- SAP Managed Tags
If you administrate SAP Business One systems or handle lifecycle management operations - this one’s for you !
The latest Support Package (SP 2511) brings meaningful upgrades across Lifecycle Management, strengthening identity management, refining security, and simplifying system operations.
Here’s a quick roundup of what’s new:
Identity & Authentication Management (IAM)
The Identity and Authentication Management guide now includes two key updates designed to make authentication more seamless and secure:
- Principal Propagation via Azure Apps
SAP Business One now supports authentication of user context coming from Microsoft Azure based applications. The propagated identity is securely passed into SAP Business One, allowing partner applications to access system resources without additional sign-ins.
📖 To learn more about Principal Propagation via Azure Apps, refer to this chapter under Identity and Authentication Management guide
- Single Sign-On with AD FS
Ever wished you could sign in to the Web Client using your Windows SSO?
Users with Active Directory Federation Service (AD FS) accounts can now enable SSO by configuring browsers to use Windows Integrated Authentication, making the login experience faster and frictionless.
📖 For step-by-step instructions, see the dedicated chapter under Identity and Authentication Management guide
Server Tools: Dedicated Tomcat Instances
As the saying goes, “Good things come in small packages"...In this case, separating Tomcat instances means smoother restarts, fewer conflicts, and a faster SAP Business One backend.
SP 2511 introduces a modular Tomcat architecture for core components, allowing each service to be restarted or redeployed independently for greater flexibility and uptime.
Here's the breakdown for component configuration in SP 2511:
- For SAP Business One (MS SQL)
Component / Service Default Port Description SAP Business One Server Tools Service (64-bit) 40000 Hosts System Landscape Directory (SLD) and Extension Manager
SAP Business One License Service (64-bit) 40002 Dedicated Instance for License Service SAP Business One Job Service (64-bit) 40004 Runs Job Service (and embedded MS365 Integration)
ℹ️ You need to update the redirect URI for Microsoft 365 Integration after upgrading SAP Business One to 10.0 SP 2511 as Microsoft 365 Integration is installed with Job Service.SAP Business One Service Layer Controller (64-bit) 40005 Runs Mobile Service and Service Layer Configuration Manager
ℹ️ This change applies exclusively to the Service Layer Configuration Manager. The port numbers for the Service Layer Load Balancer and Service Layer Nodes remain unchanged - For SAP Business One (Version for HANA)
Component / Service Default Port Description sapb1servertools.service 40000 Hosts System Landscape Directory (SLD), Extension Manager and Backup Service
sapb1servertools-license.service 40002 Dedicated Instance for License Service sapb1servertools-analytics.service 40003 Runs Analytics Service sapb1servertools-jobservice.service 40004 Runs Job Service (and embedded MS365 Integration)
ℹ️ You need to update the redirect URI for Microsoft 365 Integration after upgrading SAP Business One to 10.0 SP 2511 as Microsoft 365 Integration is installed with Job Service.sapb1servertools-servicelayercontroller.service 40005 Runs Mobile Service and Service Layer Configuration Manager
ℹ️ This change applies exclusively to the Service Layer Configuration Manager. The port numbers for the Service Layer Load Balancer and Service Layer Nodes remain unchanged
ℹ️ Note:
During installation (or upgrade from versions earlier than SP 2511), port numbers can be configured directly in the setup wizard via dedicated panes or during reconfigure.
Make sure to review and adjust your network, firewall, and high-availability settings to match the new port configuration.
(As part of this restructuring, the default port for License Manager and License Control Center is updated from 40000 to 40002.
Administrators configuring high availability need to adjust settings to ensure seamless integration with the new setup).
Platform Matrix Updates
Here's what's new under supported Matrix for SAP Business One (MSSQL and Version for HANA):
Newly supported:
- Microsoft Windows Server 2025
- SUSE Linux Enterprise Server 15 SP7 (x86_64)
- SAP HANA Enterprise Edition 2.0 SPS 08 Revision 087 (SAP HANA Client Version 2.25.31)
No longer supported:
- SUSE Linux Enterprise Server 15 SP4
ℹ️ Note:
SAP Business One Cloud 1.1 PL21 doesn’t support SAP HANA Enterprise Edition 2.0 SPS 08 Revision 087.
Security Hardening
(Applicable for users that log in to SAP Business One with a company user account - not an IDP account).
By now, you’ve probably noticed the "Refresh" button under the "Choose/Create Company" window is gone and you might be wondering why. The reason is simple: it’s all about keeping things safe and controlled!
Here's how it works; If a company database is restored directly on the database server (outside of SAP Business One), it’s now up to the Landscape administrator to refresh the company list centrally via System Landscape Directory (SLD). This ensures that only authorized users can make newly restored companies visible under "Choose/Create Company" window, reducing unnecessary exposure of system information before users are authenticated.
Internal operations triggered from within SAP Business One, such as company creation, upgrades, or year-end transfers, automatically refresh the company list as part of the workflow, so no additional action required in these scenarios.
Summary
SP 2511 brings smarter IAM, a more flexible modular Tomcat setup, expanded platform support, and tighter security for company databases - all designed to make managing SAP Business One smoother, safer, and more effective in your day-to-day operations.
Thanks for reading this roundup of SP 2511 lifecycle management updates! Hope you find these features valuable and enjoy putting them to work in your daily operations.
Bluesky| User | Count |
|---|---|
| 9 | |
| 7 | |
| 6 | |
| 6 | |
| 5 | |
| 5 | |
| 4 | |
| 3 | |
| 3 | |
| 3 |
