{"ref":"content:ac-integrating-and-extending-joule","page":"/content/ac-integrating-and-extending-joule","json":"/content/ac-integrating-and-extending-joule.json","generated":"2026-10-26","drafted_with_ai":true,"entity":{"id":"ac-integrating-and-extending-joule","title":"Integrating and Extending Joule","url":"https://architecture.learning.sap.com/docs/ref-arch/464deb","content_type":"reference-architecture","explains":["artifact:sap-joule","artifact:sap-joule-studio-classic",{"ref":"capability:agent-tooling","applies_to":{"ecosystems":["btp","cap"]}},{"ref":"capability:authentication","applies_to":{"ecosystems":["btp","cap"]}}],"summary":"SAP's reference architecture for [SAP Joule](artifact:sap-joule) across SAP cloud applications: a request is checked against a Scenario Catalog of the applications' skills and a Knowledge Catalog answered by retrieval-augmented generation, combined with the user's roles and history, sent to an LLM available through the generative AI hub, and, where a Joule function is needed, turned into a call to the backend. Its identity page is the [authentication](capability:authentication) path: each user sits in the Identity Directory of [Cloud Identity Services](artifact:btp-cloud-identity-services) with a Global User ID, Identity Provisioning synchronises role assignments into SAP Build Work Zone, whose navigation service decides which functions a user may call, and the Destination service exchanges the user's token to call a function in the user's name. Its extension page covers [Joule Studio](artifact:sap-joule-studio-classic) in SAP Build, where Joule skills automate rule-based tasks over APIs and AI agents plan and reason with models and document grounding from [SAP AI Core](artifact:btp-ai-core), the ground [agent tooling](capability:agent-tooling) covers; a later Joule Studio page describes a managed Joule Studio Runtime on the SAP Business AI Platform, which has no entry here.","short":"SAP Joule across SAP cloud applications with skill catalogs","authors":["actor:sap-architecture-center"],"published":"2026-03-16","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/readme.md","title":"RA0024 readme.md in SAP/architecture-center","checked":"2026-09-15","quote":"Joule analyzes if the user-prompt is relevant for Joule’s Scenario Catalog. This catalog contains metadata of all available scenarios, functions, and skills of SAP cloud applications."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/readme.md","title":"RA0024 readme.md in SAP/architecture-center","checked":"2026-09-15","quote":"This process is based on Retrieval Augmented Generation for enterprise (RAGe) and lets the LLM generate an answer based and grounded on dedicated text that was previously retrieved."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/2-joule-iam/readme.md","title":"RA0024 2-joule-iam/readme.md in SAP/architecture-center","checked":"2026-09-15","quote":"SAP Cloud Identity Services use the Identity Provisioning Service to synchronize user and role data from the application and update user-role assignments in SAP Build Work Zone."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/2-joule-iam/readme.md","title":"RA0024 2-joule-iam/readme.md in SAP/architecture-center","checked":"2026-09-15","quote":"SAP Joule leverages the SAP BTP Destination Service to call the Joule Function / API in the name of the user (Principal Propagation)."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/3-extend-joule-with-joule-studio/readme.md","title":"RA0024 3-extend-joule-with-joule-studio/readme.md in SAP/architecture-center","checked":"2026-09-15","quote":"Joule Skills automate rule-based, repetitive tasks using APIs, seamlessly integrating into SAP to enhance productivity. AI Agents tackle complex challenges with advanced planning and reasoning, integrating both SAP and non-SAP systems and leveraging Joule Skills."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/3-extend-joule-with-joule-studio/readme.md","title":"RA0024 3-extend-joule-with-joule-studio/readme.md in SAP/architecture-center","checked":"2026-09-15","quote":"Additionally, customers can provision their own document grounding capabilities in AI Core leveraging the Retrieval Augmented Generation (RAG) service and integrate them into their AI Agents to ground them in specific data."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/5-joule-studio/readme.md","title":"RA0024 5-joule-studio/readme.md in SAP/architecture-center","checked":"2026-09-15","quote":"The Joule Studio Runtime is a fully managed execution environment on SAP Business AI Platform."}],"drafted_with_ai":true,"provenance":{"discovered_via":[{"source":"source:curator"}],"first_seen":"2026-09-15"},"published_on":"source:architecture-center","parts":[{"actor":"End user","key":"user","role":"starts with a query in the Joule client embedded in an SAP cloud application","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/readme.md","title":"RA0024 readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"The users start with their queries in the natively integrated Joule client embedded in our respective SAP cloud applications."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/2-joule-iam/readme.md","title":"RA0024 2-joule-iam/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"The user access SAP Joule."}]},{"actor":"Third-party identity provider","key":"idp","area":"idp","role":"corporate identity provider the login is redirected to, optional","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/readme.md","title":"RA0024 readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"**Third-party Identity Providers:** supports integration with external identity providers for enhanced security and user management (Optional)."