BTP_INTEGRATIONbeginner
BTP Security
Covers the foundational and intermediate security architecture of SAP BTP, including identity providers, trust configuration, authentication flows, authorization concepts (roles, role collections, scopes), and how these elements interact across subaccounts, Cloud Foundry, and Kyma runtimes to protect integration and application landscapes.
Overview
Covers the foundational and intermediate security architecture of SAP BTP, including identity providers, trust configuration, authentication flows, authorization concepts (roles, role collections, scopes), and how these elements interact across subaccounts, Cloud Foundry, and Kyma runtimes to protect integration and application landscapes.
Lessons in this topic
- BTP Security Part 1: Identity, Trust and Platform AccessUnderstand the BTP security model: platform users (who administer accounts) vs business users (who use apps), identity providers and trust, the authorization chain from scopes to roles to role collections, and the services involved (SAP Cloud Identity Services, XSUAA).
- BTP Security Part 2: Trust, OAuth Clients and Role Collections Across SubaccountsConfigure security consistently in every subaccount: trust to Identity Authentication, xs-security.json with scopes, role templates and role collections delivered by the app, XSUAA service instances as OAuth clients, attribute-based restrictions, and standardized role collection design across dev/test/prod.
- BTP Security Part 3: App-to-App Security with OAuth2Secure service-to-service communication: OAuth2 client credentials for technical calls, token exchange/JWT bearer to propagate user identity, granting scopes to other apps (foreign scopes), X.509 credentials instead of secrets, and troubleshooting token errors.
Interview questions covered
- A service calls another API and users see data they shouldn't. How do you design app-to-app security?
- What are the core concepts of BTP Security for Integration and Application Architecture, and how would you explain them clearly in an SAP interview?
- How would you apply BTP Security for Integration and Application Architecture in a real SAP project? Walk through the design or implementation approach.
- A production issue is reported in BTP Security for Integration and Application Architecture. What would you check first, and how would you troubleshoot it systematically?
- What are the most important design decisions, trade-offs, and best practices in BTP Security for Integration and Application Architecture?
- Suppose you inherit an existing BTP Security for Integration and Application Architecture solution. How would you review it before making a change?
- Design app security with XSUAA so roles are consistent across dev, test and prod.
- A company assigns BTP role collections to hundreds of users individually and leavers keep access. Explain the BTP security model and your fix.