Question Re: SAP Build Apps subscription failed in Technology Q&A

SAP Build Apps subscription failed

sampad_007 — Wed, 12 Jul 2023 17:28:34 GMT

In spite of creating custom identity authentication service, I am not able to subscribe SAP Build Apps.
Can anyone help me regarding the issue, I am facing?

Thanks in advance..
Sampad

Re: SAP Build Apps subscription failed

beapasch — Thu, 13 Jul 2023 06:59:14 GMT

Hello Sampad,
The screenshot of your "SAP BTP - subaccount - security - trust" settings is not completly visible. Are you using SAML or openID connect?
I guess that you are not using an IAS tenant with the openID connect protocol which is a pre-requisite for the successful activation of SAP Build Apps. SAP Build Apps is a multi-tenancy application and integrates with IAS via the Identity Broker and these integrations are configured with OpenID Connect protocol. If you are using the SAML protocol it will not work.
If this doesn't help please create a support ticket as recommended in the status details for the subscription failure.

Please note that in the meantime, until the issue is resolved, you can use the SAP Build Apps Sandbox free of charge for 30 days as explained by Joe on the blog: https://groups.community.sap.com/t5/sap-builders-blog-posts/announcing-the-sap-build-apps-sandbox/ba-p/128821
Kind regards,
Bea

Re: SAP Build Apps subscription failed

sampad_007 — Thu, 13 Jul 2023 10:35:35 GMT

Hi Beatrice,
I am using custom IAS tenant using Trust configuration. Still I am not able to subscribe SAP Build Apps.

Re: SAP Build Apps subscription failed

beapasch — Thu, 13 Jul 2023 10:43:17 GMT

Hello Sampad,
I think we can't clarify this via the SAP community.
Can you please contact me via buildapps@sap.com if you can't create a support ticket so that I can check your account more in detail?
Kind regards, Bea

Re: SAP Build Apps subscription failed

KalpeshHirdekar — Mon, 12 May 2025 10:45:25 GMT

Hi beapasch,

I have created a Multi tenant SAAS application (Non-CAP NodeJS based) and have deployed this app to SAP BTP in the Provider subaccount. Along with the application I have the saas-registry instance and xsuaa instance created in my Provider subaccount. I am also able to subscribe to this application from the Consumer subaccount.

Current Status: So far, I have successfully implemented application subscription from tenant subaccounts using the saas-registry and an xsuaa instance. I’ve also implemented the necessary logic for subscribe and unsubscribe events in the backend.

Note: This is a pure backend application, and I am not using an Approuter, as there is no frontend component involved. The application is intended to be consumed by tenant-specific backend or frontend apps via API calls.

Problems:

When I subscribe app in consumer subaccount, the xsuaa instance (using tenant-mode as "shared in provider subaccount) is not automatically created in consumer subaccount.
To address this, I added event for getting dependencies while subscribing in backend the code is shown in below picture.
Also added "url" for "getDependencies" in "appUrls" and dependencies detail in SaaS configuration file as shown below.
After these changes, I tried subscribing to the app again from the consumer subaccount got an error shown below.

Asking for Suggestions:

How can I achieve the automatic creation of an XSUAA instance in the consumer subaccount when subscribing to the app, to ensure full isolation between consumer subaccounts?
If not then how can I achieve independent OAuth 2.0 Authentication for tenants specific to their subaccount?