Defining the SAML 2.0 Identity Provider via URL Parameter

Using a URL query parameter sap_idp with the IDP origin key, you can set the identity provider (IDP) for the application's login process.

A typical use case is that of a company that wants to provide access to SAP Integrated Product Development to both internal and external users. The company configures two SAML 2.0 identity providers, one for internal users and another for external users. In such a case, the company would then be able to provide different URLs to the internal users and external users, using the URL parameter sap_idp with values that point to different identity providers.

You can define the SAML 2.0 identity provider using a URL parameter with the format sap_idp=<origin_key_of_idp>:

• If you don't provide the query parameter sap_idp, when you log in to the launchpad, all the configured SAML 2.0 identity providers are provided for you to choose from.

• If you provide the query parameter sap_idp, when you log on to the launchpad, the IDP defined in the query parameter is chosen by the system automatically to allow you to log in.

To find the origin key in the SAP BTP cockpit, choose Security   Trust Configuration. The origin key is shown in the Origin Key column.