Skip to Content
Technical Articles

Self-Service Enablement of Cloud Integration Service on Cloud Foundry Environment


SAP Cloud Platform Integration is now available on Cloud Foundry environment of SAP Cloud Platform. You can now have CPI tenants running on Cloud Foundry environment, If you are entitled to Cloud Platform Enterprise Agreement (CPEA) license.

In this blog, I will talk about the steps involved in provisioning/decommissioning of a CPI tenant on the Cloud Foundry environment.

Refer my other blog if you want to learn about the self-service provisioning of CPI tenants on Neo environment.

Let’s get started.


  • Provisioning: Perform the following steps to provision your tenant and run integration scenarios on Cloud Foundry.
    1. Create a subaccount on the CPEA Global account ( Not required for Trial )
    2. Enable Cloud Foundry on the subaccount to create Org ( Not required for Trial )
    3. Subscribe to Process Integration SaaS Application
    4. Configure the user access to the application
    5. Provision a tenant
    6. Create and Deploy integration flows from the design-time of the tenant
    7. Access the deployed integration flow endpoint through the credentials provided by the Process Integration Runtime instance.
  • Enterprise Messaging: Additionally, if you want to run scenarios with JMS message queues you need perform the below step
    1. Activate Enterprise Messaging on the tenant to run scenarios with JMS/AS2/XI (with JMS storage ) adapter
  • Decommissioning: To decommission a tenant, you need to simply unsubscribe the service.


 1. Create a subaccount:

Create a subaccount on the CPEA Global Account as shown below.

You need to select

    •                 Environment as Cloud Foundry
    •                 Provider as Amazon Web Services (AWS)
    •                 Region as Europe (Frankfurt).

2. Enable Cloud Foundry:

Once you have created your subaccount for SAP Cloud Platform , you need to enable Cloud Foundry for this account to create Org on the cloud foundry environment as shown below.

Once this step is successful, you would see Org and API Endpoint on CF as shown below

3. Subscribe to Process Integration SaaS Application:

After enabling the Cloud Foundry on the subaccount, you need to subscribe to the Process Integration SaaS Application to provision a CPI tenant on the subaccount. The procedure to subscribe is shown below.

On Successful subscription, you would see the below screen

After the subscription is successful, Attempt to access application with a click on Go To Application would not succeed . You need to additionally configure user access by assigning the roles as mentioned in the next step.

In the upcoming releases, we would be improving this experience by assigning the required roles to the user on the click on Subscribe button ( similar to that of Neo) .

4.Configure the user access to the application

In order to configure the user access, you need to navigate back to Subaccount level as shown below

Create a Role collection:

Create a role collection as shown below.

Click on the newly created role collection name to assign the required roles.

Click on Add Role and assign AuthGroup_Administrator, AuthGroup_BusinessExpert and AuthGroup_IntegrationDeveloper to the role collection.

After all the roles are assigned, you should see the below shown screen.

Assign Role Collection:

Now, you should assign the user to the created role collection. Inorder to do that you need to choose SecurityTrust Configuration > SAP ID Service and assign role collection to the user.

After the Role Collection assignment is successful, you can access the application by clicking on the Go To Application.

5. Provisioning a CPI tenant

Navigate back to Subaccount > Subscriptions > Process Integration and choose Go To Application

Enter email and password to logon to the application

As soon as you logon, you would see provisioning application with an option to choose the environment of the tenant that you want to provision.

Please be aware of the below impact of the tenant environment

  • For Non-Production CPI tenants, as per contract, billing will include only CPI instance charges and additional connections will not be billed.
  • For Non-Production CPI tenants, SAP will not commit for any SLAs (Service Level Agreements).

6.Create and Deploy integration flows from the design-time of the tenant

Once tenant provisioning is successful, you can access the tenant URL to access the design time of the tenant as shown below

After accessing the tenant URL,Create a Integration package by navigating to Design > Create as shown below

Create an iflow under the package as shown below

Create a simple integration flow with HTTP Sender adapter as shown below

Save and Deploy the integration flow.

Now navigate to Monitoring > Manage Integration Content to view the status of the deployed integration flow.

During the deployment of first integration flow , the start of the integration flow would take up to 10 minutes.

We will use the deployed iflow endpoint to post message in the next step.

7.Access Deployed Iflow Endpoint

Do not perform this step till the tenant provisioning mentioned in the step#5 is successful.


