JinJin48
JinJin48
SAP Consultant | BTP · S/4HANA · US Global Rollout
· 13 min read

Cover: Build Work Zone — Standard versus Advanced, sites versus workspaces

TL;DR
  • SAP Build Work Zone is two products under one name: standard edition is a multi-site federated launchpad across SAP and non-SAP systems; advanced edition is a single-site digital workplace with workspaces, documents, and Microsoft 365 integration. Not “small vs. big” — different tools.
  • Both editions are production-ready, but most projects fail at the role and provisioning layer, not the UI: shadow users, role collections, IdP attribute mapping, Content Manager role assignment, and (Advanced) DWS group provisioning must all line up. One break makes assigned roles silently invisible.
  • Refuse the default answer “advanced, because it sounds more complete.” Advanced is justified only when collaboration, document repositories, or end-user workspace creation is a real requirement. Otherwise Standard does the job at lower cost and with less governance overhead.

Where This Article Sits

IDTopic
BTP-B01Application Development on SAP BTP: Overview and Capability Map
BTP-B02Business Application Studio: Architecture and Use
BTP-B03CAP and Build Code: Architecture and Use
BTP-B04ABAP Environment: Architecture and Use
BTP-B05Build Apps: Architecture and Use
BTP-B06Build Process Automation: Architecture and Use
BTP-B07Build Work Zone: Architecture and Use (this article)
BTP-B08Use Cases and Decision Patterns

References

ResourceURL
SAP Build Work Zone, standard edition (Help Portal)help.sap.com →
SAP Build Work Zone, advanced edition (Help Portal)help.sap.com →
About Roles and Role Assignment (Advanced edition)help.sap.com →
Build Work Zone product pagesap.com →
Provisioning of Users and Roles (SAP Learning)learning.sap.com →

1) The Build Work Zone Landscape

Three launchpad options: embedded Fiori, Work Zone Standard, Work Zone Advanced — primary user and primary use case

SAP customers face three real entry-point options in 2026, and “Build Work Zone” is two of those three:

OptionWhat it doesPrimary user
Embedded Fiori launchpad (in S/4HANA)Per-system role-based launchpad for one S/4HANA stackS/4HANA-only customer with a single ERP
Build Work Zone, standard editionFederated multi-site launchpad across SAP and non-SAP systems; two-level navigationMulti-system landscape needing one harmonized entry
Build Work Zone, advanced editionSingle-site digital workplace with workspaces, documents, collaboration, Microsoft 365 integrationCustomers replacing SAP Enterprise Portal or building an intranet

Embedded Fiori is a feature inside S/4HANA; both Build Work Zone editions are separate BTP services. Standard and Advanced share branding but diverge on site, content, and role models. They are not substitutes.

2) How It Connects to S/4HANA

Federation architecture: Channel Manager and Content Manager pull CDM JSON from S/4HANA, SAP cloud apps, and BTP apps via IAS

Build Work Zone never owns business apps; it aggregates references to them. The pattern is the same for both editions:

   SAP Build Work Zone (standard or advanced)
   ┌──────────────────────────────────────────────────┐
   │  Sites / pages / roles  (admin-defined)          │
   │  Channel Manager — Content Manager — Explorer    │
   └──────────────┬───────────────────────────────────┘
                  │ Common Data Model (CDM) JSON
                  ▼
   ┌──────────────┴───────────────────────────────────┐
   │ S/4HANA Fiori catalog (Cloud Connector)          │
   │ SuccessFactors / Ariba / Concur                  │
   │ BTP apps: Build Code, CAP, Build Apps, ABAP env  │
   └──────────────────────────────────────────────────┘

The contract is CDM JSON from each content provider. The provider keeps ownership of its app catalog, business catalogs, and roles; Work Zone reads the CDM and presents the right tiles to the right user via SAP Cloud Identity Services (IAS over SAML 2.0 or OIDC). On-premise S/4HANA is reached via SAP Cloud Connector with Principal Propagation.

Key point: Build Work Zone is a meta-launchpad, not a content store. Content lifecycle stays in the source system — “decentralized ownership” is SAP’s design principle for the product.

