Welcome to How to configure Trust Configuration in Global Account in Cloud Foundry step-by-step. In this whitepaper we will discuss all the steps required in order to configure a trust configuration between Identity Authentication Service and BTP Cloud Foundry. The idea is to allow the platform users from an IAS tenant to login to global account, subaccount and have access to CF and NEO Applications, such as SAP Business Application Studio.

Abstract:

Chapter 1 – Overview

• Architecture
• Business User vs Platform User

Chapter 2 – Configuring Trust Configuration

• Creation of two subaccounts NEO and CF
• Enable SAP Web IDE in NEO
• Enable SAP Business Application Studio in CF
• Verifying the Trust creation between BTP and IAS
• Creating and Testing Platform User
• Adding authorization to Platform User
• Configuring NEO Subaccount
• Accessing SAP Business Application Studio Using Platform User

Chapter 3 – Troubleshooting

• Error 1 – Access Denied when accessing SAP Web IDE
• Error 2 – “-subaccount not visited yet-“ message is displayed in the Name column
• Error 3 – Cockpit shows HTTP Status 500 after logon with IAS acting as proxy to a Corporate IDP for platform user
• Error 4 – After creating a trust configuration, application end up under charged application in IAS and not bundled application

To access the whitepaper, please click on this link: https://wiki.scn.sap.com/wiki/x/cwMPJg