You have a Microsoft Entra tenant named contoso.com. You are designing an authentication and authorization solution for SAP Business Technology Platform (BTP) software as a service (SaaS)…

Question

Options

• AFrom IAS, enable the Use Identity Authentication user store option.
• BFrom SAP BTP, enable the use of default attributes.
• CFrom SAP BTP, disable the use of default attributes.
• DFrom IAS, disable the Use Identity Authentication user store option.

• A
  44% (19)
• B
  14% (6)
• C
  33% (14)
• D
  9% (4)

Explanation

Using Microsoft Entra ID to secure access to SAP platforms and applications Use Federated Authentication in SAP Business Technology Platform and SAP SaaS applications through SAP Identity Authentication Service When using federation, you can choose to define the trust configuration at the BTP Subaccount level. In that case, you must repeat the configuration for each other Subaccount you're using. By using IAS as an intermediate trust configuration, you benefit from centralized configuration across multiple Subaccounts and you can use IAS features such as risk-based authentication and centralized enrichment of assertion attributes. * To safeguard the user experience, these advanced security features should only be enforced at a single location. This could either be IAS or when keeping Microsoft Entra ID as the single authoritative user store (as is the premise of this paper), this would centrally be handled by Microsoft Entra Conditional Access Management. *

No community discussion yet for this question.