Menu

Articles

Picked up · Authorization

SAP Cloud ALM: where authorisations across SAP’s cloud portfolio are heading

SAP sets out where authorisations in SAP Cloud ALM are going: first finer-grained role templates and custom role collections, then identity and authorisation managed centrally in SAP Cloud Identity Services, and finally attribute-based access via AMS. The genuinely interesting sentence is tucked away in the middle: SAP cloud …

community.sap.com ↗picked up by SigiDEENPicked up · SAP BTP

SAP BTP becomes SAP Business AI Platform: the announcement from Sapphire 2026

At SAP Sapphire 2026, SAP folded SAP Business Technology Platform, SAP Business Data Cloud and SAP Business AI into one. The new name: SAP Business AI Platform. Along with it come the SAP Knowledge Graph as business context for agents, Joule Studio as the workbench, and more than …

news.sap.com ↗picked up by SigiDEENPicked up · Identity

Microsoft Entra ID and SAP S/4HANA: API access by token exchange, not a second password

The application signs in with Microsoft Entra ID and now wants to call SAP S/4HANA APIs. The worst answer is a second password. The better one is in this post: API Management as the control point, Identity Authentication exchanging the Entra token via JWT bearer exchange (RFC 7523), …

community.sap.com ↗picked up by SigiDEENPicked up · SAP BTP

SAP Build Apps is being retired: what existing projects need now

SAP Build Apps is vanishing into the great SAP Build melting pot and will no longer exist as a product in its own right. Existing contracts run their full term, SLAs and maintenance included. So far, so reassuring.

community.sap.com ↗picked up by SigiDEENPicked up · Identity

Deletion in Identity Provisioning: what applies and what takes precedence

Adding things is easy. Deleting them makes people nervous, and in Identity Provisioning rightly so: properties such as ips.delete.existedbefore.entities, the deleteEntity scope, filters and conditions all interact, and precedence decides. Important if SAP AS ABAP is your target system: since 27 January 2026, the job also removes group …

community.sap.com ↗picked up by SigiDEENPicked up · Authorization

From XSUAA to AMS: the whole authorisation flow, end to end

Authentication over here, authorisation over there, principal propagation somewhere in between. That is how security on SAP BTP usually gets explained. This post walks the whole route in one go: corporate IdP, Identity Authentication, Authorization Management Service (AMS), the CAP application and finally the ABAP authorisation in SAP …

community.sap.com ↗picked up by SigiDEENPicked up · Cloud

One Kyma cluster, several subaccounts: mapping namespaces cleanly

A Kyma cluster for every application is a fine idea with a hefty price tag. By default, every service instance lands in the subaccount where the cluster was created. The post shows how to point the SAP BTP Service Operator at a separate provider subaccount for each namespace, …

community.sap.com ↗picked up by SigiDEENPicked up · Authorization

Cloud Integration: monitoring-only access to selected iFlows with Access Policies

The forum question: how does a group get to see the status of selected iFlows, with no design access and no payloads? The answer is Access Policies. The catch: anything not covered by a policy is visible to everyone with PI_Business_Expert.

community.sap.com ↗picked up by SigiDEENPicked up · SAP BTP

Keeping an eye on SAP BTP costs: budgets and the credit forecast are now live

Budgets and the forecast for cloud credits have left beta and are now generally available. On top of that, the SAP BTP cockpit gains a new ‘Overview’ tab under ‘Costs and Usage’: monthly costs, trends and recommendations at a glance. So you spot a credit overrun before Finance …

community.sap.com ↗picked up by SigiDEENPicked up · Identity

Identity Provisioning: which connector does what, plus a deadline of 30 November 2026

Identity Provisioning has two connectors that could pass for twins: Identity Authentication (version 2) and Local Identity Directory. The post explains which one is meant for what. And, almost in passing, it mentions that the SCIM API of the old Identity Authentication connector (version 1) will be switched …

community.sap.com ↗picked up by SigiDEENPicked up · SAP BTP

Activating Joule Studio: prerequisites and licensing, straight from the product team

‘How do I get Joule Studio?’ Sounds like a simple question. The product managers still need an entire post to answer it: an SAP Build licence, SAP Build Process Automation on the build-default plan, and a separate route for every starting point. The good news: custom Joule skills …

community.sap.com ↗picked up by SigiDEENPicked up · Integration

How many tenants does SAP Integration Suite need? SAP’s five-stage answer

One tenant for everything is wonderfully cheap. Right up until a test iFlow sends out real purchase orders. SAP describes five stages for SAP Integration Suite landscapes: from the lonely experimental tenant through Dev, Test and Prod, tenants per business unit and regional set-ups with Edge Integration Cell, …

community.sap.com ↗picked up by SigiDEEN