How to connect SCP Identity Authentication Service "sci:proxy" Application with OnPremise UME

[former_member205244]

Hi folks,

I want to connect Sap Cloud Platform Identity Authentication Service (formerly known as Cloud Identity) via SCP with our OnPremise corporate user store (UME). In Identity Authentication Service I configuried the teneant settings with the Oauth client created in SCP using the subscription "sci/proxy". According to SAP Help (https://help.hana.ondemand.com/cloud_identity/frameset.htm?461d71c148594608b9c8b6d016e0a0c5.html) I created a destination to our UME backend. The virtual-to-internal host mapping was entered in Cloud Connector and the ping works. Unfortunately SAP documentation misses that point how to map the destination to subscription of "sci/proxy" because it only says destination should match with the value of "com.sap.cloud.security.um.destination_name". But this only works if you deployed that Java application manually with Eclispe to SCP. And enabling the SCP Identity Authentication Add-On service "... will enable the extension service of Identity Authentication named proxy and provided by an SAP Cloud Platform account named sci."

And now I am confused. Somebody can help me? Thanks in advance!

Regards, Markus

[LuisEusa]

Hello,

We are facing same scenario, were you able to set this up? I have exactly the same questions as you had.

Thanks!

Luis

[Former Member]

Hi Markus,

With this feature you configure the authentication mechanism for a specific application. Therefore you cannot avoid deploying a Java application as this is part of the concept.

Please describe what you are trying to achieve.

Thank you,

Emoke

[andres_levano]

Hi, I'm having a similar issue, there is a few documentation for this point, and I'm also lose about the SCI:PROXY subscription. Already enable the SCP Identity Authentication Add-On but I can not find it. Please some clues about it. Thanks in advance.