sap-btp-cloud-transport-management
Comprehensive skill for SAP Cloud Transport Management service on SAP BTP. Use when setting up transport landscapes, configuring transport nodes and routes, managing import queues, deploying MTAs across Cloud Foundry environments, integrating with CI/CD pipelines, configuring ABAP environment transports, troubleshooting deployment errors, or implementing change management workflows. Covers entitlements, subscriptions, role collections, service instances, destinations, and API integrations.
- Installs
- 668
- Last 24h
- —
- Trending rank
- —
- Security
- Not audited
Install
Works with every agent the skills CLI supports.
npx skills add https://github.com/secondsky/sap-skills --skill sap-btp-cloud-transport-management- 01
Install
Run the command in your project. The CLI asks which agents to install for.
- 02
Describe the task
Ask your agent for something this skill covers. It loads sap-btp-cloud-transport-management automatically when relevant.
- 03
Review the result
The agent follows the SKILL.md steps, scripts and references bundled with the skill.
SKILL.md
The instructions your agent reads when the skill is triggered.
SAP Cloud Transport Management Skill
Related Skills
- sap-btp-cloud-platform: Use for BTP subaccount, role collection, and Cloud Foundry runtime setup
- sap-btp-developer-guide: Use for application delivery and CI/CD patterns around transported content
- sap-btp-service-manager: Use for service instances, service keys, and API/service lifecycle operations
- sap-abap: Use when transport flows include ABAP Environment or gCTS-managed content
When to Use This Skill
Use this skill when setting up transport landscapes, creating transport nodes/routes, managing import queues, deploying MTAs across environments, configuring destinations for deployment transport, integrating transports into CI/CD, or troubleshooting TMS import/deployment errors.
Table of Contents
- Overview
- Quick Start: Initial Setup
- Landscape Configuration
- Destination Configuration
- Import Queue Operations
- Transport Request Statuses
- Troubleshooting
- Security
- Bundled Resources
- Integrations
Overview
SAP Cloud Transport Management is a service on SAP BTP that manages software deliverables between accounts of different environments by transporting them across various runtimes. It provides transparency to the audit trail of changes and enables separation of concerns between developers and operations teams.
Supported Environments: Cloud Foundry, Kyma, Neo (deprecated)
Supported Content Types:
- MTA (Multitarget Applications):
.mtarfiles for Cloud Foundry deployments - BTP ABAP: References to ABAP objects in Git repositories
- Application Content: Application-specific formats (
.zip,.rar) - XSC DU: SAP HANA XS classic delivery units
Quick Start: Initial Setup
Prerequisites
- Global account administrator access
- At least one SAP BTP subaccount
- Cloud Foundry environment enabled
Setup Workflow
1. Configure Entitlements → 2. Subscribe to Service → 3. Set Up Roles → 4. Create Service Instance
Step 1: Configure Entitlements
Navigate to: Global Account > Entitlements > Entity Assignments > Add Service Plans
Select "Cloud Transport Management" and choose plans:
| Plan Type | Plans Available | Purpose |
|---|---|---|
| Application | standard, free, build-runtime | UI access |
| Instance | standard, export, transport_operator | API/programmatic access |
Instance plans require an active application plan. The
exportplan is for CI/CD pipelines.
Step 2: Subscribe to the Service
- Navigate to Services > Service Marketplace
- Search for "Cloud Transport Management"
- Select Create from the Actions menu
- Choose a subscription plan (
standard,free, orbuild-runtime) - Verify status shows "Subscribed"
Step 3: Set Up Role Collections
Pre-delivered Role Collections:
TMS_LandscapeOperator_RCTMS_Viewer_RC
Available Roles:
| Role | Capabilities |
|---|---|
| Administrator | Full administration for all TMS tasks |
| LandscapeOperator | Create/edit/delete nodes and routes |
| TransportOperator | Manage import queues, forward, reset, schedule |
| ImportOperator | Import all transport requests |
| ImportSelectedOperator | Import selected transport requests |
| ExportOperator | Add files, create modifiable requests |
| Viewer | Read-only access |
Assign roles: Security > Role Collections > [Collection] > Edit > Users
Step 4: Create Service Instance and Key
- Create a Cloud Foundry space in your subaccount
- Navigate to Services > Instances and Subscriptions > Create
- Select:
- Service:
Cloud Transport Management - Plan:
standard(instance type) - Runtime:
Cloud Foundry
- Service:
- Create a service key - credentials structure:
{
"uaa": {
"clientid": "sb-xxxxxx",
"clientsecret": "xxxxxx",
"url": "https://<domain>.authentication.sap.hana.ondemand.com"
},
"uri": "https://transport-service-app-backend.ts.cfapps.sap.hana.ondemand.com"
}
Landscape Configuration
Transport Nodes
Transport nodes represent source or target endpoints of deployment processes.
