cancel
Showing results for 
Search instead for 
Did you mean: 

SAP Build Workzone with IAS in proxy Mode and IPS configuration

roccomarino
Explorer

Hi all, We have the following scenario to configure SAP BUILD Workzone Advanced Edition

The customer has IBM ISAM to provision and manage enterprise users and its main requirement is not to duplicate the users also on the BTP or IPS or Workzone.

We created trust between ISAM with the IAS in proxy mode (This allows SAP IAS to act as a proxy for authentication, allowing users to use their ISAM credentials to access)

Customer ISAM users must not be duplicated on Workzone. Simply we mapping groups or permissions from ISAM to IPS so that authenticated users can access Workzone without the need for user duplication.

This is correct way for our scenario? If yes where is some official documentation that explain this scenario, in order to understand well how to map group attribute (present in assertion from ISAM) and workzone group present on IAS?

If is no correct way , can you help us to understand which is the correct configuration in our scenario?

Accepted Solutions (0)

Answers (1)

Answers (1)

florian_buech
Product and Topic Expert
Product and Topic Expert
0 Kudos

Hello Rocco,

Assuming you are using SAP Build Work Zone, advanced edition / SAP SuccessFactors Work Zone, user replication into Work Zone itself is mandatorily required in addition to the users on BTP sub-account level.

Please see here for more details:

User Authentication, Provisioning and Authorization | SAP Help Portal

Explaining the Provisioning of Users and Roles in SAP Build Work

Kind regards,

Florian