Connecting SAP Identity Authentication Service as a proxy to Azure AD using OpenID Connect | Xiting E-Book

In a hybrid SAP landscape, it is a fundamental task to coordinate and centralize access to your different applications and to provide centralized user and authentication management. A well-established central hub responsible for trust, user authentication, and ID provisioning that covers all your SAP (cloud) applications and BTP accounts can be a reality.

In this context, you have probably heard of the SAP Identity Authentication Service (IAS) as part of the SAP Cloud Identity Services (SCI). After all, this central component has now become indispensable. The more important becomes the topic of integration with your existing SAML Identity Provider and leveraging authentication processes, SSO, and security capabilities already in use. After all, user accounts remain dangerous gateways and one of the prime targets for cyber-attacks. A central IAM approach is a must-have nowadays. The more crucial are topics like risk-based authentication, conditional access, MFA/FIDO2, and flexible handling of AuthN/AuthZ claims and NameID formats to ensure the greatest level of flexibility and security.

In case you are new to the topic, we recommend reading the following Xiting blogs first:

• Overview and integration capabilities of SAP IAS
• Using SAP IAS via Proxy Mode in coexistence with your existing Identity Provider

Furthermore, we look forward to informing you about our cloud services, which focus on the area of Identity & Access Management in this blog article. Also, stay tuned as we will launch a new service related to IAM based on the SAP Cloud Identity Services tailored for small and medium-sized businesses without IDM.

Our latest e-book deals with the integration of SAP Identity Authentication Service with your Azure Tenant. We outline this topic in more detail, specifically related to OpenID Connect. At the same time, we cover some basics, explain the functionality, and use cases of the most relevant standards like SAML 2.0, OAuth 2.0, and OpenID Connect. In addition, we provide you with a configuration guideline that provides a deeper insight and supports your identity federation setup between your SAP IAS and Azure tenants.

On behalf of Xiting, we would like to thank you for your support and partnership. We wish you and your loved ones a merry Christmas and a happy holiday season.

Your Xiting IAM team!

READ MORE IN OUR LATEST SAP IAS E-BOOK:

IF YOU WANT TO READ ON, REGISTER HERE AND DOWNLOAD A FULL COPY OF THIS E-BOOK:

• Author
• Recent Posts

Carsten Olt

Managing SAP Security Consultant | SAP Trainer Secure Authentication | SSO | Cloud Security Services at Xiting GmbH

Carsten Olt has been working as a Managing SAP Security Consultant since 2016, responsible for Secure Authentication & SSO and SAP Cloud Security Services at Xiting in Germany. As a member of the IAM team, he is also a team leader who conveys the company's goals and strategies to employees and has organizational responsibility.

With a security-minded approach, Carsten has international project and IT security experience in many industries. He has been working in IT-Security since 2001, specializing in SAP security since 2010. He is a subject matter expert for SAP Single Sign-On 3.0 and a trainer for the WDESSO course. His current focus is on supporting customers in solving authentication and security challenges within hybrid SAP landscapes, as well as designing and implementing holistic authentication concepts. Carsten is an ISACA CISA and a former MCP and RHCE with an ISP background, and he looks at security from different angles. He also translates between SAP and IT security vocabulary.

Carsten has in-depth experience in multi-vendor architectures and MSFT/Azure components, dealing with all the requirements concerning SAML 2.0, OAuth, OpenID Connect, SCIM, X.509 CBA & PKI, MFA, SAP SSO, and Secure Network Communications, Kerberos/SPNEGO, data security and encryption, as well as digital signatures.

Carsten is experienced in SAP on-premises components such as S/4HANA, ABAP, and Java, as well as security solutions like SSO 3.0. Since 2019, he has focused on SAP-Cloudified environments, specifically the SAP Cloud Identity Services and SAP BTP, as well as SaaS integrations concerning IAM. He deals with hybrid SAP security in conjunction with Azure Active Directory, ADDS, ADFS, ADCS, Reverse Proxies/WAF, SAP Web Dispatcher, SAP Cloud Connector, third-party products, and infrastructure components.

Latest posts by Carsten Olt (see all)

• Cloud Integration Made Easy: Xiting Central Workflows (XCW) Meets SAP Cloud - 30. July 2024
• From Nostalgia to Excitement: The Impending End of SAP IDM - 15. March 2024
• 2024 SAP Cloud Identity Services & IAM Portfolio: What’s New? - 23. February 2024