Connecting Copilot Studio to SAP S/4HANA via MCP with per-user identity
ColdImportance2484 · reddit · 2026-10-26
A detailed write-up on securely connecting Microsoft Copilot Studio to SAP S/4HANA via the new SAP Integration Suite MCP Servers. Key challenge: client-credentials tokens work for testing but run everything under one technical user, breaking principal propagation and S/4HANA authorizations. The pattern uses SAP Cloud Identity Services (IAS) as trust bridge, OAuth 2.0/OIDC authorization code flow, a CPI MCP Gateway validating user tokens, Cloud Connector + X.509 principal propagation, and CERTRULE mapping so the OData call runs under the actual ABAP user. Result: two users asking the same question get different answers based on their authorizations — no custom code, pure configuration. Full architecture and step-by-step flow included.
More from coding & agent
- Recreating Kurzgesagt's Entire Channel in 10 Minutes with a Claude Prompt — zack_overflow · 2026-10-26
- DeepSeek V4.1 Flash with OpenCode Go: cheap unlimited coding agent with Opus validating results — haider1 · 2026-10-26
- No coding agent vendor has shipped DeepSeek's open-sourced DeepInfer yet — pingzawa162 · 2026-10-26
- Agent payments are already live via x402 — but what happens when a transaction stalls mid-payment? — SpreadUsual4084 · 2026-10-26
- Storyboard grids tame MiniMax reference-to-video for complex music video scenes — Cheap_Credit_3957 · 2026-10-26
- Base44 fine-tuned Qwen 2B in half a day for prompt autocomplete serving millions — tristanbob · 2026-10-26