hello everyone welcome to Mentor poool my name is anit and uh in this video we are going to learn about uh sap identity authentication Service or normally we say sap IAS and which is a part of uh btp security do meain within business technology platform before I would start this your information guys we have lot of other you know uh Services uh we have created a video on our Channel if you want you can go ahead and learn about them so some of them are btp audit log management service alert notification service transport Management Service continuous integration continuous delivery service btp application logging service btp devops btp application autoscaler service btp identity provisioning service this is what we are going to cover today nbtb cloud idty services which again are nothing but uh uh IES and IPS only identity access governance btp connectivity service btp destination service btb build work Zone and mini mode so if you want to learn about these services please go ahead and watch all other videos subscribe our Channel hit the Bell icon so that definitely we have lot of other videos planned for more services on btp so that you can go ahead and upskill yourself in sap btp so let's not delay more and let's get started with identity authentication Service so guys what identity authentication services so this is nothing but a identity provider which is provided by sap okay and as a part of btp okay if I talk about there are more identity providers we have in market like uh Azar adfs proved by Microsoft we have a Google identity product proed by Google awsem we have proded by Amazon web services OCTA ping Federate Saleo they're many in Market okay normally what these identity provider does guys the main purpose of having the identity provider is to store the ID data it could be user data it could be system details right why we are storing these identities so that we can connect this identity provider to a lot of applications we have in our landcape okay so whenever a user try to login into these application their login request will come to Identity provider in our case our sap IP I and I will launch a login page and they will authenticate themselves and then they will able to access these applications so you can say is this is the only task what identity provider can do guys know this is just uh one or two things where it stores identity data and it can provide authentication Service but also you can configure single sign on multiactor authentication Federated authorization concurrent access management uh risk based authentication and conditional authentication many more things you can do for each of application you can create a branding in your login page right there are hundreds of things you can perform so definitely each uh identity provider has its own features and capabilities which could be a part of any access management tool and definitely your is also has a lot of different features but I have just listed some of them just try understanding this in a bit uh more detailed right there are two use cases okay one use case cases is can be used as a main identity provider what do you mean by main identity provider it means everything is is only going to do it means your all the user data everything is in I and whenever user are trying to log into these application there's already trust created with I and is will definitely go and search the user record in it store and if it is Success then it will authenticate whole soul storage is everything in I only okay user data is in I only but there are cases there are like maximum of the time this is the case where client says that they already have some corporate identity provider in their landscape okay and then what they say if I already have a identity provider why I should go ahead and maintain one more identity provider okay we don't want to do that but sap recommends that no for all sap application you actually actually use should use is because it has has been designed in such a way that it will support sap application in best way possible okay so what it happens here is in this case is work as a authentication Service in proxy authentication Service I would say here it was working in a main authentication Service main identity provider but here it works as a proxy identity provider what it does in this case whenever a person is trying to login into any of the sap application definitely I is there so the login request will be sent to IAS okay but I says that hey application I I can see in my configuration as your ID is configured for you what it will do it will delegate the authentication request to aure ad okay yeah definitely I have mentioned multiple normally one company will have only one but yes other companies may have some may have o or some can have Google or AWS IM then definitely you know we can have only one right so what will happen in those cases where is works as a proxy authentication Service it doesn't do authentication actually it delegate authentication request to any of identity providers they will authenticate and respond back to IAS and then I will respond back to these btp applications and then people will able to access that application okay so I hope these two scenarios should be very very clear to you let me just go and show you uh you know a view of this IES so guys first of all I would like to clarify here I is a part of cloud identity Services previously IES and IPS these two services so there is a video if you you know in our channel for sap IPS you know these the this already covered right so sap IPS was a different system sap I was a different system but now they have clubbed and have made one system system called Cloud identity services in which this tab this tab this and this they are their four Tabs are related to IAS okay and this tab is related to IPS so if I scroll down the these all tiles are for IES this all tiles are for IPs again these are for IES and I this is all also for I and this is also for IES okay definitely monitoring and all would definitely be a bit common for others both but yeah normally this is how we differentiate but now they all are part of One Umbrella which is called Cloud identity Services okay so guys we can see we can store all our identity data here right we can store all our identity data here right also there are lot of other you know things we can import user we can export user we can do real type provisioning you know we can do all those lot of settings we can do here and also we can onboard our corpor identity products like if you want to onboard OCTA ping Federate AZ ad Google IM and all we can on board it here right that's what I was talking about here right you can onboard your corporate Iden prer to have this type of setup if client is looking for that okay so I hope you understood a bit about this if you really wanted to learn these uh IES IPS in detail we cover these things in depth as a part of our btp security training please go ahead and uh let us know and uh we'll definitely try helping you out okay so guys just wanted to give you a quick view that uh you know we uh offer lot of uh trainings on you know btp so if I say btp Administration and uh bdp uh security you know btp build process uh development we can say with rap development uh with uh capam okay and development with uh uh build apps which is no code low code application development extension shoot sap i a okay btp Administration I already open bdb devops btp aai and many more right Signal View okay so guys we cover we have we offer these multiple courses like btp Administration bdp Security in which identity and access management ofp platform and btp applications are covered application security is covered right btb development with Rest full app programming btb develop with uh Cloud application programming cab btp build apps which is no code locode application development btp extension shoot where how to extend on premise and Cloud systems using btp identity and access governance which is nothing but a replica of GRC AC non premise and the bdb devops how to automate complete software development life cycle using btb devop Services btp Ai and then others btp signi or sa planning data warehouse Cloud which is data sphere now if you're looking for any cloud training or even on promise trainings as well please reach out to to us we'll definitely be able to help you out thank you so much