Hi, my name is Denys van Kempen, SAP HANA Academy and SAP’s Partner Innovation Lab.
In this video tutorial series we are going to explore the Kyma runtime of the SAP Business
Technology Platform.
This video was recorded in January 2022.
For the latest tutorials on the topic, please check the playlist.
In this video, we are going to show you how we can integrate the Business Technology Platform
(BTP) and SAP SuccessFactors, for creating extensions in the Kyma environment.
This is part two covering single sign-on.
As with step 1 and 2 of the previous video, this concerns generic BTP configuration, nothing
specific to Kyma.
For SuccessFactors, this requires access to the Provisioning tool, his may require specific
authorisations.
First we need get the SAML Metadata.
There is no UI for this, yet, you need to enter a URL, see the description below (or
the documentation) what exactly to enter here, and you will be prompted then to download
a file.
Then in the BTP Cockpit, go to your subaccount, Security, Trust Configuration.
Select New Trust Configuration: Upload metadata.
I had to add .XML as file extension before it could be selected.
Metadata parsed successfully.
Add a name I will be using the SuccessFactors tenant
again but you can use any name you want and save.
Finally, you will need to disable the default identity provider
Double check you are at the subaccount level, not the global account.
You can also configure trust configuration for the global account, which governs access
to the BTP cockpit.
Deselect the default provider available for user logon.
This should only be active for your SuccessFactors tenant.
Next, we need to download the metadata of our BTP subaccount
We only need three parameters, three attributes, so you might want to open the file in an editor
where the XML can be formatted, here I am using Visual Studio Code, for example.
Switch to the SuccessFactors provisioning tool.
Select your company.
Under service provider settings, select Authorized SP Assertion Consumer Service Settings.
Here we would have liked to upload the XML file but unfortunately we need to perform
some oldskool copy/paste, error-prone, so make sure to do this carefully.
Select Add another Service Provider (ACS).
Then we need to add the assertion consumer service URL.
In the XML file this is line 107 for me, at the end, there are two entries, you need HTTP-POST
and copy the location URL, and paste that in.
Next, the logout URL.
Search the XML file for the SingleLogoutService, it is just above, again HTTP-POST, and copy
the URL(paste).
Next the entity ID.
That’s on line number 2, entity descriptor, copy the URL (paste).
Note that the SHA-256 certificate is selected, and then also make sure to select the application
name: SAP Business Technology Platform (Save), and we are done.
Okay, so much for integrating the Business Technology Platform (BTP) and SAP SuccessFactors,
for creating extensions in the Kyma environment.
This video tutorial was recorded by Denys van Kempen, SAP HANA Academy / SAP Partner
Innovation Lab For updates, don’t forget to subscribe.
Thanks for watching.