3) Maturity Map

Maturity map of Build Work Zone capabilities — most production-ready, migration and large-scale federation flagged

CapabilityMaturityNotes
Build Work Zone, standard edition✅ Production-readySuccessor to SAP Launchpad service; stable since 2022 rebrand
Build Work Zone, advanced edition✅ Production-readySuccessor to SAP Work Zone (formerly Portal / Jam); demands more governance
Federated content from on-premise S/4HANA✅ Production-readyRequires Cloud Connector + Principal Propagation; well documented
Federated content from SAP cloud apps (SuccessFactors, Ariba)✅ Production-readyFirst-party CDM providers maintained by each product team
Federated content from non-SAP / custom systems⚠️ Ready with prerequisitesNeeds custom CDM or content packages; effort scales with provider count
Microsoft 365 / Teams / SharePoint integration (Advanced)✅ Production-readyNative connectors; tenant-to-tenant trust is non-trivial setup
Guided Experiences (Advanced wizard layouts)✅ Production-readyGA; used to onboard joiners or trigger SBPA processes
Standard-to-Advanced migration🔶 Early adopterSite models do not match; plan for redesign, not lift-and-shift
Multi-site beyond ~10 federated providers🔶 Early adopterNo published limit; admin overhead grows quickly past this point

4) Requirements Checklist

This is where most Build Work Zone projects either succeed or fail at the requirements stage. The five sub-checklists below cover what must be settled before configuration starts.

Tenant and subaccount prerequisites

Six tenant and subaccount prerequisites — BTP region, edition decision, IAS, Cloud Connector, IPS, naming convention

Checklist itemWhy it matters
BTP global account + subaccount in the correct regionBuild Work Zone is a regional service; cross-region moves are expensive
Edition decision (standard or advanced) before tenant provisioningThe two editions provision different tenant types; switching is a redesign
SAP Cloud Identity Services (IAS) tenant provisioned and trustedWithout IAS, neither SSO nor user provisioning works
Cloud Connector deployed for any on-premise backendRequired for Principal Propagation to S/4HANA on-premise content
Identity Provisioning Service (IPS) tenant preparedNeeded for SCIM-based role assignment at non-trivial scale
Naming convention for sites, role collections, content provider IDsRename mid-project breaks SCIM mappings and audit trails

Site, page, and role design (Standard edition)

Checklist itemWhy it matters
Number of sites and what each represents (geography, BU, persona)Multi-site is supported but each site doubles admin surface; do not split without reason
Spaces and Pages structure per site (two-level navigation)Two levels is the limit; force-fitting three levels is the common day-2 pain
Role catalog mapping business roles to Pages and AppsRole design is harder than site design; budget a workshop, not a meeting
Content provider list per site (which systems federate into where)Missing a provider means missing apps for whole user groups
Theming policy (one global theme vs. per-site theme)Per-site theming is supported but every theme is a maintenance item

Workspace, page, and role design (Advanced edition)

Standard edition multi-site model versus Advanced edition single-site plus workspaces — side by side

Checklist itemWhy it matters
Single-site assumption confirmed (Advanced has one default site)Customers expecting multi-site like Standard get blocked here; Advanced uses workspaces instead
Workspace governance: who creates, who joins, public vs. internal defaultWorkspace sprawl is the #1 day-2 complaint on Advanced; settle the rules first
Three-level navigation plus runtime workspaces — drawn end-to-endSketch real user journeys, not a tree diagram, before sign-off
Microsoft 365 / Teams / SharePoint integration scopeIf in scope, the cross-tenant trust is its own IT-security workstream
Document management retention and access policyLegal sign-off required for customer-facing or HR documents
Editor model: which non-admin roles edit pages at runtimeAdvanced supports designated editors; Standard does not

Content federation and integration

Checklist itemWhy it matters
IAS-trusted IdP for each content providerFederated content fails silently if IdP trust is incomplete
CDM JSON availability per providerFirst-party SAP cloud apps ship CDM; custom providers must expose it
Content packages (SAPUI5 cards as ZIP) inventoryEach package has its own version lifecycle
Channel Manager connection plan (provider, roles, refresh)Documented before configuration, not during
UI Integration Cards scope (vs. plain tile/link references)Cards add data contracts and CSP rules; do not promise them casually
Lifecycle ownership per content provider“Broken tile” tickets are owned by no one without explicit assignment

User and role provisioning chain

Provisioning chain from corporate IdP through IAS, BTP role collections, Content Manager SCIM, to a tile rendering

