OAuth 2.0 SAML Bearer Assertion Flow for SAP Cloud Integration
Tutorials that teach this
- Tutorial Learn the basic concepts required for the integration of SAP BTP, ABAP environment and SAP S/4HANA Cloud, public edition
- Tutorial Connect SAP Web IDE with S/4HANA Cloud System
- Tutorial Integrate SAP BTP ABAP Environment and SAP S/4HANA Cloud, public edition using the OAuth 2.0 SAML Bearer Assertion Flow
- Tutorial xP&A Operational Workforce Planning - Write back plan positions to SAP SuccessFactors
- Tutorial Access Protected SAP Analytics Cloud Resources with OAuth Two-Legged Flow
Docs explaining this concept
Prerequisites
- Concept Configuring SAML Trust Between SAP BTP Subaccount and Identity Provider Configuring SAML trust between an SAP BTP subaccount and an identity provider establishes a federated authentication relationship that allows users to log in to BTP-hosted applications using an external identity provider. A developer uses this configuration to enable single sign-on (SSO) by registering the identity provider as a trusted SAML entity within the subaccount. As described in [Set Up Trust Between SAP Cloud Identity Services and SAP BTP Subaccount](https://developers.sap.com/tutorials/set-up-trust-between-sap-cloud-identity-services-and-sap-btp-subaccount.html), this trust can be established between SAP BTP and SAP Cloud Identity Services, or between SAP BTP and an on-premise system such as SAP S/4HANA.
- Concept OAuth 2.0 Client Credentials Flow
- Concept Communication System Setup in SAP BTP ABAP Environment A **Communication System** in the SAP BTP ABAP Environment is a configuration object that represents an external system or service that the ABAP Environment needs to communicate with, such as another SAP BTP service, an external API, or an on-premise system. Developers use it to define the technical details of the remote endpoint — including host, credentials, and connection settings — as a foundation for establishing secure, managed integrations. It is typically set up alongside a Communication Arrangement and Communication User to enable scenarios like [calling external APIs](https://developers.sap.com/tutorials/abap-environment-external-api.html) or [connecting to on-premise systems via RFC](https://developers.sap.com/tutorials/abap-env-rfc-onpremise.html).
- Concept Outbound Service Call from SAP BTP ABAP Environment
- Concept Communication Arrangement and Scenario Configuration
- Concept SAML 2.0 Metadata Exchange Between Service Provider and Identity Provider
- Concept Basic Authentication for Cloud-to-Cloud Integration
- Concept SAML Trust Setup
- Concept SAML 2.0 Configuration SAML 2.0 Configuration is the process of establishing a trust relationship between a Neo account acting as a SAML Service Provider and an external Identity Provider, enabling federated authentication for SAP BTP applications. Developers use it to [configure the Neo account as a SAML Service Provider and export its SAML metadata](https://help.sap.com/docs/btp/sap-business-technology-platform/107f1caecc554e3998b630d717276b48?locale=en-US&state=PRODUCTION&version=Cloud), as well as to [export the SAML metadata of the Identity Provider](https://help.sap.com/docs/btp/sap-business-technology-platform/5c1479e836c7411cba5f9ec1fdfba369?locale=en-US&state=PRODUCTION&version=Cloud) so that both parties can mutually recognize each other. This setup also involves creating a Neo application as a trusted Service Provider, allowing the application to participate securely in the SAML 2.0 authentication flow.
- Concept OAuth2 Access Token Usage
- Concept Managing Security Material Artifacts in SAP Cloud Integration
- Concept Communication System Configuration
Concepts that build on this
- Concept BTP Destination Configuration (HTTP, RFC, MAIL)
- Concept Principal Propagation
- Concept Integrating SAP BTP ABAP Environment with SAP S/4HANA Cloud Public Edition
- Concept Extracting and Using SAP Cloud Platform Subaccount Signing Certificate
- Concept Connecting SAP Web IDE to SAP S/4HANA Cloud as Communication Partner
- Concept Integration Flow (iFlow) Design and Configuration
- Concept SAP BTP Connectivity Destination Configuration