The resource URN of the SAP Identity Authentication Service (IAS) dependency application that the requested token is issued for.

Data Type

string

Default Value

""

Remarks

When this property is set, the connector sends its value as the resource parameter of the token request to the IAS token endpoint. IAS uses this value to identify the dependency application that the requested token is issued for.

This property is optional. Set it if your IAS tenant uses a two-application setup, in which a Security Assertion Markup Language (SAML) application is registered as a dependency of the OpenID Connect (OIDC) application that the connector authenticates against. In this setup, the property identifies the SAML dependency application that the exchanged SAML assertion is issued for, and authentication fails without it. If you leave this property empty, the token exchange is unchanged, so single-application setups continue to work.

Provide the resource URN in the following format:

urn:sap:identity:application:provider:name:<DependencyName>

Replace <DependencyName> with the name of the dependency that references the SAML application, as configured on your IAS OIDC application. You can find this name in the SAP IAS administration console: open the OIDC application and navigate to Application APIs > Dependencies.