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/2-joule-iam/readme.md","title":"RA0024 2-joule-iam/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"A common scenario would now redirect the authentication attempt to a 3rd party corporate Identity Provider."}]},{"ref":"artifact:sap-joule","key":"joule","role":"the core AI copilot service","area":"btp","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/1-joule-for-sap-s4-hana/readme.md","title":"RA0024 1-joule-for-sap-s4-hana/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"Joule Service: The core AI copilot service (entitlement: foundation plan)."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/readme.md","title":"RA0024 readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"**SAP Business Technology Platform** establishes the foundation for implementing and extending Joule capabilities with Joule and SAP Build Work Zone entitlements."}]},{"ref":"artifact:btp-cloud-identity-services","key":"cids","role":"user authentication and authorization, and Joule's user store","area":"btp","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/readme.md","title":"RA0024 readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"**SAP Cloud Identity Services** manages user authentication and authorization for secure access to your SAP Applications and Joule."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/2-joule-iam/readme.md","title":"RA0024 2-joule-iam/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"SAP Joule relies on these services, using SAP Cloud Identity Services as its user store, which can be shared with other SAP cloud applications through replication or direct access."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/1-joule-for-sap-s4-hana/readme.md","title":"RA0024 1-joule-for-sap-s4-hana/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"SAP Business Technology Platform (BTP): The central integration and extensibility platform. It hosts the following key services:"}]},{"ref":"artifact:btp-identity-provisioning","key":"ips","role":"synchronises user and role data from the applications","area":"btp","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/2-joule-iam/readme.md","title":"RA0024 2-joule-iam/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"SAP Cloud Identity Services use the Identity Provisioning Service to synchronize user and role data from the application and update user-role assignments in SAP Build Work Zone."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/1-joule-for-sap-s4-hana/readme.md","title":"RA0024 1-joule-for-sap-s4-hana/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"Identity Provisioning (IPS): Uses the connectivity (application) plan to sync users and roles from S/4HANA PCE to the BTP subaccount."}]},{"ref":"artifact:btp-build-work-zone-standard","key":"work-zone","role":"the Fiori Launchpad site that surfaces the Joule UI, and navigation across applications","area":"btp","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/1-joule-for-sap-s4-hana/readme.md","title":"RA0024 1-joule-for-sap-s4-hana/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"SAP Build Work Zone, standard edition: Provides the Fiori Launchpad site that surfaces the Joule UI (entitlement: foundation plan)."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/2-joule-iam/readme.md","title":"RA0024 2-joule-iam/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"SAP Joule uses SAP Build Work Zone for navigation across applications."}]},{"ref":"artifact:btp-destination","key":"destination","role":"calls the Joule Function in the name of the user","area":"btp","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/2-joule-iam/readme.md","title":"RA0024 2-joule-iam/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"SAP Joule leverages the SAP BTP Destination Service to call the Joule Function / API in the name of the user (Principal Propagation)."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/1-joule-for-sap-s4-hana/readme.md","title":"RA0024 1-joule-for-sap-s4-hana/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"A dedicated BTP Booster (\"Joule – End-to-End Setup Guide\") automates much of the complex BTP configuration, including service instance creation, Cloud Foundry enablement, and destination setup."}]},{"ref":"artifact:btp-connectivity","key":"connectivity","role":"integrates Joule Studio with other SAP BTP services and external applications","area":"btp","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/3-extend-joule-with-joule-studio/readme.md","title":"RA0024 3-extend-joule-with-joule-studio/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"Joule Studio integrates via the SAP Connectivity service with other SAP BTP services and external applications."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/3-extend-joule-with-joule-studio/readme.md","title":"RA0024 3-extend-joule-with-joule-studio/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"SAP BTP Connectivity integrates existing workflows with Joule Skills and AI Agents, enabling seamless, automated execution across SAP and non-SAP systems."}]},{"ref":"artifact:sap-cloud-connector","key":"cloud-connector","role":"secure tunnel from the BTP subaccount to the S/4HANA Cloud Private Edition system","paths":["private-edition"],"sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/1-joule-for-sap-s4-hana/readme.md","title":"RA0024 1-joule-for-sap-s4-hana/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"Cloud Connector: The secure-tunnel software agent that connects the SAP BTP subaccount to the SAP S/4HANA PCE system (in its private data center) without opening a firewall."