Menu
Topic

Identity

IAS, IPS, user management, IdM migration.

Picked up · Identity

Technical users and inactivity rules: the Q2 updates for identity and security

The quarter brings technical users to SAP Cloud Identity Services: at last, a user type of their own for interfaces and jobs, instead of machines posing as employees. Add to that blocking and deleting inactive users, new Identity Provisioning tenants for Neo customers (created automatically from 10 June …

community.sap.com ↗picked up by SigiDEENPicked up · Identity

Microsoft Entra ID and SAP S/4HANA: API access by token exchange, not a second password

The application signs in with Microsoft Entra ID and now wants to call SAP S/4HANA APIs. The worst answer is a second password. The better one is in this post: API Management as the control point, Identity Authentication exchanging the Entra token via JWT bearer exchange (RFC 7523), …

community.sap.com ↗picked up by SigiDEENPicked up · Identity

Deletion in Identity Provisioning: what applies and what takes precedence

Adding things is easy. Deleting them makes people nervous, and in Identity Provisioning rightly so: properties such as ips.delete.existedbefore.entities, the deleteEntity scope, filters and conditions all interact, and precedence decides. Important if SAP AS ABAP is your target system: since 27 January 2026, the job also removes group …

community.sap.com ↗picked up by SigiDEENPicked up · Identity

Identity Provisioning: which connector does what, plus a deadline of 30 November 2026

Identity Provisioning has two connectors that could pass for twins: Identity Authentication (version 2) and Local Identity Directory. The post explains which one is meant for what. And, almost in passing, it mentions that the SCIM API of the old Identity Authentication connector (version 1) will be switched …

community.sap.com ↗picked up by SigiDEEN

Picked up

community.sap.comTechnical users and inactivity rules: the Q2 updates for identity and securitycommunity.sap.comMicrosoft Entra ID and SAP S/4HANA: API access by token exchange, not a second passwordcommunity.sap.comDeletion in Identity Provisioning: what applies and what takes precedencecommunity.sap.comIdentity Provisioning: which connector does what, plus a deadline of 30 November 2026