How to access or activate SAP Cloud Platform Identity Authentication

[former_member654580]

Hello experts

In order to create the administrator user, (once the PRD tenant is received) it is required to authenticate with SAP Cloud Platform Identity Authentication

But I notice that SAP provides two additional URLs:

1.- Connected identity authentication service

sin-scpia.jpg

2.- Connected identity provisioning service

sin-scpia-2.jpg

But which one should I use?

What is the difference between those two applications?

Which user should be logged in if SAP delivered only one, should the same initial technical user be used?

The SAP Cloud Platform Identity Authentication does not come ready, should a particular configuration or installation be done?

Best regards

Elio C

[SCHNEIDERT · Accepted solution]

Hi Elio,

the user who gets the Provisioning email of Identity Authentication Service is able to login as the first administrator. He can then create other administrators or users there. The integration to SMC should be preconfigured by SAP.

The Identity Provisioning Service can be used to transport users from one Source System (e.g. SMC) to another Target System (e.g. IAS). So with that you can create Jobs that fetche the created users from the system and creates in in the other one. But it is not needed for Authentication.

In SAP Marketing Cloud your first login is done with the Technical User and the Password provided by SAP. With that user you create your first Employee and an Administrator User (with Username, email-Address, and so on) for him using "Maintain Employees" and "Maintain Business Users" apps. You assign the needed roles to him. The steps are the same like in the Q-System.

On your first Screenshot it seems that you try only to login to the IAS for editing a user profile. With the addition "/admin" in the URL https://IAS-ID.accounts.ondemand.com/admin/ you can login to the Admin Console of IAS. Here you have to create the user corresponding to Admin you created in SAP Marketing Cloud (Username in SMC should be the Login Name in IAS).

Check also the Onboarding Guide.

Hope that helps. Let me know if you need further assistance concerning configuration of IAS, IPS or SMC.

BR Tobias

[former_member654580]

Hi schneidert

I hope you are well!!

A doubt, that transport, already means to pass all the configuration?

If some configuration was missing, can you no longer include Go Live?

I ask this because the integrations team has problems integrating SMC with SAP Analytics, and I have that pending.

Best regards

Elio C.

[SCHNEIDERT]

Hi eliocentenob,

yes the transport in the Manage Your Solution app means to transport all of the configuration settings (like Marketing Areas, Interaction Types, Contact Functions, and so on...). But after the first transport you can then create a Change Project (as said in my answer before) and adapt the configuration settings according to your needs.

So for example you can later add new Interaction Types that come to the P-System with the next transport.

Remember that other things like Custom Fields have to be transported with another app (Export Software Collection).

Of course you cannot undo the changes as soon as they have been transported because customizing entries cannot be deleted (only deactivated).

Hope that makes it a little bit clearer.
BR Tobias

[SCHNEIDERT]

Hi eliocentenob,

good that you found the SAP Note. So it seems that you first have to do the Transport and can then create the Employee.

Did you already do the first Transport of Configuration Settings to P-System? I also thought this is done automatically with ordering the production system. But in your case for me it looks like the Configuration Settings have to be transported. So, under "Configure Your Solution" set all the settings to confirmed again and transport them to P-System.

After the first Transport is done you should be able to see the "Create Change Project" button in the upper half of the screen (under the text of the "Realize" phase).

And according to the SAP Note 2839778 the creation of the first Employee should work. Let me know if I can give you any further input. If that way doesn't work, there's maybe an other issue and you have to open an incident. But first check again if you are able to transport the settings to P-System.

BR Tobias

[former_member654580]

Hola schneidert

I found a note: 2839778 - Cannot create user in Maintain Employee in the newly requested P system -- https://launchpad.support.sap.com/#/notes/2839778

Determination of Business Partner Role for category BUP003 failed or Interval EE does not exist for object BU_PARTNER BUCF. for image error 03.

https://go.support.sap.com/roadmapviewer/#/group/BE47098A-617A-43EF-A27E-DFD801D70483/roadmap/IMPS4H...

I see there is a kind of initial loading or transport

I understood that the transport of configurations is done after having the first user administrator

But, within the note process ask Create a change project by clicking the Create Change Project button in the Manage Your Solution app, but button is not in the APP.

Saludos

Elio C.

[maik_bosch]

Hi ELio,

I remember we had a similar issue and SAP had to solve it via Incident in the backend

Best regards

Maik

[former_member654580]

Hi schneidert

I hope you are well !!

With the addition "/ admin" in the URL provided by SAP for the Connected Identity Authentication Service the Main screen changed me to Administration Console.

before:

sin-scpia.jpg

very similar to the one used to access: SAP Cloud Platform Identity Authentication.

after:

sin-scpia-3.jpg

However, I cannot access, which user to use?

From what I understand, I must create the first administrator user, as it was done in a test environment, and that user must be used to enter the administration console, but doing that process generated the following error:

error-creacion-de-user-admin-prd.jpg

Best regads

Elio C.

[SCHNEIDERT]

Hi eliocentenob,

have you been the one that got the provisioning email ("Activate Your Account") from SAP? The one who gets that initial email is able to activate his Account for the IAS Admin Console and is therefore the first Administrator and able to log in.

The failing employee creation is a bit strange. It seems that the system tries to create a Business Partner for your Employee. I have to check that in our system and try to reproduce that issue to analyze further.

BR Tobias