Cross-cloud usage of SAP identity service?

[Former Member]

Hi,

I've got a question regarding the usage of the sap identity service in a cross-cloud scenario. If I login for instance in https://sapui5.netweaver.ondemand.com/sdk (hosted on hana cloud) and after that trying to login in http://scn.sap.com (not hosted on hana cloud I assume?) I'm automatically logged in without providing my credentials again. However if I first login in scn and after that trying to open the sapui5 sdk page I have to authenticate again. What is the reason for this behavior? Is it possible to be automatically (in the meaning of not having to provide credentials again) logged into a hana cloud application when already authenticated by a non-cloud application which also uses the identity service?

Best regards,

Tobias

[Former Member · Accepted solution]

After spending some time on hana cloud sso I think I can answer that myself - it is possible to automatically log on a cloud app if one is already authenticated by the sap id service and in the trust settings of the cloud app 'Force Authentication' is set to 'Disabled'.