Cloud identity service SCIM api to retrieve personal information

[davecor]

Using the SCIM api, for example  https://xxxxx.accounts.ondemand.com/scim/Users I'm able to get informations about users and group of the IAS through basic authorization for my admin account, and through  bearer token for a system user. But, if I want to get my personal information, and I'm not an Admin user, but easily a user created into IAS, how can i get my informations? 

There is a particular endpoint to use for get my details?

If I try with the current SCIM andpoint I receive 403.

[MSo · Accepted solution]

As an end user one will not get access to APIs for programmatic access to Identity Authentication.
For end users the user profile page is intended to provide an overview about all the data that is persisted in IAS for a user:  user profile page (e.g. https://accounts.sap.com) and then 'View My Data'.

[MSo]

A usual business user does not have the authorization to invoke IAS APIs.
The personal data of a user is 'exposed' via the user profile page. Simply invoke the IAS tenant URL (e.g. https://xxxxx.accounts.ondemand) and then you end up on your user profile (after successful authentication).
In the top right corner of the profile page there is a button 'View My Data' and you'll get all your user profile data displayed.

[davecor]

Thanks a lot! What you said is true. But consider a specific use case: for instance, all users that I manage via a Cloud Identity Service can log into an application to see a list of books. However, I want to create an API call to return personal information. What is the best way to implement this functionality?

[MSo]

Well it depends on your role and the security concept of your company.

[MSo]

If you're an application developer/admin, then retrieve the user data from the application. And if you're entitled for programmatic access to SCI then the SP user management API will be an option: https://help.sap.com/docs/cloud-identity-services/cloud-identity-services/user-management-rest-api

[isMarkSmith]

Hi there, any idea why the User Management REST API isn't documented in the Business Accellorator Hub? I'm trying to create a CAP service that calls that API and I'm running into some issues (related to Posting).

I'm getting a 415: Unsupported Media Type error only when I call the API in my CAP service. It works fine im Postman. Same headers and payload. 

It would be nice to get more information on this API.