Skip to Content

Set Up Trust Between Identity Authentication and SAP Cloud Platform

test
0 %
Set Up Trust Between Identity Authentication and SAP Cloud Platform
Details
// Explore More Tutorials

Set Up Trust Between Identity Authentication and SAP Cloud Platform

Merve Yalcin

02/18/2019

Beginner
25 min.
ABAP Development, ABAP Extensibility, Tutorial, Beginner
Set up trust between identity authentication and SAP Cloud Platform will be explained by using SAML 2.0 Configuration.

You will learn

  • How to set up trust between identity authentication and SAP Cloud Platform
  • How to assign members different roles
  • How to upload metadata

Step 1: Enter SAP Cloud Platform subaccount

Enter the SAP Cloud Platform subaccount as an administrator and expand the Security section.

Enter SAP Cloud Platform Subaccount
Step 2: Edit local service provider

Switch to your trust settings and create your local service provider by editing the not yet existing one.

Edit local service provider
Step 3: Add provider data

Click Generate Key Pair and add following information to your local provider:

Configuration Type Custom
Local Provider Name <platform region s URL>/<subaccount name>
Principal Propagation Bonusplan
Force Authentication Bonusplan (info)
Add provider data

Save your changes.

Step 4: Open identity authentication console

Open the SAP Cloud Platform Identity Authentication Administration Console with:
https://<tenant ID>.subaccounts.ondemand.com/admin
You can also get the URL from your identity authentication tenant registration e-mail.

Enter SAP Cloud Platform identity authentication administration console
Step 5: Add subaccount as application

Choose Applications & Resources and go to Applications. Click + Add on the left hand panel to enter the name of your SAP Cloud Platform subaccount. Save your changes.

Add subaccount as application
Step 6: Configure application's SAML 2.0 trust with subaccount

Click on the newly created application on the left side and then on Trust. Configure the SAML 2.0 trust with SAP Cloud Platform subaccount as a service provider.

Configure application’ s SAML 2.0 trust with subaccount
Step 7: Get metadata of subaccount

Switch again to your SAP Cloud Platform subaccount and open trust settings to download the metadata by clicking Get Metadata. The local provider name will be important in further steps.

Get metadata of subaccount
Step 8: Upload subaccount's metadata as SAML 2.0 trust

Go back to your SAP Cloud Platform Identity Authentication Administration Console and choose SAML 2.0 Configuration. Upload the metadata XML file of your SAP Cloud Platform subaccount. On service provider metadata upload, the fields are populated with the parsed data from the XML file. Save the configuration settings.

Upload subaccount’ s metadata as SAML 2.0 trust
Step 9: Select name ID attribute

Select Name ID Attribute.

Select name ID attribute
Step 10: Set application' s name ID attribute

Choose Login Name and save your changes.

Set application’ s name ID attribute
Step 11: Set application' s identity provider

Switch to Identity Provider and select it.

Set application’ s identity provider
Step 12: Set identity provider

Select sapdev as identity provider and click Save.

Set identity provider
Step 13: Save metadata of identity authentication tenant

Save metadata of your identity authentication tenant on your local file system as an XML file. You can find the tenant at:

https://<tenant ID>.subaccounts.ondemand.com/saml2/metadata
Save metadata of identity authentication Tenant
Step 14: Add subaccount's trusted identity provider

Switch back to your SAP Cloud Platform cockpit and go to your trust settings.

Choose Application Identity Provider to add a trusted identity provider.

Add subaccount’ s trusted identity provider
Step 15: Upload identity tenant's metadata

Upload identity authentication metadata XML file of your identity authentication tenant (Step 13) in the metadata file field. Save your changes.

Upload identity tenant’ s metadata as trusted identity provider

Next Steps

Back to top