📄 Configure Strato API

Configure Strato API

This article shows how admins can configure the credentials required for accessing the Strato API in the Strato Admin Tool.


Requirements

Access to the Strato Admin Tool is required to perform these steps. Contact your Regional Consultants if you need help accessing your Strato Admin Tool.


Instructions

  1. Login to your Strato Admin Tool.



  2. Click the company where your system can be found. Click the edit button beside your system.



  3. Go to the Strato API Configuration section and enter the following details:



    You can enable one or more authentication modes by selecting the checkbox next to each option. This will make their associated fields required.

    • Basic Auth: Requires a valid Strato Username and Password.

      ❌
      SAP SuccessFactors ended maintenance and support for Basic Authentication on June 2, 2025. Basic Authentication will stop working on November 13, 2026.

      If you currently use Basic Authentication, it is strongly recommended to move to OAuth-based authentication as soon as possible.

      Learn more about the Deprecation of Basic Authentication and Third-Party Corporate Identity Provider (IdP) Direct Integration with SAP SuccessFactors.

    • OAuth: Requires a Certificate. You can either generate a new one by clicking the Generate Certificate button, or upload an existing .PEM file by clicking the Upload button.

  4. Hover over the lower right action button, and click Save.


💡

Required fields for each enabled authentication mode will be marked with an asterisk.


Process Outcomes

After following the steps above, an API Key will be generated. This will be used when making an API request to Strato through third-party tools and applications.

When making an API request, Strato will behave as follows:

  • Both Basic and OAuth Enabled: Credentials will be accepted and validated through their respective authentication methods (Basic for Basic authentication and Bearer for OAuth authentication).
  • Only OAuth Enabled: Any Basic authentication attempts will be rejected, even if a Username and Password are defined in the Admin Tool.
  • Only Basic Enabled: Any Bearer authentication attempts will be rejected, even if there is a valid Certificate in the Admin Tool.