Symptom
When subscribing any application like SAP Secure Login Service, Work zone fails in SAP BTP subaccount with following error :
You haven't configured your subaccount (for business users) to trust a tenant of SAP Cloud Identity Services using OpenID Connect. SAML trust isn't supported for this service.
To subscribe this application, use the Establish Trust option to configure trust between your subaccount and SAP Cloud Identity Services.

Read more...
Environment
- SAP BTP, Cloud Foundry runtime and environment
- SAP Cloud Identity Services
Product
SAP S/4HANA 1809
Keywords
Subscription fails, Trust configuration, OIDC, Instance and subscription, XSUAA, BTP, Subaccount, application subscription, for any application like Secure login service or Workzone. , KBA , BC-CP-CF-SEC-IAM , UAA, Authentication, Authorization, Trust Mgmnt , Problem
About this page
This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).Search for additional results
Visit SAP Support Portal's SAP Notes and KBA Search.
SAP Knowledge Base Article - Preview