Release Notes for SAP HANA Cloud Platform

You can now import and export users and roles in the Eclipse IDE. For more information, see Security Testing Locally.

Use SAP Mobile Documents to access and share business content stored in your existing document management systems, by connecting them to your cloud application. For more information, see SAP Mobile Documents.

Beta: Java applications running on SAP HANA Cloud Platform can use JRE 8 by specifying the parameter --java-version 8 during deploy with the console client, or via the set-application-property command. It is supported only in combination with Java Web Tomcat 7 runtime (neo-java-web 2.x). For more information, see Choosing JRE Version.

NOTE: You can use JRE 8 only if you have enabled the beta features usage for your account. You do that with the Enable Beta Features option in the cockpit. For more information, see Managing Accounts and Quotas.

SAP HANA Cloud connector 2.6.0 is released. Features:

• You can now change the UI certificate of the Cloud connector and also add a system certificate, by issuing a certificate signing request. Both actions can be performed from the Settings dialog as you can then import the response from the CA. For more information, see Exchanging UI Certificates.
• A shadow installation now allows to configure its authentication mechanism. Moreover, LDAP configuration supports more options natively. For more information, see Installing a Failover Instance for High Availability.
• Accounts managed on the Cloud connector can have a display name in addition to the technical one so that it's easier to identify certain accounts. For more information, see Initial Configuration.
• There is a new Access Control wizard for configuring new systems that shall be exposed by the Cloud connector. For more information, see  Configuring Access Control (RFC) and Configuring Access Control (HTTP).
• The Principal Propagation section now allows you to create a sample certificate that can be used for generating user mapping rules in the target system, for example, via transaction certrule in an ABAP system. For more information, see Configuring Subject Pattern for Principal Propagation.
• In the UI, the application trust configuration is now separated from the principal propagation. They can be managed via sections Trusted Applications and Principal Propagation, respectively.
• A command-line tool is added, which allows you to adjust the UI port of the Cloud connector. For more information, see Changing the UI Port.
• You can provide description for a Cloud connector instance. In future, this description will be available when monitoring on the cloud side, so that you can identify a particular Cloud connector there.
• In high availability setup, on the master instance, you can now see alerts if there are issues with transferring settings to a shadow instance. This way, an administrator recognizes that there might be inconsistencies in the configuration of these two instances.
• The number of failed log-on attempts to the Administration UI is now limited. When reaching this limit, your user will be locked for a certain period of time.

SAP HANA Cloud connector 2.6.0 is released. Fixes:

• For some accounts, the payload traces used to not be written. This wrong behavior no longer occurs.
• When trying to restart the Cloud connector or to delete an account, the Cloud connector used to hang. This behavior no longer occurs.
• If the Internet access from within the corporate network is protected by a proxy requiring authentication, the Cloud connector used to fail to establish connection to SAP HANA Cloud Platform with an error message, similar to "java.lang.IllegalArgumentException: Header value must not end with '\r' or '\n'". This behavior no longer occurs.

The Add New Member feature was enhanced to allow adding multiple members to an account simultaneously. For more in information, seeAssigning Members to Accounts.

You can maintain display names and descriptions of HTML5 applications. For more information, seeDefining Application Details (HTML5 Apps).

The certificates for SAP HANA Cloud Platform domains will be updated in order to guarantee the compatibility of the platform with the newest browser versions. This change will become effective on the platform landscapes with the planned update on 18-Jun-2015.

Due to this change, you need to update your Eclipse Tools and SDK to the latest versions, which already contain the new compatible certificates.

For more information, see this blog post:Platform certificates will expire soon 

The Internet of Things (IoT) Services (beta) enable you to develop, customize and operate IoT business applications in the cloud. For more information, seeInternet of Things (IoT) Services (beta).

Member management has been redesigned to facilitate managing account members:

• The Members list is simplified to show only the roles per member that are assigned to this member.
• Editing the role assignments of a member happens in a dedicated dialog per member, thus reducing potential errors.
• A role filter is available that allows you, with one click, to filter the Members list to show only the members assigned to a specific role.

For more in information, seeAssigning Members to Accounts.

You can now export destinations from the Eclipse IDE. For more information, seeExporting Destinations (IDE).

You can now view the logs of all HTML5 applications running in your account, or the logs of the subscriptions to these applications. For more information, seeLogging HTML5 Applications.

SAPUI5 distribution 1.28.5 for Java and HTML5 applications (including runtime 1.28.5 & documentation) has been released.

Performance Statistics (beta) allows easier troubleshooting of performance problems. For each HTTP request, it provides a breakdown of the request processing time and the consumed resources. For more information, see Performance Statistics (beta).

Using the Gamification service (beta), you can now rapidly introduce gamification concepts into Web applications. The service includes an online development and administration environment (gamification workbench) for easy implementation and analysis of gamification concepts. For more information, seeGamification Service (beta).

