Top 75 SAP BTP Interview Questions and Answers 1733208140

Download as pdf or txt
Download as pdf or txt
You are on page 1of 77

TOP 75

SAP BTP Interview


Questions and Answers

Raja Gupta
/raja-gupta ➢ Swipe
What is the relationship among BTP
SAP Build + ABAP Cloud
Subaccounts and Cloud foundry org and
space?

In SAP BTP, Cloud Foundry environment, an Org represents an


organizational account. An Org is further subdivided into
spaces , which represent siloed application environments.

When we enable Cloud Foundry environment in a


subaccount, the system automatically creates a Cloud
Foundry org .

• The subaccount and the org have a 1:1 relationship.

• We can create multiple spaces within Cloud Foundry org.

Raja Gupta
/raja-gupta ➢ Swipe
SAPyou
Can Buildelaborate
+ ABAP Cloud
the services and solutions
provided under SAP BTP?

SAP BTP services and solutions can be broadly categorized in


5 pillars, which are:

• Application Development
• Automation
• Integration
• Data and Analytics
• AI

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build
What role+does
ABAPRegions
Cloud play when creating
or using a subaccount?

In SAP BTP, we can create subaccounts associated to different


regions. Each region represents a geographical location
where applications, data, or services are hosted.

The region assigned to the subaccount doesn’t have to be


directly related to the user’s location. Users could be located
in the US, but operate their subaccount in Europe.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build + ABAP Cloud
What is an Environment in SAP BTP?

In SAP BTP, “environments” refer to the actual platform-as-a-


service offering of SAP BTP that enables us to develop, run,
and manage our applications and services.

BTP environment may be considered as different


playgrounds, each designed for specific types of tasks and
technologies.
Each environment comes equipped with specific tools,
technologies, and runtimes that you need to build
applications.

There are 3 environments in SAP BTP — Cloud Foundry, ABAP


and Kyma.

Raja Gupta
/raja-gupta ➢ Swipe
SAPCan
Build
you+ ABAP Cloud
explain what is SAP Business
Technology Platform (SAP BTP)?

In January 2021, SAP rebranded what we used to call “SAP


Cloud Platform” with the name “SAP Business Technology
Platform (SAP BTP)”.

Assume you are a developer at an SAP partner or customer


(or even inside SAP) and have been given responsibility to
build a new cloud solution and extend an existing SAP
solution.

To start the project immediately, you need a Platform-as-a-


Service which helps you to build and deploy cloud solutions
without any local installation. The platform should allow you
choose any programming language of your choice.
· Technically, SAP Business Technology Platform can be
considered as a Platform-as-as-a-Service.

Raja Gupta
/raja-gupta ➢ Swipe
SAP
InBuild
which + ABAP Cloud
scenario or use-case, you will
choose Cloud Foundry environment?

Cloud Foundry environment in SAP BTP provides all the tools


and services to build modern, cloud-based applications. It’s
like a place where you can create web and mobile apps using
popular programming languages and tools. This environment
is great for developers who want to build flexible and scalable
software that can run on the internet.

This environment is based on the open-source application


platform managed by the Cloud Foundry Foundation. it
enables us to develop new business applications and business
services, supporting multiple runtimes, programming
languages, libraries, and services.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build +scenario,
In which ABAP Cloud
you will choose ABAP
environment?

ABAP-minded customers and partners can reuse their ABAP


skillset to
▪ Create extensions for ABAP-based products, such as SAP
S/4HANA Cloud
▪ Develop new ABAP-based, cloud applications
▪ Transform existing ABAP-based custom code or extensions
to the cloud.

The ABAP environment:


▪ is based on the latest ABAP platform cloud release that is
also used for SAP S/4HANA Cloud.
▪ supports the ABAP RESTful Application Programming
Model including SAP Fiori and Core Data Services (CDS).
▪ can be integrated with other SAP BTP services, such as SAP
Destination service, SAP Build Work Zone, standard
edition, SAP Workflow Management, and SAP Interactive
Forms by Adobe.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build +scenario,
In which ABAP Cloud
you will choose Kyma
environment?

The Kyma environment is a fully managed Kubernetes


runtime based on the open-source project “Kyma”.

Major Benefits of SAP BTP, Kyma Runtime


• A fully managed Kubernetes cluster on a hyperscaler of
your choice.
• The latest features of Kubernetes and its ecosystem.
• Additional features through Kyma (Serverless, Eventing,
Observability, Security, Service Mesh, Application
Connectivity, and more).
• Integration with other SAP services and products (for
example: SAP BTP (Services), SAP S/4HANA, SAP
SuccessFactors, and so on).

Raja Gupta
/raja-gupta ➢ Swipe
SAPyou
Can Build + ABAPaCloud
provide brief comparison of all the
three environments in SAP BTP?

