Identity Provider Proxy

When SAP Cloud Identity Services acts as an Identity Provider Proxy, it sits between a service provider and one or more upstream corporate identity providers, forwarding authentication requests rather than handling them directly. Developers use this pattern to establish trust and federation between SAP Authorization and Trust Management Service and an external identity provider without requiring a direct trust relationship between every service provider and every corporate IdP. This allows a single trust configuration on the SAP BTP side to support multiple upstream identity providers transparently.