What is Auth0?

Auth0 provides authentication and authorization as a service. You can connect any application (written in any language or on any stack) to Auth0 and define the identity providers you want to use (how you want your users to log in)..

Let’s jump into the use case …

Set up an Auth0 application

Go to https://auth0.com/ and sign up for a new account or login to your existing account.

Once you are logged in, you should end up on the following screen.

Step 1 : Go to Applications from left side Menu

Step 2 : Select Applications for Integration with SAP IAS

Step 3 – You need to enter your SAP IAS URL as Application Login URI

Step 4 – You need to update your SAP IAS Assertion Consumer Service Endpoint
( Login to SAP IAS – Applications & Resources – Tenant Settings – SAML 2.0 Authentication)

Go to your applications – Addons – Download SAML metadata.xml

Go to user Management and create one of your user to test it out.

Create user and which should match same in your SAP IAS tenant.

Set up an SAP IAS for Auth0

Go to Identity Providers – Corporate Identity Provider from left menu and create a Identity Provider as per your choice of name.

Go to SAML 2.0 Configuration and upload the Auth0 SAML 2.0 metadata.xml

Save the configuration

User is created in IAS as per Auth0 and matches with Login Name and UserId

Configuring your application

Login to your SAP IAS with Admin role and Go to Applications & Resources – Applications

You will have to upload SAP Commissions sp.xml into SAML 2.0 Configuration

Go to Conditional Authentication and select Default Identity Provider – Auth0 (which is created through above step from Corporate Identity Provider)

Setup SAP Commission using SAP IAS

Login to your SAP Commissions with your Admin role.

Go to Global Settings – SAML Federation Settings to configure

Upload SAP IAS Metadata.xml from Applications & Resources – Tenant Settings

Users can login through Auth0 and go through assertion validation when users enters credentials.

Final Story: Users will go through Single Page Authentication from Auth0