Now accepting guest editorial from SAP, Oracle, Workday and ServiceNow practitioners.Pitch a guide
The Sign-Off Table

Academy · BTP & Extensions · 200 Practitioner

Securing BTP Applications: Trust, Role Collections and Authorization

Covers security for applications on SAP BTP: establishing trust with SAP Cloud Identity Services and a corporate identity provider, the authorization model of scopes, role templates, roles and role collections, enforcing access in CAP services with @requires and @restrict, assigning role collections through identity provider groups, and testing authorization positively and negatively. Follows the security setup of Contoso Motor Co.'s fleet order status app.

  • 48 minutes
  • 5 lessons + quiz
  • BTP & Extension Developer, Security & GRC Specialist
Start the course
  1. 01Trust and identity providers9 min
  2. 02Scopes, roles and role collections9 min
  3. 03Enforcing authorization in CAP10 min
  4. 04Assigning role collections10 min
  5. 05Testing authorization10 min
  6. QZCourse quiz12 questions

What you’ll be able to do

  • Configure trust between a subaccount and an identity provider
  • Explain scopes, role templates, roles and role collections
  • Enforce authorization in CAP services, including instance-based rules
  • Assign role collections to users and identity provider groups
  • Test positive and negative authorization in BTP apps

Sources and further reading