Preface

13

Target Audience

13

Notes on Reading this Book

13

Structure of the Book

14

Summary

15

1 Introduction to SAP BTP

17

1.1 History and Positioning

19

1.2 License Models, Service-Level Agreements, and Important Documents

22

1.3 Global Accounts and Subaccounts

26

1.4 SAP Discovery Center

29

1.5 Entitlements and Service Plans

36

1.6 Best Practices

40

1.6.1 Structure of a Governance Model

41

1.6.2 Structure of an Account Model

44

1.6.3 Setting Up a Security and Compliance Model

50

1.6.4 Reference Architectures

52

1.7 Troubleshooting

53

1.8 Resources

55

1.9 Summary

56

2 User Administration

57

2.1 Security and Authorizations

57

2.1.1 Basics of Secure Communication

58

2.1.2 Authentication

62

2.1.3 Authorization

71

2.2 SAP Cloud Identity Services

72

2.2.1 Identity Authentication

72

2.2.2 Identity Provisioning

101

2.3 Summary

109

3 Advanced Identity Authentication Service Topics

111

3.1 SAML 2.0

112

3.2 OpenID Connect

114

3.3 Practical Example: Identity Authentication as a Proxy to Microsoft Entra ID

118

3.3.1 Integrate Microsoft Entra ID into Identity Authentication with SAML 2.0

118

3.3.2 Integrate Microsoft Entra ID into Identity Authentication with OpenID Connect

131

3.4 Practical Example: Two-Factor Authentication/Risk-Based Authentication

144

3.5 Practical Example: Conditional Authentication

150

3.6 Summary

153

4 Global Account Administration

155

4.1 Access to the Global Account

156

4.2 Authentication and Authorization Management

157

4.2.1 User Management

157

4.2.2 Roles and Role Collections

166

4.2.3 Practical Example: Setting Up Authentication via SAP Cloud Identity Service

169

4.3 Directories

175

4.4 Boosters

182

4.5 System Landscape

188

4.6 Resource Provider

190

4.7 Entitlements

192

4.8 Usage Monitoring

193

4.9 Summary

196

5 Subaccount Administration

199

5.1 Creating a Subaccount

199

5.2 Authentication and Authorization

204

5.2.1 User Administration

206

5.2.2 Trust Configuration and Other Identity Providers

208

5.2.3 Roles and Role Collections

215

5.2.4 Practical Example: Authentication on a Subaccount with Identity Authentication

227

5.2.5 Practical Example: Subaccount with Microsoft Entra ID as the Identity Provider

233

5.3 Organizations, Spaces, and Quotas

241

5.4 Subscriptions and Services

247

5.5 SAP Audit Log Viewer Service for SAP BTP

249

5.6 Summary

250

6 Cloud Connector

253

6.1 Installation and Configuration

253

6.1.1 Prerequisites

254

6.1.2 Installing the Cloud Connector

255

6.1.3 Initial Steps

261

6.1.4 Configuring the User Interface

264

6.1.5 Cloud Configuration

267

6.1.6 On-Premise Configuration

270

6.1.7 Reporting Configuration

274

6.1.8 Advanced Configuration

275

6.2 Ensuring High Availability

276

6.3 SAP Connectivity Service

286

6.4 Summary

295

7 Activating and Setting Up SAP Business Application Studio

297

7.1 Setting Up SAP Business Application Studio

297

7.2 Granting Authorizations

303

7.3 Working with Dev Spaces

304

7.4 Using External Systems

305

7.5 Versioning with Git Repositories

311

7.6 Summary

321

8 Activating and Setting Up SAP Integration Suite

323

8.1 Functions and History of SAP Integration Suite

323

8.2 Creating a Subaccount and Assigning Entitlements

326

8.3 Creating a Subscription

329

8.4 Activating Capabilities

334

8.5 Instantiating the SAP Process Integration Runtime

341

8.6 Create Service Key

344

8.7 Summary

347

9 Activating and Setting Up SAP Cloud Transport Management for SAP Integration Suite

349

9.1 Activating SAP Cloud Transport Management

350

9.2 Deploying SAP Cloud Transport Management

352

9.3 Creating a System Landscape in SAP Cloud Transport Management

361

9.4 Adding the SAP Content Agent Service to a Subaccount

365

9.5 Configuring SAP Cloud Transport Management in SAP Integration Suite

380

9.6 Summary

389

10 Activating and Setting Up SAP Build

391

10.1 SAP Build Apps

391

10.1.1 Installation

393

10.1.2 Configuration

399

10.2 SAP Build Process Automation

404

10.3 SAP Build Work Zone

412

10.3.1 Initial Steps

412

10.3.2 Run the Booster

418

10.3.3 Configuring SAP Build Work Zone, Advanced Edition

422

10.4 SAP Build Code

438

10.5 Summary

444