XP260 - Configuring SAP BTP Services Securely

Description

This repository contains the material for the SAP TechEd 2022 session XP260 - Configuring SAP BTP Services Securely.

Overview

In this session attendees will learn about the recently published security recommendation for BTP services and how to implement them. The SAP BTP Security Recommendations are available in the SAP Help Portal in the sections for the SAP Business Technology Platform.

Requirements

None

Exercises

• Getting Started
• Exercise 1 - Using a custom identity provider to authenticate platform users
  • Exercise 1.1 - Configure the global account cockpit to trust identity provider
  • Exercise 1.2 - Giving a user access to the global account
  • Exercise 1.3 - Giving a user access to a subaccount
• Exercise 2 - Protect access to the SAP BTP Cockpit with multi-factor-authentication
  • Exercise 2.1 - Configuring the users that shall use MFA
  • Exercise 2.2 - Configuring MFA for accessing the SAP BTP Cockpit
  • Exercise 2.3 - Access the SAP BTP Cockpit with MFA
• Exercise 3 - Security recommendations regarding user access and authentication
  • Exercise 3.1 - Identify obsolete users
  • Exercise 3.2 - Defining a custom password policy
• Exercise 4 -Security Recommendations regarding the Audit Log
  • Exercise 4.1 - Configure the SAP Audit Log Viewer service
  • Exercise 4.2 - Check the audit logs and download audit log entries via the SAP Audit Log Viewer service

How to obtain support

Support for the content in this repository is available during the actual time of the online session for which this content has been designed.

License

Copyright (c) 2022 SAP SE or an SAP affiliate company. All rights reserved. This project is licensed under the Apache Software License, version 2.0 except as noted otherwise in the LICENSE file.