SAC - SSO with IAS as Proxy for Azure AD - Role to Group Mapping

[jeffrushlow]

Hello. I have successfully configured SSO for SAC and Datasphere using IAS as a proxy for Azure AD.

I would like to be able to map AD groups to SAC and/or Datasphere roles. I am thinking similar to how the AD groups can be mapped to role collections via BTP cockpit. I have not seen much on this topic. I found a blog post that shows how to map groups in IAS, but that is not exactly what I am looking for. Blog link for reference

SAML SSO and User Management in SAC with SAP Identity Authentication Service | SAP Blogs

Is AD Group to SAC/Datasphere role mapping supported?

Thanks

Jeff

[jandepora]

Hello Jeffrey

Could you tell me if the SSO configuration you made with IAS for DataSphere is the same as for SAC?

I ask because we have encountered problems. For SAC the configuration was quite simple, but for DataSphere it seems that we have to do it differently. That is the latest response from SAP.

If you can pass me a contact email I will explain more details.

Thanks

Regards

Javier

[pankaj_pabreja]

Hi there, I am doing the same configuration where BTP role collections are getting mapped to the groups claims and now I need to configure the mapping for SAC. Can you please suggest how did you make it work with SAC when groups claims are already being passed for BTP. How can we add the sac as constant value in the groups claim in addition.

[Stdwanze]

https://blogs.sap.com/2020/09/28/saml-sso-and-user-management-in-sac-with-sap-cloud-platform-identit...

[pankaj_pabreja]

Hi there, I am doing the same configuration where BTP role collections are getting mapped to the groups claims and now I need to configure the mapping for SAC. Can you please suggest how did you make it work with SAC when groups claims are already being passed for BTP. How can we add the sac as constant value in the groups claim in addition.