FIORI App on BTP - Can we enable VPN access to access this App?

[sreenivas1117]

Hi,

We are going to deploy a UI5/FIORI App on BTP and setting up Site(Launchpad service) to access the App . Customer want to access this App only with VPN Access.

Is it really required? If yes, do we have any documentation to set-up this?

Anyway it pushes users to authenticate while trying to access the App, is this secured enough?

Can we make this App to be accessible within the corporate network?

[gregorw]

BTP is a Platform as a Service Cloud Hosting. You can't put it behind a VPN.

You could setup Risk Based authentication in SAP Identity Authentication (IAS) and restrict access to specific IP addresses. That would make the use of Corporate VPN mandatory if the access is restricted to the outgoing IP. But traffic will flow via VPN into the corporate network and then back to the internet.

Authentication can be setup to use IAS with a corporate Identity Provider (IdP). Yes, that should be secure enough.

You can make the app accessible from the corporate network when the users have internet access.