Set SAP BTP, ABAP Environment as a Content Provider for SAP Build Work Zone, standard edition
- How to set up a communication arrangement for communication scenario
SAP_COM_0647
- How to expose the launchpad content of a business role to the SAP Build Work Zone, standard edition
- How to create the necessary destinations in the SAP BTP subaccount
- How to create a content provider
- How to create a launchpad site and add the exposed content
Prerequisites
- You have subscribed to the SAP Build Work Zone, standard edition in the subaccount where the content shall be consumed and your user is assigned to the
Launchpad_Admin
role collection. To subscribe to the SAP Build Work Zone, standard edition and assign the role collection, see “Set Up the SAP Launchpad Service”. - Your user in the SAP BTP, ABAP environment system is assigned to the
SAP_BR_ADMINISTRATOR
role. See Assigning the ABAP Environment Administrator Role to the New Administrator User.
- Step 1
Open the
Communication Systems
app from the SAP Fiori Launchpad in your SAP BTP, ABAP environment system.Create a new communication system.
System ID and System name:
COMMSYS_CONTENTFEDERATION_DEMO
Host Name: Callback URL, which is needed for setting up content change notifications. For example, for region EU10, the URL is
portal-service.cfapps.eu10.hana.ondemand.com
.Port:
443
Add a technical user for inbound communication:
- Choose authentication method
User Name and Password
.
User Name:
COMMUNICATIONSYSTEM_INBOUND_USER
Description:
Inbound user for communication system
Let the system generate a password. Do not forget to note the password for later use in
Step 6
(Create Design-Time destination).
- Choose authentication method
Similarly add a technical user for outbound communication with
Authentication Method
None
.To save the communication system, select
Save
.
- Step 2
Open the
Communication Arrangements
app from the SAP Fiori Launchpad and selectNew
.In the
New Communication Arrangement
dialog choose communication scenarioSAP_COM_0647
.Select
Create
.In the
Common Data
section, set the following valuesArrangement Name:
SAP_COM_0647
Communication System:
COMMSYS_CONTENTFEDERATION_DEMO
Logical Target Identifier:
LNCHPD_INTG_TGT
Enter the job execution details for scheduling the SAP Fiori Launchpad content exposure job every 10 minutes.
Select
Save
.
- Step 3
In the
Maintain Business Roles
app, search for business role IDSAP_BR_ADMINISTRATOR
.Select business role
SAP_BR_ADMINISTRATOR
.Choose
Expose to SAP Launchpad Service
.
The content related to the exposed business role, such as groups, catalogs, pages, or spaces, can be consumed by the SAP Build Work Zone, standard edition as soon as the job, which you have configured in the previous step, has run successfully.
- Step 4
In the SAP BTP cockpit, download the trust certificate of the subaccount runtime destinations by navigating to
Connectivity
>Destinations
.Select
Download Trust
.Open the
Communication Systems
app from the SAP Fiori launchpad in your SAP BTP, ABAP environment system.Create a new communication system by setting the following values.
System ID:
SUBACCOUNT_SYSTEM_COMMUNICATION
System Name:
SUBACCOUNT_SYSTEM_COMMUNICATION
Select
Inbound only
Set
SAML Bearer Assertion Provider
toON
Upload the certificate file you downloaded from your subaccount as the Signing Certificate.
Enter the value of the certificate’s CN attribute as
SAML Bearer Issuer
.
To save the communication system, select
Save
.
Which communication scenario do you have to choose for the creation of the communication arrangement?
- Step 5
Open the
Maintain Protection Allowlists
app from the SAP Fiori launchpad in your SAP BTP, ABAP environment system.On the Clickjacking Protection tab page, choose
Create
to add a new host. On theAdd Trusted Host
screen, enter the following data:Trusted Host Name:
<subdomain>.launchpad.cfapps.<region>.hana.ondemand.com
Schema:
HTTPS
Port:
443
Select
Save
.
- Step 6
You create a design-time destination to define the location from which the SAP Build Work Zone, standard edition should fetch the exposed content.
Navigate to the subaccount in which you have subscribed to the SAP Build Work Zone, standard edition.
In the
Connectivity
menu, chooseDestinations
.Create a new destination and fill in the following fields:
Name:
Tutorial_dt
Type:
HTTP
Description:
Design-time destination for tutorial
URL: Use the service URL of section
Inbound Services
in the communication arrangement created inStep 2
(Create the Communication Arrangement). Add suffixentities
.
Proxy Type:
Internet
Authentication:
BasicAuthentication
User:
COMMUNICATIONSYSTEM_INBOUND_USER
(Created inStep 1
(Create a Communication System))Password: Maintain password created in
Step 1
(Create the Communication System).
