SAP technical topicObjectSAP Fiori Architecture: Launchpad, UI5, Gateway and BackendModuleRAP_CDS_ODATA

SAP Fiori Architecture: Launchpad, UI5, Gateway and Backend

A Fiori app runs SAPUI5 in the browser or launchpad shell, calls backend services—commonly OData/REST—through an HTTP/Gateway layer, and executes business logic and authorization in the S/4HANA backend or other service. In embedded S/4HANA deployments the frontend/Gateway components can run in the same system; hub deployments separate them. UI, service exposure, connectivity and backend logic remain distinct troubleshooting layers.

Practitioner guide to SAP Fiori Architecture: Launchpad, UI5, Gateway and Backend, with architecture, use cases, worked example, decision criteria, pitfalls, S/4HANA context, ownership and production verification guidance.

Reviewed by an ERPClimb SAP consultant on 20 Sept 2026· 704 words

What it is

The user enters Fiori Launchpad, which resolves launchpad content, intent navigation and the application resources. SAPUI5 executes in the browser and sends HTTP requests for metadata and business data. SAP Gateway or the relevant service runtime handles OData exposure, routing and protocol processing. Classic SEGW services execute DPC/MPC logic; RAP services execute generated service adapters and behavior implementations over CDS. The backend application performs business checks, authorizations and persistence. A reverse proxy/Web Dispatcher, identity provider, frontend server and backend can be separate or consolidated depending on architecture.

When to use it

Use this layered model whenever a Fiori app is missing, fails to load, returns no data, gives 401/403/404/500, or saves incorrectly. First determine whether the problem is launchpad content/UI resources, HTTP/connectivity, service registration/metadata, authorization, or backend business logic. In hub landscapes, logs/breakpoints can be split across frontend and backend systems; in embedded S/4HANA, they can still be different software layers even on one SID.

How it fits the stack

Launchpad catalogs/spaces/pages provide navigation; PFCG/business roles provide content/authorization; SICF exposes HTTP nodes; Gateway service registration or RAP bindings expose APIs; /IWFND/ERROR_LOG and Gateway Client support service diagnosis; CDS/DCL/RAP/DPC implement data/business logic. BTP Work Zone can provide a different launchpad shell while consuming similar backend services. Authentication can be SAML/OIDC/IAS, but backend authorization remains application-specific.

A worked example

A tile appears but opening it shows 'failed to load data'. Browser network trace shows the UI component loads successfully and the OData metadata returns 200, but the entity read returns 403. That proves launchpad target mapping and service activation are largely working. STAUTHTRACE in the backend identifies a missing business authorization under the propagated user. The team fixes the PFCG role rather than clearing launchpad cache or rebuilding the UI.

How to choose

  • Start at the layer where the first failure is observable: tile/navigation, UI resource, HTTP, service metadata, backend read/write.
  • Identify embedded versus hub deployment and actual backend system/user.
  • Use browser network trace plus Gateway logs before backend debugging.
  • Separate UI content authorization from backend business authorization.
  • For new services prefer released RAP/CDS/API patterns rather than new SEGW where RAP fits.

Common pitfalls

  • Clearing Fiori caches for every 403/500 without identifying the failing layer.
  • Setting breakpoints in the backend when the request never passed service activation/routing.
  • Granting catalog/tile access and assuming backend data authorization is solved.
  • Debugging the frontend user while the backend runs under another identity.
  • Treating an embedded deployment as if all concerns are one layer merely because they share an SID.

ECC, S/4HANA and clean core

Fiori is the strategic S/4HANA UX. Embedded Gateway is common in S/4HANA, while existing hub architectures and BTP shells continue in many landscapes. RAP/Fiori Elements reduces custom UI/service boilerplate for new applications, but the same browser-to-service-to-business-layer troubleshooting discipline remains.

Whose problem this is

Fiori/UI developers own UI5/client behavior; Gateway/Basis own HTTP/service infrastructure; ABAP/RAP teams own backend service/business logic; Security owns identities/roles; functional teams own business configuration/data.

Related SAP objects

Reviewed pages this object connects to in the ERPClimb knowledge graph.

Source: ERPClimb — https://erpclimb.com/sap-technical-topics/sap-fiori-architecture-frontend-backend-gatewayERPClimb is an independent platform and is not affiliated with SAP SE. Reference pages are written and reviewed by SAP consultants for learning and troubleshooting.