SCP HTML5 App and OAuth2

[korayyersel_q]

Dear Experts,

According to the SAP Cloud Platform documentation OAuth2 is only supported for the Java applications and not HTML5 applications.

https://help.sap.com/viewer/65de2977205c403bbc107264b8eccf4b/Cloud/en-US/3996010faedc404e97d300f12e3...

"HTML5 applications are protected with SAML2 authentication by default."

We have a HTML5 application on SAP Cloud Platform and we are using SAP Identity Authentication as IDP. Meaning that our authentication is managed by SAML at the moment. Is there chance of enabling OAuth2 authentication parallel to SAML? SAP Identity Authentication shows only Social Identity Providers as an option. As far as I understand OAuth2 is not supported by SAP Identity Authenication. Could we theoretically deploy our HTML5 application as a Java application and apply OAuth2 there?

Thanks and Regards,

Koray

[gregorw]

Could you specify the reasons why you would need OAuth2?

[korayyersel_q]

Hi Gregor,

Currently our HTML5 application is integrated in a SCP Fiori Launchpad. As I wrote for authentication we are using SAP Identity Authentication / SAML2.

There is a 3rd party cockpit solution where we possibly want to integrate our HTML5 applications similar to Fiori Launchpad. This solution supports only OAuth2. That why we are investigating the OAuth2 capabilities of HTML5 applications on SAP Cloud Platform.

Regards,

Koray

[Ivan-Mirisola]

Hi Koray,

According to this documentation it is "possible". However, the HTML5 application doesn't offer this type of authentication by default, according to this documentation. Neo-App.json only allows you to turn on/off saml authentication. So I would imagine you have two options:

(1) To turn off the SAML authentication and then implement your own authentication client within JavaScript.
(2) To deploy your HTML5 module inside a Java Application.

Regards,
Ivan