}]},{"ref":"artifact:sap-joule-studio-classic","key":"joule-studio","role":"design time for custom Joule skills and AI agents","area":"btp","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/3-extend-joule-with-joule-studio/readme.md","title":"RA0024 3-extend-joule-with-joule-studio/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"Joule Studio enables extending Joule by creating new capabilities that can be deployed alongside the out-of-the-box capabilities provided by SAP. These capabilities include Joule Skills and AI Agents."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/3-extend-joule-with-joule-studio/readme.md","title":"RA0024 3-extend-joule-with-joule-studio/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"Joule Studio is part of SAP Build, which includes SAP Build Apps, SAP Build Code, SAP Build Work Zone, and SAP Build Process Automation."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/3-extend-joule-with-joule-studio/readme.md","title":"RA0024 3-extend-joule-with-joule-studio/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"Once these prerequisites are met, Joule Studio is automatically provisioned using formations in the BTP cockpit."}]},{"ref":"artifact:sap-joule-studio-cli","key":"joule-studio-cli","role":"pro-code tool to build, compile and deploy capabilities for Joule","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/3-extend-joule-with-joule-studio/readme.md","title":"RA0024 3-extend-joule-with-joule-studio/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"Besides Joule Studio as design time environment, you can also leverage Pro-Code Development Tools for Joule, like Joule Studio CLI to build, compile and deploy capabilities for Joule."}]},{"ref":"artifact:btp-build-process-automation","key":"process-automation","role":"set up with Joule in the SAP Build tenant before Joule Studio is provisioned","area":"btp","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/3-extend-joule-with-joule-studio/readme.md","title":"RA0024 3-extend-joule-with-joule-studio/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"To provision Joule Studio, Joule must be set up in the target landscape along with SAP Build Process Automation as part of the SAP Build tenant with the build-default plan utilizing SAP Identity Authentication Service (IAS)."}]},{"ref":"artifact:btp-ai-core","key":"ai-core","role":"LLMs through the generative AI hub, and document grounding for AI agents","area":"btp","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/3-extend-joule-with-joule-studio/readme.md","title":"RA0024 3-extend-joule-with-joule-studio/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"It provides the underlying Large Language Models (LLMs) that can be leveraged to configure AI Agents."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/readme.md","title":"RA0024 readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"This LLM is based on a rich ecosystem of technology partner LLM offerings also available directly via SAP Business Technology Platform's AI Foundation and the SAP Generative AI Hub."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/3-extend-joule-with-joule-studio/readme.md","title":"RA0024 3-extend-joule-with-joule-studio/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"Additionally, customers can provision their own document grounding capabilities in AI Core leveraging the Retrieval Augmented Generation (RAG) service and integrate them into their AI Agents to ground them in specific data."}]},{"slot":"capability:retrieval-augmented-generation","key":"grounding","role":"document grounding in customer-owned content","area":"btp","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/readme.md","title":"RA0024 readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"This can be based on SAP-owned content, such as SAP Help Pages, or could be customer-owned content as well, by integrating the SAP Document Grounding services with Joule."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/3-extend-joule-with-joule-studio/readme.md","title":"RA0024 3-extend-joule-with-joule-studio/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"Additionally, customers can provision their own document grounding capabilities in AI Core leveraging the Retrieval Augmented Generation (RAG) service and integrate them into their AI Agents to ground them in specific data."}]},{"ref":"external:sap-s4hana-cloud-public-edition","key":"s4-public","role":"SAP cloud system with Joule natively integrated","area":"sap-apps","paths":["public-edition"],"sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/1-joule-for-sap-s4-hana/readme.md","title":"RA0024 1-joule-for-sap-s4-hana/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"Joule is natively integrated into the SAP S/4HANA Cloud Public Edition, providing users with seamless access to its capabilities directly within the SAP Fiori Launchpad."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/readme.md","title":"RA0024 readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"**SAP Enterprise Systems:** connects Joule with your cloud systems such as SAP S/4HANA Cloud, SAP SuccessFactors, SAP Ariba, SAP Concur, SAP Analytics Cloud, etc, and other third-party applications to enable seamless data exchange and process automation."