Unit 7: SAP BTP: Security Fundamentals

User and access management:

● User administration and integration with on-premise user stores.
● User self-service, for example, password reset, registration, and user profile
maintenance.
● Password and privacy policies.
● and more.

IdP proxy features:

● Reuse of existing SSO infrastructure.
● Federation based on the SAML 2.0 standard.
● and more.

Learn more about SAP Cloud Identity Services - Identity Authentication here: https://
help.sap.com/docs/IDENTITY_AUTHENTICATION?locale=en-US

Key Takeaways Of This Lesson

Applications and services in SAP BTP and even the SAP BTP cockpit do not store user
information. Instead, a redirect for authentication to an Identity Provider (IdP) is required.
SAP ID service is the default identity provider in SAP BTP. For many customers, users might
be stored in corporate identity provider. SAP recommends using SAP Cloud Identity Services
to integrate that. The SAP Cloud Identity Services consist of two services: Identity
Authentication for the authentication & single sign-On and Identity Provisioning service for
the identity lifecycle management.

LESSON SUMMARY
You should now be able to:
● Describe Identity Providers
● Analyze SAP Cloud Identity Services

158 © Copyright. All rights reserved.