Checklist itemWhy it matters
Shadow user creation method (manual, IPS-SCIM, or auto on IdP login)Pick one and document it; mixing methods causes audit conflicts
Role collection design with naming conventionNames are referenced in attribute mappings; rename cascades into IdP and IPS
IAS / corporate IdP attribute mapping to role collectionsWithout this, users land logged-in but role-less
Content Manager role assignment via SCIM API + IPS connectorRequired for federated provider roles to reach actual users
(Advanced only) DWS user and group provisioning (second SCIM API)Workspaces and groups stay empty without DWS provisioning
Employee vs. Public user-type policy (SCIM userType)Mis-classifying internal users as Public locks them out of workspaces

Operations and lifecycle

Checklist itemWhy it matters
SAP Mobile Start configuration if mobile is in scopeNative mobile entry on both editions; tenant binding must be explicit
Theme and branding lifecycle ownerUI Theme Designer themes are versioned artefacts; assign a maintainer
Monitoring of login and federation healthFederation breaks are user-visible; plan a dashboard or alert
BTP audit log retention requirementMany customers need 1+ year retention; default may be shorter
Disaster-recovery and tenant-export approachExport is supported but not a one-click backup

5) Decision Criteria

Use these three questions before you propose an edition. If any answer is unclear, the requirements are not ready.

Q1. What is the measurable user pain that justifies a new launchpad?

If the customer has one S/4HANA system and the embedded Fiori launchpad already works, Build Work Zone is rarely worth the BTP-tenant overhead. Build Work Zone is justified by aggregation pain: users log into multiple systems and miss apps because no single page shows them. Quantify it — how many systems, how many roles, how many minutes per day lost to system hunting? If the answer is “we want it to look modern,” push back.

Q2. Who owns the content, and where do their identities live today?

Build Work Zone is a meta-launchpad. It only works if every connected source has a recognizable identity (via IAS-trusted IdP) and a content surface (CDM JSON, content packages, or custom integration). Map providers and their identity stories before committing dates. Fragmented identity (Active Directory islands, Okta-only contractors, no IAS) means a parallel identity workstream.

Q3. Is there a sponsor for collaboration features, or only for the launchpad?

Workspaces, document management, and Microsoft 365 integration only deliver value with a real internal sponsor — HR, IT, or corporate communications — who will produce content and govern access. If the only sponsor is “ERP IT wants a launchpad,” Standard is the answer; Advanced is over-spec.

Edition selection by project context

Edition selection grid mapping project context to recommended edition: Embedded Fiori, Standard, Advanced, or SAP Start

Project contextRecommended edition
Single S/4HANA, no cloud apps, modest user baseEmbedded Fiori launchpad — Build Work Zone not justified
Multi-system SAP landscape (S/4HANA + SuccessFactors + Ariba) needing harmonized entryBuild Work Zone, standard edition
Multi-system SAP plus non-SAP, with custom federated contentBuild Work Zone, standard edition with content packages or custom CDM
Replacement of SAP Enterprise PortalBuild Work Zone, advanced edition
Real intranet need (HR communications, documents, collaboration)Build Work Zone, advanced edition
Microsoft 365 / Teams co-existence is a key requirementBuild Work Zone, advanced edition
Customer is SAP-cloud-only and ≤ 1,000 monthly usersConsider SAP Start (free, preconfigured) before licensing Work Zone
No clear pain point identified yetStop. Go back to Q1.

Licensing and cost

Licensing comparison: Standard and Advanced via subscription or BTPEA/CPEA; SAP Start free with 1000 user cap

EditionLicensing modelKey question to ask
Build Work Zone, standard editionSubscription or BTPEA / CPEA credits; metered by named users and/or sites“Do we already have a BTP enterprise agreement, and what is the named-user count at year two?”
Build Work Zone, advanced editionSubscription or BTPEA / CPEA credits; metered by named users with workspace allowance“Are workspaces actually going to be created, or are we paying for capacity nobody uses?”
SAP Start (SAP-cloud-only alternative)Free, preconfigured, capped at 1,000 monthly users“Can we live with the cap and the lack of customization?”

Public list prices are not published; both editions require an SAP account executive quote. Customers on a BTPEA / CPEA agreement can usually consume Work Zone against existing credits, which is simpler than a separate subscription.

6) Common Failures

Six common Build Work Zone failures: cost-first edition, identity deferred, federation unbounded, workspace ungoverned, broken provisioning chain, lift-and-shift migration

Failure 1: Edition chosen on cost first, requirements second

The common mistake is “Standard is cheaper” — discovered later when HR wants document management. The reverse is “Advanced sounds more complete” — discovered when the only feature used is the launchpad page. Pick from requirements, then negotiate price.

