Use Trust Configuration to establish trust with your tenant in SAP Cloud Identity Services, which serves as your identity provider.
Once established, SAP Cloud Identity Services automatically creates an application in its administration console, naming it with the prefix “SAP BTP subaccount”
The following link will help you to Check that your Cloud identity service tenants are enabled: iamtenants.accounts.cloud.sap
Default Identity Provider
A default identity provider is shown in the Trust Configuration. It is created automatically when you create a global account or subaccount.
In SAP BTP, the Default Identity Provider acts as the starting point for authenticating users into your global or subaccount environment. By default, this is the SAP ID Service, which allows users (such as S-users) to log in using their SAP credentials. This setup provides SSO (Single Sign-On) capabilities, meaning users can move across services in BTP without needing to reauthenticate.
- For example, if you log in with your S-user to the SAP Support Portal, you can access the SAP BTP Cockpit without having to log in again.
Establish trust with a tenant of Cloud identity service
- If you click ‘Establish Trust’ button, the tenant of your cloud identity service will appear.
- For a good single sign-on experience, choose the same domain for all BTP accounts and non-BTP applications.
- Configure the Prameters.
For more information follow the link: Configure Trust to the Identity Authentication Tenant | SAP Help Portal.
Once the tenant has been established, the custom identity provider will appear as shown above.
After that, the account that first activated the Cloud Identity Service in BTP will have access to the custom identity provider.
Alternatively, you can check the email address of the person who originally requested the tenant.
The customized identity service provides an authentication provider like the one shown above.
It uses a different account from the default identity provider, which relies on S-users.
When you establish with tenant in the subaccount, the same BTP subaccount will shown in the Cloud identity Services admin console, such as “das-ias (Subaccount)”.