Skip to Content
Product Information
Author's profile photo Marko Sommer

SAP Cloud Identity Services offered as Trial Version


SAP offers different Trial and so-called Free Tier instances for the Business Technology Platform (BTP) with which one can try out BTP with certain limits and time constraints. The SAP Cloud Identity Services (SCI) were so far only offered for BTP Free Tier accounts, however SCI was recently also made available as part of BTP trial accounts.


Service Offering and Limitations

The trial versions of SCI offer almost the full functional scope, just limited to a maximum of 50 users and connectivity plan not being available. Thus, corporate user store scenario or user provisioning from/to on-premise environments will not be possible with trial tenants. But aside from that trial users – and admins – can try out the SAP Cloud Identity Services free of charge.

One can request one SCI tenant per BTP global (trial) account. The SCI tenant can then be used in all subaccounts as application identity provider. The tenant cannot be used as a platform identity provider.

SCI tenant lifetime is bound to the BTP trial account (90 days – see Trial Lifecycle for details); if the BTP trial account is terminated, the corresponding SCI tenant will also be retired.

Landscape: SCI trial tenants are only offered in US East region. Thus, independent from the BTP trial landscape – currently offered in the US and Singapore – SCI tenants will always be deployed in US East region.


Service Request

Here’s how you can request your own SAP Cloud Identity Services trial tenant:

  1. Go to your SAP BTP Trial account
    in case you don’t have one yet, please have a look at the following tutorial.
  2. Navigate to a subaccount -> Service Marketplace -> the Cloud Identity Services default plan should be auto-entitled:
  3. Create a new instance for Cloud Identity Services default plan:

  4. Verify that SCI tenant creation was successful:
  5. You will receive an account activation email for your admin user in the newly created SCI tenant

    and with that user you can access the admin console of your SCI tenant:
  6. Going back to the BTP cockpit:
    you may use the new SCI tenant as application identity provider for your BTP subaccount.
    Go to your BTP trial subaccount -> Security -> Trust Configuration:

    ‘Establish Trust’ button will create a trust configuration from the BTP subaccount to SCI based on the OpenID Connect protocol:

    It is also an option to establish the trust manually based on the SAML protocol.
  7. In the SCI administration console -> Applications & Resources -> Applications you will see the trust configuration that was established by your BTP trial account:
  8. That’s it!
    Applications you deploy in your BTP subaccount can now delegate authentication to the SCI tenant you just created. And in the SCI admin console you may configure the various options for authentication, multi-factor authentication or use SCI just as a proxy for a corporate identity provider that you may have established.





If you ever wanted to get hands-on experience with the SAP Cloud Identity Services, it’s now the right time to do so.

Assigned Tags

      You must be Logged on to comment or reply to a post.
      Author's profile photo Yogananda Muthaiah
      Yogananda Muthaiah

      Great Marko Sommer for Introducing this to BTP Trail account!

      This is really going to be Game changer 🙂

      Author's profile photo Martin Frick
      Martin Frick

      Hi team,

      I can only second Yogananda Muthaiah! This is a real game changer! Thanks for all your hard work making it possible!



      Author's profile photo Nils Lutz
      Nils Lutz

      Hello there,

      +1. Love to see this as a addition to the free-tier world.


      Author's profile photo Chandrashekhar Kolla
      Chandrashekhar Kolla

      Dear Marco

      Thank you!

      Glad to know that SCI made available as part of BTP trial account. However, when I tried to follow the steps as per the blog, the SAP Identity Service is not shown for my trial account. Could you please suggest if any prerequisite need to be followed.

      Just to Add my Sub account is in below location.

      Provider Amazon Web Services (AWS)

      RegionUS East (VA)

      Environment Multi-Environment


      SCI Trial

      Author's profile photo Marko Sommer
      Marko Sommer
      Blog Post Author

      Maybe it's a BTP Trial account created at a time when the Identity Services plan was not yet available for Trial? (SCI plan was enabled beginning of April)

      Author's profile photo Chandrashekhar Kolla
      Chandrashekhar Kolla

      Dear Marko

      Thank you!

      Quite possible, I tried to add the SCI from the Entitlements for my trial subaccount, and this works as expected.

      Steps Followed:

      From the trial account -> Entitlements, Click on Configure Entitlements -> Add Service Plan -> Cloud Identity Services.

      Best Regards


      Author's profile photo Marko Sommer
      Marko Sommer
      Blog Post Author

      Thanks Chandra for confirming!
      By chance I found an old trial account of mine and could activate SCI as you described it:-)
      Best, Marko

      Author's profile photo Kishore Gokara
      Kishore Gokara

      Hello Marko,

      I created an instance for Cloud Identity Services in my trial account. I am getting an error while trying to establish a trust. I am doing this step as part of activation of SAP Build Apps

      Author's profile photo Marko Sommer
      Marko Sommer
      Blog Post Author

      Hi Kishore,
      SAP Build apps integrates with IAS based on OpenID Connect protocol.
      Establishing the trust requires the 'application plan' for the Identity Services.
      Unfortunately this plan is still missing in BTP Trial accounts. We are working on it to add it.

      Author's profile photo Marko Sommer
      Marko Sommer
      Blog Post Author

      Update: Application Plan is meanwhile enabled for BTP Trial accounts.

      Author's profile photo Mokula Nazeer Ahamad
      Mokula Nazeer Ahamad

      Thanks allot Marko for sharing the valuable information with screens, it was really helpful to start of 🙂 as a beginner.

      Just to add on before going to Step 3, one should check if the "Default" is enabled or not? if not enabled only "Application" will be available to choose and it will fail. If Default is not enabled, then we have to go to BTP cockpit -> select your account -> Entitlements -> Configure Entitlements-> search for Cloud Identity Services-> enable Default and then save and proceed with Step 3.

      This is how it worked for me.