sap-btp-cloud-identity-services — Claude Code skill
This skill guides authentication and access-control work for SAP BTP apps. Use it to configure IAS, IPS, or AMS, or investigate token and trust errors.
npx skills add secondsky/sap-skills --skill sap-btp-cloud-identity-services -a claude-codeWhat sap-btp-cloud-identity-services does
The skill covers IAS for OIDC and SAML 2.0 sign-in and corporate identity-provider federation, IPS for syncing users and groups, and AMS for DCL-based authorization policies. It also addresses BTP subaccount trust with an IAS tenant and migration from XSUAA-based authentication.
Its guidance walks through IAS application registration, IPS systems and provisioning jobs, and the AMS policy lifecycle. IPS topics include JSON attribute mappings and full or delta reads. Developers define AMS policies in DCL; administrators can refine restrictions and assign policies to groups. With the BTP Identity service, an instance creates its OIDC application in IAS automatically, so manual registration is unnecessary.
What it helps with
- register an IAS app for OIDC or SAML 2.0
- connect IAS to a corporate identity provider
- sync users and groups with IPS
- write DCL rules for AMS access control
- trace token validation or issuer and audience mismatches
Example prompts for the agent
- Configure OIDC sign-in for my IAS app and establish trust with the BTP subaccount.
- Plan an IPS sync that sends users from the source system to IAS.
- Draft an AMS DCL policy that limits record access using user attributes.
How to install sap-btp-cloud-identity-services
1Skills CLI (Vercel)
npx skills add secondsky/sap-skills --skill sap-btp-cloud-identity-services -a claude-code2Manually: put the files in place
~/.claude/skills/sap-btp-cloud-identity-services/SKILL.mdCopy the whole skill folder; for one project use .claude/skills/sap-btp-cloud-identity-services/
1Skills CLI (Vercel)
npx skills add secondsky/sap-skills --skill sap-btp-cloud-identity-services -a codex2Manually: put the files in place
.agents/skills/sap-btp-cloud-identity-services/SKILL.mdFor all projects use ~/.agents/skills/
1Skills CLI (Vercel)
npx skills add secondsky/sap-skills --skill sap-btp-cloud-identity-services -a cursor2Manually: put the files in place
.cursor/skills/sap-btp-cloud-identity-services/SKILL.mdCursor also reads .agents/skills/ and .claude/skills/
1GitHub CLI
gh skill install secondsky/sap-skills sap-btp-cloud-identity-services2Manually: put the files in place
.github/skills/sap-btp-cloud-identity-services/SKILL.md1Skills CLI (Vercel)
npx skills add secondsky/sap-skills --skill sap-btp-cloud-identity-services -a gemini-cli2Platform CLI
gemini skills install https://github.com/secondsky/sap-skills --path plugins/sap-btp-cloud-identity-services/skills/sap-btp-cloud-identity-servicesManually: put the files in place
.devin/skills/sap-btp-cloud-identity-services/SKILL.mdThe legacy .windsurf/skills/ path still works
Skills CLI (Vercel)
npx skills add secondsky/sap-skills --skill sap-btp-cloud-identity-services -a opencodeClaude.ai
Zip the folder and upload it in Settings → Capabilities → Skills
Step by step, with commands for each platform: How to install skills in Claude Code: five ways
Questions about sap-btp-cloud-identity-services
How do I install sap-btp-cloud-identity-services in Claude Code?
Run npx skills add secondsky/sap-skills --skill sap-btp-cloud-identity-services -a claude-code. The skill file is installed at ~/.claude/skills/sap-btp-cloud-identity-services/SKILL.md.
What does sap-btp-cloud-identity-services do?
It provides guidance for IAS authentication, IPS identity synchronization, and AMS authorization policies in SAP BTP applications.
Does the BTP Identity service require manual IAS app registration?
No. Creating a BTP Identity service instance automatically provisions an OIDC application in IAS.