Cloud Foundry Environment


The Cloud Foundry environment allows you to create polyglot
cloud applications. Cloud Foundry (CF) is an open-source
cloud native platform as a service (PaaS), which comprises a
set of specifications and tools around the whole application
development lifecycle.
KYMA Environment
The Kyma environment provides a fully managed Kubernetes
runtime based on the open-source project “Kyma”.
Kubernetes, similar to Cloud Foundry, is an open-source cloud
native platform for managing the application lifecycle.

ABAP Environment
The ABAP environment is mainly targeted at creating
extension applications for ABAP-based products, such as SAP
S/4HANA Cloud, but also lets you develop independent cloud
applications. Technically, the ABAP environment is a cloud
enabled environment which lives within the Cloud Foundry or
the Kyma environment.

Raja Gupta
/raja-gupta ➢ Swipe
SAPyou
Can Build + ABAPaCloud
provide brief comparison of all the
three environments in SAP BTP?

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build
What + ABAP
is the Cloud cloud infrastructure
underlying
for SAP BTP?

SAP BTP is built on a multi-cloud foundation that allows users


to choose from different infrastructures and runtimes. The
services and solutions of SAP BTP are available on multiple
cloud infrastructure providers, including Microsoft Azure,
Amazon Web Services (AWS), Google Cloud, and Alibaba
Cloud.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build
Can you+ explain
ABAP Cloud
the concepts of global
accounts and subaccounts in SAP BTP?

In SAP BTP, global account is the realization of a contract


customers make with SAP. A global account is used to manage
subaccounts, members, entitlements and quotas. Customers
receive entitlements and quotas to use platform resources
per global account and then distribute the entitlements and
quotas to the subaccount for actual consumption.

Subaccounts let us structure a global account according to


the organizations and project’s requirements with regard to
members, authorizations, and entitlements.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build
Can you+ explain
ABAP Cloud
the concepts of global
accounts and subaccounts in SAP BTP?

Global accounts are region- and environment-independent.


Within a global account, you manage all of your subaccounts,
which in turn are specific to one region.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build + ABAP Cloud
What do you mean by “service” in SAP BTP?

“Service” is a widely used term in Cloud Computing. In


general, a service refers to any kind of technology or
capability that is provided over the internet. It’s like ordering
something online and having it delivered to your doorstep,
but instead of physical products, you’re getting access to
software, computing power, or storage space.

Under SAP BTP umbrella, SAP provides several functionality


or capability, which are referred as “SAP BTP services”.

For example, “SAP Business Application Studio” is an SAP BTP


service, which provides a development environment for
building applications and extending SAP solutions.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build + ABAP Cloud
What do we mean by Hyperscaler?

The word itself is a pretty good indicator. The prefix “hyper”


means over or excessive. The word scale refers to size or
extent. The companies now being called “hyperscalers” are
those massive companies like Google, Microsoft, and Amazon
that are making efforts to not only dominate the public cloud
and cloud services industries, but to expand their business
into numerous related verticals, as well.

In other words, A hyperscaler is the operator of a data center


that offers scalable cloud computing services. The first
company to enter this market was Amazon in 2006, with
Amazon Web Services (AWS). AWS is a subsidiary of Amazon.
It holds a market share of around 40%.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build
In the + ABAPofCloud
context SAP BTP, explain what is
multi-cloud?

SAP’s goal is to open the way for customers and partners to


get the benefits of SAP BTP on their cloud infrastructure of
choice. SAP BTP is available with well-known hyperscalers like
AWS, Microsoft Azure, Google Cloud Platform, and Alibaba
Cloud. This ability of BTP, to be deployed with any
infrastructure provider is referred as multi-cloud.

Multi-cloud gives more flexibility (cloud vendor of choice and


larger network of available regions), reliability (use of
hyperscaler infrastructures and their capabilities), and agility
(broader range of development services and supported
development paradigms).

Raja Gupta
/raja-gupta ➢ Swipe
SAPyou
Can Build + ABAPthe
explain Cloud
differences among Public
Clouds and Private Clouds?

Public Cloud

The public cloud is an offer of a freely accessible provider, which


makes its services openly accessible to everyone via the Internet.
Webmailer services, or Google Docs, are examples of public cloud
offerings, as well as the paid services of Microsoft Office 365 or
SAP Business ByDesign.
Private Cloud
For privacy and IT security reasons, organizations often prefer to
continue to run their IT services themselves and make them
accessible only to their own employees. If these are offered in
such a way that the end user in the enterprise can take advantage
of cloud-typical added value, such as a scalable IT infrastructure or
installation, and maintenance-free IT applications that can be used
via the web browser, then it is called a private cloud.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Buildhow
Explain + ABAP
andCloud
why SAP Cloud Platform
was rebranded to SAP BTP?

SAP Cloud Platform was originally focused on providing


cloud-based services for businesses. However, as time went
on, SAP realized that their platform was offering more than
just cloud services. It also included technologies for
application development, integration, analytics, and more.