In order to access the deployed integration flow endpoint through a rest client ( e.g: postman ), you need to create OAuth client .

Follow the below mentioned procedure to achieve this.

 Assign Process Integration Runtime entitlement ( Not required for Trial):

You need to be Global Account admin to perform this action.

Navigate to Global Account > Entitlements > Subaccounts > <Select the subaccount of the cpi tenant > > Go as shown below


Configure Entitlements


Add Service Plans



Create Process Integration Runtime service instance:

Inorder to create a service instance, you need to create a space first.

Create Space

Navigate to Process Integration Runtime in Service Marketplace

Create New Instance

Choose Service Plan as integration-flow

Specify Parameters value as:

“roles”: [


Mention Instance Name and Finish


Service Key creation

Create service key

Copy the values of clientId and clientsecret

Post message to the deployed iflow endpoint ( using the clientid as username and clientsecret as password )

That brings me to the end of provisioning steps.

Similar to Neo environment, You can create only one CPI tenant per subaccount .

As of now, we do not support moving the existing CPI tenants from Neo environment to CF environment.

There will not be any difference w.r.t features on Neo and CF. As of now, we have few limitations on CF as mentioned in the release note 



Enterprise Messaging:

Now, let me show you how you can run scenarios with AS2/JMS/XI (with JMS storage) adapter scenarios.

You can activate Enterprise Messaging on the tenant by navigating to Process Integration > Go To Application > Enterprise Messaging as shown below.

After successful activation, you would see the below screen

As soon as the Message broker is activated, you would see Message Queues tile appear on Monitoring page of the tenant.

Deactivate Message Broker:

Incase if you no more need JMS scenarios on your tenant, you can deactivate the broker as shown below


Sometimes, you may come across cases of deleting few cpi tenants to avoid additional costs.

This can be achieved by following a simple step shown below.

That’s all.

Hope you enjoyed reading the blog on how to provision and decommission a cpi tenant on CF environment.

See you again with another interesting topic.

You must be Logged on to comment or reply to a post.
      • Hi Appala Naidu,

        Blog is very informative and helpful new CPI consultants, I have tried to setup for trial, but getting following error while creating ‘New Instance’.

        Unable to create service instance. We are sorry, but we have encountered an internal error. If the problem persists, please create a support ticket.
        Service broker error: Internal Server Error
        Can you please help to move from here.


  • /
  • Thanks for the detailed blog.

    I was able to get the tenant access in CF trail, however when to try to create instance for Runtime i get below error.

    Unable to create service instance. We are sorry, but we have encountered an internal error. If the problem persists, please create a support ticket.
    The service broker returned an invalid response for the request to Status Code: 502 Bad Gateway, Body: 502 Bad Gateway: Registered endpoint failed to handle the request
    • /
          • Hi Appala


            Thanks for the quick resolution. I’m able to create the runtime instance now and send a successful message into my sample Hello World CPI flow! Hurray!


            Just a few additional comments:-

            1) For CPI trial – the first part of Step 7 to configure Entitlement and Service Plan is already in place, so no action required.

            2) The JSON snippet provided for the Instance creation has some formatting issues with the double quotes which flags it as an invalid JSON.

            3) Undeploying an IFlow does not work – the following error is displayed.


            Thanks again for the detailed step on this post, and well done to SAP for getting this self-service trial up and running.



            Eng Swee

          • Hello Eng Swee,

            Thanks for your feedback.

            Response for your additional comments.

            1. Added notes in the blog
            2. Corrected
            3. Issue is fixed now. please check again.



  • Hi Appala,

    I have this error when opening the application after following the steps in chapter 4, can you advice?

    <error_description>Insufficient scope for this resource</error_description>

    Thank you in advance

  • Hi Appala,


    I created the service key and try to logon with basic auth but I get a 403.

    HTTP Status 403 – Forbidden</h1><hr class=”line” /><p><b>Type</b> Status Report</p><p><b>Message</b> Forbidden</p><p><b>Description</b> The server understood the request but refuses to authorize it.

    Thanks in advance,


  • Hi Appla Naidu,

    I was able to get the tenant access in Neo version but when try to open tenant I am getting below Errorr: No server is available to handle request or the application is temporarily down for maintenance. Excuse us for the inconvenience.

    can you please help me on this.

  • Hi Appala Naidu,

    Thanks for the very detail steps!

