The One with protecting SAP services with Azure API Management and SSO

Introduction

In episode 83 of the SAP on Azure video podcast we quickly talk about using Logic Apps to handle faulty CPI iFlow states from Martin Pankraz, look at the second part of Carlos Roggans OAuth 2.0 on BTP blog post and look at the landing page for the Production-ready system deployment via SAP Cloud Appliance Library. Then we do a deep dive with Martin Räpple and Will Eastbury on part 5 of the Principal propagation in a multi-cloud solution between Microsoft Azure and SAP Business Technology Platform (BTP) series. This time Martin introduces an API Management layer and uses Azure Arc to run a self hosted API gateway to connect to the SAP system.

• How to notice and handle faulty CPI iFlow states automatically?
• SAP CAL - Production-ready Systems
• SAP BTP – Security – OAuth 2.0 – Understanding Token Exchange 2: using Destination
• Principal propagation in a multi-cloud solution between Microsoft Azure and SAP Business Technology Platform (BTP), Part V: Production readiness with unified API- and infrastructure management

• 0:00 Intro
• 1:22 How to notice and handle faulty CPI iFlow states automatically
• 2:37 SAP BTP – Security – OAuth 2.0 – Understanding Token Exchange 2 - using Destination
• 3:47 SAP CAL - Production-ready Systems
• 5:00 Introducting Martin and Will
• 7:05 Principal Propagation with APIM and Azure Arc
• 7:51 The scenario
• 11:20 Recap from persious podcast episodes
• 13:45 Solution Architecture with Episode 40
• 24:12 Missing security and governance controls
• 25:40 Introducing Azure API Management
• 35:05 Self-hosted API gateway
• 39:26 Azure Arc
• 41:11 Adding APIM and Azure Arc to the architecture
• 43:43 Demo - on-premises K8s clusters
• 46:30 Demo - End to end flow
• 49:40 Azure API Management Log console
• 51:41 Using JMeter to do stress testing
• 59:37 Documentation and Code Samples