teched2025-XP261
An SAP TechEd on Tour hands-on session that integrates Cloud Identity ServicesCloud Identity ServicesIdentity Authentication and Identity Provisioning as one tenant: the login, the user store or the federation to a corporate identity provider, and the provisioning of users into whatever sits behind it.sap official, btp with Microsoft Entra to provision users across cloud and on-premises SAP systems.
Five exercises import SAP back-end roles into Cloud Identity ServicesCloud Identity ServicesIdentity Authentication and Identity Provisioning as one tenant: the login, the user store or the federation to a corporate identity provider, and the provisioning of users into whatever sits behind it.sap official, btp, provision them out to Microsoft Entra ID, onboard a new employee in SAP SuccessFactorsSAP SuccessFactorsSAP's cloud HR suite, run by SAP as software as a service and reached from outside through its OData APIs. The product behind the SAP SuccessFactors door: what is entered there is the tooling that reaches into it, and the product itself is not an option. Its Extensibility service is a BTP service and sits on the BTP door, where SAP's catalogue lists it., assign an access package in Entra, and provision the result back to the SAP back-end systems. The scenario spans cloud and on-premises environments to keep access consistent across both. Administrative access to Entra needs multi-factor authentication, so the session asks for a mobile authenticator app such as Microsoft Authenticator before starting.
Facts
Where it sits
Who is behind it
In the atlas: maintains 222@SAP-samplesmaintainerAjay SorengContributes to this
In the atlas: contributes to 36@ajaysorengAjinkya PatilContributes to this
In the atlas: contributes to 112@ajinkyapatil8190chcohrsContributes to this
In the atlas: contributes to 5@chcohrsjadolfContributes to this
In the atlas: contributes to 5@jadolfMartin RaeppleContributes to this
In the atlas: contributes to 1@raeppleSoniaPetrescuContributes to this
In the atlas: contributes to 1@SoniaPetrescu6 contributors
What it declares
Every artifact
- Type
- Sample
- Origin
- By SAP
- Use as
- A reference
As a sample
- Form
- Workshop or CodeJam material
Connections
Getting users, groups and roles into every system that needs them
Identity Authentication and Identity Provisioning as one tenant
SAP's cloud HR suite, run by SAP as software as a service and reached from outside through its OData APIs. The product behind the SAP SuccessFactors door: what is entered there is the tooling that reaches into it, and the product itself is not an option. Its Extensibility service is a BTP service and sits on the BTP door, where SAP's catalogue lists it.
Download
README
quoted from SAP-samples/teched2025-XP261 under Apache-2.0, readXP261 - Identity lifecycle management with SAP BTP and Microsoft Entra
Description
This repository contains the material for the SAP TechEd on Tour session XP261 - Identity lifecycle management with SAP BTP and Microsoft Entra.
Overview
Learn how to integrate SAP Cloud Identity Services with Microsoft Entra to deliver unified user lifecycle management across SAP software and third-party applications. The end-to-end scenario in this hands-on session spans across cloud and on-premises environments to provide consistent access control throughout the enterprise.

Requirements
To follow all exercises in this session, please make sure that you have a mobile phone where an Authenticator app, such as the Microsoft Authenticator, is installed. For administrative access to Microsoft Entra, multi-factor authentication is mandatory. Follow the Getting Started guide to setup MFA for your user in this session.
Exercises
- Getting Started
- Exercise 1 - Import SAP back-end roles in SAP Cloud Identity Services
- Exercise 2 - Provision SAP back-end roles to Microsoft Entra ID
- Exercise 3 - Onboard a new employee in SAP SuccessFactors
- Exercise 4 - Assign an access package in Microsoft Entra ID
- Exercise 5 - Provisioning to SAP back-end systems
License
Copyright (c) 2024 SAP SE or an SAP affiliate company. All rights reserved. This project is licensed under the Apache Software License, version 2.0 except as noted otherwise in the LICENSE file.
Details
Sources
Sources are graph entities: the same page may back several entries, and an unreachable source flags every row that rests on it.
Compatibility and provenance
History in the atlas
- First seen.
For your agent
- Ref
artifact:sap-samples-teched2025-xp261- JSON
- /artifacts/sap-samples-teched2025-xp261.json
- MCP
- Connecting an agent