}]},{"ref":"external:sap-successfactors","key":"successfactors","role":"SAP cloud system connected to Joule","area":"sap-apps","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/readme.md","title":"RA0024 readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"**SAP Enterprise Systems:** connects Joule with your cloud systems such as SAP S/4HANA Cloud, SAP SuccessFactors, SAP Ariba, SAP Concur, SAP Analytics Cloud, etc, and other third-party applications to enable seamless data exchange and process automation."}]},{"ref":"artifact:btp-analytics-cloud","key":"analytics-cloud","role":"source of the analytical pattern's insights","area":"sap-apps","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/readme.md","title":"RA0024 readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"Users can ask questions related to business metrics, trends, and performance indicators, and Joule will provide relevant insights from the SAP Analytics Cloud system."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/readme.md","title":"RA0024 readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"**SAP Enterprise Systems:** connects Joule with your cloud systems such as SAP S/4HANA Cloud, SAP SuccessFactors, SAP Ariba, SAP Concur, SAP Analytics Cloud, etc, and other third-party applications to enable seamless data exchange and process automation."}]}],"paths":[{"key":"private-edition","name":"Joule in SAP S/4HANA Cloud Private Edition, through the BTP subaccount and the Cloud Connector","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/1-joule-for-sap-s4-hana/readme.md","title":"RA0024 1-joule-for-sap-s4-hana/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"This solution is exclusively available for RISE with SAP customers and relies on the SAP Business Technology Platform (BTP) as the central integration and service hub."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/1-joule-for-sap-s4-hana/readme.md","title":"RA0024 1-joule-for-sap-s4-hana/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"This architecture page focuses on Joule integration with SAP S/4HANA cloud private edition and SAP S/4HANA Public Cloud."}]},{"key":"public-edition","name":"Joule in SAP S/4HANA Cloud Public Edition, natively integrated","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/1-joule-for-sap-s4-hana/readme.md","title":"RA0024 1-joule-for-sap-s4-hana/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"Joule is natively integrated into the SAP S/4HANA Cloud Public Edition, providing users with seamless access to its capabilities directly within the SAP Fiori Launchpad."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/1-joule-for-sap-s4-hana/readme.md","title":"RA0024 1-joule-for-sap-s4-hana/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"This architecture page focuses on Joule integration with SAP S/4HANA cloud private edition and SAP S/4HANA Public Cloud."}]}],"areas":[{"key":"btp","kind":"sap-cloud","label":"SAP Business Technology Platform","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/readme.md","title":"RA0024 readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"**SAP Business Technology Platform** establishes the foundation for implementing and extending Joule capabilities with Joule and SAP Build Work Zone entitlements."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/1-joule-for-sap-s4-hana/readme.md","title":"RA0024 1-joule-for-sap-s4-hana/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"SAP Business Technology Platform (BTP): The central integration and extensibility platform. It hosts the following key services:"}]},{"key":"sap-apps","kind":"sap-cloud","label":"SAP Enterprise Systems","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/readme.md","title":"RA0024 readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"**SAP Enterprise Systems:** connects Joule with your cloud systems such as SAP S/4HANA Cloud, SAP SuccessFactors, SAP Ariba, SAP Concur, SAP Analytics Cloud, etc, and other third-party applications to enable seamless data exchange and process automation."}]},{"key":"idp","kind":"third-party","label":"Third-party Identity Providers","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/readme.md","title":"RA0024 readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"**Third-party Identity Providers:** supports integration with external identity providers for enhanced security and user management (Optional)."}]}],"edges":[{"from":"user","to":"joule","kind":"data","for":"starts with a query in the Joule client embedded in an SAP cloud application","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/readme.md","title":"RA0024 readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"The users start with their queries in the natively integrated Joule client embedded in our respective SAP cloud applications."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/2-joule-iam/readme.md","title":"RA0024 2-joule-iam/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"The user access SAP Joule."}]},{"from":"joule","to":"cids","kind":"authentication","protocol":"oidc","for":"redirects the authentication to Identity Authentication, which creates an OIDC access token for Joule","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/2-joule-iam/readme.md","title":"RA0024 2-joule-iam/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"SAP Joule does not have an active session and redirects the authentication to the connected SAP Cloud Identity Authentication Service."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/2-joule-iam/readme.md","title":"RA0024 2-joule-iam/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"After successful login the SAP Cloud Identity Authentication Service creates an OIDC access token (simplified approach) for SAP Joule."