Picked up · Identity DEEN
Microsoft Entra ID and SAP S/4HANA: API access by token exchange, not a second password
community.sap.comStig Praefcke, SAP · 29 April 2026 Standardized OIDC API Access to SAP S/4HANA via SAP API Management and Microsoft Entra ID Go to source ↗
Picked up by Siegfried Zeilinger
·
AI-assisted: editing, translation
Diesen Beitrag auf Deutsch lesen Why it's worth reading
The application signs in with Microsoft Entra ID and now wants to call SAP S/4HANA APIs. The worst answer is a second password. The better one is in this post: API Management as the control point, Identity Authentication exchanging the Entra token via JWT bearer exchange (RFC 7523), and S/4HANA validating it and mapping it to an ABAP user. Prerequisites for every component included.
Entra plus SAP is business as usual. Doing it by the book, sadly, is not – yet.