Open Connectors: Architecture and Use

- SAP Open Connectors is the SaaS-connectivity capability of SAP Integration Suite — over 160 prebuilt connectors organized into hubs, plus a Connector Builder, Common Resources, Formulas, JavaScript hooks, Bulk, and Events to harmonize third-party APIs behind a normalized REST layer.
- Maturity is mixed. The runtime is stable and production-default for the connectors that exist, but observability is thinner than Cloud Integration, individual connectors track third-party API changes with a delay, and SAP’s investment cadence here is visibly slower than in Cloud Integration or API Management — long-horizon strategic bets need a contingency plan.
- The consultant judgement is the catalog check before the architecture conversation: confirm the SaaS vendor is on the connector list, the operations the project needs are covered, and the volume fits inside the 8 MB API / 5 MB JS / 29 s execution envelope. If any of those is false, route the requirement to Cloud Integration with an HTTP adapter — do not try to make Open Connectors fit.
Where This Article Sits
| ID | Title |
|---|---|
| BTP-A01 | SAP Integration Suite Overview |
| BTP-A02 | Cloud Integration (CPI): Architecture and Use |
| BTP-A03 | API Management: Architecture and Use |
| BTP-A04 | Event Mesh: Architecture and Use |
| BTP-A05 | Open Connectors: Architecture and Use (this article) |
| BTP-A06 | B2B Integration (1): Trading Partner Management |
| BTP-A07 | B2B Integration (2): Integration Advisor |
| BTP-A08 | Integration Suite: Use Cases and Decision Patterns |
References
| Resource | URL |
|---|---|
| SAP Open Connectors — Official Help | help.sap.com → |
| SAP Open Connectors — Welcome / Home | help.sap.com → |
| SAP Open Connectors — Technical Restrictions | help.sap.com → |
| Open Connectors — BTP Use Case | sap.com → |
| SAP Integration Suite — Pricing | sap.com → |
1) The Open Connectors Landscape

Open Connectors is the SaaS-reach capability of SAP Integration Suite. Where Cloud Integration handles process orchestration and API Management handles API exposure, Open Connectors handles the specific job of talking to third-party cloud applications — Salesforce, ServiceNow, NetSuite, QuickBooks, Eloqua, Marketo, and similar — through a normalized REST API instead of the vendor’s own SDK or REST quirks.
| Capability | What it does | Primary user |
|---|---|---|
| Connectors | Prebuilt or custom integrations to a specific SaaS application | Integration developer |
| Hubs | Logical groupings of connectors with common URI patterns (CRM, Finance, Help Desk, etc.) | Integration architect |
| Common Resources | Customer-defined normalized objects that map fields across multiple SaaS systems | Integration architect |
| Formulas | JavaScript-based multi-step workflows triggered by events or schedule | Integration developer |
| Connector Builder | UI to create custom connectors when no prebuilt one exists | Integration developer |
They are not substitutes.
2) How It Connects to S/4HANA

Third-party SaaS (Salesforce, ServiceNow, NetSuite, ...)
▲
│ vendor REST/SOAP (varies per vendor)
│
┌────────┴───────────────────────────┐
│ Open Connectors (BTP) │
│ ├─ Connector (prebuilt/custom) │ Auth: OAuth 2.0 / API key / Basic
│ ├─ Hooks (JavaScript pre/post) │ Override request/response behavior
│ ├─ Transformation │ Vendor schema → Common Resource
│ ├─ Bulk / Events │ Async + webhook patterns
│ └─ Connector Instance │ Authenticated tenant config
└────────┬───────────────────────────┘
│ Normalized REST API (Open Connectors endpoint URL)
▼
┌─────────────────────────────────────┐
│ Cloud Integration ── API Management │
│ │ │
│ iFlow HTTP receiver / API proxy │
└───────────┬──────────────────────────────┘
│ IDoc / OData / RFC / SOAP
▼
S/4HANA (on-prem or Cloud)Key point: Open Connectors does not talk to S/4HANA directly. It sits at the SaaS edge of the Integration Suite, normalizes third-party APIs, and hands off to Cloud Integration (most common) or API Management for the trip into the SAP estate. Architecturally, treat Open Connectors as a specialized REST normalization layer in front of SaaS — not a substitute for an iFlow.
3) Maturity Map

