Description

The OAuth IdP API /oauth/idp will reach end of development on December 9, 2022 and will be deleted on May 14, 2027.See More

Detailed Description

The OAuth IdP API /oauth/idp is being deprecated and will be deleted on May 14, 2027. This API was previously used to generate SAML assertions for authentication but is considered unsafe because it requires users to pass private keys through an API call. SAP is encouraging customers to adopt secure alternative methods for generating SAML assertions, such as OpenID Connect (OIDC) or other secure authentication methods.

Impact Assessment

Organizations currently using the /oauth/idp API for SAML assertion generation must plan migration to alternative authentication methods before May 14, 2027. End of Development occurred on December 9, 2022, and End of Maintenance on June 2, 2023, meaning no further bug fixes or patches will be provided. Customers should begin planning immediately to adopt secure alternatives such as OpenID Connect (OIDC) or other secure SAML assertion generation methods to avoid service disruption.

Test Recommendations