Hi experts,
I’ve have setup SAML SSO from BI4 environment to SAP HANA Database. I test it and it works fine.
Now I would like to manage SAP HANA user’s SAML configuration in a bulk way.
I have same userids between ECC, BI4 and HANA systems, so I use report RSUSR_DBMS_USERS to enable SAML authentication for selected Abap users. This works fine too.
It seems that this report doesn’t be able to manage Identity Provider and External Identity by the same way.
Does anybody already manage the same need?
Whet is the best way to do it ?
Thank you for your feedback
Alain
Hi,
I'm not sure what you want to know here. The BI acts as the identity provider here for the interaction. This means you don't have to configure anything beyond the BI and HANA to get the solution to work. The users that have successfully authenticated with the BI can then access data in HANA using their SAML identity.
If you're talking about finding a bulk way in which to add identities?
ALTER USER <USER NAME> ADD IDENTITY '<SAML IDENTITY STRING>' FOR SAML PROVIDER <SAML PROVIDER>;
ALTER USER <USER NAME> ENABLE SAML;
You can also configure a single HANA account to support all users in an external system. You have to add the IDENTITY ANY clause:
ALTER USER <USER NAME> ADD IDENTITY ANY FOR SAML PROVIDER <SAML PROVIDED>;
If this isn't what you're looking for can you describe in more detail what you are looking for here?