Registering SAP Jam as OAuth 2.0 Client

In this step, you register SAP Jam as an OAuth 2.0 client.

1. Run transaction SU01.

   The User Maintenance: Initial Screen screen appears.

2. Create a service user for the OAuth 2.0 client with the following characteristics:

   Field	Value
   User Name	JAM_OAUTH
   Logon Data page > User Type	SYSTEM
   Password	The password must match the Secret field in SAP Jam that is entered when you register the external application. For more information, see SAP Library for SAP Jam at http://help.sap.com/sapjam  Developer Information  Developer Guide  External Applications  Register the external application in SAP Jam .

3. Run transaction SOAUTH2.

   The OAuth 2.0 Administration screen appears.

4. Create a new client to register SAP Jam as an OAuth 2.0 client, using the following information:

   Field	Value
   OAUTH 2.0 Client ID	JAM_OAUTH Note You must use the same OAuth 2.0 client ID when you register the external application in SAP Jam later in this process.
   Description	Jam OAuth
   Grant Type SAML 2.0 Bearer	Enabled
   Client User ID & Password	Enabled This is required because the first authentication is done with the JAM_OAUTH user and basic authentication.
   SSL Client Certificate	Enabled
   Trusted OAuth 2.0 IDP	Enter the identity provider you registered in Registering SAP Jam as Trusted Identity Provider; for the Identity Federation, choose Email.
   Scope Assignment page	Add the scope ID for each back-end service (business record type) that is used. The scope ID is the service document identifier that results from the OAuth 2.0 enablement of your SAP Gateway services. It follows the pattern <TechnicalServiceName>_<ServiceVersion> Example Z_SAIL_CRMSMI_SRV_0001

   For more information, see SAP Library for SAP NetWeaver on SAP Help Portal at http://help.sap.com/nw. Choose a release. Under Security Information, open Security Guide and search for the following topics:

   • Registering an OAuth 2.0 Client

   • Configuring a Grant Type Extension with an OAuth 2.0 SAML Bearer Assertion