Everything in the atlas
Type
Domain: Security & Compliance
Origin
Signals
More: Apache-2.0
Group by: None
Six CAP features in one package, from replication cache to rate limits
It is a bundle, not a plugin with one job. Depending on it for one feature brings the rest.
CAP integration with the SAP Audit Log service
Change history for annotated CAP entities
CAP integration with SAP Data Privacy Integration
Browser login and session module for SAP MCP servers
The maintainer states it is unofficial, not endorsed by SAP, and that it automates authenticated SAP web endpoints and browser session cookies in ways SAP's terms of service or an organisation's own policies may restrict. Password login is confined to `accounts.sap.com` and the standard SAP Cloud Identity Services tenant domains: a custom IAS domain, or a login that conditional authentication delegates to a corporate identity provider, fails closed before the password is filled and has to be completed through an interactive login instead.
ABAP API for OAuth 2.0 authentication
No published releases; repository quiet for 97 months.
OA2C_SPECIFICS implementation for Microsoft Azure OAuth 2.0 in ABAP
No published releases; repository quiet for 27 months.
Custom messages and handler classes for CAP input validation
JWT authentication for CAP without xsuaa or xssec
Last released April 2022 at 0.0.2, and no repository is declared on the package.
Maps Microsoft Entra ID groups and app roles onto cds.User roles
Quiet Release and repository quiet for 25 months.
Functional boundary It performs no authentication flow of its own. The app must already be protected by Entra ID OAuth 2.0 at the App Service level; this only maps the resulting claims. It is explicitly not intended to run locally.
Rate-limit pattern for CAP Node.js applications
Last released January 2024 at 0.0.6. The repository the package declares has been deleted — verified against the GitHub API, not just a failed fetch. The package is still on npm, so it installs; the source it was published from is no longer readable, which is a harder thing to discover than a stale version number.
CAP Java plugin sending audit log events to SAP Audit Log service
Blowfish cipher in ABAP, ECB and CBC modes
No published releases; repository quiet for 83 months.
SQL templates for HANA audit policies of an S/4HANA tenant
Authority check helper class used across SchwarzIT's USI reports
RAP sales order using number ranges, change documents and Adobe forms
Postman collections for the SAP Analytics Cloud SCIM API
CAP microservice on XSUAA managing users and authorizations
Postman collection for the SAP Concur User Provisioning Service APIs
Java apps showing policy-based authorization with AMS on SAP BTP
Node.js apps showing policy-based authorization with AMS on SAP BTP
OWASP Top 10 workshop exploiting and fixing flaws in a CAP Node.js app
Identity Provisioning jobs syncing SAP Concur users for Joule
CAP-based PWA for EV drivers proxying SAP E-Mobility OData APIs
TechEd 2022 session on SAP BTP security recommendations
Hands-on applying SAP BTP security recommendations to a trial account
TechEd 2025 workshop on OWASP Top 10 risks in CAP applications
Hands-on integrating Cloud Identity Services with Microsoft Entra