How to use onpremise AD as a user account source for Cloud Foundry

[LouisHuang]

Hi. Experts.

My requirement is to use an onpremise AD as my user account source for my Cloud Foundry portal.

I have add my IAS into my CF environment as a IDP.

I also configured user store in the cloud tab of cloud connector. (My cloud connector is connecting to my CF environment)

Next I want to configure corporate user store in my IAS, however I can`t find how to do it for CF environment.

I referenced below blog and it`s for Neo environment.

https://blogs.sap.com/2015/07/02/how-to-connect-your-cloud-applications-with-your-corporate-user-sto...

I have no idea how to deal with below parameters of corporate user store configuration.

• Account
• Client Id
• Client Secrete

Can anyone give me some instructions how to continue this?

I could`t find a document exactly for my requirement, so I referenced several documents to figure out those steps.

If I missed or misunderstood any thing, please let me know.

Thanks a lot.

[FG]

Hello Louis, I have the same requirement and I arrived at exactly the same point as you ...

Everything I found, talks about NEO, even help links from BTP itself.

Did you manage to find a solution?

Thanks

[dvankempen]

For those interested,

Recorded two video tutorials (with blog post) on the topic covering BTP CF environment and Azure AD

• https://blogs.sap.com/2021/02/01/sap-business-technology-platform-security-hands-on-video-tutorials/
• https://blogs.sap.com/2021/02/10/sap-business-technology-platform-security-hands-on-video-tutorials-...

[LouisHuang]

Hi. Manjunath.

Thanks for your reply.

The tutorial is for Azure AD scenario and content of sap note 246375 is for Neo environment.

I have referenced these before. They give me some help but still missing critical part.

[lucasvaccaro]

Hi Louis,

You're going to need a Neo subaccount if you go for the Corporate User Store scenario, since the Identity Authentication Add-on is available on Neo only, regardless of where the end user application is running.

I guess that another option is to use MS ADFS.

Best Regards,
Lucas

[Manjunath]

Check SAP Note 2461375

[Manjunath]

Dear Louis, This might helps you - https://developers.sap.com/mission.cp-azure-ias-single-signon.html