Week 5 Unit 1:

SAP Cloud Platform Cockpit

SAP Cloud Platform Cockpit
Cockpit

SAP Cloud Platform Cockpit

Web-based administration of SAP Cloud Platform
Central point for administration of account
Access, view, and manage your applications
Persistence
Services
Logging information
Monitoring information
Authorization management

2017 SAP SE or an SAP affiliate company. All rights reserved. Public 2

SAP Cloud Platform Cockpit
Accounts

Each account holds

Resources that can be consumed by apps
Users allowed to work in the account
Apps
Apps deployed & running in the account Resources

Data written by apps running in the account

Configuration for apps running in the account Account
Each account is assigned to a data center Data Users

Each account is fully isolated

Configuration

Data Center

2017 SAP SE or an SAP affiliate company. All rights reserved. Public 3

SAP Cloud Platform Cockpit
What youve learned in this unit

An account is the logical entity that groups

together resources, users, apps, data, and
technical settings
Accounts are assigned to a data center and
fully isolated
The cockpit is the central point to manage
accounts
Use the cockpit to manage apps, connectivity,
and authorizations within an account

2017 SAP SE or an SAP affiliate company. All rights reserved. Public 4

Thank you

Contact information:

open@sap.com
 2017 SAP SE or an SAP affiliate company. All rights reserved.

No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of SAP SE or an SAP affiliate company.

SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of SAP SE (or an SAP affiliate
company) in Germany and other countries. Please see http://global12.sap.com/corporate-en/legal/copyright/index.epx for additional trademark information and notices.

Some software products marketed by SAP SE and its distributors contain proprietary software components of other software vendors.

National product specifications may vary.

These materials are provided by SAP SE or an SAP affiliate company for informational purposes only, without representation or warranty of any kind, and SAP SE or its
affiliated companies shall not be liable for errors or omissions with respect to the materials. The only warranties for SAP SE or SAP affiliate company products and
services are those that are set forth in the express warranty statements accompanying such products and services, if any. Nothing herein should be construed as
constituting an additional warranty.

In particular, SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or any related presentation, or to develop
or release any functionality mentioned therein. This document, or any related presentation, and SAP SEs or its affiliated companies strategy and possible future
developments, products, and/or platform directions and functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time
for any reason without notice. The information in this document is not a commitment, promise, or legal obligation to deliver any material, code, or functionality. All forward-
looking statements are subject to various risks and uncertainties that could cause actual results to differ materially from expectations. Readers are cautioned not to place
undue reliance on these forward-looking statements, which speak only as of their dates, and they should not be relied upon in making purchasing decisions.

2017 SAP SE or an SAP affiliate company. All rights reserved. Public 6

Week 5 Unit 2: SAP Cloud
Platform Portal Accounts
SAP Cloud Platform Portal Accounts
Staged development with multiple accounts

Account Dev Account Prod

Technical Information Technical Information
Landscape Landscape
Account ID + name Account ID + name
Members + Authorizations Members + Authorizations
Resources / Applications Resources / Applications
Java compute units / Java apps Java compute units / Java apps
Databases (e.g. SAP HANA) / XS Databases (e.g. SAP HANA) / XS
apps apps
HTML5 / HTML5 apps HTML5 / HTML5 apps
Application Services Application Services
On-premise connectivity On-premise connectivity
Authentication / trust settings Authentication / trust settings
Portal sites / settings Portal sites / settings

overall resources + quotas

2017 SAP SE or an SAP affiliate company. All rights reserved. Public 2

SAP Cloud Platform Portal Accounts
Transporting SAP Fiori launchpad sites

Administrators can transport portal content between

accounts, between landscapes, and between data
centers using export and import functions.
Transport SAP Fiori launchpad sites using either Site
Directory or Configuration Cockpit
Content package (site content + site configuration)
Site content HTML5 applications, themes, roles
Site configuration Site settings, app configurations,
catalogs, groups, roles, and translations
Site (site configuration)
Roles
Catalogs

2017 SAP SE or an SAP affiliate company. All rights reserved. Public 3

SAP Cloud Platform Portal Accounts
Transporting freestyle sites

Transport freestyle sites using export and import

options provided in the Site Directory
Content package (site content + site configuration)
Site content Site template, pages, apps, widgets,
sites assets, themes, roles
Site configuration Site settings, page settings,
Fiori Launchpad, app configurations (if any), and
translations
Site (site configuration)

2017 SAP SE or an SAP affiliate company. All rights reserved. Public 4

SAP Cloud Platform Portal Accounts
What youve learned in this unit

SAP Cloud Platform allows you to achieve

isolation between the different application
lifecycle stages by using multiple accounts.
Allocating resources between accounts
Transporting SAP Fiori launchpad site
Transporting freestyle sites

2017 SAP SE or an SAP affiliate company. All rights reserved. Public 5

Thank you

Contact information:

open@sap.com
 2017 SAP SE or an SAP affiliate company. All rights reserved.

