Question Re: CF CLI Client Credentials for BTP in Technology Q&A

CF CLI Client Credentials for BTP

NickChecan — Wed, 12 Oct 2022 21:17:37 GMT

Hello experts,

My team is using CF CLI to automate some user management tasks in BTP, I wonder though if there is any way to generate a Client ID and Client Secret and avoid the usage of e-mail and password to authenticate these kinds of operations.

I notice through the CF CLI documentation available right here, that it is possible to authenticate these operations through client credentials using the command below. I don't know how to fetch the Client ID and Client Secret through our BTP Cockpit though.

cf auth CLIENT_ID CLIENT_SECRET --client-credentials

We also tried to use the client credentials available through the usage of the Authentication and Trust Management Service just in case, but with no success.

I appreciate any inputs that might be provided!

Re: CF CLI Client Credentials for BTP

gregorw — Thu, 13 Oct 2022 07:04:05 GMT

Would also be interrested if there is an option to create the OAuth credentials for the CF API.

If you have an Identity Authentication instance configured to authenticate also cockpit users you can at least use users created in IAS instead of SAP ID Service.

Re: CF CLI Client Credentials for BTP

reinhard_jaeschke — Mon, 13 Feb 2023 13:55:46 GMT

We also are dearly in need of the possibility to use the CF API with OAuth client credentials .

Re: CF CLI Client Credentials for BTP

martijndeboer — Thu, 23 Mar 2023 19:25:57 GMT

Instead of using client secrets, the recommendation is to configure an IAS tenant as custom platform IdP and authenticate using username/password.

We looked at the option for supporting clientid/secret, but it has to many shortcomings.

See https://blogs.sap.com/2022/12/09/automation-with-the-btp-command-line-interface-logging-in-with-passcodes/ for a sample on how to use IAS for strong authentication to BTP CLI and CF CLI.