[FEATURE REQUEST] Issues with new accounts registered under SAP Universal ID

[raiatdeloitte]

Which area is mainly impacted

CLI in general

Requested Feature

New users registered for a SAP BTP trial account are registered using the SAP Universal ID which causes the execution of the btpsa script to fail authentication. The feature to be requested would be that the SAP Universal ID users are able to login when using the script to run the automation.

Use Case/Scenario

I have just created a new SAP BTP trial user in order to do some testing with the SAP BTP setup automator and this user has been created using the SAP Universal ID.

When running the SAP BTP automator the BTP account credentials are failing due to my user being linked to the SAP Universal ID. I have seen that this is due to the underlying CLI not supporting it in a background mode. An option exists that would prompt a web browser by specifying -sso manual but after trying that one on console it doesn't seem to work either.

I guess this is more of a CLI issue but if al new users on SAP BTP trial are going to be linked to the SAP Universal ID then this can be a blocker for the setup automator as the login process on the image and the btpsa script will fail to authenticate.

Would you like to support us?

• [ ] Yes, I would like to support you

Anything else?

No response

[rui1610]

Thanks for the feedback @raiatdeloitte . Did you try out the btp-setup-automator on a productive SAP BTP account and had the same issue?

[raiatdeloitte]

Hi Rui,

Not so far. We are starting a new project and building a CI/CD pipeline using the BTP setup automator for dev so far. Being more accurate, I’m generating a template that will apply to all different environments.

In order to progress I have changed to a different account that I had which is not linked to the SAP Universal ID but it’s also a trial account. We will shortly get the project’s BTP account which won’t be trial and we will test there too.

Kind regards, Ibai

[rui1610]

Sounds great. Can I close the feature request? I can't reproduce the use case as I don't use the SAP Universal ID so far.

[raiatdeloitte]

Hi,

It’s ok with me as I was able to bypass in this scenario but up to you in case you think this feature is a must going ahead for people that can’t bypass. Right now I would not be able to collaborate due to work load but just thinking on more tranquil times, contributions are in python, are they?

Kind regards, Ibai

---

ADVERTENCIA LEGAL

Este mensaje va dirigido, de manera exclusiva, a su destinatario y contiene información confidencial y sujeta al secreto profesional, cuya divulgación no está permitida por la ley. En caso de haber recibido este mensaje por error, le rogamos que, de forma inmediata, nos lo comunique mediante correo electrónico remitido a nuestra atención o a través del teléfono (+ 34) 91 514 50 00 y proceda a su eliminación, así como a la de cualquier documento adjunto al mismo. Asimismo, le comunicamos que la distribución, copia o utilización de este mensaje, o de cualquier documento adjunto al mismo, cualquiera que fuera su finalidad, están prohibidas por la ley.

Le informamos, como destinatario de este mensaje, que el correo electrónico y las comunicaciones por medio de Internet no permiten asegurar ni garantizar la confidencialidad de los mensajes transmitidos, así como tampoco su integridad o su correcta recepción, por lo que el emisor no asume responsabilidad alguna por tales circunstancias. Si no consintiese en la utilización del correo electrónico o de las comunicaciones vía Internet le rogamos nos lo comunique y ponga en nuestro conocimiento de manera inmediata.

Deloitte se refiere a Deloitte Touche Tohmatsu Limited, (prívate company limited by guarantee, de acuerdo con la legislación del Reino Unido) y a su red de firmas miembro, cada una de las cuales es una entidad independiente. En www.deloitte.com/abouthttp://www.deloitte.com/about se ofrece una descripción detallada de la estructura legal de Deloitte Touche Tohmatsu Limited y sus firmas miembro.

---

PRIVILEGED AND CONFIDENTIAL

This message is intended exclusively for the person to whom it is addressed and contains privileged and confidential information protected from disclosure by law. If you are not the addressee indicated in this message, you should immediately delete it and any attachments and notify the sender by reply e-mail or by phone (+ 34 91 514 50 00). In such case, you are hereby notified that any dissemination, distribution, copying or use of this message or any attachments, for any purpose, is strictly prohibited by law.

We hereby inform you, as addressee of this message, that e-mail and Internet do not guarantee the confidentiality, nor the completeness or proper reception of the messages sent and, thus, the sender does not assume any liability for those circumstances. Should you not agree to the use of e-mail or to communications via Internet, you are kindly requested to notify us immediately.

Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited, a UK private company limited by guarantee, and its network of member firms, each of which is a legally separate and independent entity. Please see www.deloitte.com/abouthttp://www.deloitte.com/about for a detailed description of the legal structure of Deloitte Touche Tohmatsu Limited and its member firms.

[Adrian-Melero]

Hello, I´m getting the same issue with my btp trial account. It´s linked to SAP Universal ID by default and it looks like it´s not possible to make a successful login with this type of account.

[lechnerc77]

As we use BTP CLI under the hood, we must also check SAP Note 3085908. According to it BTP CLI does not yet support SAP Universal ID

[Adrian-Melero]

Thanks, that worked like a charm

[lechnerc77]

I close this issue as there is nothing we can do (from btpsa implementation perspective) to improve the situation due to the dependency to the BTP CLI. I recorded the situation and the workaround in a discussion, so that other user stumbling across the situation know how to deal with it.