| Capability | Maturity | Notes |
|---|---|---|
| Prebuilt connectors (160+) | ✅ Production-ready | Covers mainstream CRM/marketing/finance/helpdesk SaaS. Connector quality varies by vendor and update cadence. |
| Connector Builder (custom connectors) | ✅ Production-ready | Stable but JavaScript-heavy. Required when vendor isn’t in catalog. |
| Common Resources / Transformations | ✅ Production-ready | The architectural payoff over building point-to-point iFlows. Underused in practice. |
| Formulas | ⚠️ Ready with prerequisites | Subject to 5 MB / 29 s execution caps. Not a substitute for full iFlow orchestration. |
| Hooks (JS pre/post) | ⚠️ Ready with prerequisites | Powerful but adds operational risk — debugging custom JS at runtime is harder than iFlow steps. |
| Observability | 🔶 Early adopter | No equivalent of Cloud Integration’s Message Processing Log. Monitoring is thinner; teams typically supplement with custom logging. |
| Lifecycle / SAP investment cadence | 🔶 Early adopter | Service is not deprecated, but feature investment is visibly slower than Cloud Integration / API Management. Plan with a contingency. |
4) Requirements Checklist
Tenant and contract prerequisites

| Checklist item | Why it matters |
|---|---|
| Integration Suite tenant exists in customer’s BTP global account | Open Connectors is a capability of Integration Suite, not a standalone service. No tenant = no Open Connectors. |
| Capacity-unit / message budget agreed with FinOps | Open Connectors API calls draw from the same Integration Suite message metric as iFlow messages. Surprises happen at year-two volume. |
| Cloud Foundry environment provisioned (Neo phaseout assumed) | New Open Connectors deployments target Cloud Foundry. Plan no Neo dependency. |
| Region selected with both Integration Suite and target SaaS in mind | Cross-region calls add latency. Salesforce/ServiceNow regional endpoint must be reachable. |
| BTP role collections defined for Open Connectors administrators | Administration of connector instances and Common Resources is privileged. Treat like API Management admin access. |
SaaS coverage and connector selection

| Checklist item | Why it matters |
|---|---|
| Target SaaS vendor confirmed in the SAP Open Connectors catalog | The 160+ catalog covers most mainstream SaaS but not all. Catalog check happens before architecture review. |
| Required operations (read, write, bulk, events) confirmed for that connector | A connector existing is not the same as the connector covering your operation. Some connectors are read-only or lack bulk. |
| Vendor edition / API tier compatible (Enterprise Salesforce vs Group Edition, etc.) | Some SaaS APIs are gated by edition. The Open Connectors connector cannot bypass vendor-side restrictions. |
| Volume fits 8 MB request / 8 MB event / 6 GB streaming envelope | Hard platform limits. Larger payloads route to Cloud Integration HTTP adapter or split at source. |
| Fallback plan if the connector is removed from the eligible list | SAP KBA 3170197 documents past selective removals. Have a Cloud Integration fallback in scope. |
Authentication and secrets
| Checklist item | Why it matters |
|---|---|
| Authentication type per connector identified (OAuth 2.0 / API key / Basic) | Determines onboarding effort and credential rotation procedure. |
| OAuth proxy override required? (non-standard vendor OAuth) | Some vendors deviate from RFC 6749. Open Connectors supports overriding the auth, token-exchange, and refresh steps via custom endpoints. |
| Secrets storage strategy (BTP credential store vs vendor-side) | Connector instances hold credentials. Document where they live and who rotates them. |
| Service-account naming convention agreed with vendor admin team | Audit trails on the SaaS side reference the service account. Personal accounts must not be used. |
| Token-refresh and expiry handling tested before go-live | OAuth refresh failures show up at 1am on day 60. Test the refresh path explicitly. |
Customization (Common Resources, Hooks, Formulas)

