Having a standardized method of authentication means that you only have to do the system authentication configuration once. All application programs can use the same already developed APIs for implementing authentication. SAML is a standardized format designed to interoperate with any system independent how it is implemented.
Standardization also provides a common user experience. It includes the look and feel of the logon screens but also allows for SAML’s ability for users to securely access multiple applications with a single set of credentials entered only once.
Security is of utmost importance when it comes to enterprise applications especially in the cloud. The IdP is used to provide a single point of authentication. SAML is used to assert the identity to others. This means that applications do not have to keep identities, which in turn ensures that there are fewer places for identities to be breached or stolen.
Because the IdP is cloud based, the software is always kept up-to-date. Many companies do not have the time or people to make the necessary updates in a timely fashion. This just increases the possibility that hackers will exploit vulnerabilities in the system that have not been patched.
With SAP Cloud Platform Identity Authentication service, there are many benefits of using this as default IdP for SAP Cloud Platform:
- Authentication with user name and password - Users can log on to applications with their user name and password.
- Single sign-on to applications on SAP Cloud Platform - Users can access multiple cloud applications in the current session by authenticating just once in the identity authentication.
- Social sign-in to applications on SAP Cloud Platform - Users can link their identity authentication account with a social network account. That way users can be authenticated through a social identity provider.
- Customized branding - Administrators can configure branding styles for UI elements, e-mails, and error pages so that they comply with the company’s branding requirements.
- Customized privacy policy and terms of use management - Administrators can add customized terms of use and privacy policies, which users have to accept before registering. They are shown on the registration and upgrade forms.
- Customer security policy - Administrators can select a password policy from a list in accordance with the security requirements and the rules for resetting passwords.
- Dedicated customer tenant - Customers are provided with guaranteed availability and specific configuration of their tenants.
- User import functionality - Administrators can import new users into identity authentication or can update data for existing users.
- User export functionality - Administrators can download information about existing users in the current tenant.
- Detailed change logs - Administrators have access to information about the history of operations by tenant administrators.
- User Management - Administrators can manage the users in the tenant.
- Administrator Management - Administrators can add new administrators and edit administrator authorizations.
- User Groups - Administrators can create and delete user groups, and assign and unassign users.
- Corporate User Store - SAP Cloud Platform Identity Authentication service can be configured to use a corporate user store in addition to its own user store.
- Kerberos Authentication - Administrators configure Kerberos authentication to allow users to log on without a username and password when they are in the corporate network.
- Risk-Based Authentication - Administrators define rules for authentication in accordance with the risk
- Self-services - Users can use services to maintain or update their user profiles and to log on to applications.
