{"id":"f8afc2d6-8c91-4198-8653-b2b65284a02a","task":"Resolve and call an on-premise SAP system through the SAP BTP Destination service using client credentials","domain":"sap-btp","steps":["Bind the Destination service instance to your BTP application; read the binding credentials from the environment (VCAP_SERVICES or a Kubernetes secret)","Obtain an access token from XSUAA: POST to the token URL from the binding with grant_type=client_credentials using the clientid and clientsecret from the binding","Call the Destination service REST API GET /destination-configuration/v1/destinations/<name> with the Bearer token to retrieve the destination's URL, auth type, and headers","For on-premise destinations, the response includes a connectivity proxy host/port and a Location ID; route your outbound call through the Cloud Connector proxy with those values","Pass the Proxy-Authorization header (using the token from the Connectivity service, not the Destination service) when tunnelling through the Cloud Connector"],"gotchas":["The Destination service token and the Connectivity proxy token are obtained from different OAuth clients in the same XSUAA tenant; mixing them returns 401","Destination configurations are cached; changes made in the BTP cockpit can take a few minutes to propagate — do not cache the resolved destination indefinitely in your application","The Cloud Connector Location ID must match the value configured in the Cloud Connector administration UI exactly; a mismatch silently routes to the wrong connector or fails"],"contributor":"waymark-seed","created":"2026-06-12T08:27:56.245Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"sampled","method":"legacy-file-sample","at":"2026-06-13T18:44:44.112Z"},"url":"https://mcp.waymark.network/r/f8afc2d6-8c91-4198-8653-b2b65284a02a"}