Add users from within a custom Fiori Elements Application using a custom identity provider

[ruchirsaxena]

Hi,

We are in the process of developing a custom cloud foundry application using RAP and Fiori Elements.

Since we will have to add several users who might not otherwise have access to the BTP subaccount, it looks like we will have to incorporate a custom idenity provider.

The Cloud Portal service and Cloud Identity Services have already been subscribed too, and all accesses are in order. The Trust Configuration has also been configured with the custom IAS tenant.

However, we want to be able to add users from within the configuration, and manage access accodingly, for users not otherwise having access to BTP.

Can someone please direct me in the right direction? I have read a few blogs, but could not understand how to add them from within the app.

Thanks in advance.

Regards,

Ruchir

[MSo]

If Cloud Identity Services are subscribed, then an easy way for access control is offered with the Risk-based Authentication concept:
https://help.sap.com/docs/IDENTITY_AUTHENTICATION/6d6d63354d1242d185ab4830fc04feb1/bc52fbf3d59447bbb...
One can then e.g. assign users to groups and then configure rules to grant/prevent access based on groups.

One needs to be aware that the settings in IAS will apply for all applications in that BTP subaccount (if the integration is configured with SAML)