User Experience Insights
New! Check on one single page all of your Identity Authentication and Identity Provisioning tenants and administrators
As an SAP customer, would you like to see all of your Identity Authentication and Identity Provisioning tenants in one place, with the region, tenant type, creation date, and administrators?
It is now possible! You can use the URL:
https://iamtenants.accounts.cloud.sap/
You need to authenticate with your S user ID (using SAP ID Service), and after successful authentication, we bring you the list to show the SAP Cloud Identity Services tenants belonging to your customer ID!
For Identity Authentication you can see all administrators who have Manage Tenant administrator role – so these people are the ones whom you can contact if there is a need to add an additional admin. The list also shows the status of the administrators: new or active.
For Identity Provisioning the same applies – in case you would like to be an Identity Provisioning tenant administrator, contact any of the administrators to add others.
The users and e-mails are masked if the domain of the authenticated user is different from the domain of the tenant administrators.
Please note, that SAP adds additional administrators, in case existing admin is not available, for example, left the company. Adding additional admin is a self-service and it is exclusively in the hands of the current administrators. Please only raise incidents to SAP if something is wrong with the assigned tenants (for example type/region), or if existing admins are not available anymore. In these cases please specify the reason for the incident. Components: BC-IAM-IDS for Identity Authentication, BC-IAM-IPS for Identity Provisioning.
If you do not remember the password of your administrator account, trigger the Forgot password procedure, as SAP is not resending any activation e-mail.
Good to know
Another thing to recall: to this SAP Cloud Identity Services – Tenants application and to Identity Provisioning you log in with your S user, but Identity Authentication uses a different (your company-owned) user store, and you need to use e-mail addresses to log in. The Administration Console of the Identity Authentication tenant has the pattern: https://<tenant ID>.accounts.ondemand.com/admin
Also, regarding obtaining a new tenant:
Identity Authentication provides one productive and one test tenant per customer, regardless of the number of contracts signed in which Identity Authentication is included or bundled (except for SAP SuccessFactors). For more info, see Tenant Model and Licensing.
The scope of your Identity Provisioning bundle tenant can be extended when you purchase more bundled SAP cloud solutions. In this case, your first bundle tenant will be extended with the newly purchased SAP cloud solution and all the relevant provisioning systems for this solution. You will not get additional tenants (except for SAP SuccessFactors). See Bundle Tenants and Connectors.
———-
KBA 3035908 – How to get the Identity Authentication tenant administrator information?
KBA 2959974 – IPS tenant administrator is unknown / not available for IPS tenant management
Nice to know, thanks Istvan! 🙂
Very useful! Would be nice to have a link to the ".../admin" directly from the app.
Hi Istvan Bokor ,
this looks like promising functionality. Unfortunately the list stays empty for me (though I am involved in administration of a 2-dgit number of IAS tenants). I guess that I would have to switch customer number like in Cloud Availability Center. But there is no way to switch. The switch is missing.
Incident? Which component?
influence.sap.com?
BR, Lutz
Hello Lutz,
The tenants are shown based on customer IDs linked to S user ID. If your e-mail is connected to multiple S user IDs, make sure that at login you use S user ID as an identifier and not e-mail, so that you can see the tenants belonging to the desired customer ID.
Best regards,
István
Hi Istvan Bokor ,
unfortunately it does not work this way in a large group of companies with several customer IDs. Did you get my PM?
BR, Lutz
Hi Lutz Rottmann,
It seems the issue is specific for your user only. We are checking internally, and once we have the finding, we will reply to you via mail.
Best regards,
Istvan
Hi Istvan,
Currently we have IAS tenants running on SAP side and IPS tenants in our Global account. We still have not migrated to Cloud Identity Service which will replatform the whole thing - having IAS and IPS services on same infrastructure.
But when I access link https://iamtenants.accounts.cloud.sap/ its header says "Cloud Identity Service". It is little confusing. This dashboard is just a dashboard to show all IAS and IPS tenants (irrespective wheather those are running on same tenant or different place) OR it part of migration approach to host IAS and IPS on same infrastructure?
BR, Hitesh
Hi,
Is it also possible in China mainland area?
I tried using my own applied s user and got a 500 error (I don't have a IAS service).
Hello,
You have not logged in to this portal with S user, but I suppose with I user.
Best regards,
István
Hi Istvan Bokor
What's the difference between type "Test" and type "Additional"?
And is type "Additional" free? i.e. is this the second IAS tenant we can activate for free within our global accounts for testing purposes?
I'm a little confused on the types I see in this list vs what I see when I connect an IAS tenant to our SubAccounts, they don't match. IAS tenants that are listed in this list as "Test" are shown in my Subaccounts as "Trial". And IAS tenants listed as "Additional" in this list are shown as "Enterprise" in my Subaccounts.
Thanks,
Brendan
Hi - just noticed that when you have IPS on combined landscape and haven't nominated any IPS admins from the admin list you get this "This tenant has no registerd administrators. Please open a ticket to request one." But with combined infrastructure this isn't needed. just Admin access to IAS where users can then be flagged as IPS admins.
Sorry - tried to insert pictures but upload not working for some reason.
Cheers,
Chris
Hi Chris,
You are right, if IPS is using IAS host URL, it is unnecessary to open an incident.
IAS admin needs to enable the Manage Identity Provisioning role on the IAS admin user as per the guide in order to provide the IPS_ADMIN role for the IPS console through the IAS administration console, see: https://help.sap.com/viewer/f48e822d6d484fa5ade7dda78b64d9f5/Cloud/en-US/544de9b504214372b4479dc1f6b08cca.html
We are working on corresponding the message in the iamtenants tool with the above.
Best regards,
István