BPX – BUSINESS PARTNER EXPERIENCE TECHNICAL DOCUMENT June 2021

BPX – BUSINESS PARTNER EXPERIENCE TECHNICAL DOCUMENT June 2021

ARCHITECTURE FIREWALL APPLICATION CLIENT SAP BUSINESS TECHNOLOGY PLATFORM SAP ECC / S/4 HANA SAP HANA CLOUD Node.js / XSJS Custom Domain Name Mobile Document Information Extraction API Service connection external APIs Cloud Connector End User Desktop Launchpad Services Identity Authentication Tenant Slipstream & Maextro UI5 Applications Trust Corporate Identity Provider REST API SAP Slipstream Installation

SAP BUSINESS TECHNOLOGY PLATFORM SERVICES USED Cloud Service Metric Description HANA Cloud 1209 units Database in cloud to store vendor onboarding details SAP Business Technology Platform -Cloud Foundry Run Time 5 GB Enables development and deployment of apps SAP BTP - Identity Authentication tenant 1 tenant User management tenant SAP Business Technology Platform - Bandwidth 10 GB Bandwidth SAP Launch Pad Service 50 users For the internal / Babcock users Custom Domain 1 domain To host the application for the vendors to access

LIST OF APIs USED External APIS Postcode API Country Supporte Description d UK Checks if the postcode is valid IBAN Checker 72 IBAN countries Validates & populates the banking details of the vendor based on IBAN number VAT (UK & EU) Validates the VAT number entered Companieshou se UK Populates the address details of the organisation based on the company registration number Address Finder UK Populates the address details based on the postcode entered

SECURITY & ADMIN SAP BTP is provisioned and hosted on a highly secured and certified environment SAP follows a set of specific global standards for operating the SAP business technology platform Only Email IDs that are registered part of create request will have access to the vendor portal URLs Once registered, buyer (who has SAML authentication) needs to approve it for further access to the vendor on-boarding process All the personal information entered while on-boarding are stored into customer’s private HANA DB after encryption Confidential data stored in HANA DB are all encrypted/decrypted Once registered, there will be an email/mobile based 2-factor authentication JWT token-based cookie management for authentication/authorization data confidentiality