Picked up · Authorization DEEN
From XSUAA to AMS: the whole authorisation flow, end to end
community.sap.comJana Subramanian, SAP · 3 February 2026 From XSUAA to AMS: The Practical Path to Stronger Authorization Go to source ↗
Picked up by Siegfried Zeilinger
·
AI-assisted: editing, translation
Diesen Beitrag auf Deutsch lesen Why it's worth reading
Authentication over here, authorisation over there, principal propagation somewhere in between. That is how security on SAP BTP usually gets explained. This post walks the whole route in one go: corporate IdP, Identity Authentication, Authorization Management Service (AMS), the CAP application and finally the ABAP authorisation in SAP S/4HANA. Along the way it explains why AMS policies are finer-grained and easier to audit than plain XSUAA scopes.
AMS is the direction of travel. At last, someone has drawn the map.