cancel
Showing results for 
Search instead for 
Did you mean: 

SAC - SSO with IAS as Proxy for Azure AD - Role to Group Mapping

jeffrushlow
Participant
0 Kudos
645

Hello. I have successfully configured SSO for SAC and Datasphere using IAS as a proxy for Azure AD.

I would like to be able to map AD groups to SAC and/or Datasphere roles. I am thinking similar to how the AD groups can be mapped to role collections via BTP cockpit. I have not seen much on this topic. I found a blog post that shows how to map groups in IAS, but that is not exactly what I am looking for. Blog link for reference

SAML SSO and User Management in SAC with SAP Identity Authentication Service | SAP Blogs

Is AD Group to SAC/Datasphere role mapping supported?

Thanks

Jeff

jandepora
Discoverer
0 Kudos

Hello Jeffrey

Could you tell me if the SSO configuration you made with IAS for DataSphere is the same as for SAC?

I ask because we have encountered problems. For SAC the configuration was quite simple, but for DataSphere it seems that we have to do it differently. That is the latest response from SAP.

If you can pass me a contact email I will explain more details.

Thanks

Regards

Javier

pankaj_pabreja
Participant
0 Kudos
Hi there, I am doing the same configuration where BTP role collections are getting mapped to the groups claims and now I need to configure the mapping for SAC. Can you please suggest how did you make it work with SAC when groups claims are already being passed for BTP. How can we add the sac as constant value in the groups claim in addition.

Accepted Solutions (0)

Answers (1)

Answers (1)

Stdwanze
Explorer
0 Kudos
pankaj_pabreja
Participant
0 Kudos
Hi there, I am doing the same configuration where BTP role collections are getting mapped to the groups claims and now I need to configure the mapping for SAC. Can you please suggest how did you make it work with SAC when groups claims are already being passed for BTP. How can we add the sac as constant value in the groups claim in addition.