Skip to content

Latest commit

 

History

History
299 lines (141 loc) · 14.4 KB

get-your-tenant-460766b.md

File metadata and controls

299 lines (141 loc) · 14.4 KB

Get Your Tenant

Get your SAP Cloud Identity Services tenant and become productive.

Prerequisites

Check if there is a tenant assigned to your customer ID by accessing the SAP Cloud Identity Services - Tenants application at https://iamtenants.accounts.cloud.sap/. For more information, see Viewing Assigned Tenants and Administrators.

  • If there is an existing tenant and you are among its administrators, skip this step and go to Access Admin Console.

  • If there is no existing tenant, follow the steps below to get one according to your needs.

Context

An SAP Cloud Identity Services tenant is delivered to customers as part of a bundle with an SAP cloud solution or as part of a self-service request in SAP BTP cockpit.

Bundle with an SAP Cloud Solution

When you purchase an SAP cloud solution that bundles SAP Cloud Identity Services - Identity Authentication and Identity Provisioning, you are entitled to one productive and one test tenant. Depending on the cloud solution, SAP can create and provision to your organization only one productive tenant, only one test tenant or both productive and test tenant.

If you already have a bundle tenant and you purchase more SAP cloud solutions, you won't get additional tenants. Your existing one will be reused. The only exception to this rule is if your current tenant cannot be used due to some restrictions and legal requirements, like data residency regulations. For example, it is required that the user data should not leave a particular region or country. In that case, a new tenant is created in the new region.

Tenants delivered as part of the bundling process are created automatically. You get their tenant URLs in a welcome e-mail from SAP.

Note:

In the case of SAP SuccessFactors, getting a bundle tenant requires you to initiate an upgrade to SAP Cloud Identity Services in SAP SuccessFactors Upgrade Center. For more information see: Initiating the Upgrade to SAP Cloud Identity Services - Identity Authentication Service.

For more information, see Bundles.

Self-Service Request in SAP BTP Cockpit

Products delivered on SAP Business Technology Platform (SAP BTP) does not trigger automatic creation of SAP Cloud Identity Services productive and test tenant. You need to request the tenant in the SAP BTP cockpit.

This is true in most cases, but not for all SAP BTP applications, and depends on the subaccount where the application runs on. In SAP BTP, there are customer-managed and SAP-managed subaccounts.

  • If the application runs on SAP-managed subaccount, then the SAP Cloud Identity Services tenant is automatically provisioned with the application. In this case, the administrator of the customer doesn't have access to the SAP BTP subaccount.

  • If the application runs on customer-managed subaccount, then in most cases the administrator of the customer has to manually create SAP Cloud Identity Services tenant via SAP BTP cockpit. However, there are also exceptions, like SAP Cloud ALM (application lifecycle management), where SAP creates and provisions the Identity Authentication tenant.

Additional tenants and trial tenants are also created through self-service request.

Note:

Although bundled and self-requested tenants differ in the way you get them, from technical and functional perspective they have no differences.

Note:

Be aware that it will take some time until the tenant becomes accessible. If you try to access the tenant right after creating it, you will receive Error 404 Not Found.

For more information, see Tenants.

Get Productive and Test Tenant

Get your productive and test tenant as part of a self-service request in SAP BTP cockpit. Productive and test tenants have no difference from technical and functional perspective.

Prerequisites

  • You have a global account in SAP BTP cockpit with a multi-environment subaccount.

Procedure

  1. In the SAP BTP cockpit, choose your subaccount and navigate to Entitlements > Edit > Add Service Plans.

  2. In the pop-up dialog, select Cloud Identity Services.

  3. Select the default (Application) service plan, and then choose Add Service Plan.

  4. Save your changes on the Entitlements page.

  5. Navigate to Services > Service Marketplace and select the Cloud Identity Services tile. Under Application Plans you should see the default plan.

  6. In the top-right corner, choose Create and follow the steps in the wizard to configure your new Cloud Identity Services tenant:

    1. From the dropdown list, choose Cloud Identity Services.

    2. Select the default plan and then choose Next.

    3. From the Cloud Service Type dropdown, choose the tenant type: Test or Productive (default value).

    4. Choose Next, review your configuration and choose Create.

    Note:

    For each service plan you must have a separate subaccount.

    The default plan allows you to consume SAP Cloud Identity Services. New tenants are created only if there aren't already existing tenants of the same type (productive or test) bound to your customer ID, regardless of the region.

    The default test and productive tenants will be created in the same region.

    Caution:

    If you unsubscribe the default plan, the Identity Authentication tenant is deactivated, if not used by other orders or products.

  7. If you initially create a test tenant and then you want to proceed with a productive one (or vice versa), repeat the steps above in a separate subaccount of the same region.

Note:

SAP BTP, Neo subaccount

If you have a global account with Neo subaccount, you can get a productive tenant and use it for free under the General Terms and Conditions for SAP Cloud Services. For this, you need to open your Neo subaccount, navigate to Services > Identity Authentication tile and enable the service. The new tenants are created only if there aren't existing productive tenants bound to your customer ID already.

Get Additional Tenant

Get an additional tenant as part of a self-service request in SAP BTP cockpit. SAP customers and partners can use SAP Cloud Identity Services additional tenants via CPEA (Cloud Platform Enterprise Agreement) and Pay-As-You-Go consumption-based commercial models. They can request one additional tenant per SAP BTP subaccount.

