Use the SAP BTP command line interface (btp CLI) to manage API credentials, which enable you to access the REST APIs of the SAP Authorization and Trust Management service.
If you want to access the REST APIs of SAP Authorization and Trust Management service in multi-environment subaccounts, global accounts, or directories, you must provide the required API credentials. One main use case is for customers who want to provision users including their authorizations, for example into a global account or a directory. They need credentials (with a client ID) for provisioning of users, especially when using SAP Cloud Identity Services - Identity Provisioning.
The API credentials are only passed on when they are created. They can't be retrieved later. If lost, new credentials must be generated.
See Application Security Descriptor Configuration Syntax for the credential types and SAP Business Accelerator Hub for the APIs of the SAP Authorization and Trust Management service.
Task |
Run the command ... |
Command help |
---|---|---|
Create API credentials |
|
|
Show all API credentials |
|
|
Show details about specific API credentials |
|
|
Delete API credentials |
|
Related Information
Working with Global Accounts, Directories, and Subaccounts Using the btp CLI
Setting Entitlements Using the btp CLI
Working with Environments Using the btp CLI
Working with Multitenant Applications Using the btp CLI
Working with External Resource Providers Using the btp CLI
Managing Trust from SAP BTP to an Identity Authentication Tenant
Managing Users and Their Authorizations Using the btp CLI
Managing Signing Keys for Access Tokens
Working with Resources of the SAP Service Manager Using the btp CLI