Node Types:
- Physical Nodes: Actual deployment endpoints (e.g., Cloud Foundry spaces)
- Virtual Nodes: Placeholders for aggregation/distribution without physical deployment
Key Configuration Fields:
| Field | Description |
|---|---|
| Name | Case-sensitive identifier (must match sourceSystemId for Content Agent) |
| Allow Upload to Node | Enable file uploads for local archives |
| Forward Mode | Pre-Import (default), Post-Import, On Success, Manual |
| Content Type | MTA, BTP ABAP, Application Content, XSC DU |
| Destination | Target deployment endpoint |
| Deployment Strategy | default or blue-green (MTA on CF only) |
Transport Routes
Routes connect transport nodes. Constraint: A node can be a target for only one route but can be a source for multiple routes.
Transport Landscape Wizard
Use for simple 2-3 node landscapes:
- Select template (number of nodes)
- Configure each node
- Customize route names
- Review and finish
Destination Configuration
All destinations require HTTPS. Configure in: SAP BTP Cockpit > Connectivity > Destinations
Destination to TMS Service (Source Environment)
Required for applications exporting content directly to TMS.
| Field | Value |
|---|---|
| Name | TransportManagementService (or app-specific name) |
| Type | HTTP |
| URL | Service key uri value |
| Authentication | OAuth2ClientCredentials |
| Client ID | Service key uaa.clientid |
| Client Secret | Service key uaa.clientsecret |
| Token Service URL | Service key uaa.url + /oauth/token |
| Additional Property | sourceSystemId = source node name |
MTA Deployment Destinations (Cloud Foundry)
Option 1: Basic Authentication (SAP ID users only)
| Field | Value |
|---|---|
| URL (org/space) | https://deploy-service.cf.<domain>/slprot/<org>/<space>/slp |
| URL (space GUID) | https://deploy-service.cf.<domain>/slprot/<guid>/slp |
| Authentication | BasicAuthentication |
| User | Platform user email with SpaceDeveloper role |
Get space GUID:
cf space <space-name> --guidURL-encode special characters in org/space names
Option 2: OAuth2Password (Custom IdP support)
| Field | Value |
|---|---|
| URL | Same as Basic Auth |
| Authentication | OAuth2Password |
| Client ID | cf |
| Client Secret | (leave empty) |
| Token Service URL | https://login.cf.<domain> |
BTP ABAP Environment Destinations
| Field | Value |
|---|---|
| URL | https://<instance>.abap.<region>.hana.ondemand.com/sap/opu/odata4/sap/a4c_mswc_api/srvd_a2x/sap/manage_software_components/0001/ |
| Authentication | BasicAuthentication |
| User | Communication user from SAP_COM_0948 |
Import Queue Operations
Import Methods
| Method | Description | Availability |
|---|---|---|
| Import All | Sequential import of all requests in queue | All content types |
| Import Selected | Import specific requests (may cause inconsistencies) | Not BTP ABAP |
| Import Upto | Import all requests up to selected one | BTP ABAP only |
Importable Statuses: Initial, Fatal, Repeatable
File Upload
- Max file size: 1 GB (500 MB on free plan)
- Storage quota: 50 GB standard, 500 MB free
- Retention: 30 days (7 days free) after final status
- Formats:
.mtar(MTA),.tgz(XSC DU),.zip(Application Content)
Scheduling
- Patterns: Daily (hourly, 4x/day) or Weekly (specific days/times)
- Auto-deactivation: After 3 consecutive fatal failures over 3+ weeks
Automatic Import
Enable per node - immediately processes all importable requests and triggers on new arrivals.