| Checklist item | Why it matters |
|---|---|
| Common Resource schema defined before second connector is added | The point of Common Resources is one-to-many normalization. If you add the second SaaS without it, you will rebuild later. |
| JavaScript ownership and review process named | Hooks and formula scripts are runtime code. They need code review like iFlow scripts, not deployed by whoever clicks first. |
| 29-second JS execution cap explicitly designed around | Formulas and hooks must complete in 29 seconds. Long-running logic moves to Cloud Integration. |
| Test instances of each customer-built connector exist | Open Connectors does not have CTS-equivalent transport. Promotion to production is a manual export/import — test paths are essential. |
| Documentation of which connector is prebuilt vs customer-modified | Vendor connector updates can overwrite expectations. Knowing what’s stock vs what’s been customized is required for upgrade planning. |
Observability and operations
| Checklist item | Why it matters |
|---|---|
| Logging strategy beyond the built-in OC logs | Step-value logs are capped at 4 MB and can drop silently. Production troubleshooting needs more than the platform offers. |
| Monitoring integration with customer’s APM/SIEM agreed | Integration Suite emits some metrics, but Open Connectors specifically is thinner than Cloud Integration. Plan custom forwarding. |
| Alerting on connector-instance auth failures wired up | Token expiry / SaaS API change is the most common production incident. Catch it in monitoring, not in user complaints. |
| Runbooks for each integration (vendor outage, OC outage, SAP-side failure) | The failure surface is three-sided. Operations must know which side to escalate to. |
| Vendor-API change subscription identified (Salesforce releases, ServiceNow upgrades) | When the vendor changes, the connector follows on SAP’s schedule, not yours. Stay ahead of vendor releases. |
Licensing and sizing
| Checklist item | Why it matters |
|---|---|
| Year-one and year-two message volume modelled for each connector | Open Connectors API calls count as Integration Suite messages, billed in 250 KB increments and 10,000-message blocks. |
| Bulk vs. record-level call patterns evaluated | Bulk operations consume fewer messages per record but add complexity. Choose deliberately at design time. |
| Webhook (event) vs. polling pattern chosen | Polling generates messages on a schedule whether or not data changed. Events cost less when the SaaS supports them. |
| CPEA / capacity-unit budget includes Open Connectors usage | Customers buying Integration Suite for “iFlows” often forget Open Connectors lives in the same envelope. |
| Sunset budget reserved for connector replacement | If SAP retires a specific connector or the SaaS vendor drops API support, replacement work is project budget — not run budget. |
5) Decision Criteria
The three questions to ask first

Q1. What measurable inefficiency does Open Connectors solve, and how is it counted?
Not “we want to integrate with Salesforce.” That is a wish, not a requirement. The defensible form is: “Sales operations re-keys 300 opportunity updates per week from Salesforce into S/4HANA Sales Order; the cycle time is 2 days; we want it under 1 hour with no re-keying.” Without that quantification you cannot tell whether Open Connectors, a Cloud Integration iFlow, or no integration at all is the right answer.
Q2. Where does the data live, and who owns it during the integration?
Open Connectors holds connector-instance credentials and routes data through SAP-managed infrastructure. For regulated data (PII, financial, healthcare), confirm with security and legal that the BTP region of the Integration Suite tenant is acceptable, that audit trails on the SaaS side are sufficient, and that the customer — not SAP — is the controller of record. Do this before architecture, not after.
Q3. Who is the internal sponsor with both budget and operational authority?
A SaaS integration that lives in Integration Suite needs an owner who is accountable for vendor coordination, message-volume budget, and the inevitable connector update when the vendor changes its API. If no single person can sign for all three, the integration will drift. Name the sponsor in the requirements document.
Domain selection by project context

| Project context | Recommended starting capability |
|---|---|
| Mainstream SaaS (Salesforce, ServiceNow, NetSuite) is in the connector catalog and operations are CRUD-shaped | Open Connectors with a Cloud Integration receiver iFlow |
| Multiple CRMs / marketing tools must be integrated to one SAP-side process | Open Connectors with Common Resources — the one-to-many payoff |
| SaaS vendor is not in the catalog | Cloud Integration HTTP adapter (skip Open Connectors) or build custom connector via Connector Builder if reuse is expected |
| Real-time / sub-second latency requirement | Cloud Integration or Event Mesh (Open Connectors adds a hop) |
| Payload routinely above 8 MB or processing above 29 s | Cloud Integration directly — Open Connectors caps will block production |
| Need for full Message Processing Log / replay / mapping debugger | Cloud Integration (Open Connectors observability is too thin) |
| No clear pain point identified yet | Stop. Go back to Q1. |
Licensing and cost

