Risk
Too many identity providers or missing emergency access make secure platform administration harder.
BTP
Settings and priorities
| Technology / priority | Parameter or mechanism | Setting and purpose |
|---|---|---|
| BTP Standard | Custom platform IdP | Global account, subaccounts and Cloud Foundry Uses a custom identity provider for administration. |
| BTP Standard | Custom application IdP | Business users Provides separate authentication for business applications. |
| BTP Extended | Number of active IdPs | Limit to those required Reduces the number of trust relationships. |
| BTP Standard | Emergency administrator from default IdP | At least one per global account, subaccount and CF organization Maintains access when the custom IdP is unavailable. |
How to verify
- Inventory active identity provider relationships.
- Separate platform users from business users.
- Verify controlled emergency accounts.
- Test loss of access to the corporate identity provider.