Issue with User Creation for SAP Mobile Start

[Skylark]

Hello everyone,

I'm currently facing an issue with the SAP Mobile Start application related to user creation through the Business Technology Platform (BTP). When we create a user via BTP, there seems to be no verification method in place, and therefore users cannot proceed with the process. As a result, if the user is not already an SAP user and is utilizing services like Gmail or Hotmail, they are required to create an SAP Universal ID.

I’m seeking advice on whether there is a solution or a proper approach to handle this situation. Is it mandatory for each employee to create their own SAP Universal ID, or is there an alternative method to simplify this process? For example, when I add an email to BTP, something like sending a link directly to the user's email address to create their account with a password.

Any insights or guidance would be greatly appreciated.

Thank you!

[dennis_koehler · Accepted solution]

Hi @Skylark,

this is Dennis, I'm a consultant working on topics around SAP Mobile Start. 
Please see me answer below: 

From your question it's clear that for now you are using the SAP Default Identity provider (SAP Universal ID) for all the users. This method is usually only used for Admins, as the Universal ID accounts are used to log into the SAP BTP, do the Setup and Admin work on a Global or Subaccount level. 

End-users usually don't access any services via the SAP Default Identity Provider. You would instead use the SAP Cloud Identity Services - Identity Authentication (short IAS). The IAS is SAP's IdP offering for customers. You should have an own IAS tenant in which you create and manage users. This IAS tenant connects to your Subaccount and end-users will login with their IAS accounts. 

It's also possible to make use of a corporate IdP that you might already use in your company. (e.g. Microsoft Entra, Octa...). In this case you would use the IAS as a proxy to your corporate IdP and have end-users logging in via their known account that might already be in use. 

If this is a new topic for you / your company I would recommend to reach out to your SAP Contact or SAP Partner to request help on this. User Management or Security topics should be looked at in more detail to find a fitting solution for your landscape and plan ahead correctly. 

Hope that is helpful! 
Best regards, 
Dennis

[Skylark · Accepted solution]

Thank you Dennis. I appreciate your interest and support.