SAP Build Apps subscription failed

[sampad_007]

In spite of creating custom identity authentication service, I am not able to subscribe SAP Build Apps.
Can anyone help me regarding the issue, I am facing?

Thanks in advance..
Sampad

[beapasch]

Hello Sampad,
I think we can't clarify this via the SAP community.
Can you please contact me via buildapps@sap.com if you can't create a support ticket so that I can check your account more in detail?
Kind regards, Bea

[beapasch]

Hello Sampad,
The screenshot of your "SAP BTP - subaccount - security - trust" settings is not completly visible. Are you using SAML or openID connect?
I guess that you are not using an IAS tenant with the openID connect protocol which is a pre-requisite for the successful activation of SAP Build Apps. SAP Build Apps is a multi-tenancy application and integrates with IAS via the Identity Broker and these integrations are configured with OpenID Connect protocol. If you are using the SAML protocol it will not work.
If this doesn't help please create a support ticket as recommended in the status details for the subscription failure.

Please note that in the meantime, until the issue is resolved, you can use the SAP Build Apps Sandbox free of charge for 30 days as explained by Joe on the blog: https://groups.community.sap.com/t5/sap-builders-blog-posts/announcing-the-sap-build-apps-sandbox/ba...
Kind regards,
Bea

[sampad_007]

Hi Beatrice,
I am using custom IAS tenant using Trust configuration. Still I am not able to subscribe SAP Build Apps.

[KalpeshHirdekar]

Hi beapasch,

I have created a Multi tenant SAAS application (Non-CAP NodeJS based) and have deployed this app to SAP BTP in the Provider subaccount. Along with the application I have the saas-registry instance and xsuaa instance created in my Provider subaccount. I am also able to subscribe to this application from the Consumer subaccount.

Current Status: So far, I have successfully implemented application subscription from tenant subaccounts using the saas-registry and an xsuaa instance. I’ve also implemented the necessary logic for subscribe and unsubscribe events in the backend.

Note: This is a pure backend application, and I am not using an Approuter, as there is no frontend component involved. The application is intended to be consumed by tenant-specific backend or frontend apps via API calls.

Problems:

1. When I subscribe app in consumer subaccount, the xsuaa instance (using tenant-mode as "shared in provider subaccount) is not automatically created in consumer subaccount.
2. To address this, I added event for getting dependencies while subscribing in backend the code is shown in below picture.
3. Also added "url" for "getDependencies" in "appUrls" and dependencies detail in SaaS configuration file as shown below.
4. After these changes, I tried subscribing to the app again from the consumer subaccount got an error shown below.

Asking for Suggestions:

1. How can I achieve the automatic creation of an XSUAA instance in the consumer subaccount when subscribing to the app, to ensure full isolation between consumer subaccounts?
2. If not then how can I achieve independent OAuth 2.0 Authentication for tenants specific to their subaccount?