Enhanced AAD Support for SAP SuccessFactors
SAP SalesForce (SF) is pre-integrated with AAD, but SalesForce is comprised of numerous applications (HR modules). It would be nice if AAD conditional access, user provisioning and MFA rules could be applied differently based on the SF applications.
MFA: It would helpful if AAD supported MFA for SAP SuccessFactors by SuccessFactors module. e.g. ability to force MFA for the Performance Management & Goals application, but not force MFA for the Learning Management System (Training) application.
User Provisioning: It would helpful if AAD supported automated user (de)provisioning of accounts in SAP SuccessFactors, again based on SF application.
The user provisioning integration with SAP SuccessFactors is now in public preview along with the writeback capability. https://techcommunity.microsoft.com/t5/Azure-Active-Directory-Identity/Ring-in-the-New-Year-with-automated-user-provisioning-from-SAP/ba-p/1063603
Regarding the MFA and conditional access requirement, I have created a separate post to track this feature request. Please upvote and provide your feedback here: https://feedback.azure.com/forums/169401-azure-active-directory/suggestions/39283003-enhanced-mfa-support-for-successfactors
Program Manager, Azure Identity