The week's main developments, grouped by original publication date. Every item links to our full story and the original source.
Learn why SAP BTP service keys are a top security risk and how to rotate them with zero downtime using cf CLI, btp CLI, and automation scripts.
A single leaked service key can compromise an entire BTP instance. Leaks are silent; rotation limits exposure and prevents long-term abuse.
The author of the blog post introduced the Custom Discovery Connector (CDC). It enables pulling data from any API endpoint without external scripts.
Data not covered by ready-made integrations previously required custom scripts or manual work. CDC lowers the barrier by letting users describe sources in plain language and have AI generate the fetch code. The extended GET /discoveries endpoint also exposes previously inaccessible rejected or unknown SaaS data, helping enterprises spot shadow IT and manage unregistered applications.
New SAP EarlyWatch Alert-powered milestone tracking for S/4HANA Cloud Private Edition delivers automated adoption risk monitoring in the Customer Insights Dashboard on SAP for Me, with no configuration required.
Migrating to S/4HANA Cloud Private Edition can take months to years. Previously, adoption signals were fragmented; risks were often detected too late. The new milestones offer automated, data-driven visibility into implementation progress and adoption risks, enabling proactive customer success engagement.
The new On‑Premises Extractor for Process Intelligence is generally available as of October 2026 with horizontal scaling, key‑pair authentication, and Java 25.
The update eliminates single points of failure, strengthens security by keeping the private key on‑premises, and modernizes the runtime to Java 25 for compliance. Current users must plan migration before the April 2027 deadline.
SAP administrators can request Cloud Identity tenants directly in SAP for Me without a support ticket. Two flows: Portfolio & Products for standalone, Systems & Provisioning for bundled cloud solutions.
This change simplifies tenant provisioning for SAP administrators, reducing manual requests and enabling faster setup of authentication and SSO across SAP cloud solutions.
SAP announced the integration of the Application Vulnerability Report for SAP BAIP custom apps into Microsoft Sentinel Solution for SAP BAIP.
Isolated vulnerability reports lack runtime exploitation signals. Correlating CVE findings with SOC data turns separate noise items into actionable incidents.
SAP detailed built-in types, HANA mappings, and deprecated types for CDS table entity fields.
Developers creating or migrating to CDS table entities must adopt nullable LOB/geodata types and implicit client handling, and replace deprecated types before they block development or require table conversions. Omitting the null keyword for required types causes activation errors. Deprecated types like DF16_RAW and DF34_RAW may require future table conversions; LCHR should be replaced with abap.string or abap.sstring.
SAP tested the tabular foundation model RPT for design-time decisions in intent-based development.
Design-time decisions in IBD—asset type, API selection, method—are currently handled by LLMs or manual rules. RPT offers a structured, inspectable alternative that grounds predictions in labelled examples rather than pre-training. If extended and validated, it could make those choices more tunable and transparent for Joule Studio 2.0 developers.
A customer manually mapped 130 SAP BTP role collections to IAS user groups in Cockpit, taking around eight hours.
A REST API-based workflow with a reusable script delivers repeatable, consistent, and auditable provisioning, unlike manual cockpit mapping, which does not scale well across numerous configurations and environments.
SAP's Process Data Modeling Agent is in beta; the limited program runs September to December 2026 and proposes case-based or object-centric process data models from raw data.
SAP cites industry data that data preparation consumes 40–70% of total process mining project effort; the beta's reach and any benefit stay tied to participation and the customer's own data sources.