CF CLI Client Credentials for BTP

[NickChecan]

Hello experts,

My team is using CF CLI to automate some user management tasks in BTP, I wonder though if there is any way to generate a Client ID and Client Secret and avoid the usage of e-mail and password to authenticate these kinds of operations.

I notice through the CF CLI documentation available right here, that it is possible to authenticate these operations through client credentials using the command below. I don't know how to fetch the Client ID and Client Secret through our BTP Cockpit though.

cf auth CLIENT_ID CLIENT_SECRET --client-credentials

We also tried to use the client credentials available through the usage of the Authentication and Trust Management Service just in case, but with no success.

I appreciate any inputs that might be provided!

[reinhard_jaeschke]

We also are dearly in need of the possibility to use the CF API with OAuth client credentials .

[martijndeboer · Accepted solution]

Instead of using client secrets, the recommendation is to configure an IAS tenant as custom platform IdP and authenticate using username/password.

We looked at the option for supporting clientid/secret, but it has to many shortcomings.

See https://blogs.sap.com/2022/12/09/automation-with-the-btp-command-line-interface-logging-in-with-pass... for a sample on how to use IAS for strong authentication to BTP CLI and CF CLI.

[gregorw]

Would also be interrested if there is an option to create the OAuth credentials for the CF API.

If you have an Identity Authentication instance configured to authenticate also cockpit users you can at least use users created in IAS instead of SAP ID Service.