## 7.4.1.1 Create a Destination
## Prerequisites
Before you create the required destination, you need to note down a few properties that will be used as values in the destination settings.
1. In the cloud cockpit, navigate to the subaccount in the Cloud Foundry environment.
2. Navigate to the application router.
3. Enter the Environment Variables section.
4. Note down somewhere the values of the following properties:
- clientid
- clientsecret
- url
## Context
Connect the first subaccount to the second subaccount by describing the source connection properties in a destination. For more information see Modeling Destinations.
## Procedure
1. Choose the global account and navigate to Connectivity Destinations .
2. Choose New Destination .
3. In the new destination, provide the following information:
<!-- image -->
| Field   | Description                                                                                                                                                                                          |
|---------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Name    | Technical name of the destination. It can be used later on to get an instance of that destination. It must be unique for the global account.                                                         |
|         |  Note For the purposes of the example listed in this document, use pptest as value.                                                                                                                 |
| URL     | The URL of the protected resource in the Cloud Foundry environment. See Configuring Application URLs. Example: https://<tenant-specific-route-for-your-business- app>.cfapps.eu10.hana.ondemand.com/ |
## Field Description
| Authentica- tion   | OAuth2SAMLBearerAssertion                                                                                                                                                                                                                                                                                                                                                              |
|--------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Proxy Type         | Internet                                                                                                                                                                                                                                                                                                                                                                               |
| Audience           | Copy the value of entityID property of the SAML 2.0 metadata representing your subaccount in the Cloud Foundry environment.                                                                                                                                                                                                                                                            |
|                    |  Tip You can open the metadata of the subaccount in the Cloud Foundry environment using the following URL: https://<your subaccount's subdomain>.authentication.<region host>/ saml/metadata Example: https://demo.authentication.eu10.hana.ondemand.com/saml/metadata For the <region host> , see Regions and API Endpoints Available for the Cloud Foundry Environ- ment [page 19]. |
| Client Key         | In the cloud cockpit, navigate to the application in the Cloud Foundry environment ( <path to your subaccount> Spaces <your space> Applications <your application> ). Open Environment Variables . Copy the value of the clientid property in VCAP_SERVICES xsuaa credentials .                                                                                                        |
## Field Description
| Token Serv- ice URL        | Get the token service URL from the SAML 2.0 metadata representing your subaccount in the Cloud Foundry environment. The token service URL is defined in the Location attribute of the element marked as AssertionConsumerService , like this : <md:AssertionConsumerService Location=" <Token Service URL> " Binding="urn:oasis:names:tc:SAML:2.0:bindings:URI" index="1"/>                                                                                                                |
|----------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
|                            |  Tip You can open the metadata of the subaccount in the Cloud Foundry envirnoment using the following URL: https://<your subaccount's subdomain>.authentication.<region host>/ saml/metadata Example: https://demo.authentication.eu10.hana.ondemand.com/saml/metadata For the <region host> , see Regions and API Endpoints Available for the Cloud Foundry Environ- ment [page 19]. Example of token service URL: https://demo.authentication.eu10.hana.ondemand.com/oauth/token/alias/ |
| Token Serv- ice User       | In the cloud cockpit, navigate to the application in the Cloud Foundry environment ( <path to your subaccount> Spaces <your space> Applications <your application> ). Open Environment Variables . Copy the value of the clientid property in VCAP_SERVICES xsuaa credentials .                                                                                                                                                                                                            |
| Token Serv- ice Pass- word | In the cloud cockpit, navigate to the application in the Cloud Foundry environment ( <path to your subaccount> Spaces <your space> Applications <your application> ). Open Environment Variables . Copy the value of the clientsecret property in VCAP_SERVICES xsuaa credentials .                                                                                                                                                                                                        |
| System User                | Empty.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
4. Save the changes.