No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of SAP SE or an SAP affiliate company.

SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of SAP SE (or an SAP affiliate
company) in Germany and other countries. Please see http://global12.sap.com/corporate-en/legal/copyright/index.epx for additional trademark information and notices.

Some software products marketed by SAP SE and its distributors contain proprietary software components of other software vendors.

National product specifications may vary.

These materials are provided by SAP SE or an SAP affiliate company for informational purposes only, without representation or warranty of any kind, and SAP SE or its
affiliated companies shall not be liable for errors or omissions with respect to the materials. The only warranties for SAP SE or SAP affiliate company products and
services are those that are set forth in the express warranty statements accompanying such products and services, if any. Nothing herein should be construed as
constituting an additional warranty.

In particular, SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or any related presentation, or to develop
or release any functionality mentioned therein. This document, or any related presentation, and SAP SEs or its affiliated companies strategy and possible future
developments, products, and/or platform directions and functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time
for any reason without notice. The information in this document is not a commitment, promise, or legal obligation to deliver any material, code, or functionality. All forward-
looking statements are subject to various risks and uncertainties that could cause actual results to differ materially from expectations. Readers are cautioned not to place
undue reliance on these forward-looking statements, which speak only as of their dates, and they should not be relied upon in making purchasing decisions.

2017 SAP SE or an SAP affiliate company. All rights reserved. Public 7

Week 5 Unit 3: Authentication,
Authorization, and Security
Authentication, Authorization, and Security
Authentication & single sign-on

Your SAP Cloud Platform

Web application(s)
Web
browser Access-protected XS
Web resources
App
SAP
User Cloud Platform

Authenticate / Delegate authentication

single sign-on & identity management

Identity Provider (IdP)

Java and the Java logo are registered trademarks of Oracle and/or its affiliates

2017 SAP SE or an SAP affiliate company. All rights reserved. Public 2

Authentication, Authorization, and Security
Identity provider options on SAP Cloud Platform

SAPs public identity provider on the Internet

Free service SAP ID service
Default identity provider for SAP Cloud Platform
trial accounts Internet
Cloud solution for identity lifecycle management
Pay-per-logon requests SAP Cloud Platform,
Preconfigured identity provider for productive identity authentication
SAP Cloud Platform accounts service
SAP Cloud
Platform
Integration with a corporate Identity and Access Corporate
Management solution Bring your own network
Prerequisite: SAML 2.0 compliance identity provider

2017 SAP SE or an SAP affiliate company. All rights reserved. Public 3

Authentication, Authorization, and Security
Working with multiple identity providers

Employees of an
external partner

SAP
Cloud Platform
Your own employees
Java and the Java logo are registered trademarks of Oracle and/or its affiliates

2017 SAP SE or an SAP affiliate company. All rights reserved. Public 4

Authentication, Authorization, and Security
Working with multiple identity providers

IdP for external partner

SAP
Corporate IdP Cloud Platform
Corporate
Network Java and the Java logo are registered trademarks of Oracle and/or its affiliates

2017 SAP SE or an SAP affiliate company. All rights reserved. Public 5

Authentication, Authorization, and Security
Working with multiple identity providers

SAP Cloud Platform Cockpit Trust Management

https://<app name>.hana.ondemand.com/index.jsp?
saml2idp=<idp name>

SAP
Cloud Platform
Java and the Java logo are registered trademarks of Oracle and/or its affiliates

2017 SAP SE or an SAP affiliate company. All rights reserved. Public 6

Authentication, Authorization, and Security
Authorization management

Group

is assigned to
is assigned to
(static OR federated
(static assignment)
assignment)
App

XS
is assigned to
(static assignment)
User Role

2017 SAP SE or an SAP affiliate company. All rights reserved. Public 7

Authentication, Authorization, and Security
Assign catalogs to PFCG roles

Assign Portal catalogs to PFCG roles in the

back-end system
Automatically determine the relevant back-end
authorizations that are required to execute the
content below from the SAP Fiori launchpad
on SAP Cloud Platform
OData services (invoked by SAPUI5 apps)
SAP GUI transactions
Web Dynpro ABAP applications

2017 SAP SE or an SAP affiliate company. All rights reserved. Public 8

Authentication, Authorization, and Security
End-to-end flow

SAP Cloud Platform SAP Cloud Platform Identity Authentication

Account Groups Tenant
Trust account trust
App
Roles
Portal Service
Catalogs/Groups Assertion App users
User attributes +
Apps Destination
groups

