SAP Cloud Platform - User Management - Best Practice

[#1]

Hi All

I've some question regarding best practice for User management for Corporate User Store. I was going through 2 different blogs:

1. https://blogs.sap.com/2015/07/02/how-to-connect-your-cloud-applications-with-your-corporate-user-sto... - talks about connecting Corporate User store via Cloud Connector

2. https://blogs.sap.com/2016/12/19/part-3-identity-providers-for-hcp-in-practice/ - Talks about connecting Corporate User Store via SAML Endpoints.

These are 2 different ways to connect our Corporate user store. I want to check what are the pros and cons of these 2 approaches and which is the most used approaches across organizations.

Thanks

Puneet

[Ivan-Mirisola]

Hi Puneet,

It is hard to give you the definitive answer for best practices or even for pros and cons.
To me it feels like a doctor prescribing a medicine without having a clue what it is.

In other words, what might be good for you might not be good for others and vice versa.
The links you provided show only a couple of methods of having the identity management in place integrated with your cloud account. There are other ways of doing it for sure. And none of them are "the recommended" way of doing things.

I would suggest you to explore your business requirements across your organization and based on it choose what's best for you.

Talk to your security and network experts to figure out what they demand and what they are already capable of providing in terms of connectivity, standards, security, identity management process, etc. Don't forget to discuss any proposed approach with your end-users - their feed-back is essential to success, so get them involved early in the process.

Best Regards,
Ivan