SAP CDC as OIDC RP

[kajolmaan]

Hi All,

Need help here!

We have a requirement where we need to have a SSO between between SAP CDC and JanRain(CIPM) via OIDC flow. In this case SAP CDC will act as RP and Janrain(CIPM) will act as OP.

I would request you to help me with the below points:

1. Do we need to add any code in CDC screenset? If yes, what is the purpose of the code?

2. How does SAP CDC as OIDC RP flow work (On SAP help portal, the flow is not well described)?

Thank you!

Kajol

[igal_mi]

Hey,

1. The only change is to add the provider to the social widget or just add a button of "Login with JanRain" (not the actual text 🙂 )

2, You can find the flow diagram here:
https://help.sap.com/docs/SAP_CUSTOMER_DATA_CLOUD/8b8d6fffe113457094a17701f63e3d6a/4167508c70b21014b...

Hope this helps,

Igal

[kajolmaan]

Hi Igal,

Thank you so much for your response.

Could you please elaborate a bit more on your 1st point?

I believe, this button 'Login with JanRain' should be added on Login Screen of RP. But I am not allowed to make any changes on the Login screen. Where should I add this button in my case?

Hoping for your reply!

Thanks,

Kajol

[igal_mi]

hi,

You need to update the social widget.

Read more about it here:
https://help.sap.com/docs/SAP_CUSTOMER_DATA_CLOUD/8b8d6fffe113457094a17701f63e3d6a/357052dfff2a4164a...

[kajolmaan]

Hi Igal,

Thank you for your quick response.

My client's requirement is users login to a B2B system(OP) using Janrain, then click a link which takes them a CDC based B2B website(RP) seamlessly.

Could you please let me know is my below understanding, correct? Also, is the bold part correct?

1. After logging into Janrain, user clicks a link “CDC SSO” to initiate the OIDC flow.

2. As soon as user clicks the link, a request is generated and send the request to the OIDC Authorization endpointc8g98.

3. The Authorize endpoint redirects to the OP's Proxy page.

4. Now, Proxy page checks for the existing SSO session, if session found (the user is logged-in).

5. If not logged in, user is prompted to login of CDC which contains this button Login with JanRain, then proceeds to the step 6.

6. The Proxy page redirects to the consentURL.

7. The consentURL redirects back to the Proxy page with the token/code.

8. The Proxy page validates the token.

9. The Proxy page redirects to the Authorize endpoint.

10. The Authorize endpoint redirects back to the CIPM and establish the session in CIPM.

Thank you!Kajol