3

Using Multiple Identity Providers in SAP HANA Cloud Administration Tooling

 3 years ago
source link: https://blogs.sap.com/2021/09/09/using-multiple-identity-providers-in-sap-hana-cloud-administration-tooling/
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
neoserver,ios ssh client
September 9, 2021 2 minute read

Using Multiple Identity Providers in SAP HANA Cloud Administration Tooling

Recently, we introduced support for multiple identity providers (IdPs) in the SAP HANA Cloud administration tools (SAP HANA Cloud Central, SAP HANA cockpit, and SAP HANA database explorer). The benefit of using a custom IdP is that SAP HANA Cloud users can now be authenticated by their company’s IdP, as opposed to authentication via SAP ID Service. An identity providercreates and manages an organization’s user identity and associated identity attributes. With the user’s consent, IdPs offer authentication services to websites, applications, and other services by federating the identity and authenticating an end-user to the service provider using the identity the IdP manages, but without sharing actual login details. The basic mechanism of using custom IdP is as follows:

  1. User tries to access Application1 or Application2.
  2. Application1 or Application2 sends an authentication request to the Identity Authentication Service.
  3. Identity Authentication acts as a proxy and forwards the request to corporate IdP.
  4. Corporate IdP logs on the user.
  5. Corporate IdP returns authentication response to Identity Authentication.
  6. Identity Authentication returns authentication response to Application1 or Application2.

IDP7.png

Prerequisites for the setup (This is a customer-specific procedure. Steps are going to be different depending on the IdP you use. In my setup, I followed the following steps to configure custom IdP to login to the cockpit. So, please be informed that these steps are just for reference and you may need to do it differently to configure custom IdP in your environment):

IDP5-1.png

Let’s conclude with an example by logging into the SAP HANA cockpit tool with the custom IdP that I’ve created:

  • Complete the space setup as mentioned above and then go to the SAP BTP Cockpit.
  • Create an SAP HANA database instance in your space.
  • Go to actions and open the instance in the SAP HANA cockpit.
  • Sign in using your custom IdP.
  • Enter the username and password you used to activate the account and there you go.

IDP6-1.png

Congratulations! You have successfully logged in using your custom IdP.

Summary

All SAP HANA Cloud users can now configure multiple IdPs to login to the SAP HANA Cloud administration tools and can be authenticated by their own custom IdPs. This would provide users a unified authorization layer and help them design solutions to their unique business problems.

If you’ve found this blog post useful, feel free to give it a like or comment. Questions are welcome in the comment section below or on the community questions page.


report

Recommend

About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK