Please clarify if there is any hard limitation in using BTP's "Default Identity Provider" for Cloud ALM (SAP ID / UID)

[piejanssens]

Issue description

To avoid double maintenance of user accounts in IAS and ALM, I am considering not using IAS and instead SAP UID based login.

Feedback Type (Optional)

clarity

Page Title on SAP Help Portal (prefilled)

Troubleshooting and FAQ

Page URL on SAP Help Portal (prefilled)

https://help.sap.com/docs/cloud-alm/setup-administration/troubleshooting-faq

[laurabranitsch]

Hi @piejanssens,
Thanks a lot for your feedback.

There is currently no hard limitation.

However, you should be aware that you will be responsible yourself for the compliance to security policies and that custom policies are not supported in the SAP ID service.
Moreover, many applications on SAP BTP already require the SAP Cloud Identity Services as their identity and access management solution. It is likely that the number of these applications will grow, which will cause a considerable amount of migration efforts on your side.

Therefore, we strongly recommend using an Identity Authentication tenant for SAP Cloud ALM from the start.

For more information on SAP Cloud Identity Services on SAP BTP, refer to the Best Practices for SAP BTP.

[piejanssens]

Thanks. I will use IAS with a proxy to the IdP to avoid maintenance of user identities in IAS' user store.

[sap-doc-bot]

Thank you for your valuable feedback contribution, @piejanssens! So that we can recognize your contribution in SAP Community, please tell us your SAP Community profile URL in a reply to this comment; don't include any other text, just the URL on its own, like this:

https://people.sap.com/your-user-name

Thanks!

[piejanssens]

https://people.sap.com/piejanssens