## 3.3.1.5.1.4  Creating a Neo Application as Trusted Service Provider
Create and configure an application to represent the Neo account in the Identity Authentication Service tenant as SAML 2.0 service provider.
##  Note
The following steps are only relevant if your developers will use SAP Web IDE in the Neo environment for UI development.
## Creating an SAML Application for the Neo Account
As a first step, you need to create the application for the Neo account.
1. Log on to the tenant's administration console for the Identity Authentication service at https://&lt;tenant ID&gt;.accounts.ondemand.com/admin as administration user.
2. In the navigation area, choose Application &amp; Resources Applications .
3. Choose + Add .
4. Enter an application name for the Neo account (the service provider) in the Identity Authentication service.
5. Choose Save .
## Configuring the Neo Application as Trusted Service Provider
Import the SAML service provider metadata from the Neo environment to the Identity Authentication service tenant (that is, the SAML identity provider). This configures SAML trust to the Neo account as SAML service provider.
1. Under Applications , choose the entry for the Neo application that you have just created.
2. Choose SAML 2.0 Configuration .
3. Choose Browse .
4. Upload the metadata file of the SAML service provider from the Neo account that you have downloaded before (see also Configuring the Neo Account as SAML Service Provider and Export SAML Metadata [page 213]).
##  Note
During the setup of the ABAP environment, you need to upload multiple SAML metadata files. Make sure that you upload the correct file. If you have followed the naming conventions suggested in this documentation, the file needed here is metadataNeo&lt;tentant-id&gt;.xml .
5. Choose Save .
## Configuring the Subject Name Identifier Sent to Cloud Foundry
Configure the subject name identifier that the Identity Authentication service (as identity provider) sends to the Neo application. Use the email address as user identifier for the Neo account.
1. Under Applications , choose the entry for the Neo application.
2. Choose Subject Name Identifier .
3. Choose Basic Configuration and select E-Mail from the dropdown list.
4. Choose Save .
## Configuring the Default Name ID Format for the Neo Application (Optional)
Optionally, you can configure the default name ID attribute of the identity provider for Neo. Use the email address as user identifier for the Neo account.
1. Under Applications , choose the entry for the Neo application in the Identity Authentication service.
2. Choose Default Name ID Format .
3. Choose the E-Mail radio button.
4. Choose Save .
## Configuring the SAML Assertion Attributes for Cloud Foundry
Include the attributes first\_name , last\_name , mail , and Groups for the SAML assertion.
1. Under Applications , choose the entry for the Neo application.
2. Choose Attributes .
3. Choose Add to enter the following attributes (if they don't already exist):
| Name       | Value      |
|------------|------------|
| first_name | First Name |
| last_name  | Last Name  |
| mail       | E-Mail     |
| Groups     | Groups     |
##  Note
Make sure that you enter Groups (with upper case G ), not groups , in the Name field, so that it matches the assertation attribute used for the Neo environment.
4. Choose Save .
## More Information
Configuring Applications
Configure Trust
Configure the Subject Name Identifier Sent to the Application