Solution architecture

The solution architecture diagram below shows how the Neptune DXP - Proxy connects the Neptune Mobile Clients or Neptune DXP - Open Edition using the SAP BTP Destination and Connectivity services to connect to an SAP a system via the SAP Cloud Connector.

In this scenario, your SAP system is not directly exposed to the Internet. A secure tunnel is established to your SAP BTP subaccount through the SAP Cloud Connector. By using SAP Cloud Identity Services and OpenID Connect with Proof Key for Code Exchange (PKCE) for mobile scenarios, we enable a secure login for the Neptune Mobile Client. By default, the SAP Cloud Identity Services will use its own identity provider and user accounts can be managed in there, but SAP Cloud Identity Services can also act as a proxy for other corporate identity providers like Microsoft Entra ID or Okta.