| Configures and integrates SAP Master Data Integration (MDI) service on SAP Business Technology Platform. Use when setting up MDI tenants, connecting applications (S/4HANA, SuccessFactors, Ariba, Fieldglass, etc.), configuring distribution models, SOAP APIs for business partners, extensibility, or troubleshooting master data replication. Covers One Domain Model integration, Business Data Orchestration, client authentication (OAuth2, mTLS), and security configurations.
npx skills add https://github.com/secondsky/sap-skills --skill sap-btp-master-data-integration
Use this skill when setting up MDI tenants, connecting SAP applications, configuring distribution models, choosing MDI service plans, integrating business partner SOAP APIs, handling One Domain Model versions, or troubleshooting master data replication.
SAP Master Data Integration (MDI) is a central master data hub on SAP BTP that enables applications to synchronize local master data databases with a centralized repository.
| Term | Definition |
|------|------------|
| Tenant | Isolated MDI environment per subaccount with own database and configs |
| Client | Application that integrates with MDI (producing or consuming) |
| Producing Client | Sends change requests to MDI (upstream/writing client) |
| Consuming Client | Receives change events from MDI (downstream/reading client) |
| Distribution Model | Configuration controlling which data replicates where |
| Change Token | Unique identifier per change request (max 36 chars) |
Business Partner - v2.1.1, v3.3.0 (multiversion support restricted for address data)
Finance - Cost Center v3.1.0, Exchange Rate v4.0.0, Bank v3.0.0
Workforce - Person v5.0.0, Job Classification v4.0.0, Organizational Unit v4.0.0
Procurement - Purchasing Organization v4.0.0, Purchasing Group v6.0.0
Assets - Equipment v5.1.0, Functional Location v5.0.0
Products - Product v5.0.0, Product Group v5.0.0
For complete list see references/integration-models.md
Is application SAP-branded cloud?
├─ Yes → sap-integration plan (FREE)
└─ No → Is it SAP S/4HANA On-Premise?
├─ Yes → s4hana-onpremise plan (PAID - storage + bandwidth)
└─ No → Use SAP Integration Suite with MDI Adapter
Mutual-TLS with X.509 certificates available?
├─ Yes → Use mTLS (RECOMMENDED)
│ credential-type: x509
│ Configure validity: DAYS/MONTHS/YEARS
└─ No → Use Client Credentials Grant (DEFAULT)
Uses client_id/client_secret pairs
Master data type is Business Partner?
├─ Yes → SOAP API available for:
│ - Business Partner replication
│ - BP Relationship replication
│ - Key Mapping replication
│ - Confirmations
└─ No → REST API (Events API, Requests API, KeyMapping API)
1. Create subaccount in available region
2. Subscribe to SAP Master Data Integration Tenant application
3. One tenant maximum per subaccount
4. Separate tenants for dev/test/prod recommended
1. Create service instance (one per application - MANDATORY)
2. Choose service plan (sap-integration or s4hana-onpremise)
3. Set 'application' attribute (e.g., "s4" for S/4HANA Cloud)
4. Create service binding for credentials
5. Configure writePermissions for entity types
1. Access Business Data Orchestration UI
2. Create distribution model (provider → consumer)
3. Set filters (object selection + data scope)
4. Activate model
| Limit | Value |
|-------|-------|
| Change Request Size | 256 KB (512 KB for Business Partner) |
| Master Data Record Size | 512 KB |
| Change Token Length | 36 characters max |
| Delta Token Validity | 28 days |
| SOAP Payload Size | 10 MB |
| Change Token Characters | a-z, A-Z, 0-9, -, _ |
"writePermissions": [
{ "entityType": "sap.odm.finance.costobject.CostCenter" },
{ "entityType": "sap.odm.businesspartner.BusinessPartner" }
]
Base URL: https://one-mds.cfapps.{region}.hana.ondemand.com/businesspartner/v0/soap/
| Purpose | Endpoint |
|---------|----------|
| BP Inbound | BusinessPartnerBulkReplicateRequestIn |
| BP Confirmation | BusinessPartnerBulkReplicateRequestConfIn |
| BP Relationship Inbound | BusinessPartnerRelationshipBulkReplicateRequestIn |
| BP Relationship Confirmation | BusinessPartnerRelationshipBulkReplicateRequestConfirmIn |
| Key Mapping Inbound | KeyMappingBulkReplicateRequestIn |
| Key Mapping Confirmation | KeyMappingBulkReplicateRequestConfirmIn |
Authentication: Basic (clientid:clientsecret with tenantId param) or OAuth
For business system ID SYSTEMID:
SYSTEMID_BPOUTBOUND - Business Partner replicationSYSTEMID_BPCONFIRM - Business Partner confirmationSYSTEMID_BPRELOUTBOUND - Relationship replicationSYSTEMID_BPRELCONFIRM - Relationship confirmationSYSTEMID_KMOUTBOUND - Key Mapping replicationSYSTEMID_KEYMAPCONFIRM - Key Mapping confirmationFor detailed integration guides see references/integration-guides.md
Clients must perform initial load if unable to sync within 28 days.
