skilld
All skills
secondsky avatar

/sap-btp-cloud-identity-services

@620a19a
by Eddiesecondsky/sap-skills456 stars
120

SAP Cloud Identity Services for BTP applications: Identity Authentication (IAS), Identity Provisioning (IPS), and Authorization Management (AMS). Use when configuring authentication for BTP apps, setting up OIDC or SAML app registrations, federating corporate identity providers, establishing subaccount trust, provisioning users, writing AMS authorization policies, migrating from XSUAA to IAS-based authentication, or troubleshooting token and trust errors.

Ask your Agent

Use this Skill: https://skilld.dev/gh/secondsky/sap-skills/sap-btp-cloud-identity-services

This session only. Nothing lands on disk.

README.md

≈437 tokens on demand. Your agent reads this file only when SKILL.md points to it.

SAP Cloud Identity Services — Keywords

Capability Index

Capability Status
Commands 1: /identity-trust-check
Agents 1: identity-security-advisor
Hooks No
MCP No
LSP No
Source Freshness last_verified: 2026-06-12; tenant trust/provisioning verification remains pending.
Verification npm run validate; live IAS/IPS checks pending unless sanitized evidence is supplied.

Service Names

SAP Cloud Identity Services, Identity Authentication Service, IAS, Identity Provisioning Service, IPS, Identity Directory, Authorization Management Service, AMS

Protocols

OIDC, OpenID Connect, SAML 2.0, OAuth 2.0, SCIM 2.0

BTP Integration

XSUAA, Identity service, trust configuration, subaccount trust, role collections, approuter, principal propagation

AMS / Authorization

DCL, Data Control Language, authorization policies, policy-based authorization, instance-based authorization

Migration

XSUAA to IAS migration, XSUAA replacement, coexistence, Identity service adoption

Authentication

Corporate IdP federation, identity provider proxy, conditional authentication, risk-based authentication, MFA, multi-factor authentication, X.509 client certificates, SSO, single sign-on

Provisioning

User provisioning, group provisioning, identity lifecycle, source system, target system, proxy system, transformation, real-time provisioning, delta read, full read

Troubleshooting

Token validation, audience mismatch, issuer mismatch, redirect URI, trust error, 401 unauthorized, SAML assertion, OIDC token

Developer Scenarios

IAS app registration, CAP security, SAPUI5 authentication, mTLS, service-to-service authentication, approuter IAS, CAP IAS AMS

Source: SKILL.md on GitHub

Third-party checks

No alerts1mo3 checks · Risk SAFE
  • Gen Agent Trust Hub1mo

    This skill is a collection of reference documentation and integration patterns for SAP Cloud Identity Services (IAS, IPS, and AMS) on SAP BTP. It provides technical guidance for OIDC/SAML application registration, XSUAA migration, and authorization policy development without any executable code or malicious patterns.

  • Socket1mo

    No alerts

  • Snyk1mo

    Risk: LOW · No issues

Provenance

Signed by skilld at 620a19a. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub 2 weeks ago.

Activeupdated 2 months ago

Capability

Other metadata
metadata
{
  "maintainer": "Eduard Jiglau",
  "maintainer_email": "hello@sap-ai-skills.com",
  "website": "https://sap-ai-skills.com",
  "version": "2.4.1",
  "last_verified": "2026-06-12",
  "documentation_source": "https://help.sap.com/docs/cloud-identity-services",
  "ias_docs": "https://github.com/SAP-docs/btp-cloud-identity-services",
  "integration_guide": "https://help.sap.com/viewer/b95c3d5bab324a3a8409eee5267a5b75/Cloud/en-US/27947dfb325047018603446439050a6b.html",
  "cap_ias_guide": "https://cap.cloud.sap/docs/guides/integration/platform/ias-xsuaa"
}

README badge

README badge for secondsky/sap-skills/sap-btp-cloud-identity-services