Principal propagation gives the ability to forward the user context of the message unchanged from the sender to the receiver.
In this blog post, lets discuss on how to implement SSO with principal propagation in a way that it trusts the requests coming via the cloud connector configured.
There are two levels of trust that needs to be configured. First, the Cloud Connector needs to identify itself with the system certificates for the HTTPS. Second, we need to allow this identity to propagate accordingly, so that a short lived X.509 certificate could be forwarded.
Finally, we map the user in the target system – the SAP S/4HANA on-premise system, in this case.