{"ref":"artifact:btp-oauth","page":"/artifacts/btp-oauth","json":"/artifacts/btp-oauth.json","generated":"2026-10-26","drafted_with_ai":true,"entity":{"id":"btp-oauth","name":"OAuth 2.0 on SAP BTP","artifact_type":"service","ecosystem":"btp","domain":"security-and-compliance","origin_ring":"sap-official","description":{"one_line":"OAuth 2.0 protection for applications and APIs on SAP BTP, listed in Neo regions: the authorization code grant for web applications and the client credentials grant for API and IoT scenarios.","short":"OAuth 2.0 grant flows for applications and APIs in Neo regions","what_it_solves":"OAuth 2.0 on SAP BTP sets up authentication and authorisation on the OAuth 2.0 protocol with two grant flows. The authorization code grant is for web applications: access permissions are flexible and can be revoked, and credentials are not stored at a third-party location. The client credentials grant issues an access token on the client's credentials alone, with no user interaction, for protecting an API or an IoT device. The one plan in the Discovery Center record, Default, is listed in Neo regions and in SAP's Riyadh and Moscow regions, and in no Cloud Foundry environment; in the Neo regions the service is being removed from the Eligible Cloud Services List on December 31, 2028, and a subscription cannot be kept past that date."},"links":{"homepage":"https://discovery-center.cloud.sap/serviceCatalog/oauth-20","docs":"https://help.sap.com/viewer/ea72206b834e4ace9cd834feed6c0e09/Cloud/en-US/e526ca3998954d62833ffd5a19ec4523.html"},"source_available":false,"provides":[{"capability":"capability:authentication","what_it_does":"Issues OAuth 2.0 access tokens through the authorization code grant for web applications and the client credentials grant for clients with no user present.","facets":[{"key":"no_user_token","value":true,"source":{"url":"https://discovery-center.cloud.sap/servicecatalog/api/v1/services/e355c898-e916-411a-aff8-61eb6949b946","title":"SAP Discovery Center — OAuth 2.0 on SAP BTP","checked":"2026-10-15","quote":"Enable grant of an access token based on the client credentials only, without user interaction."}}],"sources":[{"url":"https://discovery-center.cloud.sap/servicecatalog/api/v1/services/e355c898-e916-411a-aff8-61eb6949b946","title":"SAP Discovery Center — OAuth 2.0 on SAP BTP","checked":"2026-09-15","quote":"Set up authorization and authentication based on the OAuth 2.0 protocol."},{"url":"https://discovery-center.cloud.sap/servicecatalog/api/v1/services/e355c898-e916-411a-aff8-61eb6949b946","title":"SAP Discovery Center — OAuth 2.0 on SAP BTP","checked":"2026-09-15","quote":"Enable grant of an access token based on the client credentials only, without user interaction."}]},{"capability":"capability:authorization","what_it_does":"Grants a client access to an application or API through OAuth 2.0 access permissions that can be revoked, instead of shared credentials.","sources":[{"url":"https://discovery-center.cloud.sap/servicecatalog/api/v1/services/e355c898-e916-411a-aff8-61eb6949b946","title":"SAP Discovery Center — OAuth 2.0 on SAP BTP","checked":"2026-09-15","quote":"Enable flexible access permissions, and easy permission revokation."},{"url":"https://discovery-center.cloud.sap/servicecatalog/api/v1/services/e355c898-e916-411a-aff8-61eb6949b946","title":"SAP Discovery Center — OAuth 2.0 on SAP BTP","checked":"2026-09-15","quote":"Suitable for API protection and IoT scenarios."}]}],"lifecycle":[{"state":"retirement-announced","effective":"2028-12-31","scope":"The regions the Discovery Center record marks as Neo","source":{"url":"https://discovery-center.cloud.sap/servicecatalog/api/v1/services/e355c898-e916-411a-aff8-61eb6949b946","title":"SAP Discovery Center — OAuth 2.0 on SAP BTP, plan availability","checked":"2026-10-15","quote":"This Cloud Service, in the region/data center marked as \"Neo\", is being removed from the Eligible Cloud Services List on December 31, 2028 (\"Retired Service\")."}}],"maintainers":["actor:sap"],"drafted_with_ai":true,"provenance":{"discovered_via":[{"source":"source:curator"}],"first_seen":"2026-09-15"},"history":[{"date":"2026-10-15","field":"lifecycle","from":null,"to":"retirement-announced, effective 2028-12-31","reason":"The announced end was only in the paragraph, so a reader comparing the authentication options behind the BTP door met this one as an equal of the others. SAP's catalogue record states it, and the field is where the statement is shown as the maker's own."},{"date":"2026-10-15","field":"provides[capability:authentication].facets","from":null,"to":"no_user_token","reason":"The BTP door now compares its authentication options on whether a token can be had with no person present. The catalogue sentence about the client credentials grant states it for this service, and it was read again on this date."}]},"effective_normative_relations":[],"readings":{"liveness":{"label":"Deprecation","tier":"unknown","evidence":"not crawled"},"continuity":{"label":"Beta","tier":"unknown","evidence":"not crawled"},"reach":{"label":"Regions","tier":"reported","evidence":"not crawled"},"support":{"label":"Support","tier":"unknown","evidence":"not crawled"}},"signals":null,"edges":{"maintainers":[{"ref":"actor:sap","name":"SAP","json":"/actors/sap.json"}],"contributors":[],"explained_by":[],"alternative_to_this":[],"needed_by":[{"ref":"artifact:arc-mcp-arc-1","name":"arc-1","json":"/artifacts/arc-mcp-arc-1.json","requirement":"conditional","role":"authentication","condition":"OAuth 2.0 browser-based login is used for BTP ABAP Environment service-key development"}],"available_via":[],"parts":[],"add_ons":[],"answered_through_parts":[]}}