On-premise
SAP Cloud Connector

OData service PFCG roles

Authorization
defaults
ABAP user
SAP Back End

2017 SAP SE or an SAP affiliate company. All rights reserved. Public 9

Authentication, Authorization, and Security
What youve learned in this unit

Authentication of a Portal site is always

delegated to an identity provider
SAP Cloud Platform easily integrates with any
identity provider that is based on SAML 2.0
Selection of an identity provider other than the
default is done using the URL query parameter
saml2idp
You can mass-assign users to groups using
federated assignments

2017 SAP SE or an SAP affiliate company. All rights reserved. Public 10

Thank you

Contact information:

open@sap.com
 2017 SAP SE or an SAP affiliate company. All rights reserved.

No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of SAP SE or an SAP affiliate company.

SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of SAP SE (or an SAP affiliate
company) in Germany and other countries. Please see http://global12.sap.com/corporate-en/legal/copyright/index.epx for additional trademark information and notices.

Some software products marketed by SAP SE and its distributors contain proprietary software components of other software vendors.

National product specifications may vary.

These materials are provided by SAP SE or an SAP affiliate company for informational purposes only, without representation or warranty of any kind, and SAP SE or its
affiliated companies shall not be liable for errors or omissions with respect to the materials. The only warranties for SAP SE or SAP affiliate company products and
services are those that are set forth in the express warranty statements accompanying such products and services, if any. Nothing herein should be construed as
constituting an additional warranty.

In particular, SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or any related presentation, or to develop
or release any functionality mentioned therein. This document, or any related presentation, and SAP SEs or its affiliated companies strategy and possible future
developments, products, and/or platform directions and functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time
for any reason without notice. The information in this document is not a commitment, promise, or legal obligation to deliver any material, code, or functionality. All forward-
looking statements are subject to various risks and uncertainties that could cause actual results to differ materially from expectations. Readers are cautioned not to place
undue reliance on these forward-looking statements, which speak only as of their dates, and they should not be relied upon in making purchasing decisions.

2017 SAP SE or an SAP affiliate company. All rights reserved. Public 12

Week 5 Unit 4: Architecture
Architecture
Single point of access to information, applications, and services

Employee Partner Customer

S/4HANA SAP Cloud Platform

Runtime HTML5 Java HANA XS
S4 IdP
Services Portal Mobile Jam Integration

Success Security Docs Web IDE HANA

Factors non-SAP
non-SAP

Extranet

Intranet
SAP Cloud Connector

ERP CRM SRM S/4HANA Corporate User Store

(Active Directory)

2017 SAP SE or an SAP affiliate company. All rights reserved. Public 2

Architecture
Portal architecture External access point

https

SAP Cloud Platform Customer Account

Cockpit
Cloud Portal
Site Designer/ Config Cockpit

pre-packaged content / accelerators UI theme designer

SAP Web IDE

Build
OData
Public Cloud OData provisioning* Identity Authentication

UI Services

SAP Cloud Connector https

On-premise
SAP Gateway Hub*
Data & Processes
SAP Back End

* Alternative OData services via SAP Gateway (on-premise)

2017 SAP SE or an SAP affiliate company. All rights reserved. Public 3

Architecture
Portal architecture Internal access point

SAP Cloud Platform Customer Account

Cockpit
Cloud Portal
Site Designer/ Config Cockpit

pre-packaged content / accelerators UI theme designer

SAP Web IDE

Build
Public Cloud Identity Authentication

UI Services

https
On-premise Web
SAP Gateway Hub Dispatcher
Data & Processes
SAP Back End

2017 SAP SE or an SAP affiliate company. All rights reserved. Public 4

Architecture
Portal deployment options for SAP Gateway and OData provisioning

Portal Portal Portal

OData Provisioning

SAP Cloud Connector SAP Cloud Connector SAP Cloud Connector

SAP Gateway (hub)

SAP Gateway (embedded)
SAP Back End SAP Back End SAP Back End

Embedded Deployment Gateway Hub OData Provisioning

+ quick and easy way to expose SAP + administration advantages + Gateway hub in the cloud
Gateway services from a single back through central deployment + included in license for
end + multi-origin composition SAP Fiori Cloud
combine data from several back ends + routing support for connecting to + cloud benefits (upgrades, scaling,
downtime for SAP Business Suite multiple back-end systems security,)
systems when upgrading UI + enhanced security + integrated with other SAP Cloud
components additional server required Platform services
no integration of 3rd party data sources

2017 SAP SE or an SAP affiliate company. All rights reserved. Public 5

Architecture
What youve learned in this unit

Portal service is one of the key services on the platform and

offers a cloud-based single point of entry
Portal leverages various underlying services of SAP Cloud
Platform
Portal architecture supports internal and external access
points
Gateway deployment options supported by the portal

2017 SAP SE or an SAP affiliate company. All rights reserved. Public 6

Thank you

Contact information:

open@sap.com
 2017 SAP SE or an SAP affiliate company. All rights reserved.

