IAS as proxy

[tskwin]

Hello experts,

I have configured SAP IAS as a proxy to Azure AD.

The groups from Azure AD (Groups Claim) are mapped to SAP BTP under "Role Collections" -> "User Groups"->Object ID from Azure Group.

However, how can I map or synchronize the groups that I have created in IAS to SAP BTP?

Is it to recommended to map  the groups from Azure to IAS ?

Thank you very much.

[mnoe · Accepted solution]

Hello @tskwin 

In BTP you cannot sync groups, mapping the groups to role collection is a manual process and not all groups may required in BTP subaccounts, also you can have more than one identity provider, so syncing groups could get messy.

https://help.sap.com/docs/btp/sap-business-technology-platform/mapping-role-collections-in-subaccoun...

Best regards