SAP Cloud Platform - Reading SAML 2.0 - User Attributes in HANA

[korayyersel_q]

Dear Experts,

We are trying to apply the following authentication path to our solution: IDP > SCP HTML5 Application > HANA XS

The authentication between these three systems is working properly.

1. Thanks to "Trust Management" Settings on SCP we can access the application via http//xxx.dispatcher.hana.ondemand.com with an IDP user.
2. And thanks to SAML/SSO settings in "XS admin" the same IDP user has an access on HANA resources.
3. Additionally we have defined a custom attribute for the IDP user. It holds the ERP business partner ID. Using this custom attribute we would like apply an analytic privilidge on a calculation view.

We have some ERP Business Partner related information in HANA table. We would like to build a calculation view + xsodata Service to show this data in a HTML5 application. With an analytic privilege we want to make sure that the IDP user can only see entries where his ERP BP ID occurs. But until now we couldn't find a way to do this. We can extend the SAML assertation with the custom attribute. But until now I couldn't find a way to read SAML Information in HANA XS. Is there a way to do this? With select current_user from dummy I can only read current HANA user. But we need information from SAML.

Thanks and regards,

Koray