Any option to disable "Available for User Logon" on the default "SAP ID Service" trust configuration via terraform ?

[eshirke]

Below are the recommended configuration settings by Microsoft in BTP for better user experience, is there any option to disabled it via terraform?

In BTP:

Set up a trust configuration towards IAS (SAP doc) and ensure that "Available for User Logon" and "Create Shadow Users During Logon" are both enabled.
Optionally, disable "Available for User Logon" on the default "SAP ID Service" trust configuration so that users always authenticate via Microsoft Entra ID and aren't presented with a screen to choose their identity provider.

[lechnerc77]

@eshirke there is no direct way to achieve this as the SAP ID service is automatically assigned to the subaccount. Consequently the setup needs to be achieved in two steps:

1. Create the setup as described which leads to the setup you describe
2. Import the default IDP and adjust the setting. Sample code looks like this: https://github.com/SAP-samples/btp-terraform-samples/blob/310160f6ac1e52de92c369c854c33e67461cb357/released/discovery_center/mission_4024/step2/main.tf