Abstract: Disclosed are hybrid authentication systems and methods that enable users to seamlessly sign-on between cloud-based services and on-premises systems. A cloud-based authentication service receives login credentials from a user and delegates authentication to an on-premises authentication service proxy. The login credentials can be passed by the cloud-based authentication service to the on-premises authentication service proxy, for instance, as an access token in an authentication header. The access token can be a JavaScript Object Notation (JSON) Web Token (JWT) token that is digitally signed using JSON Web Signature. Some embodiments utilize a tunnel connection through which the cloud-based authentication service communicates with the on-premises authentication service proxy. Some embodiments leverage an on-premises identity management system for user management and authentication.

Abstract: Action flow fragment management includes executing a parent action flow including multiple steps. At least two steps are distinct pages of a web application. During execution of the parent action flow, an action flow fragment expression is obtained and executed using data gathered from a data source to obtain an action flow fragment identifier. An action flow fragment corresponding to the action flow fragment identifier is selected and executed. When execution of the action flow fragment completes, execution of the parent action flow continues.

Abstract: In general, the technology relates to navigation control in a web application that includes receiving an event of a navigation trigger in a first page of a web application, and obtaining, in response to the event, an expression for the navigation trigger. The technology further includes gathering data from a first data source specified by the expression. The technology further includes evaluating the expression using the data to select a second page from a set of possible target pages, where each of the possible target pages is separately pre-stored in a data repository. The technology further includes presenting the second page.

Abstract: A method for software application optimization using natural language-based queries. The method includes obtaining a user-provided query. The user-provided query includes a constraint to be used for an identification of an application element that matches the constraint, from a set of application elements of a software application. The user-provided query is a string that includes a human language sentence. The method further includes deriving a formalized query from the user-provided query by translating the user-provided query into a syntactic construct of segmented sentence elements and obtaining the application element that matches the constraint. Obtaining the application element that matches the constraint includes deriving a pattern representation of the user-provided query from the formalized query and identifying the application element that matches the pattern representation of the user-provided query from the plurality of application elements.

Abstract: Systems, methods and computer program products for providing a multi-tenant application execution environment that provides an object metadata service for managing application configuration in the multi-tenant environment. In one embodiment, a system has an application manager, a bundle manager, and a deployment manager. The application manager captures application metadata for a corresponding version of an application and defines a corresponding bundle which contains metadata that configures the version of the application. The bundle manager validates each bundle and stores the validated bundle in a bundle library in a data storage device. The deployment manager retrieves a master schema and one or more of the bundles from the bundle library and installs the retrieved master schema and the retrieved bundles, generating a tenant schema which is accessible by a corresponding tenant of the multi-tenant environment that has subscribed to the version of the application.

Abstract: In general, the technology relates to navigation control in a web application that includes receiving an event of a navigation trigger in a first page of a web application, and obtaining, in response to the event, an expression for the navigation trigger. The technology further includes gathering data from a first data source specified by the expression. The technology further includes evaluating the expression using the data to select a second page from a set of possible target pages, where each of the possible target pages is separately pre-stored in a data repository. The technology further includes presenting the second page.

Abstract: A method for software application optimization using natural language-based queries. The method includes obtaining a user-provided query. The user-provided query includes a constraint to be used for an identification of an application element that matches the constraint, from a set of application elements of a software application. The user-provided query is a string that includes a human language sentence. The method further includes deriving a formalized query from the user-provided query by translating the user-provided query into a syntactic construct of segmented sentence elements and obtaining the application element that matches the constraint. Obtaining the application element that matches the constraint includes deriving a pattern representation of the user-provided query from the formalized query and identifying the application element that matches the pattern representation of the user-provided query from the plurality of application elements.

Abstract: During web application development, receiving a request for a webpage for a business object type, the request comprising a business object type identifier of the business object type, receiving an expression for selecting an instance of the first business object type from a plurality of instances of the first business object type, the expression specifying a data source and an operation. The method can further comprise generating the webpage, the webpage comprising a user interface (UI) widget for the business object type and an instruction for prepopulating the first UI widget with data from the instance of the first business object type, the instruction including the expression, the expression executable to perform an action on data from the data source to generate a result identifying the instance of the first business object type.

Abstract: A system having an off-premises proxy server residing in a cloud computing environment and backend servers residing in an enterprise computing environment are provided. Requests received by the off-premises proxy server for access to a first, non-publicly accessible backend server are routed to a tunnel server which stores the request and waits to be polled by a tunnel agent connected to the first backend server. When the tunnel server is polled, the request is forwarded through an HTTP tunnel to the tunnel agent, which forwards it to the backend server for processing. Responsive information is returned to the tunnel agent, which forwards it through the HTTP tunnel to the tunnel server and returned through the off-premises proxy server to the remote application. Requests for access to a first, publicly accessible backend server are routed by the off-premises proxy server directly to the backend server for processing and return of responsive information.

Abstract: In general, the technology relates to a method for using reusable themes. The method includes receiving, from a device, a request for a style sheet language file, where the style sheet language file defines a reusable theme for a webpage and specifies a relative location for an image that is used by the reusable theme. The method further includes receiving a request for the image including the relative location of the image, resolving the relative location for the image to obtain an absolute location for the image using a location of the style sheet language file in a web application structure, obtaining the image from the absolute location of the image, and providing the image to the device.

