Composite Application Framework Core Security
Guide 
This guide does not replace the daily operations handbook that we recommend customers to create for their specific productive operations.
Target Audience
· Technology consultants
· System administrators
This document is not included as part of the Installation Guides, Configuration Guides, Technical Operation Manuals, or Upgrade Guides. Such guides are only relevant for a certain phase of the software life cycle, whereby the Security Guides provide information that is relevant for all life cycle phases.
Why Is Security Necessary?
With the increasing use of distributed systems and the Internet for managing business data, the demands on security are also on the rise. When using a distributed system, you need to be sure that your data and processes support your business needs without allowing unauthorized access to critical information.
User errors, negligence, or attempted manipulation on your system should not result in loss of information or processing time. These demands on security apply likewise to Composite Application Framework Core (CAF Core). To assist you in securing CAF Core, we provide this Security Guide.
About this Document
The Security Guide provides an overview of the security-relevant information that applies to CAF Core.
Overview of the Main Sections
The CAF Core Security Guide comprises the following main sections:
This section contains information about why security is necessary, how to use this document, and references to other Security Guides that build the foundation for this Security Guide.
This section provides an overview of the technical components and communication paths that are used by CAF Core.
· User Administration and Authentication
This section provides an overview of the following user administration and authentication aspects:
¡ Recommended tools to use for user management.
¡ User types that are required by CAF Core.
¡ Standard users that are delivered with CAF Core.
¡ Overview of how integration into Single Sign-On environments is possible.
This section provides an overview of the authorization concept that applies to CAF Core.
· Network and Communication Security
This section provides an overview of the communication paths used by CAF Core and the security mechanisms that apply.
This section provides an overview of any critical data that is used by CAF Core and the security mechanisms that apply.
· Security for Additional Applications
This section provides security information that applies to third-party or additional applications that are used with CAF Core.