xs-security.json Security Descriptor (Scopes, Role Templates, XSUAA Service Binding)
Tutorials that teach this
- Tutorial Add User Authentication to Your Application (SAP HANA Cloud)
- Tutorial Configure Authentication and Authorization on SAP BTP
- Tutorial Prepare for Production
- Tutorial Create an Application with SAP Java Buildpack 2
- Tutorial Secure Your Application on SAP Business Technology Platform Cloud Foundry
- Tutorial Define your MTA resources and extension descriptors
- Tutorial Secure a Basic Node.js App with the Authorization and Trust Management Service (XSUAA)
Prerequisites
- Concept CAP Authorization with CDS CAP Authorization with CDS is a mechanism in the SAP Cloud Application Programming Model (CAP) that allows developers to declaratively define access control rules directly within [CDS models](https://help.sap.com/docs/btp/sap-business-technology-platform/e4a7559baf9f4e4394302442745edcd9?locale=en-US&state=PRODUCTION&version=Cloud). Developers use it to restrict which users or roles can read, write, or invoke specific entities and services, keeping authorization logic close to the data model definition. Following best practices, these annotations help produce concise and comprehensible models that enforce security without scattering access control logic across application code.
- Concept CDS-based Authorization Annotations in CAP
- Concept XSUAA Authentication via SAP Approuter
- Concept SAP Authorization and Trust Management Service (XSUAA)
- Concept Authorization and Trust Management Service (XSUAA) Instance
- Concept Setting Up the Application Router
- Concept Assigning Role Collections in SAP BTP Cockpit
- Concept Binding a Cloud Foundry Service Instance to an Application
Concepts that build on this
- Concept Configuring the Application Router (approuter) for CAP
- Concept Tenant-Aware Approuter for SaaS Multitenant Applications on SAP BTP
- Concept UAA Authorization Scopes in xs-security.json
- Concept Role Collections and Authorization Management in SAP BTP
- Concept CAP Multi-Target Application (MTA) Deployment