| Capability | Licensing model | Key question to ask |
|---|---|---|
| Open Connectors API calls | Integration Suite message metric (250 KB increments, 10,000-message blocks) shared with Cloud Integration | What is the year-two message projection per connector? |
| Connector Builder (custom connectors) | No additional license — included in Integration Suite | Who owns the maintenance of customer-built connectors? |
| Formulas / Hooks (JavaScript) | No additional license — bound by runtime caps (5 MB / 29 s) | Are the runtime caps acceptable for the planned logic? |
| Bulk operations | Counted as messages per the bulk size, not per record | Will bulk pricing actually be cheaper than record-level for our volume? |
| Events (webhooks) | Per-event message cost when ingested into iFlows | Does the SaaS vendor charge for outbound webhooks too? |
6) Common Failures

Failure 1: Coverage assumption — “the catalog has 160+, ours must be in there”
The catalog covers the mainstream SaaS economy but not the long tail. Vertical-specific tools (industry-specific HR, niche e-commerce, regional payment processors) are often absent. The fix is a catalog check at requirements stage — open the connector catalog and confirm by name, not by category. If the vendor isn’t there, the requirement routes to Cloud Integration with an HTTP adapter or to Connector Builder, and the project plan needs that decision before architecture.
Failure 2: Observability gap underestimated
Teams that have run Cloud Integration in production assume the same Message Processing Log will be available for Open Connectors calls. It is not. Step-value logging is capped at 4 MB and can drop silently. Production troubleshooting depends on custom logging that someone has to design, build, and maintain. The fix is to scope observability work explicitly during requirements — not to discover the gap during the first incident.
Failure 3: Connector lifecycle drift
Vendor SaaS APIs change. The Open Connectors connector follows on SAP’s schedule, not the project’s. A Salesforce major release, a ServiceNow upgrade, or a vendor’s deprecation notice can break a production connector for weeks. The fix is two-sided: subscribe to vendor release notes and budget a small reserve of integration time per quarter for connector adaptation. Treating connectors as “set it and forget it” is the failure.
Failure 4: Common Resources skipped on integration #2
The architectural payoff of Open Connectors is the one-to-many pattern: one Common Resource (e.g., “Lead”) mapped to multiple SaaS systems. Teams that integrate the first SaaS without defining a Common Resource end up rebuilding when the second SaaS arrives — and second-SaaS work always arrives. The fix is to design Common Resources before the first connector goes live, even if only one connector exists today.
Failure 5: Cost surprise from shared message metric
Open Connectors API calls and Cloud Integration messages share the same Integration Suite metric. A team that budgets capacity units for “iFlows” and forgets Open Connectors discovers the gap at year-two renewal. The fix is to model all Integration Suite consumption — iFlows, API proxies, Open Connectors calls, Event Mesh — in one capacity-unit projection. Per-capability budgets are an illusion.
Failure 6: Lifecycle uncertainty ignored in long-horizon plans
Open Connectors is not deprecated, but SAP’s investment cadence here is visibly slower than in Cloud Integration or API Management. Strategic five-year plans built around heavy Open Connectors customization (many custom connectors, deep Common Resources, complex Formulas) carry a lifecycle risk that should be documented. The fix is not to avoid Open Connectors — it is to keep customization disciplined and have a written contingency for the case where SAP’s strategy shifts.
Failure 7: Hook complexity exceeds the runtime envelope
Pre-request and post-response hooks are powerful and tempting. Teams add transformation logic, enrichment lookups, and error-handling chains until the hook hits the 5 MB payload or 29 s execution cap. The fix is to keep hooks small and route heavyweight logic to Cloud Integration. If a hook is doing work that “looks like an iFlow,” it should be one.
FAQ
Q: Is Open Connectors deprecated or going away?
