SAP Tech Bytes: CAP/HANA Tutorial Part 4 - Add User Authentication

Video Version of Tutorial: Add User Authentication to Your Application (SAP HANA Cloud) | SAP Tutorials - https://sap.to/6059RO5VW

Define security and enable user authentication and authorization for your SAP HANA Cloud CAP application.
You will learn
How to create an instance of the User Authentication and Authorization service
How to incorporate security into the routing endpoint of your application
How to configure Cloud Application Programming (CAP) service authentication

Summary
Made with HARPA AI

[00:00](   • SAP Tech Bytes: CAP/HANA Tutorial Par...  ) 🛠️ Adding User Authentication to SAP Cloud Application
Introduction to adding user authentication and authorization in SAP HANA Cloud CAP application.
Creating an instance of the user authentication and authorization service.
Incorporating security into application routing and configuring SAP CAP service for authentication.

[02:05](   • SAP Tech Bytes: CAP/HANA Tutorial Par...  ) 🔒 Understanding User Authentication and Authorization Service (XSUAA)
Explanation of XSUAA service providing user identity, roles, and user attributes.
JWT token used in HTTP requests for user authentication.
Application router's role in redirecting to UAA for logon processing and forwarding JWT token.

[04:11](   • SAP Tech Bytes: CAP/HANA Tutorial Par...  ) 📝 Configuring XS Security JSON File
Modifying xs-security.json for security configuration of the application.
Defining roles and scopes in the XS Security JSON file.
Using CAP to automatically update security configurations.

[07:16](   • SAP Tech Bytes: CAP/HANA Tutorial Par...  ) 🛠️ Additional Configuration for OAuth and XSUAA Instance Creation
Adding properties for OAuth configuration and redirect URLs in XS Security JSON.
Creating XSUAA service instance on SAP BTP using Cloud Foundry command line.

[10:23](   • SAP Tech Bytes: CAP/HANA Tutorial Par...  ) 🔄 Binding and Testing XSUAA with SAP CAP Service
Adjusting package JSON for XSUAA authentication in CAP project.
Binding XSUAA service for hybrid testing and creating service key.
Running CAP application in hybrid mode to connect to database and auth service.

[13:22](   • SAP Tech Bytes: CAP/HANA Tutorial Par...  ) 🔐 Setting Up and Testing Role-Based Security in BTP Cockpit
Granting roles to users in BTP Cockpit.
Testing security setup with role collections and user grants.
Understanding the need for full re-authentication for security changes.

[15:38](   • SAP Tech Bytes: CAP/HANA Tutorial Par...  ) 🔄 Updating Application Router for Authentication and Logout Endpoint
Adjusting xsapp.json for authentication.
Adding logout endpoint and routes for authenticated access.
Including user API in application router for retrieving user information.

[17:09](   • SAP Tech Bytes: CAP/HANA Tutorial Par...  ) 🚀 Running and Verifying Application with User Authentication
Running CAP application and application router with authentication.
Testing unauthorized access and role-based data filtering.
Verifying UI functionality with authentication and role-based access.

[20:43](   • SAP Tech Bytes: CAP/HANA Tutorial Par...  ) 🛡️ Instance-Based Filtering and User API Endpoint Testing
Instance-based filtering for record-level security.
Testing user API endpoint for retrieving user attributes