Infor’s Data Obfuscation Feature Makes Masking PII Straightforward

When production data gets copied into a test or training tenant, real employee and candidate information comes along with it. That means names, Social Security numbers, bank details, and pay rates all end up visible in an environment that wasn’t intended to support them.

Thankfully, with Infor’s Data Obfuscation feature, you can easily mask personally identifiable information (PII) automatically and keep it out of your lower environments. Data Obfuscation first became available in June 2026 with limited availability, but we can expect a broader rollout in the near future.

Below we detail a how to get started with the Data Obfuscation process, from initial menu identification in System Administration to choosing specific masking options for each data category.

An important thing to note before opting-in to this functionality: obfuscation can’t be undone. Once sensitive data has been masked, the original values can’t be recovered from that environment, so double-check you’re in your non-production tenant first.

Ready to get started? Read on below to find out how to take advantage of this feature:

Implementing Data Obfuscation Step-by-Step

1. Log in to your target tenant (non-production environment)
2. Navigate to System Administration > Data Obfuscation to access the configuration setup process.
   If the Data Obfuscation menu is System Administration is not displayed, manually run the Create Data Obfuscation Records post-upgrade action
3. Select and configure the masking option for each data category

Employee Tab

• Employee Email Address: Replace the domain portion with a configurable override domain
• Employee Name: Replace with employee number-based names or generate random names
• Employee Birthdate: Generate a date based on the employee’s start date or January 1 of the birth year
• Employee Identification Numbers (SSN, etc.): Replace with all 9s, generate unique invalid numbers, or based on Employee ID
• Employee Alternate ID Numbers: Replace with all 9s or generate unique invalid numbers
• Employee Phone Numbers: Replace with all 9s or generate unique invalid numbers
• Employee Address: Purge, replace with a configured override address, or generate random addresses
• Employee Identification Type: Replace with generate random ID numbers
• Employee Travel Document: Purge or replace with generated invalid document number
• Employee W4: Replace with Mask
• Employee Appraisal: Replace with Mask

Candidate Tab

• Enter the mask domain to replace the original domain
• Candidate Name: Replace with employee number-based names or generate random names
• Candidate Phone Number: Replace with all 9s or generate unique invalid numbers
• Candidate Address: Purge, replace with a configured override address, or generate random addresses
• Candidate Identification Type: Replace with generated random ID numbers
• Candidate Travel Documents: Purge or generate invalid document numbers

Pay Rate & Bank Details Tab

• Bank Account Details: Purge bank-related tables, or populate with fake account/routing numbers
• Pay Rates: Purge, unify all salaries to a single value, or generate random salaries (with options to retain or remove salary structure)

Important Notes:

1. Once data is obfuscated, the original values cannot be recovered from the masked environment.
2. A Post Upgrade Action (Create Data Obfuscation Records) ensures that all HR Organizations have a DataObfuscation setup record created automatically.
3. The masking covers both current records and archive tables to ensure comprehensive data protection.
4. The obfuscation rules cover a comprehensive set of business classes including Employee, Candidate, Work Assignment, Bank Details, Emergency Contacts, and many related export/archive tables.

If you have any additional questions about the Data Obfuscation setup process, or would like to share more about your organization’s specific use case, please reach out to questions@rpic.com to connect with one of our experts.