Custom Identity Provider Setup for SAP BTP Services
A custom identity provider (IdP) setup on SAP BTP allows developers to use an external authentication service — instead of the default SAP ID service — to manage user identities and logon for BTP services. To enable this, a trust relationship of type OpenID Connect must be established between the custom identity provider and the SAP BTP subaccount. Once trust is configured, administrators can create identity provider users for developers in the administration console, and optionally customize the logon link text that appears for each custom identity provider on the login screen.
Tutorials that teach this
Docs explaining this concept
Discovery missions teaching this
Code samples embodying this
Prerequisites
- Concept Configuring SAML Trust Between SAP BTP Subaccount and Identity Provider Configuring SAML trust between an SAP BTP subaccount and an identity provider establishes a federated authentication relationship that allows users to log in to BTP-hosted applications using an external identity provider. A developer uses this configuration to enable single sign-on (SSO) by registering the identity provider as a trusted SAML entity within the subaccount. As described in [Set Up Trust Between SAP Cloud Identity Services and SAP BTP Subaccount](https://developers.sap.com/tutorials/set-up-trust-between-sap-cloud-identity-services-and-sap-btp-subaccount.html), this trust can be established between SAP BTP and SAP Cloud Identity Services, or between SAP BTP and an on-premise system such as SAP S/4HANA.
- Concept SAP BTP Boosters for Automated Account Setup
- Concept Cloud Foundry Space Management (Create, Edit, Delete)