SAP Translation Hub (beta) is a service that allows you to translate short texts in applications into additional languages quickly and easily. This service uses multilingual texts from SAP applications that are stored in an SAP HANA database. For more information, seeSAP Translation Hub (beta).

You can now see all available IP ranges for a particular landscape host.  For more information, seeLandscape Hosts.

From now on, HTTP destinations with proxy type Internet can be used to call external systems on arbitrary ports. Previously, there were issues with some ports > 1024. This limitation no longer exists.

You can now update your productive SAP HANA instances so that you always use the latest available version. You can update all installed software components to a higher version, or apply a single support package. For more information, seeUpdating SAP HANA Instances.

The UI theme designer is a browser-based tool for cross-theming scenarios. Use it to:

• Apply your corporate branding and look to applications built with SAP UI technologies.
• Easily build your corporate identity themes by modifying one of the theme templates provided by SAP. For example, you can change the color scheme, or add your company's logo.

The tool is targeted at different user groups, including developers, visual designers, and administrators. For more information, seeUI Theme Designer Guide.

In the Eclipse IDE, you can now faster apply changes that you have made in your deployed application without uploading the entire set of files tо the cloud. For more information, seeDeploying on the Cloud from Eclipse IDE→ section "Next Steps".

In Cockpit → Authorizations→ Users, you can now filter the groups displayed when you assign a user to groups, using parts of the group name or a regular expression. For more information about user assignments, seeManaging Roles.

SAP HANA Cloud connector 2.5.2 is released. Fixes:

• If you invoked an HTTP service that had previously contained URL-encoded parts, those parts used to be replaced with their decoded characters. For Java scenarios, this used to happen for on-demand to on-premise connectivity (on the cloud side) when using HTTP proxy instead of Java destination runtime. For SAP HANA XS scenarios, this used to happen on every HTTP call of that type. This wrong behavior no longer occurs.
• If the connection to a cloud account failed, the execution of all successive attempts to establish this connection used to fail, and thus the connection could not be created even if the cause for the failure had been eliminated. This wrong behavior no longer occurs.
• The high-availability setup with LDAP user authentication is now improved, and thus you no longer need to use workarounds with additional dummy users.

When new features become available, they are announced in a pop-up window when you open SAP HANA Cloud Platform cockpit. If you want to open this pop-up again later, choose What's New in the cockpit header.

Document service repositories can now be managed from within the cockpit. For more information, seeManaging a Repository in the Cockpit.

SAPUI5 distribution 1.26.10 for Java and HTML5 applications (including runtime 1.26.9 & documentation) has been released.

The sapui5 repository located onsapui5.hana.ondemand.comis now available through the Akamai CDN. All applications which consume it directly in their UI layer will benefit from the improved latency.

This enhancement does not affect applications consuming SAPUI5 via server-side proxy fetching.

You can use delta deployment for faster development turnaround. Use the --delta parameter in the console client commandsdeployandhot-updateto deploy only the changes between your source and what is already deployed.

• The integration of the HTML5 Applications cockpit page with SAP Web IDE has been simplified. Now, after creating an HTML5 application, you can click the Edit Online button to launch SAP Web IDE and clone the repository. For more information, seeCloning a Repository.
• To create, delete, start, stop, or activate an HTML5 application in the cockpit, the Developer role is now sufficient. Users no longer need the Administrator role to execute these operations.

SAP HANA Cloud Platform offers a new role: Application User Admin. Members with this role can maintain the permissions of users for accessing Java and HTML5 applications. Application user admins can assign users to the roles of the application or to the groups which are assigned to the roles of the application. For more information, see Account Member Roles.

The Git service now supports the account member roles Administrator, Developer, and Support User. For more information, seeWorking with Git.

You can specify environment variables for configuring the environment in which a Java application runs. Use the console client commandsdeployandset-application-property, or use thelifecycle REST API.

The Product Availability Matrix (PAM) is now extended with additional OS versions for the new Cloud connector versions (2.5.1 and higher). For more information, seePrerequisites.

• In the Members section, the new History button opens a list of changes made to account members (for example, added/removed account members, or changed role assignments).
• The cockpit icons are redesigned in high-contrast mode.

• HTML5 application versions can now be created and activated on a single screen in the cockpit.
• A required destination from the neo-app.json file can now be mapped to an existing account destination. For more information, seeAccessing REST Services.

SAP HANA revision 92 (SPS 09) is now available.

• In a production environment or planned Go-live in less than 6 weeks,we recommend that you stay on the current SAP HANA SPS 08 until the next SAP HANA Datacenter Service Point is reached.
• In a non-production environment or planned initial system setup, you can update to the new SPS 09 via request to SAP HANA Cloud Platform operators.

For more information, see:SAP Note 2021789 - SAP HANA Revision and Maintenance Strategy

• Thehome pageis improved.
• Breadcrumbs are included for better navigation.
• The documentation structure is simplified and optimized by categories which reflect the programming models offered by the platform - Java, SAP HANA, HTML5, and SAPUI5.

