Pointing out the updates for SAP Customer Data Solutions

Streamlined Authentication and Authorization

• OIDC Claims in B2B: Business Entity data can now be mapped in OIDC claims during just-in-time provisioning, enabling more granular access control and personalized experiences for B2B users.
• OIDC Support for Admin Console Login: Administrators can now use an external OpenID Connect identity provider (OP) to authenticate into the SAP Customer Data Cloud admin console, aligning with enterprise SSO requirements.
• Token Exchange Support: Developers can request new Access or ID tokens tailored for specific downstream services without exposing over-privileged or long-lived tokens. SAP Customer Data Cloud also supports the JWT Bearer Token Exchange flow, enabling clients to exchange a JWT assertion issued by an external identity provider for a new SAP Customer Data Cloud access token.

1. Enhanced Global Access and Authentication Options:
   • Global Access Improvements: Several login and registration methods are now supported in Global Access, ensuring a consistent authentication experience across all data centers and global access sites. This includes DocCheck, OIDC RP, Microsoft Social Network, LINE Social Network, FIDO Passwordless Login, and LinkedIn support.
   • Custom Identifier Support: Users can now authenticate using custom identifiers such as ID or loyalty numbers in both standard login and identifier-first flows. This feature is also supported when importing account data using the accounts.importFullAccount REST endpoint.
   • OIDC Enhancements: Expanded OpenID Connect (OIDC) support includes RP Link Account V2, offline_access scope, RP-Initiated Logout, OIDC OP Device Flow, and native support for child sites as OIDC OPs.
   • Identifier First: New Login and Registration screens allow seamless authentication for new and returning users alike and improve the overall user experience. The Identifier First flows now support even more methods, including Phone OTP for secure and efficient account creation.
2. Data Handling and Security Improvements:
   • ImportFullAccount Enhancements: The accounts.importFullAccount REST API has been enhanced with address support, custom identifier support, internal fields support, automatic UID creation, and email policies flexibility.
   • Addresses Object Enhancement: The capability to create and store multiple addresses under each address type and add relevant contact details to each one of them has been added.
   • Risk-Based Authentication (RBA): Integration with Akamai Bot Manager and reCAPTCHA flow support enhances risk assessment during authentication. SAP CAPTCHA support is also available for OTP flows.
   • Password Security: Integration with the Have I Been Pwned (HIBP) service prevents users from using known compromised passwords.

1. Enhanced Consent Management and Dataflows:
   • Linking Communications to a Consent Statement Support: You can now create a link between a consent statement and Communication Topics. This allows you to automatically sync a Withdrawal of Consent with the linked communications, and trigger a user opt-out.
   • Dataflows Enhancements: Integration with Azure via Microsoft Entra ID is now supported. There is now a system generated application named _dataflow that will be used for all dataflows. Support for the current version of the Azure SaS reader and writer has been added.
   • Communication Double Opt-in Support: Communication topics now support double opt-in using Magiclink.
   • Email Template Updates: Email templates that contain links now automatically use the customer's defined CNAME in the URL.
2. Group Management Updates:
   • New Group Model Setting: A new setting, "Prevent Members from Deleting Groups," is available.
   • New Schema Fields: New out-of-the-box schema fields for all existing and new group models are now available, including Name, Description, and Status.
   • API Updates: The group schema API has been split into accounts.groups.model.getSchema and accounts.groups.relationship.getSchema.
   • GroupID Generation: GroupID is no longer a mandatory field when creating a new Group.
   • Group Invite by Email: A new process allows group admins to pre-register new members and send invitation emails with a one-click acceptance link.

• Webhooks Security: Webhook configurations now support OAuth authentication to secure communication between SAP Customer Data Cloud and your webhooks endpoint.
• Header Validation: Administrators can now define custom HTTP headers that must be present when sending unsigned API calls to SAP Customer Data Cloud.
• Console UI Update: The console has been updated with a new user-focused interface.

