onedevatlasBeta
Browse the atlas
AllCAPUI5ABAPBTP
BrowseAll ecosystems

Everything in the atlas

All93Artifacts25Seen working19Content49
19 of 2341
Type
  • App0
  • Build tool0
  • CDS plugin0
  • CLI0
  • Desktop app0
  • Doc source0
  • Generator0
  • IDE extension0
  • MCP server0
  • Package0
  • Platform0
  • Practice0
  • Sample19
  • Service0
  • Skill0
  • Web tool0
What each type is →
Domain: Security & Compliance
Origin
Signals: Last 12 months
Liveness reads the latest release, push or commit. Coverage is the capability's, as assessed behind this door.
More
Ecosystem
Runs
  • Build time0
  • Central server0
  • Desktop app0
  • In the IDE0
  • Inside SAP0
  • Java1
  • Local process0
  • Node.js0
  • Vendor-hosted0
Licence
  • Apache-2.013
  • Apache-2.0 or the Derived Beer-ware License, at the user's choice0
  • Beerware0
  • BSD-2-Clause0
  • BSD-3-Clause0
  • BUSL-1.10
  • Commercial; source repositories private0
  • Custom, as licence.md states it: personal use only, no redistribution or modification without explicit written permission0
  • EPL-2.00
  • GPL-2.00
  • GPL-3.00
  • ISC0
  • MIT1
  • MIT-00
  • SAP Developer License Agreement0
  • SAP DEVELOPER LICENSE AGREEMENT0
  • SAP DEVELOPER LICENSE AGREEMENT for CAP0
  • SEE LICENSE0
  • See LICENSE file0
  • SEE LICENSE IN developer-license-3_2.txt0
  • SEE LICENSE IN LICENSE0
  • SEE LICENSE IN LICENSE file0
  • SEE LICENSE IN LICENSE.txt0
  • See LICENSE.md0
  • UNLICENSED0
  • UNLICENSED, as package.json declares it; the repository carries no licence file0
Group by: Capability
Domain Security & ComplianceLiveness Last 12 monthsClear all
EntrySignals
Audit logging4
SAP-samples/btp-secure-development

OWASP Top 10 workshop exploiting and fixing flaws in a CAP Node.js app

none
teched2022-XP260

TechEd 2022 session on SAP BTP security recommendations

none
teched2023-XP185v

Hands-on applying SAP BTP security recommendations to a trial account

none
teched2025-XP260

TechEd 2025 workshop on OWASP Top 10 risks in CAP applications

none
Authentication5
btp-ui5-show-userinfo

UI5 app reading the signed-in user via launchpad and approuter

No license+1
cap-ams-a2a

App-to-app setups between CAP Java and CAP Node.js under AMS and IAS

No license
cap-azure-ad-b2c

Authenticating a CAP service against Azure AD B2C

none
teched2022-XP260

TechEd 2022 session on SAP BTP security recommendations

none
teched2023-XP185v

Hands-on applying SAP BTP security recommendations to a trial account

none
Authorization10
bookshop-ams

CAP bookshop wired to the Authorization Management Service

No license
btp-user-management-microservice

CAP microservice on XSUAA managing users and authorizations

none
cap-ams-a2a

App-to-app setups between CAP Java and CAP Node.js under AMS and IAS

No license
cap-java-auth-check

CAP Java authorization checks tried case by case

No license
SAP-samples/ams-samples-java

Java apps showing policy-based authorization with AMS on SAP BTP

none
SAP-samples/ams-samples-node

Node.js apps showing policy-based authorization with AMS on SAP BTP

none
SAP-samples/btp-secure-development

OWASP Top 10 workshop exploiting and fixing flaws in a CAP Node.js app

none
SAP-samples/e-mobility-driver-app

CAP-based PWA for EV drivers proxying SAP E-Mobility OData APIs

none
teched2023-XP185v

Hands-on applying SAP BTP security recommendations to a trial account

none
teched2025-XP260

TechEd 2025 workshop on OWASP Top 10 risks in CAP applications

none
Change tracking1
abap-platform-reuse-services

RAP sales order using number ranges, change documents and Adobe forms

none
Identity provisioning4
analytics-cloud-scim-api-samples

Postman collections for the SAP Analytics Cloud SCIM API

none
sap-concur-user-provisioning-service-apis

Postman collection for the SAP Concur User Provisioning Service APIs

none
SAP-samples/concur-joule-ips-jobs

Identity Provisioning jobs syncing SAP Concur users for Joule

none
teched2025-XP261

Hands-on integrating Cloud Identity Services with Microsoft Entra

none
Input validation1
assert-target

Which CAP paths trigger @assert.target and which do not

No license