Can I extend the self-registration for SAP Cloud Identity Services

[renejurmann]

Hi experts,

I want to enable the self-registration for an application registered in our SAP Cloud Identity Services tenant. Activating the self-registration and adding some information available in "User Attributes for Access" is fine and working.

But, we also want the user to enter the "Login name" (which we use as SSO attribute). Unfortunately, we cannot add this to the self-registration form. As we only allow internal users we could probably call an API to determine the Login name based on the email address as this would be available in a central repository.

How can ensure that the login name is set on self registration (either by entering in the according form or by some logic) before the first real login of the user?

[gregorw]

You say that you only allow internal users. Do such users exist in any other Corporate Identity Provider?

[renejurmann]

Yes, they do but we have not yet connected the Corporate Identity Provider with our Cloud Identity Service. This is still on our roadmap. Reason we have not yet connected: There is no group mapping available in our Corporate Identity Provider, so we nonetheless would required users in the Cloud Identity Service. But we do not want to provision all users from the corporate identity provider to the identity directory within the IAS. If there would be an option to automatically create a user in IAS on first login via the corporate identity provider, that might be an option

[gregorw]

Why do you not want to provision the users? And why do you not integrate to the Corporate IdP? With the current setup the users will have two passwords.

[renejurmann]

because of slow internal processes and different responsibilities (I will not go in more details) I'm trying to find alternative solutions...