Skip to Content
User Experience Insights
Author's profile photo Istvan Bokor

New! Check on one single page all of your Identity Authentication and Identity Provisioning tenants and administrators

As an SAP customer, would you like to see all of your Identity Authentication and Identity Provisioning tenants in one place, with the region, tenant type, creation date, and administrators?

It is now possible! You can use the URL:

https://iamtenants.accounts.cloud.sap/

You need to authenticate with your S user ID (using SAP ID Service), and after successful authentication, we bring you the list to show the SAP Cloud Identity Services tenants belonging to your customer ID!

 

For Identity Authentication you can see all administrators who have Manage Tenant administrator role – so these people are the ones whom you can contact if there is a need to add an additional admin. The list also shows the status of the administrators: new or active.

For Identity Provisioning we currently only show the initial admin – in case you would like to be an Identity Provisioning tenant administrator as well, contact this person.

The users and e-mails are masked if the domain of the authenticated user is different from the domain of the tenant administrators.

Please note, that SAP adds additional administrators, in case existing admin is not available, for example, left the company. Adding additional admin is a self-service and it is exclusively in the hands of the current administrators. Please only raise incidents to SAP if something is wrong with the assigned tenants (for example type/region), or if existing admins are not available anymore. In these cases please specify the reason for the incident. Components: BC-IAM-IDS for Identity Authentication, BC-IAM-IPS for Identity Provisioning.

If you do not remember the password of your administrator account, trigger the Forgot password procedure, as SAP is not resending any activation e-mail.

Good to know

Another thing to recall: to this SAP Cloud Identity Services – Tenants application and to Identity Provisioning you log in with your S user, but Identity Authentication uses a different (your company-owned) user store, and you need to use e-mail addresses to log in. The Administration Console of the Identity Authentication tenant has the pattern: https://<tenant ID>.accounts.ondemand.com/admin

Also, regarding obtaining a new tenant:

Identity Authentication provides one productive and one test tenant per customer, regardless of the number of contracts signed in which Identity Authentication is included or bundled (except for SAP SuccessFactors). For more info, see Tenant Model and Licensing.

The scope of your Identity Provisioning bundle tenant can be extended when you purchase more bundled SAP cloud solutions. In this case, your first bundle tenant will be extended with the newly purchased SAP cloud solution and all the relevant provisioning systems for this solution. You will not get additional tenants (except for SAP SuccessFactors). See Bundle Tenants and Connectors.

———-

KBA 3035908 – How to get the Identity Authentication tenant administrator information?

KBA 2959974 – IPS tenant administrator is unknown / not available for IPS tenant management

Viewing Assigned Tenants and Administrators

Assigned tags

      6 Comments
      You must be Logged on to comment or reply to a post.
      Author's profile photo Tobias Schneider
      Tobias Schneider

      Nice to know, thanks Istvan! 🙂

      Author's profile photo Christian Tapia
      Christian Tapia

      Very useful! Would be nice to have a link to the ".../admin" directly from the app.

      Author's profile photo Lutz Rottmann
      Lutz Rottmann

      Hi Istvan Bokor ,

      this looks like promising functionality. Unfortunately the list stays empty for me (though I am involved in administration of a 2-dgit number of IAS tenants). I guess that I would have to switch customer number like in Cloud Availability Center. But there is no way to switch. The switch is missing.

      Incident? Which component?

      influence.sap.com?

      BR, Lutz

      Author's profile photo Istvan Bokor
      Istvan Bokor
      Blog Post Author

      Hello Lutz,

      The tenants are shown based on customer IDs linked to S user ID. If your e-mail is connected to multiple S user IDs, make sure that at login you use S user ID as an identifier and not e-mail, so that you can see the tenants belonging to the desired customer ID.

      Best regards,
      István

      Author's profile photo Lutz Rottmann
      Lutz Rottmann

      Hi Istvan Bokor ,

      unfortunately it does not work this way in a large group of companies with several customer IDs. Did you get my PM?

      BR, Lutz

      Author's profile photo Istvan Bokor
      Istvan Bokor
      Blog Post Author

      Hi Lutz Rottmann,

      It seems the issue is specific for your user only. We are checking internally, and once we have the finding, we will reply to you via mail.

      Best regards,
      Istvan