Application Security Descriptor File (xs-security.json)
Tutorials that teach this
- Tutorial Deploy a CAP Business Service to SAP Business Technology Platform
- Tutorial Secure a Basic Node.js App with the Authorization and Trust Management Service (XSUAA)
- Tutorial Add Security to the SAP SuccessFactors Extension
- Tutorial Add Authorization
- Tutorial Add User Authentication to Your Application (SAP HANA Cloud)
- Tutorial SAP HANA XS Advanced, Creating an HTML5 Module
- Tutorial HANA Native, Add User Authentication to Your Application
- Tutorial Deploy CAP with SAP HANA Cloud project as MTA
- Tutorial Create an Application with SAP Java Buildpack 2
- Tutorial Create an Application with Cloud Foundry Node.js Buildpack
- Tutorial Add Scopes and Create Role Collection Mapping
Docs explaining this concept
- Doc 400 Error: Call to /oauth/token Was Not Successful
- Doc Attributes
- Doc Authorization Entities
- Doc Binding Parameters of SAP Authorization and Trust Management Service
- Doc Building Roles and Role Collections for Applications
- Doc Compatible Changes in the Security Descriptor File
- Doc Configuration Options for the SAP Authorization and Trust Management Service
- Doc Configure Token Policy for SAP Authorization and Trust Management Service
Prerequisites
- Concept CAP service development
- Concept OAuth Redirect URI Restriction
- Concept CAP Integration with Cloud Foundry on SAP BTP
- Concept CAP Framework (Cloud Application Programming Model)
- Concept XSUAA Service Instance Configuration (xs-security.json)
- Concept OAuth2 Authentication Redirect
- Concept Scopes and Role Templates in SAP BTP
- Concept OAuth2 Configuration in SAP BTP
- Concept CAP Authorization and Access Control
- Concept SAP Authorization and Trust Management (XSUAA) Authentication
- Concept OAuth2 Redirect URI Configuration
Concepts that build on this
- Concept Managed Application Router
- Concept Scopes and Role Templates in SAP BTP
- Concept SAP SaaS Provisioning Service Instance Creation in Kyma
- Concept Role and Role Collection Management
- Concept Multi-Target Application (MTA) Deployment
- Concept Multitenancy with SaaS Provisioning Service
- Concept UAA Identity Provider Integration
- Concept SAP Authorization and Trust Management (XSUAA) Authentication
- Concept Node.js Application Authentication on SAP BTP
- Concept XSUAA Role Collections
- Concept MTA Project with Application Router Configuration
- Concept xs-security.json Authorization Configuration
- Concept XSUAA Multitenant Configuration
- Concept Role Collections and Authorization Artifacts
- Concept XSUAA Service Instance Configuration (xs-security.json)
- Concept XSUAA Service Instance Management
- Concept MTA Modules and Resources
- Concept XSUAA Authorization Scopes
- Concept Standalone vs Managed Application Router
- Concept SAP BTP Cloud Foundry Deployment via MTA
- Concept UAA (User Account and Authentication) Service
- Concept OAuth2 Scopes and Role Templates
- Concept Cloud Foundry deployment