Reduce payload size below 256 KB (512 KB for Business Partner).
Configure partner determination logic in MDI for C4C → S/4HANA scenarios.
Template available in SAP Note 2987243.
Check SAP Trust Center: https://www.sap.com/about/cloud-trust-center/
BC-CP-CF-ONEMDS
references/setup-guide-complete.md (12.2K lines) - Complete setup guide with prerequisites, tenant management, client configuration, and version historyreferences/glossary-and-pricing.md (7.3K lines) - Comprehensive glossary, pricing tiers, qualifying applications, and maintenance windowsreferences/features-complete.md (11.6K lines) - All MDI features including REST/SOAP events, Local ID APIs, and data privacyreferences/integration-models.md (3.4K lines) - Complete ODM types and versions for all supported master datareferences/integration-guides.md (6.8K lines) - System-specific setup guides for S/4HANA, SuccessFactors, Ariba, and morereferences/soap-api-reference.md (17.7K lines) - Complete SOAP web services reference with field mappingsreferences/security-and-privacy.md (7.7K lines) - Security guidelines, data protection, and filtering configurationsreferences/extensibility.md (4.5K lines) - Custom extensions, field definitions, and WSDL generationreferences/monitoring.md (7.3K lines) - Business Data Orchestration monitoring and troubleshootingPrimary Documentation: https://help.sap.com/docs/master-data-integration
GitHub Source: https://github.com/SAP-docs/sap-btp-master-data-integration
API Catalog: https://api.sap.com (filter: SAP Master Data Integration)
SAP Discovery Center: https://discovery-center.cloud.sap/serviceCatalog/master-data-integration
Expert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security implementations or security code reviews.
This skill should be used when the user asks to "perform cloud penetration testing", "assess Azure or AWS or GCP security", "enumerate cloud resources", "exploit cloud misconfigurations", "test O365 security", "extract secrets from cloud environments", or "audit cloud infrastructure". It provides comprehensive techniques for security assessment across major cloud platforms.
You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.
Comprehensive Flow Nexus platform management - authentication, sandboxes, app deployment, payments, and challenges
This skill should be used when the user asks to "escalate privileges on Linux", "find privesc vectors on Linux systems", "exploit sudo misconfigurations", "abuse SUID binaries", "exploit cron jobs for root access", "enumerate Linux systems for privilege escalation", or "gain root access from low-privilege shell". It provides comprehensive techniques for identifying and exploiting privilege escalation paths on Linux systems.
Expert malware analyst specializing in defensive malware research, threat intelligence, and incident response. Masters sandbox analysis, behavioral analysis, and malware family identification. Handles static/dynamic analysis, unpacking, and IOC extraction. Use PROACTIVELY for malware triage, threat hunting, incident response, or security research.
This skill should be used when the user asks to "use Metasploit for penetration testing", "exploit vulnerabilities with msfconsole", "create payloads with msfvenom", "perform post-exploitation", "use auxiliary modules for scanning", or "develop custom exploits". It provides comprehensive guidance for leveraging the Metasploit Framework in security assessments.
Expert in secure mobile coding practices specializing in input validation, WebView security, and mobile-specific security patterns. Use PROACTIVELY for mobile security implementations or mobile security code reviews.
Take secondsky/sap-btp-master-data-integration from the repository into ~/.claude/skills for personal
use, or into .claude/skills inside a project.
The agent identifies a skill by the name field in its header. Two skills with the
same name cannot sit side by side — one of them will be ignored.