Hi Team,I'm Currently working on Log On with a Custom Identity Provider to the SAP BTP Cockpit

[Venkat53]

Hi Team,

I'm Currently working on to enable Log On with a Custom Identity Provider to the SAP BTP Cockpit for Platform users. I've performed below steps

1. Enabled Trust from Global account by choosing option Establish Trust. The Trust has been setup to all the subaccounts and created an Application in Cloud identity services as SAP BUSINESS TECHNOLOGY PLATFORM.

2. I've Created a user in IAS ( I took IAS as my user store did not enabled any custom IDP) and assigned the IAS Group which was mapped with Subaccount Viewer role collection in BTP subaccount.

3. When I  try accessing the link(Link enabled in Trust configuration in header Custom IDP for Platform users) I've provided the credentials and when I hit Login button it is redirecting to SAP.COM to login again. 

"https://accounts.sap.com/oauth2/authorize?response_type=code&scope=openid+email+profile&redirect_uri..."

And other thing is it has created the user in SPACE and Org Member node within the cloud foundry Automatically by somehow did not allowed to access the Cockpit via Identity provider.

Could you please help how to resolve the issue.

Thanks in Advance.

[dyaryura]

Hi

I don't think this is possible with trial accounts. The option to establish trust was made available recently but i'm not sure if it works in trial. I've tested the scenario and I have the same issue. I've done this with a non-trial account and works as expected.

For the trial I even had to manually add the callback because it wasn't even in the list and giving an error. So as i said, it might not be possible in trial

Thanks