## 5.6.4.3.2 Configure the Subaccount as a Trusted Service Provider in SAP SuccessFactors
To configure the subaccount as a trusted service provider in SAP SuccessFactors, you have to create an SAP SuccessFactors Extensibility service instance using the sso-configuration service plan.
## Prerequisites
- Register an SAP SuccessFactors System in a Global Account in SAP BTP [page 2061]
- Configure the Entitlements for the SAP SuccessFactors Extensibility Service [page 2179]
- Configure SAP SuccessFactors as a Trusted Identity Provider in SAP BTP [page 2188]
## Context
With the SAP SuccessFactors Extensibility service instance using the sso-configuration service plan, you can create automatically an assertion consumer service in SAP SuccessFactors for the subaccount in which this service instance is created and a logout URL for each extension application you have deployed in SAP BTP that is extending the functionality of the registered SAP SuccessFactors system. To create an assertion consumer service, you either go to the SAP SuccessFactors Provisioning and create these assertion consumer services manually, or create them automatically in the SAP BTP cockpit via an SAP SuccessFactors Extensibility service instance using the sso-configuration service plan without loggin in to the Provisioning.
To create an assertion consumer service automatically, you create an SAP SuccessFactors Extensibility service instance of plan sso-configuration providing all the necessary information in a JSON file. You can have only one service instance of plan sso-configuration per subaccount.
In the JSON file you provide, in the systemName parameter, you specify the SAP SuccessFactors system where you want the assertion consumer services to be created. Then, you automatically get an assertion consumer service for the subaccount where the service instance is created and assertion consumer services for each logout URL you provided.
If you want to add or delete assertion consumer services with logout URLs, you have to update the SAP SuccessFactors Extensibility service instance of plan sso-configuration and provide a JSON file with the respective information. Before updating the service instance, you have the option to view the JSON that was previously passed.
When updating the service instance:
- All the new assertion consumer services with logout URLs will be created in SAP SuccessFactors.
- All the assertion consumer services with logout URLs that were previously created but are not part of the new JSON file will be deleted.
- All the assertion consumer services with logout URLs that were previously created and are part of the new JSON file will be recreated.
When you delete the SAP SuccessFactors Extensibility service instance of plan sso-configuration , all the assertion consumer services with logout URLs created by this service instance will also be deleted.
##  Note
You cannot bind the service instance of sso-configuration service plan.
## Procedure
1. In the SAP BTP cockpit, navigate to the subaccount in which you want to create a service instance.
2. In the navigation area, choose Services Service Marketplace .
All services available to you appear.
3. To enable the integration with an SAP SuccessFactors system that you have registered in the global account, choose SAP SuccessFactors Extensibility .
4. In the SAP SuccessFactors Extensibility page, choose Create .
5. In the New Instance or Subscription wizard:
- a. In the Service dropdown list, ensure you have selected the SAP SuccessFactors Extensibility service.
- b. In the Plan dropdown list, select the sso-configuration service plan.
- c. In the Runtime Environment dropdown list, select Other .
- d. In the System Name dropdown list, select the SAP SuccessFactors system you have registered.
- e. In the Instance Name field, enter a name for your instance. Choose Next .
- f. To configure the assertion consumer service of the subaccount and the respective applications, specify a JSON file or specify parameters in a JSON format. You can also do this later on. Choose Next .
##  Note
The content of the JSON file must be up to 5120 characters without spaces.
For more information about the structure of the JSON file, see Single Sign-On Configuration JSON File [page 2190].
- g. Choose Create .
## Results
You have the assertion consumer services created in SAP SuccessFactors and have the SSO between your subaccount in SAP BTP and your SAP SuccessFactors system.
You can check the assertion consumer services. To do so, go to the Admin Center of you SAP SuccessFactors company and in the Search field, enter Authorized SP Assertion Consumer Service Settings . This is a read-only information that allows you to verify if all the assertion consumer services that you need are created.