SAP Activate
Cloud ALM
Best Practice
Governance

SAP Recommended Practices

SAP's official methodology and tooling for implementing clean core — from initial assessment through governance, including SAP Activate phases, Cloud ALM integration, and the Clean Core Assessment tool.

SAP Activate + Clean Core Operating Model

SAP Activate provides the project phasing. The Clean Core Assessment tool, ATC, and Cloud ALM plug into specific phases as mandatory quality gates. Together these form the SAP "Clean Core Operating Model."

SAP Activate — Clean Core Workstream
Rendering diagram…

Executive Summary

The Clean Core Operating Model
SAP provides a structured set of tools and methodologies for implementing clean core. The Clean Core Assessment tool identifies violations in existing systems. SAP Cloud ALM manages change processes. SAP Activate provides project phasing. ABAP Test Cockpit enforces compliance in CI/CD pipelines. Together these form the Clean Core Operating Model — a continuously running quality system, not a one-time project gate.

SAP Clean Core Assessment Tool

Deployment model
SaaS on SAP BTP (no on-premise install)
Analyses
Modifications, deprecated APIs, unreleased extension points
Output format
Heat map by package + severity classification
Severity levels
Blocker / Critical / Major / Minor
Integration
SAP Cloud ALM (remediation tracking)
Recommended cadence
Initial + pre-upgrade + quarterly review

SAP Activate Clean Core Phase Gates

Each SAP Activate phase has specific clean core activities. Skipping any phase means missing a quality gate, which increases the cost of finding violations later.

Discover

Run Fit-to-Standard workshops. Map current custom processes to SAP Best Practices. Identify unavoidable extensions before any build decisions are made.

Prepare

Run Clean Core Assessment. Build extensibility inventory (list every custom object with target tier). Define ATC rule profile for the project.

Explore

Fit-gap: for each gap, decide Tier 2 (in-system BAdI/custom field) or Tier 3 (BTP CAP/Build). Document extension decisions in Cloud ALM.

Realise

Build extensions. ATC enforced on every transport. Code review gate for clean core violations. CAP extensions deployed to BTP.

Deploy

Run full regression test (ABAP Unit + Fiori OPA5). Verify ATC clean in all custom packages. Go-live readiness assessment.

Run

Quarterly clean core health check. ATC integrated into continuous delivery pipeline. Upgrade readiness report before each S/4HANA release.

SAP Cloud ALM Integration

Extension decision tracking

Tracks all extension decisions (Tier 2 vs Tier 3) as work items with owner, due date, and rationale.

Transport management

Connects to TMS for change tracking — all transports linked to Cloud ALM change items.

CI/CD integration

Delegates ATC checks to pipeline gates — pipeline status feeds back into Cloud ALM defects.

Defect management

Clean core violations tracked as defects with owner, due date, and remediation history.

ATC Rule Profile Configuration

The recommended ATC profile for clean core enforcement — configure this in transaction ATC and activate it as the default profile for all custom ABAP packages.

abap
" ATC Configuration — Clean Core profile
" Transaction: ATC → ATC System Configuration → Profiles

" Recommended checks for clean core compliance:
" - SLIN_UMETH: Usage of unreleased methods
" - SLIN_UATTR: Usage of unreleased attributes
" - SLIN_UCLAS: Usage of unreleased classes
" - SLIN_UPCKAGE: Usage of unreleased packages
" - SLIN_UOPER: Usage of deprecated operations
" - FIND_HIGHER_RELEASE_USAGES: Detect usage of higher release APIs

" Profile: ZCLEANCORE_STRICT
" Priority threshold: Block transport if severity >= BLOCKER

" Activate in ABAP development tools (ADT):
" Window → Preferences → ABAP Development →
"   ABAP Test Cockpit → Automatic ATC Check
"   Level: Before every activation (not just transport)

Enterprise Example: DEWA Clean Core Operating Model

Reporting cadence
Monthly Clean Core Health Report
Report source
ATC + Cloud ALM combined dashboard
Governance council
3 members: Basis Lead, Head of ABAP Dev, Solution Architect
CI/CD gate
Jenkins — transport rejected on any BLOCKER finding
Target (end of 2025)
Zero BLOCKER findings
Secondary target
Less than 50 MAJOR findings in production
External review
SAP partner reviews Clean Core Assessment output quarterly

Best Practices

Integrate ATC into CI/CD pipeline

Run ATC on every ABAP activation — not just before transports. Catching violations early is 10x cheaper than fixing them before go-live.

Cloud ALM as single source of truth

Use SAP Cloud ALM for all extension decisions, change tracking, and defect management related to clean core compliance.

Extensibility inventory before migration

Classify each custom object in the extensibility inventory (Tier 1 clean / Tier 2 / Tier 3 candidate) before starting migration work.

Fit-to-Standard first

Run Fit-to-Standard workshops before the Realise phase — avoid building unnecessary extensions by leveraging SAP standard first.

Dedicated quality gate owner

Create a Clean Core quality gate owner role — this person is not the same developer who writes the code being reviewed.

Common Pitfalls

Assessment only once at project start
Clean Core Assessment must be re-run quarterly — the landscape drifts as developers add new objects. A one-time scan is not governance.
Third-party ATC tools instead of SAP's
Non-SAP ATC tools may miss SAP-specific API contract checks (C1/C0 detection). SAP's native ATC has direct access to the API contract metadata.
Skipping SAP Activate phases
Skipping the Discover/Prepare phases to "save time" creates technical debt rapidly — extensions get built that would have been eliminated by fit-to-standard.
Treating Clean Core as a one-time project
Clean core is an ongoing operational practice. Without continuous enforcement, systems revert to non-compliance within 6-12 months.

Security Considerations

Cloud ALM handles sensitive landscape data
SAP Cloud ALM handles sensitive system landscape data including transport content, change history, and system credentials. Restrict Cloud ALM access to the project team only using role-based access control. Use SAP IAS for Cloud ALM SSO — avoid local user accounts. Audit change management trails in Cloud ALM for SOX/ITGC compliance evidence.