Technical Articles
Automate Manage Security In CPI
Recently we came across a situation where because of the expiration of security certificates some of the business-critical integration processes started failing. This arose an idea to bring a false proof solution in place – “Let’s automate – Manage Security”.
Good thing, SAP does provide some life-saving APIs and we can consume those to build an automated integration alert process.
For more details on the available list of OData APIs visit API Business Hub https://api.sap.com/
Explore Security Content APIs – https://api.sap.com/api/SecurityContent/resource
API_HUB_SecurityContent
In our case we will consume “KeystoreEntries” GET – Operation. As per our need we can explore other operations and APIs.
Time to make our hands dirty…simple and crisp 😊..
I_Flow_Design
ODATA Channel Configuration:
- Address: https://<TenentURL>.hana.ondemand.com/api/v1
- Operation Details: GET
- Resource Path: KeystoreEntries
- Query Options: $select=Hexalias,Alias,KeyType,ValidNotBefore,ValidNotAfter,Validity,Type,Owner,LastModifiedBy,CreatedBy,Status,SubjectDN
Once we have the data, we can build our transformation logic (Step 5 above – Message mapping or Script) to filter the records which are getting due in next 30 Days.
Output Payload
Final action – Send an alert message to the concerned teams to take necessary action.
Now, it is your turn to automate the manage security content through a custom integration by consuming APIs from API Business Hub and add value to your monitoring capability!
Any question or feedback will be appreciated!
Happy learning!
Nice solution. One of the really cool things about cloud software is the availability of APIs, that you can use to build new tools. Exciting times!
Hi Kris,
nice solution. However i thought SAP is sending an email anyhow to the responsible CPI Person when certificates gets outdated. Without the need to do anything.
Best regards,
Raphael
Hello Raphael,
Thanks for taking out your time. Appreciate it.
This solution is just to seed an idea to take best use of some of the out-of-box APIs provided through SAP Business Hub.
Cheers!
Kris