To better represent the broader range of offerings and show


that it’s not just about the cloud, SAP decided to rebrand
their platform as SAP Business Technology Platform (SAP
BTP).

This new name helps customers understand that the platform


is not limited to the cloud but also includes various
technologies to help business with overall technology needs.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build + ABAP Cloud
What is SAP BTP Cockpit?

SAP BTP Cockpit is the web-based tool provided under SAP


BTP offering to perform development and administration
activities. It is used for activities like:

• Managing and configuring sub-accounts

• Managing and configuring applications.

• Managing and configuring services

SAP BTP Cockpit also provides tools for monitoring BTP


applications and services.

Raja Gupta
/raja-gupta ➢ Swipe
Is there any other option to manage and
SAP Build + ABAP Cloud
administer SAP BTP accounts apart from BTP
cockpit?

We can also use SAP BTP CLI, a command line interface for
managing the SAP BTP accounts.

The btp CLI is an alternative to the cockpit for users who


prefer working on the command line. It consists of a client
and a server. The client is installed on your computer and it
interacts with SAP BTP through a server. You connect to this
CLI server (https://cli.btp.cloud.sap/) when you log on to your
global account through the btp CLI.

Raja Gupta
/raja-gupta ➢ Swipe
What are the advantages of using SAP BTP
SAP Build + ABAP Cloud
over other cloud platforms like AWS, Azure
or GCP?

There are several advantages of using SAP BTP over other


cloud platforms. First, it is designed specifically for SAP
enterprise applications, so it has all the features and tools
that businesses need to run their operations smoothly.

SAP BTP is highly scalable and can be easily adapted to


changing business needs. It also offers a high degree of
security and reliability, which are essential for businesses that
handle sensitive data.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build
Have + ABAP
you used Cloud
SAP Discovery Center? If yes,
for which purpose?

SAP Discovery Center is one stop shop to get the list of SAP
BTP services, their details, various missions on SAP BTP and
many more. It also provides different architecture patterns
which can be implemented using SAP Business Technology
Platform services.

In Discovery Center mission, we can find all the pieces of


puzzles solved together, for example list of all the services
required to integrate SAP S/4HANA with SAP BTP, complete
bill of materials for customer, sample architecture diagrams,
step-by-step guide on how to implement the solution etc.

Raja Gupta
/raja-gupta ➢ Swipe
SAPyou
Can Buildexplain
+ ABAPwhat
CloudSAP Cloud Application
Programming Model is?

SAP Cloud Application Programming Model is

• not a specific product but a framework, a set of tools,


languages and libraries.

• brings together SAP’s own technologies like SAP Business


Application Studio, Core Data Services (CDS), SAP HANA
and open source technologies like Node.js or Java

• lets you efficiently build enterprise services and business


applications in a full-stack development approach

• It allows you to focus on your business domain while


relieving you from the tedious tasks which are necessary
for all the cloud applications.

Raja Gupta
/raja-gupta ➢ Swipe
SAPExplain
Build +the
ABAP Cloud of SAP Core Data
concept
Services (CDS)

Core Data Services (CDS) is a universal modeling language.


It is a
• Definition language to create data models and service
definitions.
• It originated from SAP HANA CDS, then ABAP CDS and now
it’s found its way to SAP Cloud Application Programming
Model.
• It allows you to define database artifacts and service
definitions in database or language agnostic way.
• CDS compiler converts the declarative statements into
runtime artifacts needed for your target environment. For
example, CDS view for database artifacts, takes the input
from configuration file to identify the database (for
example SQLite or SAP HANA) and automatically converts
CDS views to database table and so on.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build
What + ABAP
is Core Cloud
Schema Notation (CSN) in CAP?
How it’s related to CDS?

CSN is a compact JSON representation of CDS models.

Although, CSN is similar to JSON schema, it has much more


capabilities to capture complete models and service
definitions.

When we build/compile CDS models, it generates


corresponding CSN format.

CSN is ideal and optimized format for sharing model


definitions. We can easily generate target models for example
OData/EDM interfaces or OpenAPI interfaces or persistence
model for SQL/NoSQL from CSN.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build + ABAP Cloud
What are the major components of CAP

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build
What+is
ABAP Cloud
ABAP RESTful Application
Programming Model (RAP)?

The ABAP RESTful Application Programming Model (RAP) is


an essential element of ABAP Cloud, the ABAP development
model for building clean core compliant, cloud-ready
business apps, services, and extensions on SAP BTP, SAP
S/4HANA Cloud, and SAP S/4HANA.

RAP is the heart of ABAP Cloud for building transactional


business apps, services, and extensions.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build + ABAP Cloud
What is SAP Cloud SDK?

The SAP Cloud SDK is a set of libraries that reduce the effort
of building applications on the SAP BTP. It abstracts common
tasks on SAP BTP so that you can concentrate on your
business logic instead of writing boiler plate code. It comes in
two flavors: Java and JavaScript/TypeScript.

