# sap-btp-cloud-identity-services

This skill guides authentication and access-control work for SAP BTP apps. Use it to configure IAS, IPS, or AMS, or investigate token and trust errors.

- skill · `type=skill` · Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, OpenCode · 585 installs · ★ 475
- Author: secondsky
- License: GPL-3.0 · policy=link-only · description only; the file stays with the author
- Source: https://github.com/secondsky/sap-skills/tree/HEAD/plugins/sap-btp-cloud-identity-services/skills/sap-btp-cloud-identity-services/SKILL.md
- Updated: 2026-10-21
- HTML: https://affpapa.org/en/nevibecode/skills/sap-btp-cloud-identity-services

## What it does

The skill covers IAS for OIDC and SAML 2.0 sign-in and corporate identity-provider federation, IPS for syncing users and groups, and AMS for DCL-based authorization policies. It also addresses BTP subaccount trust with an IAS tenant and migration from XSUAA-based authentication.

Its guidance walks through IAS application registration, IPS systems and provisioning jobs, and the AMS policy lifecycle. IPS topics include JSON attribute mappings and full or delta reads. Developers define AMS policies in DCL; administrators can refine restrictions and assign policies to groups. With the BTP Identity service, an instance creates its OIDC application in IAS automatically, so manual registration is unnecessary.

## Install

### Claude Code (native platform)

1. **Skills CLI (Vercel)**
```bash
npx skills add secondsky/sap-skills --skill sap-btp-cloud-identity-services -a claude-code
```

2. **Manually: put the files in place**
- File: `~/.claude/skills/sap-btp-cloud-identity-services/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/sap-btp-cloud-identity-services/

### Codex

1. **Skills CLI (Vercel)**
```bash
npx skills add secondsky/sap-skills --skill sap-btp-cloud-identity-services -a codex
```

2. **Manually: put the files in place**
- File: `.agents/skills/sap-btp-cloud-identity-services/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

1. **Skills CLI (Vercel)**
```bash
npx skills add secondsky/sap-skills --skill sap-btp-cloud-identity-services -a cursor
```

2. **Manually: put the files in place**
- File: `.cursor/skills/sap-btp-cloud-identity-services/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install secondsky/sap-skills sap-btp-cloud-identity-services
```

2. **Manually: put the files in place**
- File: `.github/skills/sap-btp-cloud-identity-services/SKILL.md`

### Gemini CLI

1. **Skills CLI (Vercel)**
```bash
npx skills add secondsky/sap-skills --skill sap-btp-cloud-identity-services -a gemini-cli
```

2. **Platform CLI**
```bash
gemini skills install https://github.com/secondsky/sap-skills --path plugins/sap-btp-cloud-identity-services/skills/sap-btp-cloud-identity-services
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/sap-btp-cloud-identity-services/SKILL.md` — The legacy .windsurf/skills/ path still works

### OpenCode

**Skills CLI (Vercel)**
```bash
npx skills add secondsky/sap-skills --skill sap-btp-cloud-identity-services -a opencode
```

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/secondsky/sap-skills/tree/HEAD/plugins/sap-btp-cloud-identity-services/skills/sap-btp-cloud-identity-services/SKILL.md

## When to use it
- register an IAS app for OIDC or SAML 2.0
- connect IAS to a corporate identity provider
- sync users and groups with IPS
- write DCL rules for AMS access control
- trace token validation or issuer and audience mismatches

## Example prompts
- Configure OIDC sign-in for my IAS app and establish trust with the BTP subaccount.
- Plan an IPS sync that sends users from the source system to IAS.
- Draft an AMS DCL policy that limits record access using user attributes.

## Similar
- [caveman-manage](https://affpapa.org/en/nevibecode/skills/caveman-manage.md) — skill · 104200 installs
- [workers-best-practices](https://affpapa.org/en/nevibecode/skills/cloudflare-workers-best-practices.md) — skill · 126100 installs
- [cloudflare-email-service](https://affpapa.org/en/nevibecode/skills/cloudflare-email-service.md) — skill · 102300 installs
- [firebase-basics](https://affpapa.org/en/nevibecode/skills/firebase-basics.md) — skill · 14100 installs
- [cloudflare-one](https://affpapa.org/en/nevibecode/skills/cloudflare-one.md) — skill · 93100 installs
- [cloudflare-one-migrations](https://affpapa.org/en/nevibecode/skills/cloudflare-one-migrations.md) — skill · 89500 installs

From the same set: [secondsky/sap-skills](https://affpapa.org/en/nevibecode/by/secondsky/sap-skills.md) — 40 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md