Name: Connecting IAS to Customer Corporate IDP in Embedded Analytics - SAP SuccessFactors Incentive Management
Uploaded: 2020-12-10
Duration: 271 s
Description: In this video, you'll learn how to set up an external IDP in embedded analytics for SAP SuccessFactors Incentive Management.

Share feedback

<p><u><strong>Planned maintenance of Practice Systems</strong></u></p>

Planned maintenance of Practice Systems

Why create an SAP account?

Enhance your learning experience

SAP Learning

Choose your subscription

Manage your subscription

Live Sessions

Hands-on Practice

Certification

My Learning

Ready to start learning?

<div>In this video, you'll learn how to set up an external IDP in embedded analytics for SAP SuccessFactors Incentive Management.  <br><br><br></div>

Connecting IAS to Customer Corporate IDP in Embedded Analytics -  SAP SuccessFactors Incentive Management

Hi, My name is Lily. In this video, I’ll explain how to set up an external IDP or Identity Provider. When a customer receives access to embedded analytics for SAP Commissions, the Tenant Administrator will receive an email containing URLs for embedded analytics for SAP Commissions. Embedded analytics requires users to authenticate using SAP IAS (Identity Authentication Service) for SSO or Single Sign-On. When a customer is using the corporate IDP to authenticate users, SAP IAS needs to be configured to use a Corporate IDP for user authentication. The purpose of this setup is to enable a corporate IDP for SSO with SAP Analytics. The corporate IDP is configured for users with a corporate email domain using a conditional authentication rule and all other users are authenticated using SAP IAS. Now, I’ll show you how to configure an external IDP. As an IAS Admin, you first need to Login into SAP IAS with your Admin credentials. Navigate to Applications & Resources -> Tenant Settings -> SAML 2.0 Configuration and download the Metadata file. You’ll need to send the downloaded IAS Metadata file to the Customer IT Team and request that they provide you with the Customer’s Corporate IDP Metadata file. Once you receive the Customer's Corporate IDP Metadata file, navigate to Identity Providers -> Corporate Identity Providers and click on the Add an Identity Provider button. Provide a name for the Corporate Identity Provider and Save Now, navigate back to   Corporate Identity Providers, and select SAML 2.0 Configuration. Upload the Customer's Corporate Identity Provider Metadata file and Save. Once the XML file is uploaded, all the below sections will be automatically populated Select Corporate Identity Providers, Identity Provider Type and make sure SAML 2.0 Compliant is selected. Go back to the Corporate Identity Providers space, select Name ID Format and make sure Unspecified is selected and click Save. Go back to the Corporate Identity Providers space, select Enriched Assertion Attributes and make sure nothing is added. Go back to the Corporate Identity Providers space, make sure SINGLE SIGN-ON, Forward All SSO Requests to Corporate IDP is switched Off. Select Identity Federation and make sure Use Identity Authentication user store option is checked on. Now, you’ll create a rule to set a default identity provider. For embedded analytics, it is important to set the rule for Sales Cloud Analytics, SCA Open ID, and TBAI 2.0. If you want to add Single Sign-On for Commissions, you can follow the same steps. Now go back to Applications & Resources -> Applications, and select Sales Cloud Analytics Select Conditional Authentication Make sure Default Authenticating Identity Provider is SAP Cloud Platform Identity Authentication. Select Add Rule Make sure you choose the New Corporate Identity Provider for Identity Provider and for the E-Mail Domain, enter the Customer’s domain. Follow the same steps for SCA Open ID and TBAI 2.0. When you’re done, login into embedded analytics. If a User with ABCD.com email domain logs in, SAP IAS will automatically forward the Authentication to Corporate IDP. If a User with any other email domain logs in, SAP IAS will prompt the user to enter an SAP  IAS Password to authenticate. In this video, I showed you how to set up an external IDP. Thanks for watching!