diff --git a/connection-guides/lms/sapsuccessfactors.mdx b/connection-guides/lms/sapsuccessfactors.mdx
index cf45863..a1fd159 100644
--- a/connection-guides/lms/sapsuccessfactors.mdx
+++ b/connection-guides/lms/sapsuccessfactors.mdx
@@ -14,6 +14,7 @@ flow you follow will depend on your use case.
- If you are working with an external LXB/LMS to pull data into your SAP instance, you will need to follow the Authentication Flow 1.
- If you are working with an external content provider to pull external content into your SAP instance, you will need to follow the Authentication Flow 2.
+- If you need to write data to your SAP instance using Platform Token Server Authentication, you will need to follow the Authentication Flow 3.
# Authentication Flow 1: Linking your SAP instance library to an external LXB/LMS to pull data
@@ -499,7 +500,190 @@ The SSO configuration should use the following approach:
-## Linking your Account
+# Authentication Flow 3: Platform Token Server Authentication (Write-Only)
+
+
+ This authentication method is **write-only** and is used when you need to write data to your SAP SuccessFactors instance using OAuth2 with X.509 certificates.
+
+
+## Locating API Server
+
+
+
+ SAP uses multiple API server addresses. You will need to look up the API server that corresponds to your tenant domain on this [table](https://help.sap.com/docs/SAP_SUCCESSFACTORS_PLATFORM/d599f15995d348a1b45ba5603e2aba9b/af2b8d5437494b12be88fe374eba75b6.html) under the `API Server` column.
+
+ For example, if your domain was `https://pmsalesdemo8.successfactors.com/` you would search for `salesdemo8` in the table.
+
+
+ 
+
+
+ Copy the value in the `API Server` column (remove the final forward-slash `/`). In this example, the value would be `https://apisalesdemo8.successfactors.com`.
+
+ Use this value as the `API Server` value when connecting SAP SuccessFactors to StackOne.
+
+
+
+### Finding the Learning Server URL
+
+
+
+ Log into SAP SuccessFactors.
+
+
+ Type Learning Administration in the search bar and select the Learning Administration module.
+
+
+ Look in the browser address bar for the URL and save the address.
+
+ 
+
+ In this case: https://sfcpart000906.scdemo.successfactors.com/ is the access point.
+
+ Use this value as the `Learning Domain URL` value when connecting SAP SuccessFactors to StackOne.
+
+
+
+## Finding Username
+
+
+
+ Login to SAP SuccessFactors.
+
+
+
+ Select your profile image in the upper right-hand corner of the screen.
+
+ Your username is the value in parenthesis. Copy this value and note it as your `Username`.
+
+
+ 
+
+
+
+
+## Finding Company ID
+
+
+
+ Within the same dropdown from the previous step, select the Show version information option.
+
+
+
+ Within the modal that appears, you will see `Company ID`. Copy and note down this value.
+
+
+ 
+
+
+
+
+## Registering a new Client Application
+
+
+
+ In the upper right search bar, search for Manage OAuth2 Client Applications and select the option under Actions.
+
+
+ 
+
+
+
+
+ Select Register Client Application.
+
+
+
+ Enter an Application Name, e.g. `StackOne`.
+
+ Enter an Application URL. Note: This can be any URL and is not used in this integration.
+
+
+ 
+
+
+
+
+## Generating X.509 Certificate
+
+
+
+ Press the Generate X.509 Certificate button.
+
+ Enter any Common Name(CN) for the certificate, e.g. `StackOne OAuth2`.
+
+
+ 
+
+
+
+
+ Press Generate.
+
+ Copy the value inside the X.509 Certificate section.
+
+
+ 
+
+
+
+
+## Downloading Private Key
+
+
+
+ Press the Download button.
+
+ ❗Caution: The downloaded file contains your private key. This should be handled securely, and this local file should be deleted after your account has been linked.
+
+
+
+ Select and copy the long string of characters between -----BEGIN ENCRYPTED PRIVATE KEY----- and -----END ENCRYPTED PRIVATE KEY-----
+
+ This value is your Private Key. Please keep it safe!
+
+
+
+## Finding API Key
+
+
+
+ Your API Key is displayed on the Manage OAuth2 Client Applications screen above your X.509 Certificate.
+
+
+ 
+
+
+
+
+## Locating Learning Content Provider
+
+
+
+ Identify the Learning Content Provider name that will be used when connecting the account:
+
+ - If you previously configured OCN in Authentication Flow 2, use the provider name from your OCN property file.
+ - If you have not configured OCN (for example, you are only using Authentication Flow 3), use the provider name as it appears in SAP SuccessFactors Learning or as provided by your content provider.
+
+
+
+## Connecting Your Account
+
+
+
+ Upon reaching the Link Account page, enter the gathered details and proceed by clicking the `Connect` button.
+
+
+ 
+
+
+
+
+
+Note: The integration may take up to 15 minutes to initially authenticate once the account has been connected. In the meantime, requests will return a 401: Unauthorized response.
+
+
+## Linking your Account (Flows 1 & 2)