The SAP Commerce Cloud is a cloud-native e-commerce platform that helps organizations build, run, and scale omnichannel commerce. It offers robust APIs, extensibility, and out-of-the-box commerce capabilities so businesses can integrate with SAP solutions and third-party systems, deliver personalized and contextual experiences, and maintain consistent customer journeys across digital and physical touchpoints.
The following lists the major changes and new features in SAP Commerce Cloud, organized by module. Additional details can be found through the provided links:
| Module | Update Description |
|---|
| Backoffice & SmartEdit | - Backoffice Personalization: Personalize the fields in an advanced search and the editor area in Backoffice to create an environment suited to your needs and working style.
- CX AI Toolkit Navigation: Launch the CX AI Toolkit instantly from Backoffice.
- WalkMe Integration: WalkMe is now integrated into both Backoffice and SmartEdit, providing on-screen user guidance.
- SmartEdit Enhancements: Customize your page view in SmartEdit, Added Page Lock Workflow Template in SmartEdit, Angular 19 Update for SmartEdit.
|
| Commerce & Integration APIs | - At-Least-Once Delivery for Webhook Events: Provides a more reliable delivery mechanism for mission-critical events.
- Open Payment Framework B2B Checkout: Integrate account-based payments into your current payment system.
- One-Time Verification Token: Customer registration OCC API endpoints are improved by adding One-Time Verification Token verification.
- Product Quantity Limits: The order and cart-related APIs are enhanced to be able to enable the validation of product quantity against defined maximum and minimum limits.
- Improved IP Address Handling: Customers' real IP addresses are used for brute force protection instead of proxy addresses.
|
| Search & Navigation | - Solr 9.7 Support: SAP Commerce Cloud now supports Solr 9.7.
- Personalized Search: Deliver enhanced search capabilities with the Personalized Search feature.
- Trending Search Terms Preview: Discover the new Trending Search Terms Preview available in Trending Search Terms UI.
|
| Cloud Portal | - Theme Selection: The Cloud Portal now allows you to select from various themes through the new Appearance menu.
|
| Security Updates | - CodeMirror Security: Addressed a security vulnerability in CodeMirror by removing multiple language modes from the hac extension.
- Spring Security Upgrade: Upgraded the Spring Security library to address a critical security vulnerability and improve the handling of long passwords and tokens.
- Brute Force Attack Prevention: It is now possible to disable the login for the admin user as part of the brute force attack prevention.
|
| Platform & Core Enhancements | - Framework Update: The framework has been upgraded to JDK 21 and Spring 6, ensuring compatibility with the latest technologies.
- OAuth Replacement: The OAuth capability has been rebuilt on top of currently available Spring libraries, enhancing security and moving away from the deprecated Spring Security OAuth library. This requires switching to the Authentication Code Flow.
- Drools Update: Drools has been upgraded from version 8 to version 10, ensuring security and compatibility with Spring 6.
- Password Security: Several enhancements have been made to password security, including preventing users from reusing historical passwords, configurable expiration of initial passwords, and automatic unlocking of user accounts after unsuccessful login attempts.
- Transparent Attribute Encryption (TAE): Enhanced protection against data tampering by disabling plaintext fallback in TAE and removing plaintext from the creation of system users.
- ServiceLayer Direct Mode: Improved orphan removal in many-to-many relations for ServiceLayer Direct (SLD) mode, ensuring data consistency.
|
| Other Notable Updates | - Azure SDK Update: The unsupported Microsoft Azure Storage Client SDK 8.6.6 library has been removed and replaced with selected Microsoft Azure Java Client Libraries 12.x.
- Environment Hibernation: If you have inactive environments you still want to keep, you can place them in hibernation.
- VPN and NAT port availability: Inbound and outbound traffic over ports :23 and :514 is no longer possible for VPN and NAT connections.
|
Summary
- Security is Enhanced: By implementing measures to protect against brute force attacks and data tampering, SAP Commerce Cloud ensures a secure environment for both customers and businesses.
- Performance is Optimized: Through framework upgrades and database call reductions, SAP Commerce Cloud delivers a smoother and more efficient user experience.
- Functionality is Expanded: With new API endpoints, improved integrations, and personalized search capabilities, SAP Commerce Cloud offers a broader range of tools for businesses to enhance their commerce operations.