README.md

Exercise 5 - Add User Authentication to Your Application (SAP HANA Cloud)

In this exercise we will define security and enable user authentication and authorization for your SAP HANA Cloud CAP application.

Perform all the steps in 👉 tutorial: Add User Authentication to Your Application (SAP HANA Cloud)

Summary

While we could use CAP to mock the authentication, we've gone a step further in this exercise and generated a real XSUAA instance and added authentication to our application in a way that allows us to still test via the locally running services in the Business Application Studio.

Questions for Discussion

1. Why is the redirect-uris needed in the xs-security.json?

2. What other authentication strategies could we have used with CAP?

3. Why did the request to /user-api/ work? We didn't code it and CAP didn't provide it. So where did it come from?

Further Study

• SAP CAP Authentication
• XSUAA in Hybrid Setup
• CAP Authorization and Access Control
• SAP BTP Roles and Role Collections

Next

Continue to 👉 Exercise 6 - Create Calculation View and Expose via CAP (SAP HANA Cloud)