Abstract: A system having an off-premises proxy server residing in a cloud computing environment and backend servers residing in an enterprise computing environment are provided. Requests received by the off-premises proxy server for access to a first, non-publicly accessible backend server are routed to a tunnel server which stores the request and waits to be polled by a tunnel agent connected to the first backend server. When the tunnel server is polled, the request is forwarded through an HTTP tunnel to the tunnel agent, which forwards it to the backend server for processing. Responsive information is returned to the tunnel agent, which forwards it through the HTTP tunnel to the tunnel server and returned through the off-premises proxy server to the remote application. Requests for access to a first, publicly accessible backend server are routed by the off-premises proxy server directly to the backend server for processing and return of responsive information.

Abstract: Disclosed are hybrid authentication systems and methods that enable users to seamlessly sign-on between cloud-based services and on-premises systems. A cloud-based authentication service receives login credentials from a user and delegates authentication to an on-premises authentication service proxy. The login credentials can be passed by the cloud-based authentication service to the on-premises authentication service proxy, for instance, as an access token in an authentication header. The access token can be a JavaScript Object Notation (JSON) Web Token (JWT) token that is digitally signed using JSON Web Signature. Some embodiments utilize a tunnel connection through which the cloud-based authentication service communicates with the on-premises authentication service proxy. Some embodiments leverage an on-premises identity management system for user management and authentication.

Abstract: During web application development, receiving a request for a webpage for a first business object type, the first request comprising a first business object type identifier of the first business object type, receiving a first expression for selecting an instance of the first business object type from a plurality of instances of the first business object type from an object data source, the expression specifying a first data source and an operation and generating the webpage, the webpage comprising a first user interface (UI) widget for the first business object type and a first instruction for prepopulating the first UI widget with first data from the instance of the first business object type, the first instruction including the first expression, the first expression executable to perform the operation on data from the first data source to generate a result identifying the instance of the first business object type.

Abstract: Action flow fragment management includes executing a parent action flow including multiple steps. At least two steps are distinct pages of a web application. During execution of the parent action flow, an action flow fragment expression is obtained and executed using data gathered from a data source to obtain an action flow fragment identifier. An action flow fragment corresponding to the action flow fragment identifier is selected and executed. When execution of the action flow fragment completes, execution of the parent action flow continues.

Abstract: Disclosed are hybrid authentication systems and methods that enable users to seamlessly sign-on between cloud-based services and on-premises systems. A cloud-based authentication service receives login credentials from a user and delegates authentication to an on-premises authentication service proxy. The login credentials can be passed by the cloud-based authentication service to the on-premises authentication service proxy, for instance, as an access token in an authentication header. The access token can be a JavaScript Object Notation (JSON) Web Token (JWT) token that is digitally signed using JSON Web Signature. Some embodiments utilize a tunnel connection through which the cloud-based authentication service communicates with the on-premises authentication service proxy. Some embodiments leverage an on-premises identity management system for user management and authentication.

Abstract: A method for creating processes in a software application. The method includes obtaining an activity fragment. The activity fragment includes an activity fragment name and an activity fragment configuration. The method further includes obtaining a process specification specifying an activity, and obtaining activity configuration instructions. The activity configuration instructions specify inclusion of the activity fragment in the activity. The method also includes building, based on the process specification, a process. Building the process includes associating the activity fragment with the activity.

Abstract: In general, the technology relates to a method for using reusable themes. The method includes receiving, from a device, a request for a style sheet language file, where the style sheet language file defines a reusable theme for a webpage and specifies a relative location for an image that is used by the reusable theme. The method further includes receiving a request for the image including the relative location of the image, resolving the relative location for the image to obtain an absolute location for the image using a location of the style sheet language file in a web application structure, obtaining the image from the absolute location of the image, and providing the image to the device.

Abstract: Case fragment management includes obtaining a case model definition for a case, and generating a case model from the case model definition. Generating the case model includes obtaining a case fragment expression, executing the case fragment expression using data gathered from a data source to obtain a case fragment identifier, selecting, from multiple case fragments, a case fragment corresponding to the case fragment identifier, and populating the case model with the case fragment. Case fragment management also includes storing the case model.

Abstract: Action flow fragment management includes executing a parent action flow including multiple steps. At least two steps are distinct pages of a web application. During execution of the parent action flow, an action flow fragment expression is obtained and executed using data gathered from a data source to obtain an action flow fragment identifier. An action flow fragment corresponding to the action flow fragment identifier is selected and executed. When execution of the action flow fragment completes, execution of the parent action flow continues.

Abstract: Systems, methods and computer program products for providing a multi-tenant application execution environment that provides an object metadata service for managing application configuration in the multi-tenant environment. In one embodiment, a system has an application manager, a bundle manager, and a deployment manager. The application manager captures application metadata for a corresponding version of an application and defines a corresponding bundle which contains metadata that configures the version of the application. The bundle manager validates each bundle and stores the validated bundle in a bundle library in a data storage device. The deployment manager retrieves a master schema and one or more of the bundles from the bundle library and installs the retrieved master schema and the retrieved bundles, generating a tenant schema which is accessible by a corresponding tenant of the multi-tenant environment that has subscribed to the version of the application.