onedevatlasBeta
Browse the atlas
AllBTPCAPUI5ABAP
SampleSampletypeA worked example you read or clone. Evidence: it demonstrates, it never provides.See every one →What this type is →by SAPby SAPoriginPublished by SAP itself. A visible facet, never an input to a reading — a dormant official plugin reads exactly like a dormant independent one.See every one →Reference

teched2023-XP185v

An SAP hands-on session that applies SAP's published BTP security recommendations to a live trial account, from multi-factor authentication to the audit log and administrative authorizations.

SAP's BTP security recommendations sit in the SAP Help Portal to help customers meet their compliance goals and secure their business, and this session applies them in a trial account. Exercise 1 enables multi-factor authentication for an SAP Build Apps application with a time-based one-time-password app such as Google Authenticator or Microsoft Authenticator; exercise 2 manages obsolete administrators, defines a custom password policy and keeps self-registration and social sign-on disabled; exercise 3 subscribes to, configures and reads the SAP Audit Log Viewer service; and an optional exercise 4 moves Cloud Identity Services administration onto authorization policies and removes the classic authorization for reading users. It takes active trial accounts for SAP BTP in the US East (VA) region and for Cloud Identity Services on the ondemand.com domain, and the README warns that switching between users works more reliably in a browser's incognito mode.

GitHub24 ★

Facts

Last pushLicenceApache-2.0

Where it sits

Lives in
BTP/BAIP
Demonstrates
AuthenticationBTPAuthenticationcapabilityEstablishing who is calling: validating credentials or tokens, resolving the user, and making that identity available to the application. [Authorization](capability:authorization) decides what that identity may do; [identity provisioning](capability:identity-provisioning) manages its lifecycle across systems.Audit loggingBTPAudit loggingcapabilityRecording who touched personal or sensitive data, in a form an auditor accepts, without hand-writing it in every handler. It is often confused with application logging, which records what the code did rather than who accessed what.AuthorizationBTPAuthorizationcapabilityDeciding who may read or change what, at service, entity and instance level — role checks, forwarded user context, and restrictions evaluated as query filters rather than after the fact.
Requires
Cloud Identity ServicesCloud Identity Servicesartifactthe identity service the exercises configure, from multi-factor authentication to the optional authorization policies; the README asks for an active trial of it on the ondemand.com domain.

Who is behind it

SAP SamplesSAP SamplesOrganisationMaintains this
In the atlas: maintains 222@SAP-samplesmaintainerAjinkya PatilPersonContributes to this
In the atlas: contributes to 112@ajinkyapatil8190chcohrsPersonContributes to this
In the atlas: contributes to 5@chcohrsjadolfPersonContributes to this
In the atlas: contributes to 5@jadolf3 contributors

What it declares

Every artifact

Type
Sample
Origin
By SAP
Use as
A reference

As a sample

Form
Workshop or CodeJam material

Connections4

README

quoted from SAP-samples/teched2023-XP185v under Apache-2.0, read
SAP-samples/teched2023-XP185v/README.mdOn GitHub

REUSE status

Get Hands-On Security Recommendations for Your SAP BTP Environment

Description

This repository contains the material for the Get Hands-On Security Recommendations for Your SAP BTP Environment session.

Overview

In this session attendees will learn about the security recommendations for BTP services and how to implement them. The SAP BTP Security Recommendations are available in the SAP Help Portal in the sections for the SAP Business Technology Platform. These recommendations for the configuration of SAP BTP services help customers meet their compliance goals and secure their business.

Requirements

The requirements to follow the exercises in this repository are active trial accounts for SAP BTP and for the SAP Cloud Identity Services.

First you have to get your SAP BTP trial account. Follow these instructions and choose the region "US East (VA)": Get a Free Account on SAP BTP Trial

Then activate your SAP Cloud Identity Services trial. Follow the instructions in this blog: SAP Cloud Identity Services offered as Trial Version 💡Ensure that you choose the default domain "ondemand.com", as "cloud.sap" is currently not supported on the trial landscape.

💡You should have access to your mailbox, which you used while registering for your BTP trial account in order to activate your SAP Cloud Identity Services trial account.

Finally, install a Time-based One-Time-Password (TOTP) authentication application (such as Google Authenticator or Microsoft Authenticator) on your mobile device and familiarize yourself with the process to create accounts in the app.

Now you are ready to start the exercises.

💡In some of the exercises you will be asked to switch from one user to another. This works more reliable if you use the Incognito mode of your browser. Without the Incognito mode, you may run into situations where you are authenticated automatically with the wrong user.

Exercises

IMPORTANT

Your repo must contain the .reuse and LICENSES folder and the License section below. DO NOT REMOVE the section or folders/files. Also, remove all unused template assets (images, folders, etc) from the exercises folder.

Contributing

Please read the CONTRIBUTING.md to understand the contribution guidelines.

Code of Conduct

Please read the SAP Open-Source Code of Conduct.

How to obtain support

Support for the content in this repository is available during the actual time of the online session for which this content has been designed. Otherwise, you may request support via the Issues tab.

License

Copyright (c) 2025 SAP SE or an SAP affiliate company. All rights reserved. This project is licensed under the Apache Software License, version 2.0 except as noted otherwise in the LICENSE file.

Apache-2.0, read

Details

Sources3
Added by handdiscovered herechecked
github.com/SAP-samples/teched2023-XP185vtree, pushes, contributors, CIchecked
README.mdquoted, and what the entry declareschecked

Sources are graph entities: the same page may back several entries, and an unreachable source flags every row that rests on it.

Compatibility and provenance
discovered viaAdded by hand
first seen in the atlas
ecosystem and domainbtp, security-and-compliance
Contributors3
Ajinkya Patilchcohrsjadolf

From the repository’s contributor list, .

History in the atlas1
  1. First seen.
For your agent
Ref
artifact:sap-samples-teched2023-xp185v
JSON
/artifacts/sap-samples-teched2023-xp185v.json
MCP
Connecting an agent