Note:

The additional tenant doesn’t add additional logon requests. Licensed logon requests are distributed across all tenants.

Prerequisites

  • You have a global account in SAP BTP cockpit with a multi-environment subaccount.

Procedure

To get additional tenant using SAP BTP multi-environment subaccount, proceed as follows:

  1. In the SAP BTP cockpit, choose your subaccount and navigate to Services > Service Marketplace.

  2. Select the Cloud Identity Services tile.

    Tip:

    • If you don't see the Cloud Identity Service tile, navigate to Entitlements trial, add the tile.
    • If you don't see the additional-tenant plan, navigate to Entitlements > Edit > Add Service Plans > Cloud Identity Services, select the checkbox for the additional-tenant plan, press Add Service Plans and save your choice.
    • If you use directories entitlement management in your global account, you must assign the additional-tenant plan to the directory first, and after that to the subaccount. Once you assign the additional-tenant plan to your directory, it will appear in your subaccount entitlements too. For more information, see Configure Entitlements and Quotas for Directories.

    Note:

    For each service plan you must have a separate subaccount.

    The additional-tenant plan allows the customer to create a new SAP Cloud Identity Services additional tenant. The type of the created tenant may be test or productive depending on the customer selection. The new instance is created only if there is an existing default instance bound to your customer ID.

    You can remove that additional tenant for the subaccount by choosing the Delete button. Please note that the tenant is deleted immediately.

  3. Choose Services > Instances and Subscriptions.

  4. In the top-right corner, choose Create and follow the steps in the wizard to configure your new instance:

    1. From the dropdown list, choose Cloud Identity Services.

    2. Select the additional-tenant plan and then choose Next.

    3. From the Cloud Service Type dropdown, choose the tenant type: Test or Productive (default value).

    4. Choose Next, review your configuration and choose Create.

Note:

SAP BTP, Neo subaccount

If you have a global account with an SAP BTP, Neo subaccount, you can get additional tenant, too. Open your existing CPEA Neo account or create new CPEA Neo account, navigate to Services > Identity Authentication - Additional Tenant tile and enable the service.

Identity Authentication additional productive tenant will be created and the account member who triggered the creation will get an activation email. Note that test tenants cannot be created from a Neo subaccount.

If you decide to remove that additional tenant for the subaccount by choosing the Delete button, note that the tenant is deleted immediately.

Get Trial Tenant

Create a trial tenant from an SAP BTP trial account.

A trial tenant is intended for testing purposes. It allows you to try out and explore SAP Cloud Identity Services – Identity Authentication and Identity Provisioning. It is free of charge and limited to a trial period in accordance with the SAP BTP trial terms and conditions. A trial tenant differs from a test tenant. Trial tenants can be used for a limited period, while test tenants are provided to customers in addition to their productive tenants where they can test new features before implementing them productively.

Restriction:

  • You can have only one trial tenant per SAP BTP global account regardless of how many subaccounts you create. If you have multiple subaccounts, and you've got trial tenants for them, the subaccounts will use one and the same trial tenant.

  • You can have up to 50 users in a trial tenant.

  • You can't connect to on-premise systems using the cloud connector. It's not possible to subscribe to the Cloud Identity Services connectivity plan in your trial subaccount.

Prerequisites

Procedure

  1. Go to the SAP BTP Trial page and clickLog On.

  2. Choose Go to Your Trial Account and open your subaccount.

  3. In the navigation area, choose Entitlements and then Edit > Add Service Plans.

  4. Select Cloud Identity Services from the list of entitlements available for this subaccount.

  5. Mark the default (Application) plan. The 0 number in the Add 0 Service Plan button increments to 1.

  6. Choose the Add 1 Service Plan button.

  7. Choose Save.

  8. In the navigation area, choose Services > Instances and Subscriptions.

  9. In the top-right corner, choose Create and follow the steps in the wizard to configure your new Cloud Identity Services tenant:

    1. Choose Cloud Identity Services.

    2. Select the default plan.

    3. Choose Create.

Note:

You can delete your trial tenant by deleting the subaccount or by deleting the Cloud Identity Services application under the Subscriptions section. For more information, see Delete a Subaccount.

Note:

If you encounter any issues and you need support, send an email to [email protected] or start a discussion in SAP Community.

Related Information

Blog Post: SAP Cloud Identity Services offered as Trial Version

Assign Existing Tenant to SAP BTP Subaccount

Assign your existing tenant to SAP BTP subaccount.

You can assign existing tenant to an SAP BTP subaccount via the default plan. Activating the default plan does not trigger the creation of new tenants if tenant with the same type already exists.

Prerequisites

  • You have an existing tenant delivered as part of a bundle with another SAP product.

  • You have a global account in SAP BTP cockpit with a Cloud Foundry subaccount.

Procedure

  1. In the SAP BTP cockpit, choose your subaccount and navigate to Services > Service Marketplace.

  2. Select the Cloud Identity Services tile. Under Application Plans you should see the default plan.

  3. In the top-right corner, choose Create and follow the steps in the wizard to configure your new instance:

    1. From the dropdown list, choose Cloud Identity Services.

    2. Select the default plan and then choose Next.

    3. From the Cloud Service Type dropdown, choose the tenant type: Test or Productive (default value).

    4. Choose Next, review your configuration and choose Create.