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/2-joule-iam/readme.md","title":"RA0024 2-joule-iam/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"SAP Joule primarily uses the OpenID Connect (OIDC) protocol for integration, which is the recommended approach for connecting Joule Functions, though other methods are also supported."}]},{"from":"cids","to":"idp","kind":"authentication","for":"redirects the authentication attempt to the corporate identity provider","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/2-joule-iam/readme.md","title":"RA0024 2-joule-iam/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"A common scenario would now redirect the authentication attempt to a 3rd party corporate Identity Provider."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/readme.md","title":"RA0024 readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"This will require additional configurations with SAP Cloud Identity Services to establish trust and enable single sign-on (SSO) capabilities."}]},{"from":"ips","to":"work-zone","kind":"provisioning","for":"updates user-role assignments in SAP Build Work Zone","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/2-joule-iam/readme.md","title":"RA0024 2-joule-iam/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"SAP Cloud Identity Services use the Identity Provisioning Service to synchronize user and role data from the application and update user-role assignments in SAP Build Work Zone."}]},{"from":"joule","to":"work-zone","kind":"authorization","for":"combines the logged-in user with the stored user-role assignments to learn which Joule Function the user may use","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/2-joule-iam/readme.md","title":"RA0024 2-joule-iam/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"SAP Joule leverages now the SAP Build Work Zone Navigation Service to combine the logged in user with the stored user-role assignments and the role-content definition to understand which Joule Function this user during this session can use."}]},{"from":"joule","to":"destination","kind":"authentication","for":"calls the Joule Function / API in the name of the user (Principal Propagation)","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/2-joule-iam/readme.md","title":"RA0024 2-joule-iam/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"SAP Joule leverages the SAP BTP Destination Service to call the Joule Function / API in the name of the user (Principal Propagation)."}]},{"from":"destination","to":"cids","kind":"authentication","for":"exchanges the user access token from Joule for a token the application accepts","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/2-joule-iam/readme.md","title":"RA0024 2-joule-iam/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"The SAP BTP Destination Service exchanges the user access token from SAP Joule with the SAP Cloud Identity Authentication Service. This exchange provides a proper token for the application to call the Joule Function."}]},{"from":"joule","to":"s4-public","kind":"data","for":"calls the backend's API for the requested query, OData services active in the backend for transactional tasks","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/readme.md","title":"RA0024 readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"Joule calls the respective SAP backend system to proceed with the requested query, e.g. requesting time off."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/2-joule-iam/readme.md","title":"RA0024 2-joule-iam/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"The SAP Joule calls the respective API and receives a response based on the user access."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/1-joule-for-sap-s4-hana/readme.md","title":"RA0024 1-joule-for-sap-s4-hana/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"Joule can execute tasks like creating purchase orders and checking sales order status, provided the underlying OData services are active."}]},{"from":"joule","to":"successfactors","kind":"data","for":"connects Joule with the cloud system for data exchange and process automation","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/readme.md","title":"RA0024 readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"**SAP Enterprise Systems:** connects Joule with your cloud systems such as SAP S/4HANA Cloud, SAP SuccessFactors, SAP Ariba, SAP Concur, SAP Analytics Cloud, etc, and other third-party applications to enable seamless data exchange and process automation."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/readme.md","title":"RA0024 readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"Joule calls the respective SAP backend system to proceed with the requested query, e.g. requesting time off."}]},{"from":"joule","to":"analytics-cloud","kind":"data","for":"provides insights from the SAP Analytics Cloud system","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/readme.md","title":"RA0024 readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"Users can ask questions related to business metrics, trends, and performance indicators, and Joule will provide relevant insights from the SAP Analytics Cloud system."}]},{"from":"joule","to":"grounding","kind":"data","for":"answers informational questions from customer-owned content through the SAP Document Grounding services","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/readme.md","title":"RA0024 readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"This can be based on SAP-owned content, such as SAP Help Pages, or could be customer-owned content as well, by integrating the SAP Document Grounding services with Joule."