    I follow the steps in the blog by using CF trial account and getting error in the tenant provisioning step. The progress meter stuck in 50% for long time and this error is shown:


    Tenant provisioning failed. Please try after sometime.


    Have tried few times but no luck 🙁


  • Hi Appala Naidu ,


    Thanks for the steps !


    I have followed the steps in the blog by using CF trial account and getting error in the tenant provisioning step. The progress meter stuck in 18% for long time and this error is shown:

    Tenant provisioning failed. Please try after sometime.

    Have tried few times but no luck.

    Please help !

  • Hi Appala,

    I have the same issue that provisioning process reached 75% and stunk. I would be really appreciated if you can help with this. Thank you!



  • Hi Appala,


    Thanks for sharing blog, however, while creating provisioning it is getting stuck at 75%.

    I am trying from last 2 days with multiple times.

    Could you please help?




  • Hello Appala,
    Very nice blog!!! but alas I have the same issue with provisioning. It's stuck at 75% since yesterday. Can you please assist me on this?
    Thanks & Regards
    Deepankar Bhowmick
  • /
  • I am stuck at 75% provisioning as well. Is there any way to cancel the provisioning attempt and retry it? Or do we have to wait until the current request times out? Started my provisioning yesterday and turned off the computer after it got stuck at 75%. Today I am still at 75% when trying to open the service. (Unsubscribe/resubscribe did not work either)

  • /
  • Hi Appala,

    I am getting below error while creating service instance.

    I also dont see ‘Connectivity Tests’ option. Is this not available in trial version?

    Please have a look.




  • Hi Appala,

    This is great article!. Thanks for sharing.

    I have one issue here. I have deployed the integration content, after an hour, the status is still “starting” – The Integration Flow is starting.

    Any idea on this?



  • Hello Appala,

    I followed all steps from the article and the provisioning in Cloud Foundry worked for me.

    But unfortunately the deployment of the iFlow artifacts don’t work. I always get the following error message:

    I tried with different content and ensured, that there are no problems within the iFlow development.

    The same issue was already reported here. But no solution was reported.


    Best regards,



    Note: Managed it by myself. I just deleted the whole subaccount in CF and created it again. For some reason, it works now…

  • /
  • Hi Appala good day,

    I am having also same issue “Tenant provisioning failed. Please try after sometime.”

    Could you please advise


    Kind regards,


  • Hi Appala Naidu,

    I am getting the following error ” Tenant provisioning failed. Please try after sometime. “

    I tried for three times still the same error.Please find the screen short below.

    Let me know how to resolve the issue.



    Thanks & Regards,


  • Hi Appala Naidu,


    Thanks for the detailed post.

    EDIT: I have successfully completed all the provisioning steps.

    While trying to post a request to the endpoint via SOAP UI / Google Postman, I receive the following response.

    HTTP Status 403 – Forbidden</h1><hr class=”line” /><p><b>Type</b> Status Report</p><p><b>Message</b> Forbidden. Missing CSRF token.</p><p><b>Description</b> The server understood the request but refuses to authorize it.</p><hr class=”line” /><h3>Apache Tomcat/8.5.32</h3></body></html>

    Request you to advise if any additional authorization is required. I have provided the username (clientID) and password (clientsecret) as per the instructions.


    Best Regards,

    Krishna Sharma 

  • I too have same issue

    ” Tenant provisioning has failed. Create service broker instances only after successful provisioning. Please try after some time. ”


    After training multiple times… Still same issue persists. Please find my account details…please check any issue from SAP.


    Subdomain : s0008735205trial

  • Hi Dear Appala,

    Same issue for me as indicated by Arun, kindly see further details below:


    Iflow status seems to be stuck on “The integration Flow is starting” (screenshot below)

    On it’s mentioned on question 32 this topic as common issue, however the link referred (SAP KBA 2648752is broken, please could you provide any support on this?

    Q: My iFlow is stuck in “Starting” status, how to solve it?

    A: You can find all guidance over this issue in the SAP KBA 2648752 – Unable to Deploy Integration Flow.


    Many thanks in advance,


  • Having the same issue on provision part….always getting error. 🙁


    Tenant provisioning has failed due to technical reasons. Please try again after some time. If the issue persists, please send your global account ID, subdomain name and a brief description of your issue to
    Provisioned By
    Provisioned On
    Wed Apr 01 2020 03:37:48 (Brasilia Standard Time)