CF CLI Client Credentials for BTP

[NickChecan]

Hello experts,

My team is using CF CLI to automate some user management tasks in BTP, I wonder though if there is any way to generate a Client ID and Client Secret and avoid the usage of e-mail and password to authenticate these kinds of operations.

I notice through the CF CLI documentation available right here, that it is possible to authenticate these operations through client credentials using the command below. I don't know how to fetch the Client ID and Client Secret through our BTP Cockpit though.

cf auth CLIENT_ID CLIENT_SECRET --client-credentials

We also tried to use the client credentials available through the usage of the Authentication and Trust Management Service just in case, but with no success.

I appreciate any inputs that might be provided!

[reinhard_jaeschke]

We also are dearly in need of the possibility to use the CF API with OAuth client credentials .

[martijndeboer · Accepted solution]

Instead of using client secrets, the recommendation is to configure an IAS tenant as custom platform IdP and authenticate using username/password.

We looked at the option for supporting clientid/secret, but it has to many shortcomings.

See https://blogs.sap.com/2022/12/09/automation-with-the-btp-command-line-interface-logging-in-with-pass... for a sample on how to use IAS for strong authentication to BTP CLI and CF CLI.