}]},{"from":"joule-studio","to":"joule","kind":"provisioning","for":"compiles and deploys custom Joule Skills and AI Agents alongside the Joule central instance","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/3-extend-joule-with-joule-studio/readme.md","title":"RA0024 3-extend-joule-with-joule-studio/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"Once customers have created their custom Joule Skills and AI Agents, they can use SAP Build's lifecycle capabilities to compile and deploy these capabilities alongside their Joule central instance."}]},{"from":"joule-studio-cli","to":"joule","kind":"provisioning","for":"builds, compiles and deploys capabilities for Joule","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/3-extend-joule-with-joule-studio/readme.md","title":"RA0024 3-extend-joule-with-joule-studio/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"Besides Joule Studio as design time environment, you can also leverage Pro-Code Development Tools for Joule, like Joule Studio CLI to build, compile and deploy capabilities for Joule."}]},{"from":"joule-studio","to":"ai-core","kind":"data","for":"LLMs to configure AI Agents, and the customer's document grounding","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/3-extend-joule-with-joule-studio/readme.md","title":"RA0024 3-extend-joule-with-joule-studio/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"It provides the underlying Large Language Models (LLMs) that can be leveraged to configure AI Agents."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/3-extend-joule-with-joule-studio/readme.md","title":"RA0024 3-extend-joule-with-joule-studio/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"Additionally, customers can provision their own document grounding capabilities in AI Core leveraging the Retrieval Augmented Generation (RAG) service and integrate them into their AI Agents to ground them in specific data."}]},{"from":"joule-studio","to":"connectivity","kind":"data","for":"integrates with other SAP BTP services and external applications","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/3-extend-joule-with-joule-studio/readme.md","title":"RA0024 3-extend-joule-with-joule-studio/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"Joule Studio integrates via the SAP Connectivity service with other SAP BTP services and external applications."}]},{"from":"joule-studio","to":"cids","kind":"authentication","for":"identity management, authentication and identity life-cycle management","sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/3-extend-joule-with-joule-studio/readme.md","title":"RA0024 3-extend-joule-with-joule-studio/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"Joule Studio relies on SAP Cloud Identity Services for identity management, authentication and identity life-cycle management."}]}],"roles":[{"key":"custom-capabilities","name":"Custom Joule skills and AI agents","capability":"capability:agent-tooling","parts":["joule-studio","joule-studio-cli"],"sources":[{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/3-extend-joule-with-joule-studio/readme.md","title":"RA0024 3-extend-joule-with-joule-studio/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"Joule Studio enables extending Joule by creating new capabilities that can be deployed alongside the out-of-the-box capabilities provided by SAP. These capabilities include Joule Skills and AI Agents."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/3-extend-joule-with-joule-studio/readme.md","title":"RA0024 3-extend-joule-with-joule-studio/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"Joule Skills automate rule-based, repetitive tasks using APIs, seamlessly integrating into SAP to enhance productivity. AI Agents tackle complex challenges with advanced planning and reasoning, integrating both SAP and non-SAP systems and leveraging Joule Skills."},{"url":"https://raw.githubusercontent.com/SAP/architecture-center/main/docs/ref-arch/RA0024/3-extend-joule-with-joule-studio/readme.md","title":"RA0024 3-extend-joule-with-joule-studio/readme.md in SAP/architecture-center","checked":"2026-10-09","quote":"The central entry point for consuming custom Joule skills and AI agents created in Joule Studio is the Joule client application, available on both Desktop and Mobile."}]}],"history":[{"date":"2026-10-09","field":"parts","from":null,"to":"17 parts, 16 edges, 3 areas","reason":"Filled from SAP's own readmes at the maintainer's request; the AI-native door reads these designs. Every part names what the graph holds; what it lacks is listed as candidates in the curation note."},{"date":"2026-10-17","field":"explains","from":null,"to":"applies_to on capability:agent-tooling, capability:authentication","reason":"Door scope derived from the artifacts this piece also explains, so a door page lists it only where it holds (docs/concepts/content-on-doors.md)."}]},"readings":{"liveness":[{"label":"Checked against the source","tier":"unknown","evidence":"nobody has checked it"},{"label":"Source reachable","tier":"good","evidence":"up as of 2026-10-26"},{"label":"Source updated","tier":"good","evidence":"2026-03-16 by the publisher"}],"compatibility":[{"label":"Version","tier":"unknown","evidence":"no version declared"},{"label":"Moved since?","tier":"good","evidence":"no recorded change after 2026-03-16"},{"label":"Findings","tier":"good","evidence":"none flagged"}],"reach":[{"value":null,"unit":"views"},{"value":null,"unit":"comments"},{"value":null,"unit":"likes"}]},"signals":{"crawled_at":"2026-10-26","reachable":true,"source_updated":"2026-03-16"},"series":null,"edges":{"authors":[{"ref":"actor:sap-architecture-center","name":"SAP Architecture Center","json":"/actors/sap-architecture-center.json"}]}}