• Thedownload site is now served viaAkamai CDNto optimize latency and throughput in all geographical regions.
• There is better throughput when downloading cloud tools, HCI, or AppBuilder with the speed of your local ISP.
• The installation time of the Eclipse tools is significantly reduced.

Applications called via HTTP destinations of authentication type ApplicationToApplicationSSO now support principal propagation.

SAP HANA Cloud connector 2.5.1 is released. Fixes:

• The Connect/Disconnect operations in Account Dashboard now behave correctly.
• After restarting the Cloud connector, both the principal propagation and the trust configuration work properly for existing sessions.
• After restarting the Cloud connector or in case of failover, the Service Channels function is started automatically. 
• If there is a SAP JVM installed via RPM on Linux OS, the Cloud connector will prefer this SAP JVM to other available JVMs .
• Previously, if an account was deleted in the Master instance, the deletion was propagated to the Shadow one, but the account configuration remained in the Shadow. This wrong behavior is now fixed.

You can now set SuccessFactors as the role provider for extension applications. This allows you to manage the roles of such applications only in the SuccessFactors system. For more information, seeChanging the Default Role Provider.

Only the main links (Settings, Help, and Feedback) remain in the cockpit header. All the other links were moved to the new footer.

SAPUI5 distribution 1.26.5 for Java and HTML5 applications (including runtime 1.26.4 & documentation) has been released.

• Тhe OAuth tokens of HTTP destinations with authentication type OAuth2SAMLBearerAssertion are now auto-renovated. When a token is about to expire, a new token is created shortly before the expiration of the old one.
• To allow parallel usage of HTTP client instances, HTTP clients created by HTTP destinations will now use ThreadSafeClientConnManager.

By default, the FORM and SAML2 login methods used to fall back to user name and password authentication (HTTP basic authentication) in case of failure of the trusted SAML identity provider. This default fallback is now removed. To preserve the behavior, in Authentication Configuration create for your application a custom login method, in which you select the User name and passwordoption. The change requires application restart. For more information, seeConfiguring Authentication for Your Application.

Breadcrumbs show the full object hierarchy in the pattern:

Data Center→Account→<application>→<process>

The interface com.sap.core.connectivity.api.configuration.ConnectivityConfiguration is extended with a new clearCache() method. It allows each application to clear its local cache to ensure that the next configuration will be taken from a central storage. The method also clears the configuration cache used by HTTP destinations. For more information, seeConnectivity Javadoc.

SAPUI5 distribution 1.26.3 for Java and HTML5 applications (including runtime 1.26.3 & documentation) has been released.

SAP HANA revision 91 (SPS 09) is now available.

• In a production environment or planned Go-live in less than 6 weeks,we recommend that you stay on the current SAP HANA SPS 08 until the next SAP HANA Datacenter Service Point is reached.
• In a non-production environment or planned initial system setup, you can update to the new SPS 09 via request to SAP HANA Cloud Platform operators.

For more information, see:SAP Note 2021789 - SAP HANA Revision and Maintenance Strategy

Virtual roles are now available for HTML5 applications.

• AccountAdministrator– account members with Administrator role.
• AccountDeveloper– account members with Developer or Administrator role.
• Everyone– all authenticated users of the configured identity provider.

You can map virtual roles to HTML5 application permissions. AccountAdministrator and AccountDeveloper require SAP IDP to be configured as identity provider. In case a custom IDP is configured, you can manually create these roles in the corresponding account.

By default, every permission required to access a protected resource of an application is granted to members of the AccountDeveloper role. As long as no other role is assigned to the permission, only account members with the Developer or Administrator role have access to the protected resource. This is also true for the default permission NonActiveApplicationPermission, which is required to access a non-active version of an HTML5 application.

• The Subscribed Java Applications table now has columns State and Start Time, so you can see the run state and start time of your subscribed Java applications.
• Every row in the log viewer has a View button that opens the respective log line in text-only format.

The rolling-update command is now available for productive use. For more information, seerolling-update.

SAPUI5 distribution 1.24.6 for Java and HTML5 applications (including runtime 1.24.5 & documentation) has been released.

New version of SAP JVM Tools is released. For more information about the new major features, seeWhat is New in SAP JVM Tools 2.2.

• JCoDestination.ping() times out after <rfc.client_connect_timeout>  seconds. It also throws a JCoException with error group JCO_ERROR_TIMEOUT if the system does not respond in that time.
• When using a destination with pooling, you can configure the destination to check the validity of a connection before using the connection for a function call. This way you can avoid zombie connections that may lead to error-prone situations.
• Traffic traces are added, which allows analyzing transferred data amounts.

Connectivity Service

• JCoRecord.isInitialized(name|index) no longer returns wrong "false" for nested tables or structures.
• Performance improvement is done for client calls that do not use AbapClassException.

Platform Infrastructure

The Safari browser no longer blocks iFrame-embedded applications.