The SAP Cloud SDK for Java allows us to develop, extend, and
communicate with SAP solutions SAP S/4HANA Cloud, SAP
SuccessFactors, and many others.

The SAP Cloud SDK for JavaScript helps us build cloud-based


apps and extensions to SAP solutions using the power and
flexibility of Node.js and its ecosystem.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build + ABAP Cloud
What is OData Service?

OData (Open Data Protocol) is an industry-wised accepted


standard that defines a set of best practices for building and
consuming REST APIs. It allows users to query and update
data, and build on web technologies like HTTP, Atom
Publishing Protocol (AtomPub), and RSS (Really Simple
Syndication).

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build + ABAP Cloud
Explain the concepts of JSON and YAML?

JSON (JavaScript Object Notation) is an open-standard format


for data storage and exchange. It employs easy-to-read text
to encapsulate data objects, which consist of key-value pairs
and arrays. Frequently utilized for web applications to
communicate with servers, JSON serves as a versatile data
interchange medium.

YAML is a human-readable data serialization language that is


often used for writing configuration files. YAML stands for yet
another markup language.

YAML is a popular programming language because it is


designed to be easy to read and understand. It can also be
used in conjunction with other programming languages.

Raja Gupta
/raja-gupta ➢ Swipe
Can you explain what is SAP HANA Cloud and
SAP Build + ABAP Cloud
how it’s different from SAP HANA on-
premise?

SAP HANA Cloud is a cloud-native implementation of SAP


HANA. SAP HANA Cloud is a fully managed database as a
service (DBaaS) offering SAP HANA’s in-memory power and
performance. That means greater flexibility with independent
compute and storage, elastic scale for unpredictable
workloads, ease of scalability, and multi-cloud support to
connect to your vendor of choice.

SAP HANA is an in-memory, column-oriented, relational


database system. When implementing SAP HANA,
organizations have the option to choose between on-premise
installations and cloud-based deployments. In an on-premise
installation of SAP HANA, the system is deployed in the
company’s own data center or on IT ‘s infrastructure.
Raja Gupta
/raja-gupta ➢ Swipe
SAP Build + ABAP Cloud
What is SAP Business Application Studio?

SAP Business Application Studio is a cloud-based


development environment available in SAP BTP. It enables us
to build applications and extend SAP solutions with a fully
integrated and feature-rich environment.

SAP Business Application Studio is based on Code-OSS, an


open source used for building Visual Studio Code. Available
as a cloud service, SAP Business Application Studio provides a
desktop-like experience similar to leading IDEs, with
command line and optimized editors.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build
Can + ABAP the
you explain Cloud
concept of dev pace in
SAP Business Application Studio?

In SAP Business Application Studio, a dev space is a


development environment with the tools, capabilities, and
resources needed for developing your application.

A dev space provides tailored tools and pre-installed runtimes


for your business scenario. This simplifies and saves time in
setting up your development environment and allows you to
efficiently develop, test, build, and run your solution locally
or in the cloud.

Raja Gupta
/raja-gupta ➢ Swipe
What is an SAP Business Application Studio
SAP Build + ABAP Cloud
extension?

An SAP Business Application Studio extension is a set of tools


that help you perform a specific development task. For
example, the Java Tools extension provides you with the tools
that you need to develop a Java application. The Fiori Tools
extension includes the templates, CLI, and code completion
required to create an SAP Fiori application.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build
Explain + ABAP
what Cloud application (MTA)
multi-target
is

An MTA is logically a single application, consisting of multiple


related and interdependent parts (called modules) that are
developed using different technologies or programming
paradigms and designed to run on different target runtime
environments, with a single, consistent lifecycle.

These modules can be written in different technologies and


deployed to different targets respectively, but they all serve
(different aspects of) a particular purpose for the
application’s users.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build + ABAP Cloud
Why MTA applications are used in SAP BTP?

A cloud solution usually composed of multiple software


modules representing database entities, business logic,
backend services, UI layer etc. For example, a typical solution
on SAP BTP usually have a HANA module which contains
database related artifacts (e.g., calculation views), a backend
service (e.g., a CAP or Java or Node.js module), an SAP Fiori
Launchpad module and an SAPUI5 module.

One of the main challenges we face with such application is


deployment. Lifecycle maintenance of individual modules
separately is another big issue. Multitarget application (MTA)
helps us to tackle these challenges.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build
Can + ABAPthe
you explain Cloud
role of MTA Descriptor
(mta.yaml) in an MTA project?

An MTA project has a file called MTA Descriptor (mta.yaml)


that contains a list of all the modules and resources (e.g., SAP
BTP Services or Environment Variables) and their dependency
details. The complete metadata of all the modules and
resources are maintained in this mta.yaml file. At the time of
deployment, this file is used to automatically create the SAP
BTP service instances, and interdependencies of all the
modules and resources are maintained without any manual
effort.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build
What + ABAP
is the Cloud
role of Connectivity Services in
SAP BTP?