Transport Request Statuses
Import Statuses
| Status | Description |
|---|---|
| Initial | Added but not imported |
| Running | Import in progress |
| Succeeded | Import successful |
| Warning | Completed with warnings |
| Error | Import failed (retryable) |
| Fatal | Import failed (fatal error) |
| Skipped | Intentionally skipped (virtual nodes) |
| Repeatable | Reset for re-import |
| Deleted | Removed from queue |
| Transient | Tested and released (modifiable requests) |
Lifecycle Statuses
- Modifiable: Request can be edited
- Released: In at least one queue with non-archived status
- Deleted: Deleted from all queues
- Archived: Cleaned up by retention policy
Troubleshooting
Quick Reference: Common Errors
| Error | Likely Cause | Quick Fix |
|---|---|---|
Not Found | Wrong CF domain | Match domain to cf api output |
Not Found | Unencoded special chars | Use space GUID: cf space <name> --guid |
Forbidden | Missing SpaceDeveloper | Add role in BTP Cockpit or CF CLI |
Forbidden | Wrong IdP | Use OAuth2Password with origin property |
| Connection refused (ABAP) | Wrong URL pattern | Verify SAP_COM_0948 communication arrangement URL |
| Import stuck | Non-final status | Check Transport Action Logs for root cause |
MTA Deployment Errors
Error: Not Found during deployment
Causes:
- Wrong Cloud Foundry domain in URL
- Special characters in org/space names not URL-encoded
Solutions:
- Verify domain matches CF API endpoint:
cf api - Use space GUID instead of names
- URL-encode special characters (
+→%2B, space →%20)
Error: Forbidden during deployment
Causes:
- User lacks
SpaceDeveloperrole - User from wrong identity provider
Solutions:
- Verify user roles:
cf space-users <org> <space> - Use OAuth2Password auth for custom IdP users
SAP Support
Component: BC-CP-LCM-TMS (Transport Management for application content)
Required for incidents: Region, subaccount ID, reproduction steps, transport action logs, screenshots
For detailed troubleshooting steps, error catalogs by content type, and support procedures, see references/troubleshooting.md.
Security
Service Plans for API Access
| Plan | Access Level |
|---|---|
standard | Full API access |
export | Export actions only (CI/CD) |
transport_operator | Import, reset, forward, delete only |
Node-Specific Restrictions
Use attributes to restrict roles to specific nodes:
TmsNodesTransportOperatorTmsNodesImportTmsNodesExport
Malware Scanning
TMS does not perform malware scans - target applications are responsible. Exception: MTA deployment descriptors are verified.
Integrations
CI/CD Integration
Use SAP Continuous Integration and Delivery or Project Piper with the export service plan.
Alert Notifications
Configure ALERT_NOTIFICATION_SERVICE destination for:
TmsImportFinished/TmsImportStartedTmsTransportRequestAddedTmsNodeImportJobDeactivatedTmsStorageQuotaUsage(85% threshold)
API Operations
- File Upload: Upload content archive
- Node Export: Attach file to new request, forward to target nodes
- Node Upload: Upload to specific node (CI/CD scenarios)
- Import operations: Async - monitor with Get transport action
Reference Documentation
For detailed configuration procedures, see the reference files:
Bundled Resources
Reference Documentation
references/initial-setup.md- Complete setup proceduresreferences/landscape-configuration.md- Nodes, routes, visualization, and wizardreferences/destinations.md- All 8 destination types with configurationsreferences/import-operations.md- Import queue, MTA descriptors, modifiable requestsreferences/administration.md- Service plans, backup, storage, data exportreferences/troubleshooting.md- Error resolution guidereferences/integrations.md- Integration scenarios and API operationsreferences/security-roles.md- Role and permission details
Documentation Links
- GitHub Docs: https://github.com/SAP-docs/sap-btp-cloud-transport-management
- SAP Help Portal: https://help.sap.com/docs/cloud-transport-management
- API Reference: https://api.sap.com/package/TmsForCloudPub/rest
Last Updated: 2025-11-22 Source: SAP-docs/sap-btp-cloud-transport-management
FAQ
What does the sap-btp-cloud-transport-management skill do?
Comprehensive skill for SAP Cloud Transport Management service on SAP BTP. Use when setting up transport landscapes, configuring transport nodes and routes, managing import queues, deploying MTAs across Cloud Foundry environments, integrating with CI/CD pipelines, configuring ABAP environment transports, troubleshooting deployment errors, or implementing change management workflows. Covers entitlements, subscriptions, role collections, service instances, destinations, and API integrations.
How do I install sap-btp-cloud-transport-management?
Run npx skills add https://github.com/secondsky/sap-skills --skill sap-btp-cloud-transport-management in your project. The skills CLI detects the agents you use and copies the skill into the right folder. For Claude Code you can also place the skill folder at ~/.claude/skills/sap-btp-cloud-transport-management/ (personal) or .claude/skills/sap-btp-cloud-transport-management/ (project).
