#XP185v - Get Hands-On Security Recommendations for Your SAP BTP Environment

Description

This repository contains the material for the virtual SAP TechEd 2023 session called XP185v - Get Hands-On Security Recommendations for Your SAP BTP Environment.

Overview

In this session attendees will learn about the security recommendation for BTP services and how to implement them. The SAP BTP Security Recommendations are available in the SAP Help Portal in the sections for the SAP Business Technology Platform. It is a list with SAP recommendations for the configuration of SAP BTP services to help customers meet their compliance goals and secure their business.

Requirements

The requirements to follow the exercises in this repository are active Trial Accounts for SAP BTP and for the SAP Cloud Identity Services.

First you have to get your SAP BTP Trial Account. Follow the instructions: Get a Free Account on SAP BTP Trial

Second task is to activate your SAP Cloud Identity Services Trial. Follow the instructions in this blog: SAP Cloud Identity Services offered as Trial Version

💡You should have access to your mailbox, which you used while registering for your BTP trial account in order to activate your Cloud Identity Services trial account.

Third task is to install on your mobile device a time-based authentication application (such as SAP Authenticator, Google Authenticator or Microsoft Authenticator).

Now you are ready to start the excercises.

Exercises

• Getting Started

• Exercise 1 - Enable Multi-Factor Authentication for applications

  • Exercise 1.1 - Setup SAP Build Apps and enter the application with your trial identity provider user
  • Exercise 1.2 - Configure Multi-Factor Authentication to access SAP Build Apps
  • Exercise 1.3 - Enable MFA for your User

• Exercise 2 - Security Recommendations regarding user access and authentication

  • Exercise 2.1 - Manage obsolete administrators
  • Exercise 2.2 - Defining a custom password policy
  • Exercise 2.3 - Keep public access to applications by self-registration disabled
  • Exercise 2.4 - Keep Social Sign-On disabled

• Exercise 3 -Security Recommendations regarding the Audit Log

  • Exercise 3.1 - Subscribe to the SAP Audit Log Viewer service
  • Exercise 3.2 - Configure the SAP Audit Log Viewer service
  • Exercise 3.3 - Check the audit logs and download audit log entries via the SAP Audit Log Viewer service

IMPORTANT

Your repo must contain the .reuse and LICENSES folder and the License section below. DO NOT REMOVE the section or folders/files. Also, remove all unused template assets(images, folders, etc) from the exercises folder.

Contributing

Please read the CONTRIBUTING.md to understand the contribution guidelines.

Code of Conduct

Please read the SAP Open Source Code of Conduct.

How to obtain support

Support for the content in this repository is available during the actual time of the online session for which this content has been designed. Otherwise, you may request support via the Issues tab.

License

Copyright (c) 2023 SAP SE or an SAP affiliate company. All rights reserved. This project is licensed under the Apache Software License, version 2.0 except as noted otherwise in the LICENSE file.