Everything in the atlas
Type
Domain: Security & Compliance
Origin: SAP official
Signals
More
Group by: Capability
CAP integration with the SAP Audit Log service
CAP Java plugin sending audit log events to SAP Audit Log service
CAP Java handler for SAP Audit Log service API version 2
Maven bill of materials pinning CAP Java module versions
SQL templates for HANA audit policies of an S/4HANA tenant
Ingests and retains compliance audit data from BTP
OWASP Top 10 workshop exploiting and fixing flaws in a CAP Node.js app
TechEd 2022 session on SAP BTP security recommendations
Hands-on applying SAP BTP security recommendations to a trial account
TechEd 2025 workshop on OWASP Top 10 risks in CAP applications
SAP's Node.js application router in front of business applications
CAP Node.js runtime
Token validation and security context for XSUAA and IAS
SAP's on-premises agent linking SAP BTP to customer-network systems
Identity Authentication and Identity Provisioning as one tenant
OAuth2 token validation from XSUAA and SAP Cloud Identity Services
Former XSUAA JWT validation for CAP Java, removed in CAP Java 3.0
OAuth 2.0 grant flows for applications and APIs in Neo regions
OAuth server issuing JWTs and holding scopes for BTP apps
Registration, login and consent for customer-facing sites
TechEd 2022 session on SAP BTP security recommendations
Hands-on applying SAP BTP security recommendations to a trial account
Authorization from DCL policies for Node.js apps on SAP Cloud Identity
Compiler from AMS DCL policies to DCN for local runs and tests
Its own account of itself is local running and tests: the DCN it writes serves as input for running an application using AMS on the DCL bundle locally. It carries the SAP Developer License Agreement rather than an open-source licence, and the repository named in its package metadata is an internal SAP host, so the npm page is the only thing to read.
CAP Node.js runtime
Maven bill of materials pinning CAP Java module versions
OAuth 2.0 grant flows for applications and APIs in Neo regions
OAuth server issuing JWTs and holding scopes for BTP apps
CAP microservice on XSUAA managing users and authorizations
Java apps showing policy-based authorization with AMS on SAP BTP
Node.js apps showing policy-based authorization with AMS on SAP BTP
OWASP Top 10 workshop exploiting and fixing flaws in a CAP Node.js app
CAP-based PWA for EV drivers proxying SAP E-Mobility OData APIs
Hands-on applying SAP BTP security recommendations to a trial account
TechEd 2025 workshop on OWASP Top 10 risks in CAP applications
Serves BTP applications under the customer's own domain
Change history for annotated CAP entities
Change log of annotated entity fields for CAP Java
RAP sales order using number ranges, change documents and Adobe forms
CAP integration with SAP Data Privacy Integration
CAP Node.js runtime
Registration, login and consent for customer-facing sites
APIs for retention, deletion and personal data reports
Retention rules triggering blocking, deletion and archiving
Service answering data subjects about their stored personal data
Key and certificate repository in SAP BTP's Neo data centres
Provisioning jobs carrying users and groups between systems
Postman collections for the SAP Analytics Cloud SCIM API
Postman collection for the SAP Concur User Provisioning Service APIs
Identity Provisioning jobs syncing SAP Concur users for Joule
Hands-on integrating Cloud Identity Services with Microsoft Entra
CAP Node.js runtime
Maven bill of materials pinning CAP Java module versions
Scans uploaded files over REST with ClamAV
API proxies with security and traffic policies and Developer Hub
Vault for an application's passwords, keys and keyrings
Tracks vulnerabilities in open-source components of BTP apps