Establish trust between SAP BTP and ADFS

To establish trust between SAP BTP and ADFS:

  1. Log in to SAP BTP.
  2. Go to SAP BTP Account, Security, Trust.
    See that Trust Management and Configuration Type are set to Default, which works on SAP S- User ID or SCN ID.
  3. Click Edit and make the following changes:
    • Configuration Type: Custom (Enables to Add Trust connection).
    • Local Provider Name: https://hanatrial.ondemand.com/s0015864207trial (should be generated automatically from SAP BTP. URL will be different for each instance based on its ID).
    • Signing Key: If the Signing Key is blank, click Generate Key Pair.
    • Signing Certificate: If the Signing Certificate is blank, click Generate Key Pair.
    • Principal Propagation Enabled.
    • Force Authentication: Disabled.
  4. Click Get Metadata link and save it as a local file.
    This allows you to add a new Trust Relaying Party in ADFS.