Principal Propagation

Principal Propagation is a mechanism on SAP Business Technology Platform that allows a user's identity (the "principal") to be forwarded from one application or service to another, preserving the original user context across system boundaries. Developers use it to enable inbound communication via a business user so that downstream systems can apply the correct authorizations for that specific user rather than a generic technical user. It is also applied in tightly coupled development scenarios and can be configured using protocols such as SAML Bearer Assertion or OAuth 2.0 SAML Bearer Assertion Grant to propagate user information between applications or services.