How to access SAP Marketing Cloud

This article introduces the knowledge of "how to access SAP Marketing Cloud". In the operation of actual cases, many people will encounter such a dilemma, so let the editor lead you to learn how to deal with these situations. I hope you can read it carefully and be able to achieve something!

The structure diagram of the SAP official website

The figure above shows the Authentication process that users go through when they visit the SAP cloud platform.

The example used in this article is for users to access the SAP Marketing Cloud rather than the SAP cloud platform, but the principle is the same.

Step 1: the user initiates a service request to Service provider.

Step 2:Service provider redirects the request to the tenant providing authentication, which in my case is SAP ID service, or account.sap.com.

Here Marketing Cloud and SAP ID Service are configured to trust each other.

302 redirect field in request 1 response header: https://let-me-in.hybris.com/saml/idp-redirection?httpd_location=https://hybris.com/sap/bc/ui5_ui5/ui2/ushell/shells/abap/FioriLaunchpad.html

Account ID service (accounts.sap.com) redirected to SAP cloud platform:

Https://accounts.sap.com/saml2/idp/sso?sp=com:ydcHybris:spring:sp2&RelayState=https://hybris.com/sap/bc/ui5_ui5/ui2/ushell/shells/abap/FioriLaunchpad.html

Step 3:IDP sends a html page to the user, asking for a user name and password.

If you look at the source code of this html, you can find that in addition to the two input fields of user name and password, there are also some implicit fields, as highlighted in the following figure. These fields are generated on the server side when IDP returns to the user and are used for the IDP server-side authentication process in step 5:

XsrfProtection

SpId

SpName

Authenticity_token

IdpSSOEndpoint

Step 4: after the user enters the user name and password, click the login button, and the information is sent to the server side of SAP ID service through HTML form:

Url of sso request: https://accounts.sap.com/saml2/idp/sso

Url of the second uppercase SSO request: https://let-me-in.demo.hybris.com/saml/SSO

The server side of the step 5:SAP ID service completes the verification and sends the SAML assertions as a response to the user.

The SAML response is in XML format and is structured as follows:

Step 6 is the last step. Once you get the SAML assertion, the user can access the service provider.

That's all for "how to access SAP Marketing Cloud". Thank you for reading. If you want to know more about the industry, you can follow the website, the editor will output more high-quality practical articles for you!