Secrets rotation

Rotating credentials a running service depends on — service keys, destination credentials, API tokens — without downtime and without redeploying. Distinct from storing secrets, which the platform handles.

Overview

InBTP/BAIPassessed 2026-09-09

SAP SHIPS

The Credential Store holds passwords, keys and keyrings for an application and serves them over a bound REST API, so rotation happens in the store; the Key Management Service adds customer-managed keys for the platform.

SAP Credential Store

SourceSAP Credential Store — SAP btp-service-metadata v1checked 2026-09-09

THE COMMUNITY ADDS

No community artifact is documented here.

InCAPassessed 2026-08-31

Rotating credentials a running CAP service depends on — service keys, destination credentials, API tokens — without downtime and without redeploying. Distinct from storing secrets, which the platform handles.

SAP SHIPS

Present, not yet described.

THE COMMUNITY ADDS

No community artifact is documented here.

Artifacts1

1 of 1 artifacts

ArtifactSignals

Services1

SAP Credential StoreVault for an application's passwords, keys and keyrings

Signals

none

Details

Coverage

statecore only, BTP/BAIP

assessed2026-09-09

state in CAPcore only, assessed 2026-08-31

domainSecurity & Compliance

also inCAP

SourceSAP Credential Store — SAP btp-service-metadata v1checked 2026-09-09SourceSAP Key Management Service, Platform Extension — SAP btp-service-metadata v1checked 2026-09-09

For your agent

Ref: capability:secrets-rotation
JSON: /capabilities/secrets-rotation.json
MCP: Connecting an agent