Senior Consultant SAP BTP Security / Identity – Role Collection Mapping

Project overview

Initial Situation:

The assignment of authorizations in SAP BTP is to be automated. Login already runs via SAP Cloud Identity Authentication Service (IAS) and Microsoft Entra ID, but role collections are still assigned manually in the BTP Cockpit.

The goal is for role collections to be assigned automatically in the future via the groups passed on from Entra ID.

Responsibilities

Framework Data:

• Configuration of group forwarding in Microsoft Entra ID (Claims and Attributes), together with the responsible customer colleague
• Check and adjustment of the trust configuration between BTP Subaccount, SAP IAS and Microsoft Entra ID
• Setup of the rule set in the Subaccount including a Customer Role Collection, first rule as an example for Business Application Studio
• Instruction of the customer in the maintenance and expansion of the rule set
• Start time: Immediately possible
• Duration: approx. 2–4 weeks
• Utilization: approx. 0.5–1.5 PT per week
• Location: Remote, on-site deployment in Baden-Württemberg possible by arrangement
• Project language: German

Requirements

• SAP BTP Authorization Management: Roles, Role Collections, Customer Role Collections in the Subaccount
• SAP Cloud Identity Services / IAS: Trust, Corporate IdP, Attribute and Group Forwarding
• Microsoft Entra ID: Enterprise App / SAML, Claims and Attributes, Group Claims
• Check and adjust trust configuration BTP Subaccount, SAP IAS and Entra ID
• Set up role collection mappings via user groups (rule set)
• SAP Business Application Studio: Roles and Authorizations
• Independent work without additional project management
• Knowledge transfer: Instruct customer in maintenance and expansion of the rule set
• Proficient in German and English (coordination with Entra ID colleagues)
• Workshop skills: Prepare and conduct coordination meetings with customer and Entra ID colleagues
• Moderation: Structure discussions and lead to results

Project details

• Start: ab sofort
• Duration: 1 Monat
• Remote: remote
• Location: Baden-Württemberg, Deutschland, DE
• Languages: German