In the first quarter of 2025, we released several new features and enhancements for SAP Cloud Identity Services. Let’s take a closer look!
SAP Cloud Identity Services allows tenant administrators to create and edit application-specific groups via the administration console. While this feature was released at the end of 2024, we added token attribute configuration capabilities in 2025. You can now specify how the local user attributes, configured to be collected by the registration and upgrade forms, are sent to the application. Read Configuring User Attributes from the Identity Directory for detailed information.
You can now enable identity federation for an application to override the identity federation settings on the configured corporate identity provider for the application. For more information, check Configure Identity Federation for Applications.
We added automatic renewal of expired SAML signing certificates. Identity Authentication can automatically update the expired encryption certificate as well as the SAML 2.0 certificate during the first sign-in attempt that fails due to the expired certificate. You can find details in our SAP Help Portal documentation: Configure SAML 2.0 Service Provider.
We extended the Identity Directory service to trigger immediate provisioning of application-specific groups. This enables companies to adopt our reference architecture for cloud-leading identity lifecycles and accelerate adoption of SAP cloud solutions. It also reduces efforts for point-to-point connections. The SAP Help Portal offers additional information.
You can now download and view the details of all entities updated by a provisioning job. For more information, see Manage Provisioning Job Logs and List of Properties.
Want to stay up to date on our services? Join our SAP BTP Security and SAP Cloud Identity Services communities!
Bluesky
