How to import Master Data Texts for Identity Authentication Service on SAP BTP

[renejurmann]

Hi experts,

is there a way to (automatically) import master data texts for the Identity Authentication Service on SAP BTP?

All I have found is a manual configuration via the administration console.

Background:

We want to connect the customer AD as source system to the Identity Authentication Service incl. several user attributes. One of these attributes is the user's department. If we want to map the department to the according field it would require to first maintain all departments within the Master Data Texts. And in case of a reorganization these master data texts must be adapted as well.

So, we have now two options:

1. We map the department information to a different field (such as division)
2. We find a way to (automatically) provision all departments to the according master data texts (incl update/insert/delete functionality in case of changes).

Is there any way to use option 2 for us?

regards

René

[marhol · Accepted solution]

Hi renejurmann

Regarding option 2: Did you already check the "Change Master Data Texts REST API" for "SAP Cloud Identity Services - Identity Authentication": https://help.sap.com/viewer/6d6d63354d1242d185ab4830fc04feb1/Cloud/en-US/b10fc6a9a37c488a82ce7489b1f...

=> "The Change Master Data Texts REST API can be used to change the predefined master data for each resource in Identity Authentication."

I just gave it a short try and seemed to work 😉

But please check if it is sufficient for your requirement.

Best regards, Marco

[renejurmann · Accepted solution]

Hi Marco,

thanks for the hint. But how to authenticate to the API? I have configured a secret as described here:

https://help.sap.com/viewer/6d6d63354d1242d185ab4830fc04feb1/Cloud/en-US/9ea13fe831e24620bc89affab17...

Then I try to login using Basic Authentication and generated client ID and secret. But I get a 403 Forbidden.

regards

René

[gregorw · Accepted solution]

Hi Marco,

is this API also documented at api.sap.com? I only able to find IAS_SCIM.

Best Regards
Gregor

[marhol · Accepted solution]

Hi René,

you need to create a system as Administrator, as mentioned in the Prerequisites section.

Check also this SAP Help doc: Add Administrators - SAP Help Portal

image.png

After setting the password, you will get a User ID which you can use to call the API. Check also that the "Manage Tenant Configuration" is assigned.

Best regards,

Marco

[marhol · Accepted solution]

Hi Gregor,

Thanks for the hint. I fear the API is not listed on SAP API Business Hub at the moment - I also searched on API Hub first 😉

I will reach out to responsible colleagues to check on this.

Best regards,

Marco