Customers do not have access to the SAP Enable Now subaccount in BTP and never had. How the SSO setup process works:
1. When SAP Enabled Now system is provisioned, SAP Cloud Ops check if the customer has existing SAP IAS tenant. If there is already one, then we pre-configure it by creating a new application there for SAP Enable Now tenant. If the customer has no IAS tenants, then we provision a new one and pre-configure it.
2. Customer completes the configuration in the SAP IAS tenant (create a corporate Identity Provider and assign it to the SAP Enable Now application there) and submits an OSS message to SAP telling which IAS tenant they decided to use in the end and provide the attribute names they will send in a SAML claim.
3. If the customer decides to connect the SAP Enable Now directly to their Corporate Identity provider, then the customer creates an OSS message to request the SEN tenant metadata. Once the customer completes setup on their Corporate IdP side, they send to SAP the metadata file of the Corporate IdP and provide the attribute names so that the Cloud Ops can proper map them in the SAP Enable Now tenant.
There are several notes which explain the setup process step by step. Go ahead and look for the on SAP for Me portal..
Kind Regards, Anton
Bluesky
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.