LinkedIn Learning and SuccessFactors LMS Deep Integration Guide
SuccessFactors Deep Integration Functionality
Authentication: SAML SSO Identity Provider
Content Discovery: Automated Catalog Sync (All languages)
The LinkedIn Learning and SuccessFactors deep integration configuration involves the following requirements:
An active SuccessFactors LMS instance with BizX suite
An active LinkedIn Learning account
Admin access to LinkedIn Learning
Admin privileges to your SuccessFactors LMS instance
For a quick review of SuccessFactors’ integration benefits and capabilities, click here.
What this Document Tells You
The following diagram illustrates the SuccessFactors and LinkedIn Learning integration process flow:
Single Sign-On (SSO)
During the initial configuration, you can configure LinkedIn Learning and SuccessFactors to establish a secure SAML single sign-on (SSO) connection that ensures seamless and secure access to content. SSO authentication reduces friction for users and administrators by eliminating the need for manual user registration. SSO ensures that learners spend more of their time watching content and less of their time trying to remember usernames and passwords.
Automated Content Catalog Sync
The LinkedIn Learning library contains thousands of courses. Courses are added at a rate of 25-30 courses per week at no extra cost. Traditionally, the administrator of a content discovery platform manually uploads new content on a regular interval. However, the SuccessFactors deep integration uses LinkedIn Learning APIs to dynamically refresh the content library daily. This method ensures new LinkedIn Learning content is available within 24 hours of its release.
LinkedIn Learning connects to SuccessFactors OCN APIs, so LMS admins do not have to manually upload new content packages at regular intervals. After initial setup, LinkedIn Learning uses OCN APIs to dynamically refresh the content library on an automated basis. This ensures new LinkedIn Learning content is available to learners within 24 hours of release. All content titles and descriptions are aggregated and indexed to accommodate keyword searches and support efficient discoverability. SuccessFactors supports automatic syncing of All languages content libraries.
Enabling SAML SSO
LinkedIn Learning and SuccessFactors can be configured to establish a SAML single sign-on (SSO) connection to ensure seamless and secure access to content. You have two configuration options:
Connect to your organization’s identity management solution (Recommended) – If your organization has a centrally-managed identity management solution like Azure AD, Okta, or ADFS, you can configure it to authenticate users into SuccessFactors and LinkedIn Learning. Your IdP must be configured to send the SuccessFactors unique user identifier (also known as BizX UserID) to LinkedIn Learning and SuccessFactors. If user IDs aren’t the same between the two systems, learner activity tracking will not work. To learn more about identifying your SuccessFactors BizX UserID, see the "Identifying your BizX UserID" section in the Appendix. To pursue this option, contact your dedicated LinkedIn Learning Technical Consultant.
Connect directly to SuccessFactors BizX SAML IdP – LinkedIn Learning and SuccessFactors can be configured to establish a SAML single sign-on (SSO) connection. See the "Configuring SAML SSO via SuccessFactors" section of the Appendix.
SuccessFactors API Configuration
For LinkedIn Learning to push new content and learner progress into SuccessFactors LMS, a system user must be provisioned, and API access must be granted. In this section, we will review the steps required to authorize communication between the two systems.
Before proceeding, ensure SSO is configured and fully enabled for yourLinkedIn Learning account. If you enable content syncing before completing the SSO configuration, course launches will fail.
Create OCN Admin Role
To create an OCN admin profile in SuccessFactors, take the following steps:
Log in to the SAP SuccessFactors Learning administration environment for your tenant and go to System Admin > Security > Role Management.
Select Add New.
In the Role ID field, type OCN_ADMIN.
Provide an optional description.
Set the Domain to your preference. If you’re unsure, leave it as the default. If you have questions about this value, contact SuccessFactors.
Set Role Type to “Admin”.
In the learning administration sidebar, select Workflows.
In the Add a Workflow to the Role section, select add one or more from list.
In the Search section, select the checkbox to enable all workflows.
Expand the Learning Management section and select all thirteen workflows below:
Edit item Libraries
Edit Item Finance
Edit Item Cost/Price
Edit Item Custom Fields
Edit Item State
View Item Libraries
View Item Finance
View Item Cost/Price
View Item Custom Fields
Open Content Network Import
Add History Record
- Scroll to the bottom of the page and select Add.
Create System Admin User
To create a system admin user in SuccessFactors, take the following steps:
Log in to the SAP SuccessFactors Learning administration environment for your tenant and go to System Admin > Application Admin > Admin Management.
In the upper right-hand corner of the screen, click Add New.
In the Admin ID field, type “LILADMIN”
Set a password.
Save the admin user.
In the learning administration sidebar, select Assigned Roles.
In the Role ID field, select “OCN_ADMIN”, then click Add.
In the learning administration sidebar, select Summary.
Scroll to the bottom of the page and select Generate a new Client Secret. Reference the newly generated client secret value (the long string of letters and numbers in the red box below) later. Be sure to save it in a secure location.
Note: Do not copy the hashed secret value. The client secret should not contain dollar signs or any special characters.
