​Self registration for App in SAP Build Work Zone

[MaximFuchs]

Hello everyone,

I have the following scenario:

I have created an OData service in the ABAP environment using the RAP model. I then created an application in BAS that consumes the service. I have deployed this app to the SAP Build Work Zone, standard edition.

An SAP IAS is used to log on to the Work Zone. If I have a user in the IAS and in the ABAP environment, I can access the app.

I would now like external users to be able to access the app by registering themselves first. The user should be created in the IAS and in the ABAP environment (if necessary) and assigned previously defined roles.

Does anyone know how this scenario can be realized?

Thank you and best regards

Maxim

[gregorw · Accepted solution]

Hi Maxim,

unfortunately I'm not aware of any real time sync. But with SAP Identity Provisioning (which is part of SAP Cloud Identity Services) you should be able to create the needed provisioning.

Best Regards
Gregor

[WolfgangJanzen · Accepted solution]

Gregor has already provided the correct answer.
SAP Cloud Identity Services are a group of services, including IAS (Identity Authentication Service) and IPS (Identity Provisioning Service). Self-registration is supported by IAS and using IPS will ensure that the newly created users will then also be created in the connected BTP ABAP environment tenant.

Whilst IAS allows to distinguish between different "User Types" and "Company Relationships", Business Users in BTP ABAP environment tenants are always associated to Business Partners of type "employee".

Best regards, Wolfgang

[MaximFuchs · Accepted solution]

Hello Gregor, hello Wolfgang,

Thank you for your answers.

Could you give me more details on where to configure this?

I have activated self-registration in the IAS. I would now like to automatically assign a group to the user in IAS and then have this user created in the ABAP environment with the corresponding roles.

Best regards,

Maxim