The SAP Connectivity service provides a connectivity proxy


that can be used to access on-premise resources through a
Cloud Connector. Through the use of the SAP Destination
service, you can retrieve and store the technical information
about the target resource (destination) that you need to
connect your application to a remote service or system
(internet or cloud connector).

Raja Gupta
/raja-gupta ➢ Swipe
SAP
WhatBuild + ABAP
is the Cloud
Cloud Connector and in which
scenarios it is required?

The Cloud Connector connects SAP on-premise backends (or


even supported non-SAP systems) to SAP BTP subaccounts via
an encrypted tunnel.

The Cloud Connector combines an easy setup with a clear


configuration of the systems that are exposed to the SAP BTP,
letting you use existing on-premise assets without exposing
the entire internal landscape and act as a reverse invoke
proxy between the on-premise network and SAP BTP.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build + ABAP Cloud
Can you explain multitenant architecture?

In multitenant architecture:

• A single instance of an application serves multiple


customers
• Each customer is called a tenant
• Multiple customers (tenants) use the same computing
resources — physically integrated but logically separated
• Even though customers share resources, customers aren’t
aware of each other, and their data is kept totally separate

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build
What + ABAP
is the Cloud
role/significance of SAP SaaS
Provisioning service in SAP BTP?

Once the multitenant app is developed, application provider


needs to make it available for consumer by publishing it. This
is done by using SAP SaaS Provisioning service.

• SAP SaaS Provisioning service acts as a registry and helps


us to publish the multitenant app to consumers.

• It also enables us to automate the subscription and


unsubscription process.

• The service also maintains a list of all dependencies and


subscriptions of an application.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build
Explain + ABAPoptions
different Cloud available in SAP BTP
for data separation in multitenancy scenario?

There are mainly 3 ways to achieve data separation in SAP


BTP.

• Discriminator Column
• Schema Separation
• Database Instance Separation

Raja Gupta
/raja-gupta ➢ Swipe
Explain the concepts of Tenant Onboarding
SAP Build + ABAP Cloud
and Tenant Offboarding in multitenancy in
SAP BTP.

In a multi-tenant setup, tenant onboarding is the process of


introducing new tenants into a SaaS environment.
When a consumer subscribes the multitenant application,
the application must be notified that there is a new
consumer.

As part of the application subscription, SAP SaaS Provisioning


service provides two callbacks —
getDependencies and onSubscription.

Similarly, Tenant Offboarding is the process of offboard a


tenant, which may include deleting a tenant’s data or
stopping the tenant from accessing applications or data.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build
What + ABAP
is the Cloud between platform
difference
users and business users in SAP BTP?

Platform users are usually developers, administrators or


operators who deploy, administer, and troubleshoot
applications and services on SAP BTP.

Business users use the applications that are deployed to SAP


BTP. For example, the end users of SaaS apps or services, such
as SAP Workflow service or SAP Cloud Integration, or end
users of your custom applications are business users.

Raja Gupta
/raja-gupta ➢ Swipe
Explain how global account and subaccounts
SAP Build + ABAP Cloud
are controlled and managed by
administrators

When a customer signs a contract with SAP, one user is


created at the global account level. On this level,
entitlements are defined, assigning entities and services,
including billing information. The global account
administrator can initially log on to SAP BTP to manage these
entitlements and create directories and subaccounts. To
ensure that more than one employee can administer the
global account, the administrator needs to create other users
at the global account level and assign them administrator
permissions.

Raja Gupta
/raja-gupta ➢ Swipe
SAP
WhatBuild + ABAP
is the Cloud
significance/use of SAP XSUAA
service in SAP BTP?

SAP XSUAA is an internal development of SAP. In Cloud


Foundry, there is an open-source component called UAA.
UAA is an OAuth provider which takes care of authentication
and authorization. SAP took the base of UAA and extended it
with SAP specific features to be used in SAP BTP. Technically
XSUAA is an OAuth server and uses JWT tokens.

XSUAA takes care of authentication and authorization in SAP


BTP, Cloud Foundry.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build
What + ABAP
is an Cloud
Identity Provider and why it is
required?

An Identity Provider (IdP) is a system or service responsible


for authenticating users and providing them with access to
resources or services within a network or application. It
serves as a trusted source for verifying the identity of users
and issuing security tokens that can be used for access
control.

IdPs are required for several reasons:

• Centralized Authentication

• Single Sign-On (SSO)

• User Management

Raja Gupta
/raja-gupta ➢ Swipe
Can you briefly explain the concept of
SAP Build + ABAP Cloud
Principal Propagation and an example of its
use in SAP BTP?

Principle Propagation allows a user to be the user when the


request flows through multiple systems. So that we don’t
have any technical user in between.

