Everything in the atlas

CAP integration with the SAP Audit Log service

CAP Java plugin sending audit log events to SAP Audit Log service

CAP Java handler for SAP Audit Log service API version 2

Maven bill of materials pinning CAP Java module versions

SQL templates for HANA audit policies of an S/4HANA tenant

Ingests and retains compliance audit data from BTP

OWASP Top 10 workshop exploiting and fixing flaws in a CAP Node.js app

TechEd 2022 session on SAP BTP security recommendations

Hands-on applying SAP BTP security recommendations to a trial account

TechEd 2025 workshop on OWASP Top 10 risks in CAP applications

SAP's Node.js application router in front of business applications

CAP Node.js runtime

Token validation and security context for XSUAA and IAS

SAP's on-premises agent linking SAP BTP to customer-network systems

Identity Authentication and Identity Provisioning as one tenant

OAuth2 token validation from XSUAA and SAP Cloud Identity Services

Former XSUAA JWT validation for CAP Java, removed in CAP Java 3.0

OAuth 2.0 grant flows for applications and APIs in Neo regions

OAuth server issuing JWTs and holding scopes for BTP apps

Registration, login and consent for customer-facing sites

TechEd 2022 session on SAP BTP security recommendations

Hands-on applying SAP BTP security recommendations to a trial account

Authorization from DCL policies for Node.js apps on SAP Cloud Identity

Compiler from AMS DCL policies to DCN for local runs and tests

CAP Node.js runtime

Maven bill of materials pinning CAP Java module versions

OAuth 2.0 grant flows for applications and APIs in Neo regions

OAuth server issuing JWTs and holding scopes for BTP apps

CAP microservice on XSUAA managing users and authorizations

Java apps showing policy-based authorization with AMS on SAP BTP

Node.js apps showing policy-based authorization with AMS on SAP BTP

OWASP Top 10 workshop exploiting and fixing flaws in a CAP Node.js app

CAP-based PWA for EV drivers proxying SAP E-Mobility OData APIs

Hands-on applying SAP BTP security recommendations to a trial account

TechEd 2025 workshop on OWASP Top 10 risks in CAP applications

Serves BTP applications under the customer's own domain

Change history for annotated CAP entities

Change log of annotated entity fields for CAP Java

RAP sales order using number ranges, change documents and Adobe forms

CAP integration with SAP Data Privacy Integration

CAP Node.js runtime

Registration, login and consent for customer-facing sites

APIs for retention, deletion and personal data reports

Retention rules triggering blocking, deletion and archiving

Service answering data subjects about their stored personal data

Key and certificate repository in SAP BTP's Neo data centres

Provisioning jobs carrying users and groups between systems

Postman collections for the SAP Analytics Cloud SCIM API

Postman collection for the SAP Concur User Provisioning Service APIs

Identity Provisioning jobs syncing SAP Concur users for Joule

Hands-on integrating Cloud Identity Services with Microsoft Entra

CAP Node.js runtime

Maven bill of materials pinning CAP Java module versions

Scans uploaded files over REST with ClamAV

API proxies with security and traffic policies and Developer Hub

Vault for an application's passwords, keys and keyrings

Tracks vulnerabilities in open-source components of BTP apps

Rule-based resolution of SAP S/4HANA business situations

Low-code and no-code tool for business processes and RPA bots

Resolves who is responsible for a process or item, and notifies them

CAP Node.js runtime

Declarative status-transition flows on bound actions in CAP Java

Triggers n8n workflows from a CAP application

Starts and manages SAP Build Process Automation processes from CAP

Triggers n8n workflows from CAP Java through the outbox