Obtaining your SuccessFactors Client ID
To obtain your SuccessFactors client ID, take the following steps:
Log in to the SAP SuccessFactors administration for your tenant and go to System Admin > Configuration.
Select OAuth Token Server.
Save the Client ID value to copy into your LinkedIn Learning settings (this will be used in the "Configure LinkedIn Learning OCN Settings” section below).
OCN Property File
To configure the OCN property file, take the following steps:
In the SuccessFactors Learning Administration navigation menu, select Admin Tools.
In left menu, select Configuration. Then select System Configuration.
Find the Open Content Network option in the configuration file and select Edit (pencil and paper icon).
Scroll to the bottom of the configuration file.
Copy and paste the values below into the configuration file:
- If LinkedIn Learning is your first OCN integration, you will need to fill in the three additional parameters. To find the possible values, follow the click paths below:
defaultValues.itemType[default]: References > Learning > Item Types > Do a blank search > choose the necessary item type and add it to the value parameter in the OCN property file.
defaultValues.itemCompletionStatus[default]: References > Learning > Item Completions > Do a blank search > choose the necessary item completion and add it to the value parameter in the OCN property file.
defaultValues.domainID[default]: System Admin > Security > Domains > Do a blank search > choose the default domain where the item would be created and add it to the parameter in the OCN property file.
These values vary per SuccessFactors deployment. LinkedIn can’t provide guidance regarding which values to use. If you have questions, direct them to SuccessFactors support.
For reference, here is a sample configuration:
#This configuration sets the item type.
#This configuration sets the item completion status.
- Click Apply Changes.
OCN Content Synchronization Automatic Process
To automate the OCN content sync process, take the following steps:
Within SuccessFactors Learning Admin, select System Admin.
In the Automatic Processes section, select Open Content Network Content Synchronization.
Enable the Schedule This Process check box**.**
Select the Daily radio button.
In the Time of Day field, specify a time outside of peak usage hours.
Click Apply Changes.
Create a LinkedIn Learning Label
To create a LinkedIn Learning label, take the following steps:
Go to SAP SuccessFactors Learning administration and then go to References > Geography > Labels.
Click Add New.
In Label Type, enter “LABEL”.
In Label ID, type “ProviderLinkedInLearning”.
In Description, type LinkedIn Learning Label.
In Use By dropdown select Both.
Select Assign to All Locales.
For each Active Locale ID, type LinkedIn Learning.
Click Apply Changes.
- To verify the label, within learning administration visit Learning > Content Network and confirm the list of content providers includes
LinkedIn Learning (LINKEDINLEARNING). If you see
null (LINKEDINLEARNING)confirm the label ID created in this section matches the
providers[LINKEDINLEARNING]labelvalue provided in your OCN property file.
Configure LinkedIn Learning OCN Settings
To configure LinkedIn Learning OCN settings, take the following steps:
- In your LinkedIn Learning account, if you are not already in the Admin screen, select Go to Admin > Me > Integrate.
In the side menu, select Configure reporting integrations.
Expand the Configure SuccessFactors (OCN) section.
Click Add integration. The Add SuccessFactors (OCN) integration screen appears.
- In the user type drop down, there are three options:
ID – SAML SSO IdP configured unique user ID (UUID) value for your account. You should select this value if you are using SuccessFactors as your SAML IdP. If you’re using a 3rd Party SSO IdP, you should only select this option once you’ve confirmed your IdP is configured to send the same SSO UUID value to SuccessFactors and LinkedIn Learning. Unless a LinkedIn Learning Technical Consultant explicitly recommends an alternate option, select this value.
Username – SAML SSO custom attribute used solely for communication with external systems. You should select this value if you are using a third party SAML IdP that is configured to send the SuccessFactors UUID value as “username” in the SAML SSO payload.
Email – A user’s work email address value. You should select this value if you are using email as your UUID in both LinkedIn Learning and SuccessFactors.
In the OCN Server field enter your SuccessFactors host name. For example:
In the OAuth Client ID and OAuth Secret fields enter the values copied from the "Create System Admin User" and "Obtaining your SuccessFactors Client ID" sections. Note: SuccessFactor’s Client Secret value should be copied into the OAuth Secret field in the LinkedIn Learning configuration interface. The value should be alphanumeric and should not include dollar signs or special characters.
In the Admin User ID field, enter the value LILADMIN.
The initial content import takes several hours to complete. After the initial import completes, future content imports take place daily in a fraction of the original time. Once the import process completes, we strongly recommend you run another process to associate the content with a library, category, or course length of duration. A monthly audit allows you to continue to import new titles into your LMS and remove corresponding titles from the library when LinkedIn Learning courses retire.
- To begin the content import, click Enable and Sync Content.
Troubleshooting Course Completions
For a completion to be sent back to SuccessFactors, the following conditions must be true:
The learner’s SuccessFactors BizX ID must match the LinkedIn Learning user type value.
The completed course must be imported into SuccessFactors catalog.
The learner must complete a course in full. You can verify the learner has completed the course in LinkedIn Learning by selecting Home > Me > In Progress > Learning History and confirming the “Completed on” date.