Principal Propagation is

• the ability of a system to securely forward or propagate


the authenticated user (principal) from a sender to a
receiver in a way that the forwarded user information is
kept confidential and — even more important — cannot
be changed during transit.

• Based on a pre-established trust relationship to the sender,


the receiver uses this information to logon the user
without asking her again for the credential.
Raja Gupta
/raja-gupta ➢ Swipe
SAP Build
What are +the
ABAP CloudProviders available in
Identity
SAP BTP?

In SAP BTP, there are 2 options for Identity Provider — SAP ID


Service and SAP Cloud Identity Authentication service (IAS).

SAP ID Service
SAP ID Service is the default identity provider in SAP BTP. It is
a pre-configured, standard SAP public IdP (account.sap.com)
that is shared by all customers.

SAP Cloud Identity Authentication service (IAS)


For many customers, business users might be stored in
corporate identity providers. SAP recommends using SAP
Cloud Identity Services — Identity Authentication Service
(IAS) as a hub.

Raja Gupta
/raja-gupta ➢ Swipe
Can you explain what is SAP ID Service and
SAP Build + ABAP Cloud
it’s importance in terms of security in SAP
BTP?

SAP ID Service is the default identity provider in SAP BTP. It is


a pre-configured, standard SAP public IdP (account.sap.com)
that is shared by all customers.

SAP ID Service is managed by SAP. Trust to SAP ID service is


pre-configured in all BTP subaccounts.

SAP ID service manages the users of official SAP sites,


including the SAP developer and partner community. It is the
place where the S-Users, P-Users, and D-Users are managed.

Raja Gupta
/raja-gupta ➢ Swipe
In which scenarios, you will suggest the use
SAP Build + ABAP Cloud
of SAP Identity Authentication Service (IAS)
in SAP BTP?

Most customers already have huge on-premises or cloud


ecosystem. Their business user data is already available in
their corporate identity provider.
When these customers build applications on BTP, an
important question comes up — “How can employees
authenticate to the applications with known credentials?”
So, if customer needs to provide single sign-on for their
custom solution on BTP, SAP S/4HANA Cloud, SAP
SuccessFactors and other SAP solutions. The answer to this is
SAP Identity Authentication Service.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Buildthe
Explain + ABAP Cloud of Role Collections,
concepts
Roles, and Scopes in SAP BTP.

Scopes
Scopes are arbitrary values that express authorizations /
access rights in an application or service. Scopes need to be
prefixed with an xsappname to make them uniquely
identifiable.

Roles
Roles are entities that hold several scopes. Scopes can be put
in multiple roles, so you are not limited to have scopes sitting
in just one role.

Role Collections
Role collections contain one or more roles. A role can be used
in multiples. But it is totally fine to have, for example, a called
Admin that only has an admin role.
Role collections are stored as an assignment in the XSUAA
and are THE entity that can be assigned to a certain business
user.

Raja Gupta
/raja-gupta ➢ Swipe
SAP you
Can Buildbriefly
+ ABAPexplain
Cloud how role collections
are assigned to users?

Role collections are managed on each SAP BTP level


separately. Role collections that exist in the global account do
not exist in the subaccounts. Likewise, role collections in
subaccounts are not available in the global account.

All users of SAP BTP are stored in identity providers. How you
assign users to their authorizations depends on the type of
trust configuration with the identity provider. If you’re using
the default trust configuration with SAP ID service, you assign
users directly to role collections. However, if you are using a
custom identity provider, you can assign role collections to
individual users directly, or you map role collections to user
groups or other user attributes defined in the identity
provider. This is called federation.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build
What + ABAP Cloud file and what is the
is xs-security.json
use of it?

xs-security.json file, also called Application Security


Descriptor is a file that defines the details of the
authentication methods and authorization types to use for
access to your application.

The xs-security.json file uses JSON notation to define the


security options for an application

The xs-security.json file is further used to create XSUAA


service instance.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build
Explain + ABAP
what Cloud
OAuth is and how it’s different
from SAML.

There are many differences between SAML and OAuth.

• SAML uses XML to pass messages, and OAuth uses JSON.

• OAuth is much more lightweight and an ideal fit for


system-to-system communication. While SAML is geared
towards enterprise security.

• OAuth uses API calls extensively, which is why mobile


applications, modern web applications, game consoles,
etc. find OAuth a better experience for the user. SAML, on
the other hand, uses a session cookie in a browser that
allows a user to access certain web pages — great for
short-lived work days, but not so great when have to log
into your smart watch every day.
Raja Gupta
/raja-gupta ➢ Swipe
SAP Build
What + ABAP
is JWT and Cloud
how it’s better than SAML
tokens?

JSON Web Token (JWT) is an open standard that defines


a compact and self-contained way for securely
transmitting information between parties.

JSON Web Tokens (JWT) are better than SAML tokens in many
ways.

First of all, since JSON is less verbose than XML, JWT Tokens
are smaller in size, making JWT more compact than SAML.
This makes JWT a good choice to be passed over network.

