Log in to the Cloud Identity Service using an administrator account with Corporate Identity Provider

Hi Folks,

After spending quite some time analyzing this issue, I finally found a solution and thought of sharing it here. Hopefully, this blog will help others resolve the issue quickly.

Requirement

We received a requirement from our client where, similar to SAP Build Work Zone using Corporate AD for authentication, we needed to enable the same authentication mechanism for Administrator Users in SAP Cloud Identity Services (CIS).

Currently, whenever we access the Admin page of Cloud Identity Services, it displays the default username/password login screen, requiring CIS credentials every time.

Example:

https://<tenant-id>.accounts.ondemand.com/admin/

This becomes inconvenient since administrators need to remember separate CIS credentials for every login.

Solution

The following SAP KBA provides guidance for this requirement:

3754534 – How to login to administrator account using Corporate IDP in Cloud Identity Service

As per the KBA, we need to update the authentication configuration for the Administration Console application in SAP Cloud Identity Services.

Steps to Configure

1. Log in to SAP Cloud Identity Services with user having admin access 

   

    

2. Navigate to:
   Applications & Resources → Applications

   

    

3. Scroll down to last and Under System Applications, select:
   “Administration Console”

   

    

4. Go to:
   Trust → Conditional Authentication

   

    

5. Click on Conditional Authentication and Set your Corporate IdP under:
   Default Authentication Identity Provider

   Current Value: Identity Authentication (Due to this it is opening default login page)

   

    

   Updated Value: Azure_dev (Name of our Corporate Identity Provide, you can choose yours which will come in dropdown)

   

    

6. Save the configuration

After saving, wait for around 1–2 minutes for the changes to take effect.

Result

Once the configuration is updated:

• Logout from the current session

• Try accessing the Admin page again

Now, instead of the default CIS login screen, the application will redirect users to the Corporate AD / Corporate IdP login page.

I hope this helps anyone facing the same issue.

Please like or comment if this solution worked for you.

Regards,
Rohit Gera

  Read More Technology Blog Posts by Members articles 

#abap