The destination should look like this:
Select
Save
.
- Step 7
Create a new destination and fill in the following fields:
Name:
Tutorial_Ressources_rt
Type:
HTTP
Description:
Tutorial: Runtime destination for ressources
URL: Fiori Launchpad URL of the SAP BTP, ABAP environment system
Proxy Type:
Internet
Authentication:
NoAuthentication
Additional Properties: (Select
New Property
to add new items)HTML5.DynamicDestination:
true
sap-platform:
ABAP
Select
Save
.
Finally the destination should look like this:
- Step 8
Create a new destination.
Name:
Tutorial_dynamic_OData_rt
Type:
HTTP
Description:
Tutorial: Dynamic runtime destination for OData access
URL: SAP Fiori Launchpad URL of the SAP BTP, ABAP environment system. Replace
abap-web
withabap
. Format: https://<tenant
>.**abap
**.<region
>.hana.ondemand.comProxy Type:
Internet
Authentication:
SAMLAssertion
Audience: SAP Fiori Launchpad URL of the SAP BTP, ABAP environment system
AuthnContextClassRef
:urn:oasis:names:tc:SAML:2.0:ac:classes:PreviousSession
Additional Properties: (Select
New Property
to add new items)HTML5.DynamicDestination:
true
nameIdFormat
:urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
Select
Save
.
The destination should look like this:
Which Destination is used to fetch the exposed content?
- Step 9
Before you create the content provider, make sure the content is available. The content is synchronized every 10 minutes, as configured in step 2. It can take up to one hour until the first synchronization run is scheduled. To check the availability of the content, open the Display Launchpad Content Exposure Logs app from the SAP Fiori launchpad in your SAP BTP, ABAP environment system. Once everything has been synchronized successfully, the content is available for consumption.
From the subaccount, navigate to
Services
>Instances and Subscriptions
and search for theSAP Build Work Zone, standard edition
in the search boxAccess SAP Build Work Zone, standard edition.
Select Provider Manager.
Create a new content provider.
Add title, description, ID, and the destinations created in
Step 6-8
(Create Design-Time / Runtime destination) accordingly:Title:
Tutorial
Description:
Content Provider tutorial
ID:
Tutorial
Design-Time Destinations:
Tutorial_dt
Runtime Destination:
Tutorial_Ressources_rt
Runtime Destination for OData:
Tutorial_dynamic_OData_rt
Content Addition Mode:
Manual addition of selected content items
Select
Save
.The content provider should look like this:
In the
Status
column of the table the status changes toCreated
as soon as the creation is finished. - Step 10
Navigate to the Content Manager.
Open
Content Explorer
tab, where all the already created content providers are listed.Select the content provider you have created in the previous step.
Select the
Administrator
content item and chooseAdd to My Content
.
- Step 11
Navigate to the Site Directory.
Select
Create Sites
.Choose a site name and select
Create
.Select
Edit
and move your cursor to the search box toSearch for items to assign
.Choose the
Administrator
role (select+
).Select
Save
.Copy and store the URL of the launchpad for later use.
Now you have assigned the business role, that is exposed to the SAP Build Work Zone, standard edition, to your launchpad site. With the business role all apps that are related to this business role will be available on the launchpad site. Also, a role collection is created, which is labeled according to this format:
<Content Provider name>_<Business Role name>
- Step 12
To access the launchpad site you have to assign the role collection created in the previous step, to your SAP BTP, ABAP environment user in the SAP BTP cockpit.
Open the SAP BTP Cockpit and navigate to the subaccount of the SAP Build Work Zone, standard edition.
Navigate to the
Users
menu.Search for your user and select it.
Choose
Assign Role Collection
in theRole Collection
section (depending on your window size, you might have to select...
first).Assign the created role collection
~tutorial_SAP_BR_ADMINISTRATOR
to the user.
- Step 13
With your user, access the launchpad site via the URL stored in
Step 11
.Log off and log on again. This makes sure the newly assigned role collection is taken into account.
The launchpad site should look like this. The groups might be in different order:
Which role is exposed to the SAP Launchpad service?
- Create a Communication System
- Create the Communication Arrangement
- Select Roles for Exposure to SAP Build Work Zone, standard edition
- Configure Communication between the SAP BTP Subaccount and the SAP BTP, ABAP Environment System
- Protect Launchpad Content Against Clickjacking
- Create the Design-Time Destination
- Create Runtime Destination for Launching Apps in an iFrame
- Create Runtime Destination for Dynamic OData access
- Create Content Provider
- Choose Content in the Content Manager
- Create Launchpad Site
- Add Role Collection to User
- Access Launchpad Site