Configure Cloud Identity Service

Instantiate Cloud Identity Service (IAS + IPS)

Create an Instance of Cloud Identity service from your BTP Cockpit (Subaccount):

Select plan as default and service type TEST (for non-production scenario)

Set up trust between BTP Subaccount and IAS

Go to Tenant Settings and download Metadata file click on Tenant Settings -> go to Single Sign-On -> Click on SAML 2.0 Configuration -> click on Download Metadata File.

Go to BTP cockpit and upload it, click on – Establish Trust

Go to The application in IAS and set Assertion Attributes and Default Attributes

Groups: Workzone_User_Type_${type}

Final Trust Configuration in BTP Security:

Finally, your BTP Trust Configuration should look like this:

Further information:

SAP Help Portal | SAP Online Helphelp.sap.com

Create groups in the Identity Authentication service and assign to the user.