SAP Builders Blog Posts
Learn from peers about their low-code journey and write your own blog posts to share your thoughts and experiences as you become an SAP Builder.
cancel
Showing results for 
Search instead for 
Did you mean: 
EsmeeX
Product and Topic Expert
Product and Topic Expert

buildimage.png

Greetings, fellow Builders! We are pleased to bring you the first SAP Build Apps release news of 2024. Recently, we published two major updates that will affect backend projects and enhance the fusion development experience:

  • Roles and access management in visual cloud functions
  • Deploying a project with backend to SAP Build Work Zone

Roles and access management in visual cloud functions

We have now added user authorization to visual cloud functions projects, a robust feature which enhances our built-in governance capabilities. This allows a system administrator or developer to create user roles within a backend project and assign specific permissions.

You can create roles for individual users or user groups to determine which actions are allowed. For example – admins can create a role for the entire sales team and allow them to update data entities and add new records but restrict them from deleting records.

Screenshot 2024-02-01 at 12.39.15 PM.png

To get started, you can now find the ‘Roles’ tab visible in visual cloud functions, where you can manage and assign user roles for your projects.

See the documentation: Visual cloud functions - User Authorization 

Deploying a project with backend to SAP Build Work Zone

For your applications that include a backend project in visual cloud functions, we’ve now introduced a simplified method for integrating with SAP Build Work Zone. To get started with this feature, you will need to enable the Identity Authentication Service (IAS) tenant in SAP Build Work Zone, as this is a requirement for SAP Build Apps. We have included instructions for this below. 

🔔 Important considerations for your current projects 

If you currently have an SAP Build Apps project deployed to SAP Build Work Zone, you should not encounter any issues. However, once you update your app, create a new build and deploy it to your SAP Build Work Zone page you will notice that access to the app will not work. 

Note: All SAP Build Apps users must make the changes described below before you deploy and integrate a new app version to SAP Build Work Zone, otherwise you risk losing access to your projects. 

Steps to complete with your SAP BTP/SAP Build Work Zone Admin team

1. Enable IAS in SAP Build Work Zone.

ias-step 1.png

  • Start by navigating to the SAP Build Work Zone manager and choosing Settings. Click the checkbox and choose Enable.
  • This is a one-time setup with implications for all SAP Build Work Zone assets that are used in the same subaccount.
  • Note: The change needs to be made for each SAP BTP subaccount where SAP Build Apps applications are being deployed to (also for free tier instances of SAP Build Apps).
  • Documentation: Switch to SAP Cloud Identity Services - Identity Authentication

2. Establish trust in IAS between the SAP Build Work Zone IAS application and the SAP Build Apps IAS application. 

  • To enable SAP Build Work Zone to consume the APIs of SAP Build Apps applications, applications can request tokens with access privileges for APIs of another application. With this configuration, you authorize SAP Build Work Zone to consume the API of SAP Build Apps. The trust between the SAP Build Work Zone IAS application created in the previous step and SAP Build Apps needs to be established in the customer IAS tenant as visible on the screenshot.
  • Select the SAP Build Work Zone app and go to the Dependencies.
  • Add a new Dependency as visible on the screenshot:

api-step2.png

  • Important: Make sure to use this Dependency Name (case sensitive): sap-build-apps-api 
  • If you have several entries under Application please select the SAP Build Apps entry for the current SAP BTP subaccount.
  • This configuration needs to be done for each SAP Build Work Zone instance (subaccount) where SAP Build Apps applications are being deployed to.
  • IAS documentation: Configure integration between applications

 3. Deploy your application to the SAP Build Work Zone application router:

Screenshot 2024-02-01 at 4.51.42 PM.png

After the successful deployment, you can add the newly created app to your SAP Build Work Zone page! 🎉 

Step-by-step instructions for this can be found in these tutorials:

See the documentation for this setup: Visual cloud functions - Deployed Applications

***

These new features aim to bring our SAP Build portfolio even closer together and promote collaboration between teams, also known as fusion development.

We appreciate your continued efforts to innovate with SAP Build Apps and look forward to bringing you more exciting developments this year! Our product roadmap has also been updated for the year – feel free to check it out on the Roadmap Explorer.

To see all recent SAP Build Apps releases, visit the What’s New Documentation.

Have any feedback or questions about this update? Let us know in the comments. 👇

12 Comments
Dan_Wroblewski
Developer Advocate
Developer Advocate

This is a real advance ... thanks 😎

vobu
Active Contributor
0 Kudos

Hi, this is good to hear. Are IAS-based authorizations meanwhile also available in the mobile app itself?

EsmeeX
Product and Topic Expert
Product and Topic Expert

Hi @vobu - thanks for reaching out. We'll be releasing the mobile authentication feature in the coming weeks. Here is the roadmap item.

Dan_Wroblewski
Developer Advocate
Developer Advocate
0 Kudos

@EsmeeX I see that there is a new feature of system variables with the current user's details, available on mobile too. Doesn't that mean there is authentication now on mobile? 

EsmeeX
Product and Topic Expert
Product and Topic Expert
Dan_Wroblewski
Developer Advocate
Developer Advocate
vobu
Active Contributor

@EsmeeX nice! Authorisation possible as well (Groups/Roles from IdP)?

EsmeeX
Product and Topic Expert
Product and Topic Expert
0 Kudos

@vobu yes this is supported.

BojanDobranovic
Product and Topic Expert
Product and Topic Expert
0 Kudos

Did anyone manage to make Cloud Functions work with the deployed app (not in preview)?
I applied these steps to 3 different tenants, but when the app tries to read something from the backend, there is a 403 error.

RoyF
Advisor
Advisor
0 Kudos

Hi @EsmeeX 

Thanks for the blog, it's really nice and helpful!
It would be nice to add what kind of errors will be return if this configurations wasn't done or wasn't done correctly. In this way people could find this blog when searching for their error.

for example , see this community issue
https://community.sap.com/t5/technology-q-a/sap-build-app-after-deployed-into-btp-getting-error-whil...

BR

Venkat_Vyza
Active Participant
0 Kudos

Hello @EsmeeX 

I'm testing this in BTP Trial Account and Unable to Enable the connection to IPS from BWZ Standard Edition. The connection is failing with Error and the Retry button is NOT active. 

The SAP Note 3231174 says IPS (Identity Provisioning) is NOT supported in Free Service Plan of SAP Build Work Zone, standard edition.

But I see that the Plan available on Trial account is NOT Free one but Standard one. 

So, my question is:  Is IPS Connection to WZ Standard Edition is supported in BTP Trial Account? 

Thank you very much for your help.

Venkat Vyza

 

EsmeeX
Product and Topic Expert
Product and Topic Expert

Hi @Venkat_Vyza - yes we just checked that this is not working right now in Trial. Our team is looking into a solution, so will update here when it is resolved. Apologies for the inconvenience.