No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of SAP SE or an SAP affiliate company.

SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of SAP SE (or an SAP affiliate
company) in Germany and other countries. Please see http://global12.sap.com/corporate-en/legal/copyright/index.epx for additional trademark information and notices.

Some software products marketed by SAP SE and its distributors contain proprietary software components of other software vendors.

National product specifications may vary.

These materials are provided by SAP SE or an SAP affiliate company for informational purposes only, without representation or warranty of any kind, and SAP SE or its
affiliated companies shall not be liable for errors or omissions with respect to the materials. The only warranties for SAP SE or SAP affiliate company products and
services are those that are set forth in the express warranty statements accompanying such products and services, if any. Nothing herein should be construed as
constituting an additional warranty.

In particular, SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or any related presentation, or to develop
or release any functionality mentioned therein. This document, or any related presentation, and SAP SEs or its affiliated companies strategy and possible future
developments, products, and/or platform directions and functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time
for any reason without notice. The information in this document is not a commitment, promise, or legal obligation to deliver any material, code, or functionality. All forward-
looking statements are subject to various risks and uncertainties that could cause actual results to differ materially from expectations. Readers are cautioned not to place
undue reliance on these forward-looking statements, which speak only as of their dates, and they should not be relied upon in making purchasing decisions.

2017 SAP SE or an SAP affiliate company. All rights reserved. Public 8

Week 5 Unit 5:
Course Summary
Summary
What youve learned in this course

Week 1 Introduction and Overview

Week 2 SAP Fiori Launchpad Sites
Week 3 Freestyle Sites
Week 4 Productizing Your Site
Week 5 Managing Your Landscape

2017 SAP SE or an SAP affiliate company. All rights reserved. Public 2

Summary
Learn more

Recommended openSAP courses

SAP HANA Cloud Platform Essentials
Next Steps in SAP HANA Cloud Platform
Extending SAP Products with SAP HANA Cloud Platform
Developing Web Apps with SAPUI5
Build Your Own SAP Fiori App in the Cloud 2016 Edition

Recommended SAP Education course

SAP Education course on Cloud Portal (CP300)

2017 SAP SE or an SAP affiliate company. All rights reserved. Public 3

Summary
Stay up-to-date

SAP Cloud Platform website

SAP Cloud Platform community

SAP Cloud Platform on Twitter

SAP Cloud Platform on SlideShare

SAP Cloud Platform podcast

2017 SAP SE or an SAP affiliate company. All rights reserved. Public 4

Thank you

Contact information:

open@sap.com
 2017 SAP SE or an SAP affiliate company. All rights reserved.

No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of SAP SE or an SAP affiliate company.

SAP and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of SAP SE (or an SAP affiliate
company) in Germany and other countries. Please see http://global12.sap.com/corporate-en/legal/copyright/index.epx for additional trademark information and notices.

Some software products marketed by SAP SE and its distributors contain proprietary software components of other software vendors.

National product specifications may vary.

These materials are provided by SAP SE or an SAP affiliate company for informational purposes only, without representation or warranty of any kind, and SAP SE or its
affiliated companies shall not be liable for errors or omissions with respect to the materials. The only warranties for SAP SE or SAP affiliate company products and
services are those that are set forth in the express warranty statements accompanying such products and services, if any. Nothing herein should be construed as
constituting an additional warranty.

In particular, SAP SE or its affiliated companies have no obligation to pursue any course of business outlined in this document or any related presentation, or to develop
or release any functionality mentioned therein. This document, or any related presentation, and SAP SEs or its affiliated companies strategy and possible future
developments, products, and/or platform directions and functionality are all subject to change and may be changed by SAP SE or its affiliated companies at any time
for any reason without notice. The information in this document is not a commitment, promise, or legal obligation to deliver any material, code, or functionality. All forward-
looking statements are subject to various risks and uncertainties that could cause actual results to differ materially from expectations. Readers are cautioned not to place
undue reliance on these forward-looking statements, which speak only as of their dates, and they should not be relied upon in making purchasing decisions.

2017 SAP SE or an SAP affiliate company. All rights reserved. Public 6