You can create an OAuth Scope for an OData service either by using a wizard or a report. Both don’t show you the already created scopes. If you have to assign a scope to a user, how can you find out the scope of the OData service? You can take Read more…
References: Token Endpoint for OAuth 2.0 SAML 2.0 Bearer Assertion flow for OAuth 2.0 SCN Discussion The last configuration to be done before you can access an OAuth 2.0 protected OData service is to activate the token issuer service. To be able to access a resource, your OAuth client needs Read more…
SAP Help: Setting Up an OAuth 2.0 Client In this step an OAuth client is added. This is the client that logs on to NW ABAP on behalf of the end user. For this, the OAuth client is using an SAP user to log on. This user was created earlier Read more…
Configure NameID After adding the OAuth IdP its status is set to disabled. It can only be enabled after the NameID format is configured. Tx: SAML2 In the tab trusted providers select OAuth 2.0 Identity Providers to see all OAuth IdPs. Select the IdP you want to activate and click Read more…
After creating an OAuth client user assigning the permissions to call the OAuth protected OData service, it is time to start the actual OAuth client configuration. First, add an OAuth Identity Provider (IdP). The OAuth IdP NetWeaver ABAP accepts is a normal SAML 2.0 IdP. This is because NW ABAP Read more…
SAP Help Registering an OAuth 2.0 Client SCN Wiki: S_SCOPE The client user was created in the previous step. With this, the OAuth client app can log on to Gateway. In theory, this could be enough to allow access to the Gateway service. The client could now send an access Read more…
SAP Help Configuring the role of the resource owner for OAuth 2.0 Enabling a user as resource owner for OAuth 2.0 With OAuth 2.0, the access to a resource / service is not done by a user directly, but by an OAuth client. The client logs on to Gateway and Read more…
SAP Help: Activate OData service Enable OAuth service For the OData service used, see my blog “Create an OData service from CDS”. Besides the option to activate an OAuth scope for an OData service manually, a wizard can be used. In that case, to enable OAuth for an OData service, Read more…
SAP Help: Enabling OAuth 2.0 Authentication for OData Services For the OData service used, see my blog Create an OData service from CDS. For each OData service you want to access through OAuth, a unique scope is needed. The scope is based on the OData service. The scope is needed Read more…
Scenario After you have enabled your NetWeaver ABAP system to be an SAML 2.0 Service Provider you want to download its metadata and get an error message: 403 Forbidden. Tx: SAML2 Call the SAML 2.0 configuration Web Dynpro app via transaction SAML2 and click on Metadata. Select what to include Read more…