Sap launchpad service btp
Hem / Teknik & Digitalt / Sap launchpad service btp
Displaying the tiles(apps) according to the user’s role.
Reference Links:
https://help.sap.com/viewer/65de2977205c403bbc107264b8eccf4b/Cloud/en-US/fe750543788a40b79a49854590a...
https://help.sap.com/viewer/8c8e1958338140699bd4811b37b82ece/Cloud/en-US/d7b1a89c9a0f46bd9b1e2b6ca70...
Conclusion: This is the process has to be follow to achieve the Role Configuration and
securing SAP Launchpad servicein the Cloud Foundry environment.
Thank you.
Happy Learning 🙂and Have a great day!
SAP Build Work Zone, standard edition
Simplify access to applications by creating business sites.
SAP Build Work Zone, standard edition enables organizations to establish a unified point of access to SAP (e.g.
Then you can define "Groups" via Assertion Attributes, so that the user group can be saved with the user.
IAS User Groups
User Groups
Under User Groups you can add groups in IAS to which you can assign multiple users and which are automatically updated if you add a Group to user like the screenshot below.
You have to navigate in the "User Management" in the IAS to see and edit all users.
Now you can assign a role to your user.
BTP
Trust Configuration
Back in the BTP, you have to navigate to the IAS Overview under Security > Trust Configuration to set Role Collections Mappings.
New Role Collection Mapping
Now you can choose the role collection (which has been created when you add the role to launchpad service) and set the attribute from the group of the IAS.
So you have users in the IAS that are part of a group and you map this group to the Role Collection in BTP.
So all users of the group will have access to the respective content.
Set content in Launchpad service
add app to role
After that, you need to add the apps that you are allowed to view with this role to the role in the Launchpad service.
settings
add role to website
In the settings of the website you have to add the roles that the site contains.
To see the changes, press Refresh in the Launchpad Service > Provider Manager and relog in to the website itself.
This blog post and the answer to one of my questions also helped me a lot.
https://blogs.sap.com/2022/04/06/automate-role-collections-in-sap-btp/
https://answers.sap.com/answers/13713270/view.html
This article was about the roles in BTP, IAS, and the Launchpad service and how they all play together.
The name of the Scope is “$XSAPPNAME.Display”
Along with the Scopes Add the “Role Templates “ with Appropriate Name Related to your Application
here I have taken as “POC_EMP_Role” and called the Scope Reference also.
Step 10:
Right click on mta.yml file and select “Build MTA Project”.
Once Build is completed you can find the generated Mtar Archive Folder.
Step 11:Now click on MTAR generated folder and select Deploy MTA Archive file to the cloud
foundry.
Step 12:After successful deployment Process, the finished message appears in Terminal.
CONFIGURING DEPLOYED APPS TO LAUNCHPAD SERVICE.
Step 13:
The Role Template Created in Application will be appeared in
In SAP BTP Cockpit under Security Roles Section.
If you use at least one application specific version below, you are no more able to use a Horizon based theme by default for your Launchpad!
Support
| Component Name | Component Description |
|---|---|
| EP-CPP-CF | Support component for this service |
I'm still new to cloud development with SAP and got confused the other day about the different roles that exist in the BTP, IAS and Launchpad service.
I want to write this blog to help people who are also just new in this environment.
Simply put:
BTP= Roles / Role Collections
IAS= Groups
Launchpad Service= Roles
Instead of going deep into the theory of why different terms for roles are used for different platforms, I want to show how to implement it.
Create Role in Launchpad Service
Role in Launchpad Service
Name Role
With this ID a role collection is automatically created in the BTP cockpit.
Role collections BTP
In the BTP Cockpit navigate to Security > Role Collections to check if the role is now created.
IAS Assertion Attributes
IAS Assertion Attributes
Groups
Now you have to navigate to the IAS and select the application.
There are three steps to follow
Step 1: Subscribe to Launchpad Services
Step 2: Add Yourself to the Launchpad Admin Role
Step 3: Access your SAP Launchpad Services
Step1 : Subscribe to SAP Launchpad Services
- Go to your SAP BTP trial account and click on your subaccount
- Click on the " Go To Market Place".
Click on
Finish project will be created successfully.
