## 6.1.1.8.1.2.2  Supported Tools and Services When Using Custom Identity Providers for Platform Users
Not all tools and services of SAP BTP support the use of custom identity providers with platform users. We provide a list of tools and services, which support this feature and any restrictions that apply.
Supported When Using Identity Providers for Platform Users
| Supported                                      | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
|------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Cloud Connector                                | You can connect a Cloud Connector with multi-environment and Neo subaccounts of SAP BTP.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| SAP BTP CommandLine In- terface (btp CLI)      | Once trust has been configured on the global account level in the cockpit, platform users can log on using the custom identity provider and use the full range of the btp CLI. To log on to a global account, you need to provide the hostname of the tenant (for example, ar9ibaxhm ) with the --idp parameter. See Log in with a Custom Identity Provider [page 2421]. To work with users and role collections on global account, directory, or subaccount level, you need to provide the origin key with the --of-idp parameter in the following com- mands: btp list security/user , btp get security/user , btp delete security/user , btp assign security/role-collection , btp unassign security/role-collection . Both values can be found in the cockpit under Security → Trust Configuration → Custom |
| Cloud Foundry command- line interface (CF CLI) | Make sure you use the Cloud Foundry command-line interface (CF CLI v7). For more infor- mation, see https:/ /docs.cloudfoundry.org/cf-cli/v7.html .                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
| Cloud Foundry command- line interface (CF CLI) |  Restriction With v6 of the CF CLI, you can't use the --origin option in cf set-org-role and cf set-space-role . Use the Members tab in the SAP BTP cockpit. Go to the SAP BTP cockpit under <my_global_account> <my_subaccount> Security Members to set the user's permissions.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
| Supported                                  | Description                                                                                                                                                                                                                                                                                                                                               |
|--------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| SAP Application Logging service and Kibana | Users logged on using custom identity providers can analyze logs written using the SAP Application Logging service. For more information, see the SAP Application Logging service documentation.                                                                                                                                                          |
| SAP BTP cockpit                            | Platform users logged on using custom identity providers can use the full range of the SAP BTP cockpit.                                                                                                                                                                                                                                                   |
| SAP Cloud Transport Management             | Platform users logged on to SAP Cloud Transport Management service using custom iden- tity providers can use all functions of the service as described in the SAP Cloud Transport Management documentation. For more information, see SAP Cloud Transport Management.                                                                                     |
| SAP HANACloud Cockpit                      | Platform users logged on using custom identity providers can use the full range of SAP HANACloud Cockpit. For more information, see SAP HANACockpit.                                                                                                                                                                                                      |
| SAP Job Scheduling service                 | Platform users logged on using custom identity providers can use the SAP Job Scheduling service dashboard.                                                                                                                                                                                                                                                |
| SAP Mobile Services                        | SAP Mobile Services uses platform users to log on to the admin cockpit and manage apps and configurations. Based on their space member roles, platform users can log on using a custom identity provider and access the SAP Mobile Services admin cockpit. For more information, see Set Up Customer Accounts in the SAP Mobile Services documen- tation. |
Supported with Restrictions When Using Platform Identity Providers
## Supported with Restric-
| tions                           | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
|---------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| SAP Business Application Studio | SAP Business Application Studio supports custom identity providers with the following re- strictions. • When you log on with the SAP Business Application Studio web-based user interface, you authenticate with the identity provider for business users. • When you log on to the Cloud Foundry environment from the terminal mode of SAP Business Application Studio with the Cloud Foundry environment command-line inter- face (CF CLI), you can authenticate with the identity provider for platform users. For more information, see Terminal in the SAP Business Application Studio documentation. |
| SAP HANAService Dash- board     | This tool doesn't support log on with a platform user from a custom identity provider. You can only log on with a user from the default identity provider. • Open the SAP HANAService Dashboard in AWSandGoogle Cloud regions • Open the SAP HANAService Dashboard in the China (Shanghai) region                                                                                                                                                                                                                                                                                                          |
| Supported with Restric- tions                                       | Description                                                                                                                                                                                                                                                                                                                                                                                                                                         |
|---------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| SAP Rapid Application Development by Mendix                         | You can't perform operations on multi-environment subaccounts, like deployments with SAP Rapid Application Development by Mendix when using a custom identity provider for platform users. For more information, see SAP Rapid Application Development by Mendix .                                                                                                                                                                                  |
| Service dashboards of serv- ices that aren't listed as sup- ported. | If you use services with dashboards, you can't access these dashboards with a platform user from a custom identity provider. Using service dashboards is only possible with the default identity provider (SAP ID service).                                                                                                                                                                                                                         |
| SAP Web IDE                                                         | SAP Web IDE supports identity providers with the following restrictions. • When you log on with the WebIDE web-based user interface, you authenticate with the identity provider for business users. • When you deploy applications to the Cloud Foundry or Neo environment from SAP Web IDE, you can authenticate with the identity provider for platform users. For more information, see User Authentication and Authorization.  Recommendation |
## Related Information
Administration and Operations in the Cloud Foundry Environment [page 2501]