No, not as of 2025/2026. The service continues to be listed in SAP Integration Suite monthly updates, no end-of-life announcement has been made, and customers are actively onboarded. What is true is that SAP’s investment cadence on Open Connectors is visibly slower than on Cloud Integration or API Management, and SAP has selectively removed individual connectors from the eligible list (KBA 3170197). Treat Open Connectors as a stable, lower-velocity capability — not as a frontier product to bet on for five-year plans.
Q: How many connectors are there really? I’ve seen “400+” quoted.
SAP-official sources (the BTP use case page, the Help Portal) state 160+ prebuilt connectors. The “400+” figure circulates in marketing-adjacent material and may include hub variations, deprecated entries, or community-built connectors. For requirements documents and project communications, use the SAP-official 160+ number and verify the specific vendor by name in the catalog rather than relying on any aggregate.
Q: When should we not use Open Connectors even if the connector exists?
Three cases. First, when payload routinely exceeds 8 MB or processing time exceeds 29 seconds — the platform caps will block production. Second, when full Cloud Integration observability (Message Processing Log, mapping debugger, replay) is required by operations or compliance. Third, when the requirement is real-time event distribution rather than request/response — Event Mesh or direct iFlow with HTTP adapter is more appropriate. Choose deliberately.
Q: How is Open Connectors billed?
Open Connectors API calls count as messages within the unified SAP Integration Suite metric. Messages are sized in 250 KB increments and sold in blocks of 10,000. The same capacity-unit pool funds Cloud Integration messages, API Management calls, and Open Connectors calls. There is no separate Open Connectors line item. Practically, this means modelling year-one and year-two volume across all Integration Suite usage, not per capability.
Q: How do we document an Open Connectors requirement properly?
Each integration needs: (1) target SaaS vendor and confirmed catalog entry, (2) required operations (read, write, bulk, events) explicitly listed, (3) authentication mode and credential ownership, (4) volume estimate in messages per month, (5) named sponsor with vendor-coordination authority, (6) observability strategy beyond the platform default, (7) Common Resource mapping if more than one SaaS will reach the same SAP process, and (8) contingency plan if the connector is retired or the vendor changes API. A one-line “we’ll use Open Connectors” in a requirements document is not enough — that line is where most production incidents start.
Q: When should we descope an Open Connectors integration from the project?
Descope when any of the following is true: the SaaS vendor is not in the catalog and Connector Builder cost exceeds the integration’s value; the volume forecast pushes capacity-unit cost above the business case; observability requirements exceed what Open Connectors offers and Cloud Integration is therefore needed anyway; or no internal sponsor will accept ongoing operational ownership. In any of these cases, “yes but later” or “no, we’ll handle it differently” is a stronger answer than forcing the fit.
Q: Does Open Connectors work with on-premise SAP, or only S/4HANA Cloud?
Both, indirectly. Open Connectors itself runs on BTP Cloud Foundry and exposes a normalized REST endpoint. Whether that endpoint reaches an S/4HANA Cloud tenant or an on-premise S/4HANA system depends on the receiving Cloud Integration iFlow (which uses the SAP Cloud Connector for on-prem). Open Connectors is on-premise-agnostic; the connectivity decision is downstream.
Summary

SAP Open Connectors is a specialized REST-normalization layer for SaaS integration inside SAP Integration Suite — over 160 prebuilt connectors organized into hubs, with Common Resources, Formulas, JavaScript hooks, Bulk and Events to harmonize third-party APIs behind a single normalized endpoint. The runtime is production-stable; the hard caps (8 MB payload, 5 MB JS, 29 s execution, 6 GB streaming) are well documented; and the architectural payoff is real when Common Resources are used to abstract multiple SaaS behind one schema. The honest constraints are observability that is thinner than Cloud Integration, a vendor-driven connector lifecycle that adds maintenance, and an SAP investment cadence that is slower than the rest of Integration Suite. The consultant value is the catalog check before the architecture conversation, the discipline to route oversized or under-observable workloads to Cloud Integration, and the willingness to document a contingency plan for the cases where Open Connectors is the wrong tool for the requirement.