Can password for Social Login in SAP Cloud Platform Identity Authentication be deactivated?

[gregorw]

Hello SAP Cloud Platform Identity Authentication Experts,

I've successfully configured the Social Identity Providers in the SAP Cloud Platform Identity Authentication Service. When I now access an applicaiton like the SAP Cloud Platform Portal Service I can use the social login icons i.e. Twitter. After authorising the App I get the following screen.

when I now click "Create New Linked Account" I'm asked for a password:

which is exactly the opposite what I would expect when using a social login. I don't want another password to remember. I want to re-use my Google, Twitter, Facebook or LinkedIn credentials.

Even in the ABAP System I can deactivate Passwords when Single Sign On (SSO) is used:

The ABAP System also allows to set a generated, initial password. This is also missing in the Identity Authentication Service:

In the registration form settings of the SCP ID Service I also see no option to deactivate the question for a password:

Hope that this can be improved.

Best regards
Gregor

[MSo]

Hi Gregor,

it is mandatory to have a local user profile in IAS and link it to a social account. We do not support transient federation.
This is due to the fact that personal data is usually persisted in some way or the other - and it is for legal reasons mandatory to request user's consent to do so.

BR, Marko

[gregorw]

Hi Marko,

I understand and also want a local user profile in IAS, but why does that profile needs a password? And I would think that the consent to store personal data could also be given by the user during the registration process when a checkobx is ticked and the registration is confirmed with the double opt-in mail. Coming from SAP CRM Marketing that is the way to get Marketing Permission from i.e. a Newsletter subscriber.

Best regards
Gregor