diff --git a/mta.yaml b/mta.yaml
index 8533fe0..7f3ea59 100644
--- a/mta.yaml
+++ b/mta.yaml
@@ -19,6 +19,7 @@ modules:
       JBP_CONFIG_COMPONENTS: "jres: ['com.sap.xs.java.buildpack.jre.SAPMachineJRE']"
       JBP_CONFIG_SAP_MACHINE_JRE: '{ version: 21.+ }'
       AMS_DCL_ROOT: ams/dcl
+      XFLIGHTS_URL: https://cap-sandbox-capire-xflights-srv.cert.cfapps.eu12.hana.ondemand.com # TODO derive from GitHub environment
     build-parameters:
       builder: custom
       commands:
diff --git a/srv/src/main/resources/application.yaml b/srv/src/main/resources/application.yaml
index 135dd3f..6e8cdb8 100644
--- a/srv/src/main/resources/application.yaml
+++ b/srv/src/main/resources/application.yaml
@@ -14,6 +14,10 @@ management:
     db.enabled: true
 cds:
   drafts.enforce-readonly: true
+  security.mock.users:
+    admin:
+      roles:
+      - admin
   data-source.csv.paths:
   - "db/data/**"
   - "../db/data/**"
@@ -24,13 +28,21 @@ cds:
   - "../../node_modules/@capire/**"
 ---
 spring:
-  config.activate.on-profile: "!cloud"
-
+  config.activate.on-profile: cloud
 cds:
-  security.mock.users:
-    admin:
-      roles:
-        - admin
+  security.mock.enabled: false # required due to AMS lib
+  remote.services:
+    xflights:
+      type: hcql
+      model: sap.capire.flights.data
+      http:
+        suffix: /hcql
+      binding:
+        name: xtravels-ias
+        onBehalfOf: systemUser
+        options:
+          url: ${XFLIGHTS_URL} # from mta.yaml
+          ias-dependency-name: data-consumer
 ---
 spring:
   config.activate.on-profile: hybrid
@@ -39,9 +51,13 @@ cds:
     xflights:
       type: hcql
       model: sap.capire.flights.data
+      http:
+        suffix: /hcql
       destination:
         properties:
-          url: http://localhost:8081/hcql
+          url: http://localhost:8081
+          User: internal
+          Password:
 ---
 spring:
   config.activate.on-profile: default