JSON parsers are extremely common in most programming


languages because they map directly to objects. Conversely,
XML doesn’t have a natural document-to-object mapping.
This makes it easier to work with JWT than SAML assertions.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build + ABAP Cloud
Can you explain what SAML is?

The Security Assertion Markup Language (SAML) is an open


standard based on XML for exchanging authentication and
authorization data of a user between an identity provider
(IdP) and a service provider (SP).

SAML is a platform for requesting authentication. Its most


common use is to enable SSO.

In SAML, the data is exchanged using messages called bearer


assertions. A bearer is any party in possession of the
assertion. The integrity of the assertion is protected by XML
encryption and an XML signature.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build
What + ABAPConnect
is OpenID Cloud (OIDC) and how it’s
different from SAML?

OpenID Connect (OIDC) is a relatively new protocol and is


continuously evolving. It was designed with web and mobile
applications in mind.

OIDC is an extension of OAuth2, with data structures in JSON


format (JWT), and simple HTTPS flows for transport. It is
designed to be easy to adopt and use.

SAML has a long track record of providing a secure means of


identity data exchange, so it is trusted by many organizations.
It is also very feature-rich, covering a wide range of identity
requirements.

While, OIDC, being newer and evolving (especially in the


European banking sector, with Open Banking), is still lagging
behind SAML in terms of features.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build + ABAP Cloud
What are the SAP BTP offerings for CI/CD?

SAP BTP provides 3 major offerings for CI/CD.

SAP Continuous Integration and Delivery — An SAP BTP


Service, mainly suited for SAP-centric use case, does not
require lots of skills to build a pipeline.

Project “Piper” — An open-source project and libraries that


provides templates for pipelines, best suited when you want
to use predefined template and have some flexibility.

Continuous Integration and Delivery Best Practices Guide —


Best practices guide if you want to completely own CI/CD
pipeline with full flexibility.

Raja Gupta
/raja-gupta ➢ Swipe
SAP
HowBuild
do we+ ABAP Cloud
choose which CI/CD offering is
right for a given scenario?

The main difference between the 3 options is in terms of


skills required and level of flexibility.

Raja Gupta
/raja-gupta ➢ Swipe
What are some major aspects you will
SAP Build + ABAP Cloud
consider before choosing the right CI/CD
solution offered by SAP BTP?

Some major aspects that should be considered before picking


the right option are:

• How much DevOps skillset you have?

• How complex/simple CI/CD pipeline you need?

• Whether you own any CI/CD infrastructure or not? For


simple, fast to achieve scenario you can go for SAP
Continuous Integration and Delivery. As the complexity
and flexibility requirement increases, you may choose
either Project “Piper” or in CI/CD Best Practices in SAP BTP
approach.

Raja Gupta
/raja-gupta ➢ Swipe
Explain the main features and offerings of
SAP Build + ABAP Cloud
SAP Continuous Integration and Delivery
service on BTP?

SAP Continuous Integration and Delivery is an SAP BTP


Service which enables us to configure and run predefined
CI/CD pipelines without need of having individual
infrastructure and in-depth knowledge.

It comes with interactive user interface and helps us


configure and run an out-of-the-box CI/CD pipeline without
much hassle.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Buildthe
Explain + ABAP
mainCloud
features and offerings of
Project “Piper”?

Project “Piper” is an open-source project which provides a


more flexible option than SAP Continuous Integration and
Delivery and yet is not too difficult.

Raja Gupta
/raja-gupta ➢ Swipe
Tell me some Major benefits of SAP Cloud
SAP Build + ABAP Cloud
Application Programming Model from
DevOps perspective.

SAP Cloud Application Programming Model provides some


excellent benefits to developers.

For example many a times, the actual SAP BTP or other


systems may not be fully available to developers at the
beginning phase of development. Developers start with local
development landscape and gradually move to cloud
landscape. SAP Cloud Application Programming Model
provides resources to start locally and gradually move to SAP
BTP. It allows developers to use an evolutionary development
approach.

The easiest path to start development is to use SQLite


database in the local project. When we move to local to SAP
BTP infrastructure, we can first move use hybrid approach
where we connect local app to SAP HANA Cloud. This hybrid
approach helps developers to quickly test, debug or modify
their code and see the result. Finally, we can move the entire
application to SAP BTP and connect it with SAP HANA Cloud.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build + ABAP Cloud
What is SAP Cloud Transport Management?

SAP Cloud Transport Management is a service in SAP Business


Technology Platform that allows us transport solution
deliverables across SAP BTP environments. The service allows
us to deploy the solution artifacts (e.g., MTA Archives) along
with its content (e.g., SAP Integration Suite content) and
manage the deployment and operation.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build
How does +SAP
ABAP Cloud
Cloud Transport Management
work?