Step 7: Project will be created successfully.In addition to this also patches of versions in maintenance which are older than one year will be removed. Now open the manifest.json file add the below piece of
code for Authorization part in cloud(SAP BTP).
Step 8: To Add the Roles to Application first we have add the scopes in “Xs-App.json” file as
shown below:
Step 9:
Now According to Scope Defined in Xs-app.json, call that Scope name in Xs-
security.json file.This is where you’ll create and manage your launchpad sites.
Hope Everyone is doing great.
In this Blog Post I am going to Explain about the Configuring Roles to Applications in BTP and able
to access in Launchpad Service which are deployed to HTML5 Application Repository in Cloud
Foundry.
Introduction:
what is Launchpad Service?
Launchpad Service is one of the Services available in SAP BTP Subscriptions.
Then that App will be Added in the Content
Explorer Tab.
Step 18:Now go to “Mycontent” select the Deployed App now add the Catalog, Group, Role to that
Application.
Step 19: By clicking on “New” Button you can create the Catalog, Group, Role as shown below:
Step 20: Create Catalog, Click on Edit and Assign the EmployeeApp to Catalog as shown below:
So that EmployeeApp will be added to that Catalog.
Step 21:
Create the Group, Click on Edit and assign the EmployeeApp to that group as shown below:
We can create different groups to place our apps in that particular group.
Step 22:Create a Role, Add the EmployeeApp to that Role as shown below:
To Provide Authorization using users, Role Template in BTP as shown in below Architecture.
Architecture for Authorization
Step 23:The created Role Title will be automatically created in SAP BTP Cockpit under Role
Collection Section as shown below:
For one Role we can add multiple Apps which all comes under that role.
Step 24:
Click on that Role created in FLP for that role, now Add created role in BAS(Xs-security.json) to this
Application and add the Role Template and User Names who want to Access the Application for
Application identifier.
Click on Edit button and in Roles Tab, Role Name as Value help Request click on that, here you can
Search for the created role in comboBox and the deployed application namespace from BAS will
available here as Application Id.
Click on Add then RoleName ,Role Template and Application Identifier will be added as shown in
Step 24 image.
Step 25:
In BTP under Security>Users we can create the list of Users with their BTP Usernames or MailId,
only these added users can able to add to different Role Template applications.
Under Users Tab added two user names for that Role Collection and Application identifier which are
BTP Account User names are added in Users Section.
The users which are added for this Role Template and Application Identifier are able to see the Apps
in Launchpad.
Repeat the Steps from 1 to 25 for another App called Manager App and Admin App.
In that Manager App create the another role in scopes and add that App to same catalog
(Either we can add in Different or Same Catalog) and for different group in Launchpad Service.
Step 26:Now go to Site Directory it will take you to Launchpad.
SAP S/4HANA), custom-built, and third party applications and extensions, both on the cloud and on premise.
SAP Launchpad Service is now SAP Build Work Zone, Standard Edition!
SAP Launchpad service was recently renamed to SAP Build Work Zone, standard edition.
Read Blog
| Feature | Description |
|---|---|
| Application Integration | Provide business users a central point of access for apps and tasks, with seamless integration to various UI technologies and third-party apps. |
| Intuitive and Engaging User Experience | A role-based, personalized launchpad with a flexible content structure that follows the SAP Fiori 3 design guidelines. |
| Integrations | Integration with central SAP BTP services, such as inbox and cloud identity services. |
| Extensibility | Extensible framework for customizations using shell plugins and custom branding. |
Dependencies
Blog Series (by Murali Shanmugham)
Tutorials
What's New
Roadmap
Evaluate the SAP Build Work Zone, standard edition roadmap for upcomming features:
| Date | Feature |
|---|---|
| 2025/Q2 | Simplified creation of a content provider for HTML5 business solutions |
| 2025/Q2 | Preview capability for UI5 version |
Workarounds
The following section describes some workarounds that are nessessary concerning the current status of the launchpad and potentially missing features.
Issues using latest SAPUI5 release
By default, when running applications from the HTML5 content provider, the applications use the latest official UI5 version.
