User Replication from Cloud Identity Service to SAP BTP ABAP Environment

[santoshkumar_kezkhepatmel]

Pre-requisite: You should have an SAP BTP account and should have cloud Identity Service enabled.

Step 1: Log into your Cloud Identity Services account

Goto Identity Provisioning -> Source Systems

Step 2: Click on Add to add a new source system

Step 3: Goto Properties section and maintain the properties as shown below.

URL should be the cloud identity service URL.

Then Click on Save

Step 4: Goto Outbound Certificates Tab and then download the certificate using the download button as shown below

Step 5: Goto Users & Authorizations Tab and Navigate to Administrators.

Step 6: Click on Add -> System as administrator. Enter a system name and configure the authorizations by Turning on/off, then Click on Save

After saving, you should be able to see an option “Configure System Authentication”

Goto to Certificate and drilldown and upload the certificate which was downloaded from step 4 while configuring source systems and save it.

Step 7: Goto Identity Provisioning and select Target Systems

Click on “Add” to add a new Target system to which the users need to be replicated.

Type – SAP BTP ABAP environment

Source system:  Pick the source system which was created in Step 2

Goto Properties section and maintain the below details and the URL should be the BTP ABAP environment to which users are to be replicated.

Step 8:  Goto Outbound certificates and use the download option to download the certificate of Target system

Create a communication Arrangement in the Target ABAP system

Login into SAP BTP ABAP system

Step 9:  Goto Communication Management -> Maintain Communication Users

Create a communication user by maintaining User name and Description

And then Upload the Certificate which was downloaded for Target Systems at Step 8

Step 10: Create a communication system with system ID and System name and mark it as Inbound only

Navigate to Users for Inbound communication and add the communication user created above with Authentication method as SSL Client Certificate

Step 11:  Create a communication Arrangement using communication scenario SAP_COM_0193, select the communication system which was created above.

You can now go back to Cloud Identity service for replicating the users.

Goto identity Provisioning -> Select the Source System and then go to “Jobs” section

Click on Run and it would replicate the users from your Cloud Identity Service to SAP BTP ABAP Environment.