• Filtering in Array-to-Array Mapping: The new Filter option in array-to-array mapping allows you to define conditions that determine which elements from a source array are included in the target array. Unlike the Array Predicate, which selects only the first matching element, the Filter includes all elements that meet the specified conditions. This ensures that only relevant records are ingested or sent, reducing payload size and improving downstream data quality.
• Conditional Mapping in Events and Actions: Conditional mapping allows you to apply conditions that determine whether the data of an attribute is sent as part of an action or ingested as part of an event. This provides greater control over data accuracy and relevance during data ingestion and activation, without requiring external processing or custom logic.
• Complex Conditions in Array Selector: When mapping an array to a single attribute, the array selector now supports complex AND/OR conditions in the Array Predicate option. This allows you to apply conditions on multiple attributes from the array to define which data should be included in the event or action, providing more flexibility and control over data mapping logic.
• Null Values Support for Transformations: You can now designate an empty string or null value to transform to or from when defining a transformation between strings. This provides more comprehensive handling of null values in your data transformations.

• New Operators in Condition Builders:

  The addition of the BETWEEN operator for number, integer, and date type attributes simplifies setting date or number ranges in segments, activity indicators, calculated indicators, CX flows, CX journeys, and data retention policies. This eliminates the need for combinations of "before" and "after" operators.

  Additionally, the EQUALS ONE OF (for primitive attributes) and INCLUDES ONE OF (for array attributes) operators allow you to specify multiple values in a condition simultaneously, reducing the number of conditions needed. These operators are also available in audience explorations when using attributes of a child entity to filter instances in a parent entity.

• Empty Strings in Configurations You can now check if a string attribute is an empty string, or if a string array includes an empty string, when using conditions for creating explorations, segments, CX flows, journeys, and indicators.

• Business Data Cloud Integration: SAP CDP can now be enhanced with data from SAP Business Data Cloud, allowing a smooth integration of SAP Business Data Cloud data into SAP CDP.
• New Events in SAP Emarsys Connector: The SAP Emarsys connector now supports the ingestion of customer mobile campaign activities through two new events: "Get mobile push notification opened activity" and "Get mobile in-app notification clicked activity.
• Multi-business Areas Support in SAP Emarsys: The SAP Emarsys Customer Engagement connector now supports multi-business areas for real-time actions, enabling filtering of profile data based on assigned business areas.
• New Actions in SAP Sales Cloud and SAP Service Cloud Connector: The SAP Sales Cloud and SAP Service Cloud Version 2 connector is enhanced with new actions such as Create an Individual Customer, Create an Account, Create a New Contact, Create a Lead, Create an Opportunity, Create an Appointment, and Create a Case. These actions can be configured to send data to SAP Sales Cloud and SAP Service Cloud Version 2, or as enrichment actions to enrich SAP Customer Data Platform with a response.
• Export Data to External Systems: SAP Customer Data Platform data can now be exported to external cloud storage service providers, including Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), and SFTP. Supported formats are Parquet or JSONL. Arrays of primitive types that are part of relationships are now included when exporting data to external systems.

• PII Attributes in Outbound Data Governance: When selecting schema attributes to include in an outbound processing purpose, attributes flagged as Personal Identifiable Information (PII) need to be manually selected individually and can no longer be selected en masse through their parent attribute. This ensures that PII data is treated with the necessary care when sharing data with external systems.
• Payload in Shipped Logs: You can now opt to include the payload of the logs to be shipped to the connected log provider, providing increased observability and greater insight into the health of the system.
• Data Retention for Groups and Activities: The Data Retention functionality has been enhanced, allowing you to set up rules to delete groups and their activities after a set time period in accordance with privacy regulations. Data retention is now also available for activities, allowing you to delete activity events based on time or values.

• Value Distribution Preview in Explorations: When building audiences and segments through explorations, you can now preview the available values for each attribute as well as how often each value occurs. You can then directly select one or multiple of these values as conditions.
• CX Flow Queues: SAP Customer Data Platform administrators can now assign CX flows to different execution queues which are tailored to accommodate different target system response times. A new monitoring panel provides insights into each queue's performance and size.
• Duplication for Various Insights and Activations: You can now duplicate Segments, Explorations, Indicators, CX Flows and CX Journeys.
• "First Seen" and "Last Seen" Metadata: Metadata timestamps on profiles and groups are now available for data activation and building criteria.
• Query Customers by Any Identifier: You can now query customers in a business unit by any attribute that has a matching rule over it in CDP.