title: Transfer SCP Cloud User Information securely to ABAP
body: <p>I have a UI5 Application hosted on SAP NEO which retrieves Data via an ABAP OData Service.</p>
  
  <p>Users are maintained in SAP Cloud Identity and mapped with their Backenduser and the login is setup via Principal Propagation. This is all setup and works.</p>
  
  <p>I got requested to change the Application to enable External Sales Representatives without SAP Backend Users to use the application.</p>
  
  <p>The idea is to use one "technical user" with Basic Authentication instead of Principal Propagation.</p>
  
  <p>My question is what would be the way to identify the original Cloud Username in ABAP(since there sy-uname would be a technical user).</p>
  
  <ul>
  <li><p>Debugging in ABAP didn't reveal the original information and I am afraid the original User is not even passed to the Gateway</p></li>
  <li><p>The SAP Cloud User API (<a href="https://help.sap.com/viewer/65de2977205c403bbc107264b8eccf4b/Cloud/en-US/1de599bf722446849d2b2e10132df42a.html" rel="nofollow noreferrer">https://help.sap.com/viewer/65de2977205c403bbc107264b8eccf4b/Cloud/en-US/1de599bf722446849d2b2e10132df42a.html</a>) is not an option because the request could be manipulated in the browser </p></li>
  <li><p>I heard of another option using a Java Servlet. But I am afraid that means we have to setup there the whole OData Service again and with every change in the Gateway we have to adjust the Java Servlet as well, or is there maybe a proxy.</p></li>
  </ul>