Skip to content

Latest commit

 

History

History
executable file
·
71 lines (35 loc) · 3.42 KB

setup-s4hc-system.md

File metadata and controls

executable file
·
71 lines (35 loc) · 3.42 KB
Raw

Configure Communication Settings in SAP S/4HANA Cloud

To allow inbound communication with the SAP S/4HANA tenant, you need to explicitly allow the API's to be accessible from external systems like SAP BTP. Read about Communication Management for more detailed information.

In this document, we describe using the SAMLAssertion Authentication method to access the SAP S/4HANA Cloud APIs. You can also start testing the scenario with Basic Authentication using a technical user, look in the section Basic Authentication. Select the communication scenario SAP_COM_0008 when creating a communication arrangement to expose the Business Partner API.

Download SAP BTP subaccount Trust Certificate

Download the subaccount specific key certificate from your Cloud Foundry subaccount on SAP BTP which is used to connect to other remote systems. You will need this in the next step when configuring the SAP S/4HANA Cloud system.

  1. In SAP BTP Cockpit, navigate to your subaccount.

  2. From the left-side subaccount menu navigate from Connectivity → Destinations.

    download Trust

  3. Choose Download Trust.

Log on to the SAP S/4HANA Cloud System

  1. Enter the URL of the SAP S/4HANA Cloud System in your browser, which is of format:

    https://myXXXXXX.s4hana.ondemand.com/ui#Shell-home

    Replace the X with your actual tenant hostname.

  2. Enter your administrator E-MAIL.

  3. Enter your administrator Password.

Create Communication System

  1. Choose the Communication Systems application tile.

    new Communication System

  2. Choose New.

  3. Enter the System ID and a unique value for System Name.

    enter System ID

  4. Choose Create.

  5. Navigate to General > Technical Data section and select the checkbox Inbound Only

  6. Set the switch SAML Bearer Assertion Provider from OFF to ON.

    copy SAML Issuer

  7. Choose Upload Signing Certificate and select the BTP Trust certificate which you have downloaded in the previous step and choose Upload

    upload Communication System

  8. Copy the complete value of the CN property from the Signing Certificate Issuer including the unique GUID and paste it in the SAML Bearer Issuer field.

    copy SAML Issuer

  9. Choose Save.

Summary

You have configured the SAP S/4HANA Cloud system to allow the OData services associated with the communication scenario SAP_COM_0008 to be consumed. You now need to create the corresponding destination in your SAP BTP subaccount where you use the communication user and password that you configured here.

Related Links

If you want to OAuth2SAMLBearerAssertion authentication, see section User Propagation from the Cloud Foundry Environment to SAP S/4HANA Cloud for more details.