Authentication against SaaS Provisioning Service API

[former_member194549]

Hi,

we offer various products to customers as SaaS solutions on the BTP.
Now we want product A to call product B. For this we need to check in product A if the tenant has subscribed to product B. For this we would use the API of the SaaS Provisioning Service, more exactly the API /saas-manager/v1/applications (Subscription Operations for App Consumers). This should fulfill the requirement.

However, the question here is what credentials (ClientId & Secret) must be used to create a JWT for this to be possible. This is not possible with the credentails of the SaaS Provisioning Service instance, as the required scope is not included in the token here. This token only includes the following scopes

• subscription.write
• job.read
• subscription.read
• entitlement.read

The credentials of the SaaS Provisioning Service instance also only work against the identity zone of the provider account.

So, how do i get a JWT to call this api to the the information if a tenant has subscribed to a app or not.

Regards
Simon

[Ivan-Mirisola · Accepted solution]

Hi sperstorfer,

Here is the documentation that explains you how to obtain the client credentials for the SaaS API:

https://help.sap.com/docs/BTP/65de2977205c403bbc107264b8eccf4b/6391b5dfe4704c6c8b71a32126828e9c.html

Best regards,
Ivan