Onboarding an Application in the Subscriber Subaccount

Objective

After completing this lesson, you will be able to onboard a CAP application.

Configure the Subscriber Subaccount

In SAP Business Technology Platform (BTP), the Subscriber Subaccount represents an individual tenant that consumes a multitenant application hosted in the Provider Subaccount. The onboarding process involves configuring the Subscriber Subaccount to establish trust, enabling secure access, and ensuring proper connectivity to the provider's application, while assigning appropriate roles and access for users.

  1. Create the Subscriber Subaccount

    The steps for this setup are the same as in the previous lesson. Refer to the Building an SAP Fiori App using the Basic Template > Configuring the Deployment Subaccount > Step 1: Creating a Subaccount for Isolated Deployment Environment.

    create a subaccount for subscriber from SAP BTP cockpit.

    Note

    The subdomain of the subaccount is used for the address of the subscriber specific address of the application.https://<subscriber subdomain>-<provider cf org>-<provider cf space>-<app name>.<domain>

    For example, https://subscriber1-acme-app-distperfmgmt.cfapps.us10-001.hana.ondemand.com

  2. Set Up the SAP BTP Destination for Service Layer with Principal Propagation

    The steps for this setup are the same as in the previous lesson. Refer to the Getting Started with SAP BTP Development > Setting up an SAP BTP Destination for Service Layer > How to Set Up the SAP BTP Destination for Service Layer with Principal Propagation.

    The principal propagation setup appears as follows:

    The SAP Trust and Authorization service for the subscriber subaccount is registered for the identity provider and SAP Business One tenants are bound to it in the SAP Business One Extension Single Sign On Manager.
    The destination setup appears as follows:The destination for SAP Business One Service Layer with Principal Propagation configuration is added in the subscriber subaccount.
  3. Configuring Trust with Identity Authentication service

    The steps for this setup are the same as in the previous lesson. Refer to the Building an SAP Fiori App using the Basic Template > Configuring the Deployment Subaccount > Step 4: Configuring Trust with Identity Authentication Service.

    The trust configuration setup appears as follows:

    Establish Trust with Identity Authentication Service and disabled User Logon for Default identity provider
  4. Subscribe to the CAP Application
    1. Go to  Service Marketplace. Find the deployed multitenant application. Choose Create. Locate the deployed application and create it in the Service Marketplace.
    2. Leave the default values as they are, then choose Create. Create a new subscription using default values.
    3. You have now subscribed to the application. You have now subscribed to the application.
  5. Verify the auto-created routing for the subscribed application.

    Verify that subscriber-specific routing is automatically created in the routes of your Cloud Foundry space.

    Verify that subscriber specific routing is created automatically.

Onboard the Application for End-Users

The steps for onboarding the application for end-users are the same as in the previous lesson. Refer to the Building an SAP Fiori App using the Basic Template > Configuring the Deployment Subaccount > Step 5: Configuring Managed Router and Users.

  1. Add a Business User and assign role collection
    1. Add a Business User from the Identity Authentication Service. When it has been added, it appears as follows:Add a Business User from the Identity Authentication Service.
    2. Assign role collection to the business user. The business user’s roles, which are defined by the developer, are available for selection: DistributorEvaluationsEditor, DistributorEvaluationsViewer, FollowUpCodesEditor and FollowUpCodesViewer. Assign role collections to the business user.
    3. When the role collections "DistributorEvaluationsEditor" and "FollowUpCodesViewer" have been assigned to the business user, it appears as follows: The role collections have been assigned to the business user.
  2. Launch the Application with the user
    1. Navigate to your SAP BTP subaccount.
    2. In the navigation pane, choose  Instances and Subscriptions.
    3. Choose Go to Application. Launch the Application from Instances and Subscriptions in SAP BTP Cockpit.
    4. When the application is launched in the SAP Launchpad site, it appears as follows: The application is launched in the SAP Launchpad site.

How to Test the Application

You have successfully subscribed to the application and onboarded a business user. As a business user, it’s time to test the application to ensure its functionality and validate the assigned roles.

  1. Follow-up Codes Tile: Verify access, data deployment, and role-based restrictions.
  2. Distributor Evaluations Tile: Validate score calculation, filtered list values, and draft functionality.
  3. List View Features: Check field display and filter functionality.

Log in to track your progress & complete quizzes