If the three above conditions are met, provide your dedicated technical consultant with the following information to further investigate:
The user’s SuccessFactors BizX UserID. To learn more about identifying BizX UserIDs see the "Identifying your BizX UserID" section below.
The user’s LinkedIn Learning Employee ID (SSO ID).
The name of the completed course and the date on which it the learner completed it.
Identifying your BizX UserID
If you opt to connect your organization’s identity management solution to LinkedIn Learning, you must configure it to send the SuccessFactors unique user identifier (also known as BizX ID) to LinkedIn Learning so LinkedIn Learning can communicate course completions back to SuccessFactors. This section describes how to identify your BizX ID.
In the SuccessFactors navigation menu, select Admin Center.
Scroll down to the tools panel and type “Employee Export” and select the top result.
Select Export User File.
Open the CSV file.
The “USERID” column is your BizX ID and must be sent to LinkedIn Learning by your third-party SAML IdP. It is best to share examples of this value with the administrator of your SAML IdP to ensure the correct value is being released in the SAML attribute statement.
Managing SuccessFactors Locales
In SuccessFactors LMS, course titles and descriptions only appear in the locale to which they are populated. If your LinkedIn Learning subscription includes access to multiple languages and locales, you may notice some LinkedIn Learning content appears in search results without a title and description. This means the locale you are searching in doesn’t match the locale of the LinkedIn Learning content.
LinkedIn has no control over how SuccessFactors displays content metadata in the LMS. To request title and description locale defaults, submit a case for SuccessFactors support team.
Configuring SAML SSO via SuccessFactors
In this section, we review how to establish a SAML SSO directly with SuccessFactors (BizX) IdP. SuccessFactors does not provide any basic profile information (like a learner’s first name and last name) which can make reporting in LinkedIn Learning a challenge. You should only pursue this option if your organization doesn’t have a third-party SSO provider or a LinkedIn Learning Technical consultant recommends it.
Note: Use SuccessFactors as an SSO identity provider only if you have no other available option.
Generating Identity Provider Metadata
To generate IdP metadata in SuccessFactors, take the following steps:
In the SuccessFactors navigation menu, select Admin Tools.
In the Administration Tools section, select Learning then Learning Administration.
In the SuccessFactors navigation menu, select System Admin.
In left menu, select Configuration. Then select System Configuration.
Find the BizX option in the configuration file and select View (magnifying glass and paper icon).
Within the property file, scroll down to the SAML Single Sign On section.
Find the metadataProviders.IDP1.value entry. The value should look like the following sample URL:
- Visit the above URL to download the identity provider XML file.
Setting Up Assertion Consumer Service
To configure Assertion Consumer Service in LinkedIn Learning, take the following steps:
- In your LinkedIn Learning account, if you are not already in the Admin screen, select Go to Admin > Me > Authenticate.
- In the Configure single sign-on section, click Add new SSO.
- Select your SSO method (in this case, "SAML").
The Authenticate users with SAML SSO screen appears. Select the Identity provider settings tab, then click Load and copy information from fields.
Click Download file.
- To open a communication with the SuccessFactors team, create a support ticket and copy and paste the SSO configuration values from the LinkedIn Learning interface into the template below.
My organization would like to integrate with LinkedIn Learning via the Open Content Network. To complete the single sign-on setup, a new authorized SP assertion consumer service needs to be configured in your back-end provisioning settings. Below you will find the relevant details provided by LinkedIn Learning for the assertion consumer service configuration:
Assertion Consumer Service (ACS) URL: <insert-your-linkedin-learning-acs-url> Certificate: <insert-your-linkedin-learning-x509-certificate>
Once SuccessFactors support has configured a new assertion consumer service, return to the Authenticate users with SAML SSO screen and click Next.
Select the "Upload XML file" radio button, then click Upload XML file and navigate to the downloaded metadata file, select it and click Open.
In SuccessFactors, select Save SSO configuration > Activate SSO configuration > I’m ready.
In the LinkedIn Learning SSO settings tab, under SAML Request Binding, select "HTTP-Post*".
Under Include Assertion Consumer Service URL, select “Yes”, then click Save.
In the Configure single sign-on screen, set the connection to "Active".
In the bottom right-hand corner of the screen, click the "More Options" icon (...) and select "Edit".
- Toggle Automatically assign licenses to “On”, then click Save.
Verify the SSO Configuration
To verify the success of your SSO configuration, take the following steps:
If you are not already in the Admin screen, select Go to Admin > Me > Authenticate.
In the browser address bar, copy the account ID value. In the example below the account ID is “123456”.
- Construct a SSO URL for testing by pasting the account ID value from the last step into the URL below.
- Copy and paste the SSO URL into your web browser and provide your SuccessFactors credentials when prompted.
Congratulations! Your learners now can access LinkedIn Learning content through their SuccessFactors LMS instance.
If SSO authentication is working as expected, you will be redirected to LinkedIn Learning. If applicable, you may be prompted to login with your LinkedIn credentials before being redirected to the course page.
For additional resources on SuccessFactors integration, click here.
For LinkedIn Learning configuration questions, reach out to your dedicated Customer Success Manager.