How can I configure XS destinations to work with Basic Auth amd a specified IDP in SCP ?

[marcus_schiffer]

Hi,

we have configured an new default SAP IDP (xxx.accounts.hanaondemand.com) for our Cloud on NEO.

In SAP cloud we have JAVA app with role "approle".

In HANA XS we have a destination that is called from a job and shall run the java app.

The destination is configured for basic auth and a user from the sap IDP is given with password. The user has "approle" on cloud.

The destination is called from xs script. But anyway we call the service, we cannot get it working. It will work however with a s-user but not with the user from new default IDP.

We tried with specifying the idp in the service URL (?saml2idp=newIDP) and without, but nothing works for the user.

Either we get "unauthorized" or the destination will call the IDP login screen, which results in a "your browser does not support JAVA" error.

Please advise. Any hints welcome.

[lucasvaccaro]

Hi Marcus,

As I could understand, you have a custom application IDP (Identity Authentication), and you are trying to perform basic authentication to a Java app running on the platform, right? In this case, you can open a support ticket in BC-NEO-SEC-IAM requesting to change the default IDP used for basic auth. See:

https://help.sap.com/viewer/65de2977205c403bbc107264b8eccf4b/Cloud/en-US/4a467239658c437b9e2de6c9ddf...

Best Regards,
Lucas