Which AI agents can use sap-btp-cloud-transport-management?
Any agent that supports the open Agent Skills format (a folder with a SKILL.md file), including Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, Windsurf, Cline, OpenCode and more.
Is sap-btp-cloud-transport-management safe to install?
No partner security audit is available yet. Skills can run commands and scripts, so read the SKILL.md and any bundled files before installing.
Who maintains sap-btp-cloud-transport-management?
It is published by secondsky in secondsky/sap-skills. It has 668 recorded installs.
More from secondsky/sap-skills
sap-abap
secondsky/sap-skills
Comprehensive ABAP development skill for SAP systems. Use when writing ABAP code, working with internal tables, structures, ABAP SQL, object-oriented programming, RAP (RESTful Application Programming Model), CDS views, EML statements, ABAP Cloud development, string processing, dynamic programming, RTTI/RTTC, field symbols, data references, exception handling, or ABAP unit testing. Covers both classic ABAP and modern ABAP for Cloud Development patterns.
sap-fiori-tools
secondsky/sap-skills
Develops SAP Fiori applications using SAP Fiori tools extensions for VS Code and SAP Business Application Studio. Use when: generating Fiori Elements or Freestyle SAPUI5 applications, configuring Page Editor for List Report or Object Page, working with annotations and Service Modeler, setting up deployment to ABAP or Cloud Foundry, creating adaptation projects, using Guided Development, previewing with mock data or live data, configuring SAP Fiori launchpad, or using AI-powered generation with Project Accelerator/Joule. Technologies: SAP Fiori Elements, SAPUI5, OData V2/V4, CAP, SAP BTP, ABAP, Cloud Foundry, fiori-mcp-server (MCP tools for AI-assisted generation).
sap-cap-capire
secondsky/sap-skills
SAP Cloud Application Programming Model (CAP) development skill using Capire documentation. Use when: building CAP applications, defining CDS models, implementing services, working with SAP HANA/SQLite/PostgreSQL databases, deploying to SAP BTP Cloud Foundry or Kyma, implementing Fiori UIs, handling authorization, multitenancy, or messaging. Covers CDL/CQL/CSN syntax, Node.js and Java runtimes, event handlers, OData services, and CAP plugins.
sap-btp-developer-guide
secondsky/sap-skills
Develops business applications on SAP Business Technology Platform (BTP) using CAP (Node.js/Java) or ABAP Cloud. Use when: building cloud applications on SAP BTP, deploying to Cloud Foundry or Kyma runtimes, integrating with SAP HANA Cloud, implementing SAP Fiori UIs, connecting to remote SAP systems, building multitenant SaaS applications, extending SAP S/4HANA or SuccessFactors, setting up CI/CD pipelines, implementing observability, or following SAP development best practices. Keywords: SAP BTP, Business Technology Platform, CAP, Cloud Application Programming Model, ABAP Cloud, Cloud Foundry, Kyma, SAP HANA Cloud, SAP Fiori, SAPUI5, CI/CD, observability, multitenant, SaaS, SAP BTP ABAP environment, SAP Business Application Studio, SAP Cloud SDK, SAP Integration Suite, SAP Event Mesh, SAP Connectivity Service, SAP Destination Service, XSUAA, OAuth, OpenID Connect, OData, CDS, Core Data Services, ABAP CDS, ABAP RESTful Application Programming Model, RAP, ABAP development, SAP BTP deve
sap-btp-best-practices
secondsky/sap-skills
SAP BTP best practices for enterprise architecture, account management, security, and operations, with verification evidence tracked in the repository ledger. Use when planning BTP implementations, setting up account hierarchies, configuring environments, implementing authentication, designing CI/CD pipelines, establishing governance, building Platform Engineering teams, implementing failover strategies, or managing application lifecycle on SAP BTP. Keywords: SAP BTP, account hierarchy, global account, directory, subaccount, Cloud Foundry, Kyma, ABAP, SAP Identity Authentication, CI/CD, governance, Platform Engineering, failover, multi-region, SAP BTP best practices
sap-btp-connectivity
secondsky/sap-skills
SAP BTP Connectivity skill covering Destination Service, Connectivity Service, Cloud Connector, Connectivity Proxy, and Transparent Proxy for Kubernetes. Use when configuring destinations (HTTP, RFC, LDAP, MAIL, TCP), setting up cloud-to-on-premise connectivity, implementing OAuth and principal propagation, deploying connectivity proxies in Kubernetes/Kyma, troubleshooting connectivity errors (405, 407, 503), or configuring multitenancy.
