SAP Build Work Zone

1// Content Provider configuration — entered via Site Manager or REST API
2// Work Zone Site Manager → Provider Manager → Add Content Provider
3{
4  "sourceSystemId": "S4H_PRD",
5  "name": "SAP S/4HANA Production",
6  "description": "Fiori app catalogue from SAP S/4HANA 2023 On-Premise",
7  "providerType": "SAP S/4HANA",
8  "destinationName": "S4H_BACKEND",
9  "destinationType": "CF",
10  "systemType": "ABAP",
11  "runtimeTarget": "ABAP",
12  "ssoMechanism": "SAMLAssertion",
13  "contentRefreshInterval": "0",
14  "enableAutomaticContentSync": true,
15  "customParameters": {
16    "sap-system": "PRD",
17    "sap-client": "100"
18  }
19}
20
21// Required BTP Destination: S4H_BACKEND
22// BTP Cockpit → Connectivity → Destinations → New Destination
23{
24  "Name": "S4H_BACKEND",
25  "Type": "HTTP",
26  "URL": "https://virtual-s4h.on-prem.company.com",
27  "ProxyType": "OnPremise",
28  "Authentication": "PrincipalPropagation",
29  "sap-client": "100",
30  "WebIDEEnabled": "true",
31  "WebIDEUsage": "odata_abap,ui5_execute_abap",
32  "HTML5.DynamicDestination": "true"
33}

1// CDM v3.2 (Content Delivery Model) — simplified structure
2// Exported from SAP S/4HANA via /sap/bc/ui2/cdm3
3// Imported into Work Zone via Content Provider synchronisation
4{
5  "_version": "3.2.0",
6  "apps": [
7    {
8      "sap.app": {
9        "id": "com.company.finance.paymentrequest",
10        "type": "application",
11        "title": "Payment Request",
12        "subTitle": "Create and manage vendor payment requests",
13        "crossNavigation": {
14          "inbounds": {
15            "PaymentRequest-manage": {
16              "semanticObject": "PaymentRequest",
17              "action": "manage",
18              "title": "Manage Payment Requests",
19              "icon": "sap-icon://payment-approval",
20              "deviceTypes": {
21                "desktop": true,
22                "tablet": true,
23                "phone": false
24              }
25            }
26          }
27        }
28      },
29      "sap.flp": { "type": "application" }
30    }
31  ],
32  "catalogs": [
33    {
34      "sap.catalog": {
35        "id": "ZFIN_AP_CATALOG",
36        "title": "Accounts Payable — Finance Catalogue"
37      },
38      "apps": [
39        { "id": "com.company.finance.paymentrequest" }
40      ]
41    }
42  ],
43  "roles": [
44    {
45      "sap.role": {
46        "id": "ZFIN_AP_PROCESSOR",
47        "title": "Accounts Payable Processor"
48      },
49      "catalogs": [
50        { "id": "ZFIN_AP_CATALOG" }
51      ]
52    }
53  ]
54}

1// Identity Provisioning (IPS) — Transformation JSON
2// Source System: Microsoft Azure AD (SCIM 2.0)
3// Target System: SAP BTP (role collection assignment)
4// Configured in SAP Cloud Identity Services cockpit
5{
6  "user": {
7    "mappings": [
8      {
9        "sourcePath": "$.userName",
10        "targetPath": "$.userName"
11      },
12      {
13        "sourcePath": "$.emails[0].value",
14        "targetPath": "$.emails[0].value",
15        "targetVariable": "entityIdSourceSystem"
16      },
17      {
18        "sourcePath": "$.displayName",
19        "targetPath": "$.displayName"
20      },
21      {
22        "sourcePath": "$.name.givenName",
23        "targetPath": "$.name.givenName"
24      },
25      {
26        "sourcePath": "$.name.familyName",
27        "targetPath": "$.name.familyName"
28      },
29      {
30        "condition": "$.groups[?(@.display == 'WZ-Admins')].value != []",
31        "targetPath": "$.groups[0].value",
32        "transformValue": { "literal": "Workzone_Admin" }
33      },
34      {
35        "condition": "$.groups[?(@.display == 'WZ-Content-Managers')].value != []",
36        "targetPath": "$.groups[1].value",
37        "transformValue": { "literal": "Workzone_Content_Manager" }
38      },
39      {
40        "condition": "$.groups[?(@.display == 'WZ-Users')].value != []",
41        "targetPath": "$.groups[2].value",
42        "transformValue": { "literal": "Launchpad_User" }
43      },
44      {
45        "condition": "$.groups[?(@.display == 'WZ-Advanced-Users')].value != []",
46        "targetPath": "$.groups[3].value",
47        "transformValue": { "literal": "Workzone_User" }
48      }
49    ]
50  }
51}

// SAP Build Work Zone — Role Collections Reference
// Assign via: BTP Cockpit → Security → Role Collections → Assign Users or Groups

// ─── Standard Edition (Launchpad Service) ────────────────────────────────────
Launchpad_Admin
  - Full site management via Site Manager
  - Create, update, and delete sites
  - Manage content providers and CDM imports
  - Manage transport packages

Launchpad_User
  - Access to assigned launchpad tiles and catalogues
  - Personalise home page (add/remove tiles within assigned groups)
  - No admin access

Launchpad_Developer
  - Access to Site Manager for development configuration
  - Cannot manage users or role assignments

// ─── Advanced Edition ─────────────────────────────────────────────────────────
Workzone_Admin
  - All Launchpad_Admin rights
  - Manage Spaces and Pages
  - Manage company-wide workspaces
  - Access to analytics and adoption reports
  - UI Integration Card management

Workzone_User
  - Licensed seat — Advanced Edition subscription required
  - Access to Spaces, Pages, and personalised portal
  - Access to Workflow Inbox and notifications
  - Access to Joule AI assistant button
  - All Launchpad_User capabilities

Workzone_Content_Manager
  - Create and manage Spaces and Pages
  - Publish content to assigned spaces
  - Cannot manage site settings or users

Workzone_ExternalIdP
  - External Identity Provider configuration access (admin only)