Reverted, the
Instance Refresh tool generates an error log file in which you can find the details of these errors, and the summary
of an instance refresh request. You can download the error log file from the Overview tab of the Instance Refresh
Center page. An email notification is also sent to you providing the details of these errors.
As a pre-validation check, we've also integrated Check Tool in the error log file. With the help of the Check Tool
integration, administrators can fix potential problems and errors in the source instance, before refreshing the target
instance. This avoids replicating the same errors in the target instance, post refresh.
There are two types of errors that can occur during refresh request:
• Technical Errors are the once that you can fix by contacting SAP Cloud Support. As a next step, download the
error log file, and then contact SAP Cloud Support through support ticket and attach the downloaded error log.
• Non-Technical Errors are the ones which you can fix. To know the errors, download the error log file and fix
accordingly.
Procedure
The Instance Management page appears with the Full Copy (Instance Refresh) option selected.
4. Click Next.
A text file is downloaded to your system with the error details. The error log also displays the results of the checks
that were last run using Check Tool.
Note
We recommend that you run the checks using Check Tool just before you submit an instane refresh request and
fix the errors and problems in the source instance to avoid replicating the same issues in the target instance,
post refresh.
Prerequisites
• Either the View Refresh Requests or the Manage Refreshpermission must be enabled.
• The status of the request should be either Scheduled or Validation in Progress.
Procedure
The Instance Management page appears with the Full Copy (Instance Refresh) option selected.
4. Click Next.
Results
The instance refresh request is canceled and the status Cancel is updated in the Overview tab.
Learn about changes to the documentation for Instance Refresh in recent releases.
1H 2025
Added Added information about steps to ap- Approving Production Tenant Refresh
prove production tenant refresh. [page 26]
Added Added information about scheduling re- Creating an Instance Refresh Request
freshes over the weekend using the In- [page 22]
stance Refresh Tool.
Changed Added information about the supported Important Notes while Using the Instance
schema size limit being increased to 650 Refresh Tool [page 6]
GB.
Added Added information on the Do not delete Creating an Instance Refresh Request
global user IDs option. [page 22]
2H 2024
March 14
New We added new information regarding the Things to Know Before Refreshing the
things to know before refreshing a target Target Instance [page 14]
instance for Stories in People Analytics.
New We added new information regarding the Post Refresh Activities [page 36]
post refresh activities for Stories in Peo-
ple Analytics.
October 11
New The Instance Refresh Tool supports de- Deleting an Instance Pair [page 28]
leting invalid instance pairs.
Hyperlinks
Some links are classified by an icon and/or a mouseover text. These links provide additional information.
About the icons:
• Links with the icon : You are entering a Web site that is not hosted by SAP. By using such links, you agree (unless expressly stated otherwise in your agreements
with SAP) to this:
• The content of the linked-to site is not SAP documentation. You may not infer any product claims against SAP based on this information.
• SAP does not agree or disagree with the content on the linked-to site, nor does SAP warrant the availability and correctness. SAP shall not be liable for any
damages caused by the use of such content unless damages have been caused by SAP's gross negligence or willful misconduct.
• Links with the icon : You are leaving the documentation for that particular SAP product or service and are entering an SAP-hosted Web site. By using such links,
you agree that (unless expressly stated otherwise in your agreements with SAP) you may not infer any product claims against SAP based on this information.
Example Code
Any software coding and/or code snippets are examples. They are not for productive use. The example code is only intended to better explain and visualize the syntax and
phrasing rules. SAP does not warrant the correctness and completeness of the example code. SAP shall not be liable for errors or damages caused by the use of example
code unless damages have been caused by SAP's gross negligence or willful misconduct.
Bias-Free Language
SAP supports a culture of diversity and inclusion. Whenever possible, we use unbiased language in our documentation to refer to people of all cultures, ethnicities, genders,
and abilities.
SAP and other SAP products and services mentioned herein as well as
their respective logos are trademarks or registered trademarks of SAP
SE (or an SAP affiliate company) in Germany and other countries. All
other product and service names mentioned are the trademarks of their
respective companies.