SAP Knowledge Base Article - Public

2519989 - How do I map Roles Using SAML Attributes in SAP Analytics Cloud (BOC)?


How do I map Roles Using SAML Attributes in SAP Analytics Cloud?


  • SAP Analytics Cloud 2018.20 +
  • Custom Identity Provider


Cloud Foundry (CF/AWS):

  1. Customer must enable the steps outlined in document 'Enabling a Custom SAML Identity Provider' on their custom IDP.
  2. Customer must ensure that they map the attribute name "Groups" to "sac".



  1. Submit an SAP support ticket using the component: LOD-ANA-BI. In the support ticket, indicate that you want to set up user profiles and role assignment based on custom SAML attributes and include your SAP Analytics Cloud tenant URL.
  2. Once SAP Support have confirmed the Identity Provider (Idp) switch to SAML, the customer must then enable the steps outlined in document 'Mapping Roles Using SAML Attributes'.

See Also

Your feedback is important to help us improve our knowledge base.


SAP Cloud for Planning, sc4p, c4p, cforp, cloudforplanning, EPM-ODS, Cloud for Analytics, Cloud4Analytics, CloudforAnalytics, Cloud 4 Planning, BOC, SAPBusinessObjectsCloud, BusinessObjectsCloud, BOBJcloud, BOCloud., SAC, SAP AC, Cloud-Analytics, CloudAnalytics, SAPCloudAnalytics, role, automated, attribute, mapping, custom , KBA , LOD-ANA , SAP Analytics Cloud , LOD-ANA-BI , SAP Analytics Cloud - Business Intelligence (BOC) , LOD-ANA-PL , SAP Analytics Cloud – Planning (BOC) , LOD-ANA-BR , SAP Analytics Cloud - Digital Boardroom , LOD-ANA-PR , SAP Analytics Cloud – Predictive (BOC) , How To


SAP Analytics Cloud 1.0