Popular devops & cloud skills
microsoft-foundry
microsoft/azure-skills
Build, deploy, evaluate, optimize, fine-tune, and manage Microsoft Foundry agents, models, and resources end to end. USE FOR: foundry, azd ai agent, azd provision/deploy, hosted agent scaffold/develop/run/deploy/troubleshoot, prompt agent create, managed harness agent create, GitHub Copilot harness agent, create agent, update agent, add tool to agent, invoke agent, agent insights, evaluate agent, batch eval, continuous eval, continuous monitoring, agent CI/CD, optimize prompt, improve prompt, optimize agent instructions, Agent Optimizer scaffold, dataset curation from traces, deploy model, model fine-tuning (SFT/DPO/RFT), Foundry project, RBAC, role assignment, permissions, quota, capacity, region, deployment failure, AI Services, create Foundry resource, knowledge index, customize deployment, onboard, availability, training-data, grader, distillation, large file upload. DO NOT USE FOR: Azure Functions, App Service, general Azure deploy (use azure-deploy), general Azure prep (use azure
azure-diagnostics
microsoft/azure-skills
Debug Azure production issues on Azure using AppLens, Azure Monitor, resource health, and safe triage. WHEN: debug production issues, troubleshoot app service, app service high CPU, app service deployment failure, troubleshoot container apps, container app 503 or target port mismatch, troubleshoot functions, function telemetry missing or stopped after a config/connection-string change, troubleshoot AKS, VM RDP, Linux SSH, VM black screen, can't connect to VM, reset VM password, NSG or firewall blocking, kubectl cannot connect, kube-system/CoreDNS failures, pod pending, crashloop, node not ready, upgrade failures, analyze logs, KQL, insights, image pull failures, cold start issues, health probe failures, resource health, root cause of errors, troubleshoot event hubs, troubleshoot service bus, messaging SDK error, AMQP connection failure, message lock lost, lock renewal during long-running processing, service bus dead letter.
azure-prepare
microsoft/azure-skills
Prepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wants to use azd as the deployment tool, or the project already has an azure.yaml file. DO NOT USE FOR: non-azd deployments, Python App Service code-only deploys (use python-appservice-deploy), or cross-cloud migration (use azure-cloud-migrate). WHEN: prepare app for azd, create azure.yaml, set up azd infrastructure, modernize app for Azure with azd, deploy with azd, function app, timer trigger, service bus trigger, event-driven function, managed identity, generate Bicep, generate Terraform, create and deploy to Azure.
azure-ai
microsoft/azure-skills
Use for Azure AI: Search, Speech, OpenAI, Document Intelligence. Helps with search, vector/hybrid search, speech-to-text, text-to-speech, transcription, OCR. WHEN: AI Search, query search, vector search, hybrid search, semantic search, speech-to-text, text-to-speech, transcribe, OCR, convert text to speech.
azure-deploy
microsoft/azure-skills
Execute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deployment-plan.md and infrastructure files. DO NOT use this skill when the user asks to CREATE a new application — use azure-prepare instead. This skill runs azd up, azd deploy, terraform apply, and az deployment commands with built-in error recovery. Requires .azure/deployment-plan.md from azure-prepare and validated status from azure-validate. WHEN: "run azd up", "run azd deploy", "execute deployment", "push to production", "push to cloud", "go live", "ship it", "bicep deploy", "terraform apply", "publish to Azure", "launch on Azure". DO NOT USE WHEN: "create and deploy", "build and deploy", "create a new app", "set up infrastructure", "create and deploy to Azure using Terraform" — use azure-prepare for these.
azure-validate
microsoft/azure-skills
Pre-deployment validation for Azure readiness. Run deep checks on configuration, infrastructure (Bicep or Terraform), RBAC role assignments, managed identity permissions, and prerequisites before deploying. WHEN: validate my app, check deployment readiness, run preflight checks, verify configuration, check if ready to deploy, validate azure.yaml, validate Bicep, test before deploying, troubleshoot deployment errors, validate Azure Functions, validate function app, validate serverless deployment, verify RBAC roles, check role assignments, review managed identity permissions, what-if analysis, validate Container Apps deployment.