It it currently not possible to define another version like in the NEO platform using:
| SAPUI5 Version | Value |
|---|---|
| Maintenance | currently >= 1.136 |
| Long-term Maintenance | 1.136 vs 1.120 vs 1.108 vs 1.96 vs 1.84 |
| Custom | any cloud released version (maybe problematic) |
Application specific UI5 version
To overcome this missing feature off centrally manage the used version, you can control the used version on app level (see Expose HTML5 Applications in SAP Launchpad service).
Automatic patch updates are highly recommended!
To ensure outdated versions are no longer posing a potential security risk, SAP removes SAPUI5 versions from the SAPUI5 CDN one year after their end of maintenance.
You
can connect to Backend and select OData Services also.
Step 4: Give the View Name and the project details like Module name (Project Name),
select yes for deployment and FLP Configuration options.
Step 5: Choose the Target as Cloud Foundry or ABAP Environment, based on your requirement
Launchpad service can access different targets also and Select yes for Managed
Application router which creates the "mta.yaml" file while generating the application.
This mta.yaml file acts as deployment descriptor for app to deploy
to Cloud Foundry.
Step 6: Give Semantic Object, Action, Title which will be displayed in Launchpad Service.
SAP Launchpad service enables organizations to establish a central point of access to SAP, custom-built, and third-party applications and extensions, both in the cloud and on premise . With this Service,
Organizations can build a central entry point on BTP for all the Fiori Applications configured and
provide efficient, wide enterprise, security, role-based and personalized Launchpad Site Access to
SAP and Non-SAP Applications to the Business Users.
Capabilities of Launchpad Service:
- Home Page Personalization.
- Central Point of Access to Apps, Tasks & Notifications.
- Role based Access to Content( Eg: From S/4 HANA Systems).
- Smooth App Integration for different UI Technologies and third party web apps.
- Extensible Framework for Customization and branding.
Let us take an 2 Apps one is Employee App and other one is Manager, Admin Apps and try to
configure the roles based on the User.
Step 1: Open Dev Space in BAS take the new Project from Template and Select the SAP Fiori
Application.
Step 2: Select SAP UI5 Freestyle for sample Application you can go with Fiori
Elements also.
Step 3: Select Data Source as None not connecting to any destinations for sample Application.
This Launchpad URL can be given
to other users who are added in BTP Security>Users. Details see SAP Note 3001696.
Problem with SAP Horizon Theme and apps below version 1.101
The new SAP Horizon theme (Morning and Evening) is only available with a SAPUI5 version >= 1.101. you can navigate to the service marketplace by clicking on the Services menu item and selecting Service Marketplace.
- Go to Service Market Place and Enter Launchpad in the search box and click on "Launchpad Services".
- From the Overview tab on the right, click the Actions(…) and select Create to create a new subscription.
- In the new instance of Subscription Dialog box, enter the service and the plan and click on create
- You will receive a confirmation that your subscription has been created
- Go to "Instances and Subscription" Tab and you will notice that you are now subscribed to your SAP Launchpad Service
Step 2: Add Yourself to the Launchpad Admin Role
- Click on the "Role Collections" from the menu on the left hand side and search for Launchpad Admin and then click on the arrow on the far right.
- Under the users Tab, enter your id and your email.
It empower SAP users to get their job done quickly and efficiently by providing intuitive, central access to relevant applications and services.
Benefits of SAP Launchpad- Increase productivity and efficiency of business users by quickly and easily accessing relevant apps and content
- Personalize home page based on user-requirement
- Smooth integrations to integrate with different UI technologies and third-party Web apps
How to set up SAP Launchpad Service
In this blog post I will demonstrate how to register for SAP Launchpad.Click Save
Step 3: Access your SAP Launch Pad Services
- Click on "Instances and Subscription" , click on "subscriptions" , click on the Actions (...) and then select "Go to Application"
- The SAP Launchpad service opens with the Site Directory in focus.
It will navigate you to Launchpad service.
Create a New Site in for Launchpad.
Step 16:
Now go to “Provider Manager” and Activate, click on refresh icon to get the latest Deployed HTML5
Apps in Actions Tab.
Step 17:
Select Content Manager in left Side panel, in combo box select HTML Apps you will find the Apps
Deployed to Cloud Foundry in BAS.
All the Deployed Apps will appear here you can select the Required App for Role Configuration and
click on “Add to My content” Button on top right corner.