Trust between SAP Cloud ABAP Environment and SAPUI5 Cloudfoundry runtime

[#1]

Hi Gurus,

We are working on the following scenario and hit a roadblock.

Scenario -

1. SAPUI5 applications running on cloud foundry runtime.
2. ODATA is developed in ABAP cloud environment and published it as WebAPI.
3. Both instances running on the same subaccount.
4. Trust is setup between subaccount and Identity tenant service.
5. User is available in identity tenant, however, the same user is not available in the ABAP Cloud environment.
6. We need to pass the logged in user details like email / userid to ABAP cloud when consuming the ODATA service from SAPUI5 application.

Problem:

1. I tried with destination with OAUTH2USERTOKEN exchange, however, it is not working.
2. How can I pass the logged in user detail to ABAP cloud ODATA service from identity tenant?

Looking forward to timely community support. Thanks!

Regards

Abhi

[gregorw · Accepted solution]

Dear Abhi,

please check out my question and the answers to: Can I access Access SAML Assertion Attributes in ABAP. The users of the UI5 App must exist in the ABAP Environment before their first access.

Best regards
Gregor

[Abhinav_Sharma1 · Accepted solution]

Dear Gregor,

Thank you for clearing the doubt. It really helped.

For others who want to explore user provisioning in SAP BTP ABAP, I used communication scenario 0093 as we are not using the SAP Cloud provisioning service ( which would definitely made life simpler though).

We have our own registration process for the application and using the communication scenario 0093, we can manage the user lifecycle. .

Regards

Abhi