Failure 2: Identity foundation deferred

Customers commit to Build Work Zone before they have IAS, IPS, or a clean corporate IdP attribute model. Go-live slips because shadow users, role collections, and SCIM provisioning must come first, not in parallel with site design. Treat identity as a prerequisite.

Failure 3: Federation provider count unbounded

Standard can connect many providers, but admin and role-mapping effort grow per provider. “We’ll federate everything” discovers at integration that two or three providers lack first-party CDM and need custom adapters. Constrain provider count; defer the rest to phase two.

Failure 4: Workspace governance designed after go-live (Advanced)

Advanced workspaces are self-service: any authorized user can create one. Without a policy (naming, expiry, public/internal default, owner mandate), customers see hundreds of stale workspaces within a year. Governance must ship at go-live.

Failure 5: Roles assigned but not visible at runtime

The most common operational issue is “I assigned the role, but the user does not see the tile.” The root cause is almost always a broken provisioning chain: missing role collection, missing IAS attribute mapping, missing SCIM propagation, or wrong userType. Document the chain end-to-end and rehearse a fresh-user trace as a smoke test.

Failure 6: Standard-to-Advanced migration assumed lift-and-shift

Customers who outgrow Standard often expect a tooling migration to Advanced. The site models do not match — Standard’s multi-site does not collapse into Advanced’s single-site-plus-workspaces. Plan a redesign workshop.

FAQ

Q: Can we just use the embedded Fiori launchpad and skip Build Work Zone?

Yes, if the customer has one S/4HANA system and no cross-system aggregation pain. Embedded Fiori is a feature inside S/4HANA — no extra BTP tenant or licensing. The moment the requirement is “show tiles from SuccessFactors and Ariba next to S/4HANA,” embedded launchpad is the wrong tool and Build Work Zone Standard is the answer.

Q: How is Build Work Zone licensed in 2026?

Both editions are BTP services consumable through subscription, BTPEA, or CPEA. Customers on a BTP enterprise agreement usually consume Work Zone against existing credits. Public list prices are not published; quotes come from an SAP account executive. SAP Start is the free alternative for SAP-cloud-only customers below 1,000 monthly users.

Q: When should we descope Advanced edition from a project?

Descope when the only sponsor is ERP IT and the only requirement is “a launchpad that aggregates apps.” Advanced’s collaboration and document features need a content sponsor (HR, IT, communications) who will produce and govern content. Without that sponsor, the customer pays for capacity that stays empty.

Q: How do we document the role and content design properly?

Three artefacts settle most disputes: a role catalog (business role → Work Zone role → tiles → backend auth), a content-provider matrix (provider → CDM endpoint → roles → owner), and a provisioning trace (one example user from IdP login to tile render). Sign off on all three before go-live; informal pages will not survive the first audit.

Q: Does Build Work Zone work with SAP S/4HANA on-premise?

Yes — via SAP Cloud Connector with Principal Propagation, federating content from the on-premise S/4HANA Fiori front-end server’s CDM endpoint. Requires Cloud Connector, mTLS, and an IAS-corporate-IdP trust path. Customers without those building blocks need a parallel identity workstream.

Q: Can business users edit content at runtime?

On Standard, no — page editing is admin-only. On Advanced, yes — designated editors edit pages and authorized users create workspaces. If runtime editing is a real requirement, Advanced is the right edition. Build Work Zone also composes with the rest of SAP Build: Build Apps and Build Code apps register as content providers, and Build Process Automation processes surface as workspace cards or Guided Experiences on Advanced.

Summary

Hub-and-spoke summary: Build Work Zone is two products under one name, with edition decision and provisioning chain as the two critical levers

SAP Build Work Zone is two products under one name. Standard is the multi-site federated launchpad — the right answer for most multi-system SAP landscapes. Advanced is the digital workplace, justified when collaboration, documents, and Microsoft 365 are sponsored requirements. Both are mature; failures cluster at the requirements stage and the provisioning chain. Get edition and provisioning right, and Build Work Zone is a low-drama deliverable.

IDTitle
BTP-B01Application Development on SAP BTP: Overview and Capability Map
BTP-B02Business Application Studio: Architecture and Use
BTP-B03CAP and Build Code: Architecture and Use
BTP-B04ABAP Environment: Architecture and Use
BTP-B05Build Apps: Architecture and Use
BTP-B06Build Process Automation: Architecture and Use
BTP-B07Build Work Zone: Architecture and Use (this article)
BTP-B08Use Cases and Decision Patterns