How to access SAP BTP cockpit without a global or subaccount member

[Animatron56]

Currently we are moving all users into our corporate IDP.

Therefore someone asked aquestion what would happen, if we would need a global account user in the SAP BTP but dont have to our corporate IDP / or all global account users would somehow lose their credentials.

In this szenario we wouldn 't have access to any global account user.

My first thought was, that we could simply write an incident with prio high to SAP and they could provide us with a new global account user, but then I thought, does the SAP really have an overall key to all BTPs which makes it possible to add new user?

Therefore my question would be, what would happen, if we lose access to all our global account users and we would need new global account users?

Thank you in advance!

Best regards

Benjamin

[cecihuergo · Accepted solution]

If you no longer use SAP ID service and remove the admin rights for the Global Account admins, then that is correct. We cannot get them back.

[cecihuergo]

Hi Benjamin,

I checked with juergen.adolf and he confirmed corporate IdPs are supported. But if you remove admin rights for the GA user (which resides in SAP ID service) then we (as in SAP) can no longer manage or administer data, like for example passwords. So this would then fall under your responsibility.

More information on using corporate IdPs is available here.

Note: this is only supported on Feature Set A. The update to Feature Set B will come in Q3 (see road map explorer).

Hope that helps.

Thanks!

Ceci

[Animatron56]

Hi Cecilia,

am I understanding this correctly, that if we somehow lose access to all our Global Administrators, we won't be able to get them back and would lose access the global accounts of our SAP BTP?

Even the SAP has no change to get the administrators back?

Best regards

Benjamin