cancel
Showing results for 
Search instead for 
Did you mean: 

Identity Authentication - how to automate activation of users created by Users Management API?

jozef83
Explorer
0 Kudos

Hello, I have a BTP app connected to the SAP IAS via BTP service "Cloud Identity services" - which means I can only use X509 certificate provided by them to create users mapped to that specific application via Users Management REST API ("https://<tenant ID>.accounts.ondemand.com/service/users" endpoint)

This one - User Management REST API | SAP Help Portal

However, in my scenario, I need to create and activate some new technical users automatically, without an interaction of a living person. And while I can create a new user and retrieve his account activationLink (pointing to the website where the user can set his password), I see no convenient way how to complete this final step - setting of password - without UI.

So I am wondering if someone didn't encounter this issue before and there is some guide/npm package that would help to do it. Or is there some special reason why is user activation via "/service/users" endpoint so tricky? It didnt pose a problem as "/scim/users" endpoint. Thank you

Accepted Solutions (0)

Answers (1)

Answers (1)

yogananda
Product and Topic Expert
Product and Topic Expert
0 Kudos

jozef83

jozef83
Explorer
0 Kudos

yoganandamuthaiah

My problem is that with a certificate generated by Identity service, I cannot create generic users via scim api endpoint ("/scim/users"), I can access only endpoint creating users mapped to my BTP application ("/service/users"), which I am fine with. But this endpoint, unlike scim api, doesnt let you pass the user password to the API in the body of the request.

"/service/users" endpoint gives you an option to provide an invalid email (documentation even suggests to use ****@sap-test.de address) and get user activationLink in the response body - user is created and is in a "New" status. But I am wondering if there is a way to automate the following user activation process, because I cannot manually click on those links and set password in the UI.