SAP Cloud Transport Management service uses SAP BTP


destinations to connect with target end points for
deployment. These destinations have the subaccount details
and credentials incorporated within it to connect with a
particular subaccount and deploy the application.

Further, we create something called Transport Nodes which


represents source and target subaccounts for deployment.
Transport occurs between these transport nodes. Next, we
need a Transport Route to connect transport nodes.

Raja Gupta
/raja-gupta ➢ Swipe
SAP
WhatBuild + ABAP
is SAP Cloud
Alert Notification Service and
how does it work?

The SAP Alert Notification service in SAP BTP allows us to


send alerts consistently, whether they come from SAP BTP
runtimes, services, custom solutions, or outside sources. This
service uses a single event format for all alerts in BTP, so
there’s no need to deal with different event structures or
formats.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build
What + ABAP
is SAP Cloud Pilot and how does
Automation
it work?

SAP Automation Pilot is a service in SAP BTP which enables us


to simplify and automate manual tasks so that we minimize
the operational effort to operate and monitor a cloud
solution in SAP BTP.
SAP Automation Pilot service can be configured with other
SAP BTP services to automate the DevOps tasks. Let’s take an
example scenario. Say, we need to monitor SAP HANA Cloud
service. In case the database server is down, DevOps team
needs to restart the database and send the log for further
analysis.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build + ABAP Cloud
What is SAP Cloud ALM?

SAP Cloud ALM (Application Lifecycle Management) is a


cloud-based solution provided by SAP that focuses on the
management of the entire lifecycle of applications and
services in SAP environments. It is designed to support SAP
customers, particularly those using SAP S/4HANA Cloud, SAP
SuccessFactors, SAP Customer Experience, and other SAP
cloud solutions. With SAP Cloud ALM, teams can plan, build,
test, and deploy applications while ensuring everything runs
smoothly and stays aligned with business goals. It’s designed
to support the full lifecycle of software projects, making it
easier to maintain quality and performance in SAP
environments.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Buildis+SAP
What ABAP Cloud Run and how it is
Focused
related to SAP BTP?

SAP Focused Run is an advanced monitoring and


management tool offered by SAP. It’s designed to provide
comprehensive monitoring, analytics, and automation
capabilities for complex landscapes, including SAP and non-
SAP systems. Focused Run is particularly useful for managing
large-scale and mission-critical environments, offering
features like performance monitoring, root cause analysis,
alerting, and automation of routine tasks.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build + ABAP Cloud
What is clean core methodology?

Clean core is an extension methodology in which

• Extensions are kept strictly separate from the SAP


application.

• Extensions access SAP business objects only through well


defined, upgrade-stable interfaces

By following clean core paradigm, you make sure that

• Extensions do not break an upgrade and upgrades do not


break an extension.

• Extensions do not create a problem when you migrate


from SAP S/4HANA on-Premise to SAP S/4HANA Cloud

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build
How + ABAPisCloud
Steampunk different from Embedded
Steampunk?

Steampunk is the ABAP Environment on SAP BTP. ABAP-


minded customers and partners can reuse their ABAP skillset
to build new cloud solutions or transform already existing on-
premise ABAP assets to the cloud.

Embedded Steampunk is the ABAP development


environment of SAP S/4HANA. It enables developers to
develop and run S/4HANA extension on same software stack
as the underlying SAP S/4HANA system.

Embedded Steampunk is based on the same language version


(ABAP for Cloud Development) as Steampunk, but in the
embedded option.

Raja Gupta
/raja-gupta ➢ Swipe
In which SAP platforms/solutions ABAP
SAP Build + ABAP Cloud
Cloud is available?

ABAP Cloud is available as the default (and only) option in


both SAP BTP, ABAP environment and also SAP S/4HANA
Cloud Public Edition. For both SAP S/4HANA Cloud Private
Edition and also SAP S/4HANA, ABAP Cloud coexists along
with ABAP Classic and customers can choose when to use
which model.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build
What is +Side-By-Side
ABAP Cloud Extensibility in SAP
S/4HANA?

Side-by-Side Extensibility allows you to build extensions on


SAP BTP. True decoupling between your extensions and SAP
S/4HANA enables an independent lifecycle and allows you to
build and evolve applications much faster.

Raja Gupta
/raja-gupta ➢ Swipe
SAP Build
What+ is
ABAP Cloud
ABAP RESTful application
programming model (RAP)?

RAP is a set of concepts, tools, languages, frameworks, and


best practices provided on the ABAP Platform.

• It is the recommended programming model for customers


and partners to build ABAP based S/4HANA extensions.

• RAP is available for

• SAP BTP ABAP environment (aka Steampunk)

• SAP S/4HANA ABAP Environment (aka Embedded


Steampunk)

• It supports the development of all types of Fiori


applications as well as publishing Web APIs.

Raja Gupta
/raja-gupta ➢ Swipe
Liked it?
Support free content with a repost

Raja Gupta
@raja-gupta

You might also like