Preface

13

Target Audience

13

How to Read This Book

14

How This Book Is Organized

14

Conclusion

16

1 Introduction to SAP Business Technology Platform

19

1.1 Positioning of SAP BTP

20

1.1.1 Innovation: Development of New Cloud Solutions

21

1.1.2 Extension: Extending SAP Cloud Solutions

23

1.1.3 Integration: Cloud Solutions and On-Premise Systems

24

1.2 Environments

26

1.2.1 Neo Environment

27

1.2.2 Multi-Cloud Foundation for SAP BTP

29

1.3 Architecture

33

1.3.1 Global Account

35

1.3.2 Subaccount

37

1.3.3 Organizations

41

1.3.4 Space

43

1.4 Summary

46

2 Security Fundamentals

47

2.1 Protocols

49

2.1.1 HTTP/HTTPS

49

2.1.2 RFC

55

2.1.3 SOAP

56

2.1.4 REST and OData

57

2.2 Authentication

58

2.2.1 LDAP

59

2.2.2 SAML

60

2.2.3 OAuth

63

2.3 Summary

65

3 Setting Up the Cloud Connector

67

3.1 Sizing

67

3.1.1 Sizing for the Master Installation

68

3.1.2 Sizing for the Shadow Installation

70

3.2 Network Zones

72

3.3 Installation

74

3.4 Configuration

81

3.4.1 Initial Steps

82

3.4.2 User Interface Configuration

85

3.4.3 Cloud Configuration

88

3.4.4 On-Premise Configuration

91

3.4.5 Reporting Configuration

94

3.4.6 Advanced Configuration

95

3.5 High Availability

96

3.5.1 Installation and Initial Configuration

98

3.5.2 Shadow Configuration

103

3.5.3 Failover

104

3.6 Summary

105

4 Connectivity with SAP Business Technology Platform

107

4.1 SAP Destination Service in SAP BTP, Neo Environment

109

4.2 SAP Destination Service in SAP BTP, Cloud Foundry Environment

113

4.3 SAP Connectivity Service

119

4.4 Summary

123

5 SAP Web IDE

127

5.1 Activation and Configuration

127

5.2 Integrate with On-Premise ABAP Systems

131

5.2.1 Cloud Connector Configuration

131

5.2.2 Consume an OData Service

138

5.2.3 Deploy to an On-Premise ABAP System

141

5.3 Connect to an On-Premise Git Repository

144

5.4 Consume an OData Service from a Cloud System

152

5.4.1 Create Destination in SAP BTP, Neo Environment Cockpit

152

5.4.2 Create Destination from SAP Web IDE

155

5.5 Summary

156

6 SAP Business Application Studio

157

6.1 SAP Business Application Studio Activation and Configuration

158

6.2 Integration with On-Premise ABAP Systems

161

6.2.1 Cloud Connector Configuration

161

6.2.2 Consume an OData Service

168

6.2.3 Deploy to an On-Premise ABAP System

172

6.3 Connect to an On-Premise Git Repository

179

6.4 Consume an OData Service from a Cloud System

188

6.5 Summary

193

7 SAP Integration Suite

195

7.1 Evolution of SAP Integration Suite

195

7.2 Cloud Integration

196

7.2.1 Connect to SAP Process Orchestration

197

7.2.2 Connect to an ABAP On-Premise System

204

7.2.3 Connect to an On-Premise Database

220

7.3 API Management

227

7.3.1 Introduction

227

7.3.2 Consume OData Services from an ABAP On-Premise System

228

7.4 Summary

233

8 SAP Build Work Zone, Standard Edition

235

8.1 Backend Configuration in SAP S/4HANA

236

8.2 Cloud Connector Configuration

237

8.3 SAP BTP Subaccount Configuration

243

8.4 SAP Build Work Zone, Standard Edition Configuration

246

8.5 Summary

251

9 Secure Configuration

255

9.1 Replace UI Certificates

255

9.2 Authenticate Users against LDAP Service

259

9.3 Maintaining the Trust Store

261

9.4 HTTPS Mutual Authentication

265

9.4.1 mTLS for Backends

266

9.4.2 mTLS for Backend and Frontend

269

9.5 Secure Network Communication

271

9.6 Summary

278

10 Administration

279

10.1 Roles

279

10.2 Subaccount Management

280

10.3 Backup and Restore

288

10.4 Upgrade

290

10.4.1 Upgrade without Active High Availability

291

10.4.2 Upgrade with Active High Availability

291

10.4.3 Update the Java VM

292

10.5 Administration APIs

292

10.6 Summary

298

11 Monitoring

299

11.1 Hardware Monitoring

299

11.2 Subaccount Monitoring

301

11.3 Monitoring APIs

305

11.3.1 Health Check

306

11.3.2 Subaccount Data

306

11.3.3 Open Connections to On-Premise Backend Systems

307

11.3.4 Open Connections to Cloud Services

307

11.3.5 Performance Data

307

11.3.6 Top Time Consumers

308

11.3.7 Memory Status

309

11.3.8 Certificate Status

309

11.3.9 Certificate Selection List

310

11.3.10 Usage Statistics

311

11.3.11 Master Role Check

311

11.3.12 Integration into SAP Solution Manager

312

11.4 Alerting

313

11.5 Audit Logging

315

11.6 Summary

317

12 Principal Propagation

319

12.1 Initial Configuration for Principal Propagation

319

12.1.1 The Concept of Principal Propagation

319

12.1.2 Setting Up a CA for Signing Requests That Will Be Forwarded

321

12.1.3 Configuring the ABAP Backend System to Accept the Certificates

326

12.1.4 Configuring the ABAP Backend System HTTP Runtime to Accept X.509 Certificates

329

12.1.5 Configuring the ABAP Backend System to Map Certificates to Users

332

12.1.6 Adapt the Cloud Connector to Work with Principal Propagation

335

12.2 SAP BTP, Neo Environment to On-Premise ABAP System

337

12.3 SAP BTP, Cloud Foundry Environment to On-Premise ABAP System

339

12.4 Summary

342