Failsafe or break glass account for SAC

[JaySchwendemann]

Dear all,

we have configured SSO with a corporate IdP against SAC. In order to setup a live connection from SAC to SMC (Marketing Cloud) we would want to change SACs security --> user attribute from User ID to Custom SAML User Mapping.

That being said, our basis fears that we could lock out ourselves from SAC in the process.

Here's my questions

1. Is there a failsafe or break glass account for SAC in case we would mess up the SAML Config so that we still have a posibility to log onto the system albeit having locked us out via SAML?
2. Is there a posibility to request some kind of snap-shot in SAC (from SAP) so that we could effectively roll back to a state before a possible dog's dinner we created

Many thanks and kind regards

Jens

[JaySchwendemann · Accepted solution]

Aaah, SAP has thought about the failsafe / break glass account: https://me.sap.com/notes/2908073

So still one to go about a possible snap shot

Edit:

And also for Backup / Restore theres a note for it https://me.sap.com/notes/3026603/E

So bottom line would be:

• Failsafe / Break glass: Use https://console.<data center>.sapanalytics.cloud/idp-admin/ with the system owner S-User
• Backup / Restore: Have the system owner create a case. There's no guarantee that SAP will perform a restore if the customer cocked-up