Hi folks,
I want to connect Sap Cloud Platform Identity Authentication Service (formerly known as Cloud Identity) via SCP with our OnPremise corporate user store (UME). In Identity Authentication Service I configuried the teneant settings with the Oauth client created in SCP using the subscription "sci/proxy". According to SAP Help (https://help.hana.ondemand.com/cloud_identity/frameset.htm?461d71c148594608b9c8b6d016e0a0c5.html) I created a destination to our UME backend. The virtual-to-internal host mapping was entered in Cloud Connector and the ping works. Unfortunately SAP documentation misses that point how to map the destination to subscription of "sci/proxy" because it only says destination should match with the value of "com.sap.cloud.security.um.destination_name". But this only works if you deployed that Java application manually with Eclispe to SCP. And enabling the SCP Identity Authentication Add-On service "... will enable the extension service of Identity Authentication named proxy and provided by an SAP Cloud Platform account named sci."
And now I am confused. Somebody can help me? Thanks in advance!
Regards, Markus