Configure Cloud Identity Service
Instantiate Cloud Identity Service (IAS + IPS)
Create an Instance of Cloud Identity service from your BTP Cockpit (Subaccount):
Select plan as default and service type TEST (for non-production scenario)


Set up trust between BTP Subaccount and IAS

Go to Tenant Settings and download Metadata file click on Tenant Settings -> go to Single Sign-On -> Click on SAML 2.0 Configuration -> click on Download Metadata File.

Go to BTP cockpit and upload it, click on – Establish Trust


Go to The application in IAS and set Assertion Attributes and Default Attributes


Groups: Workzone_User_Type_${type}

Final Trust Configuration in BTP Security:
Finally, your BTP Trust Configuration should look like this:

Further information:
Create groups in the Identity Authentication service and assign to the user.


Last updated