Skip to Content
Technical Articles
Author's profile photo Kris Chau

Automate Manage Security In CPI

Recently we came across a situation where because of the expiration of security certificates some of the business-critical integration processes started failing. This arose an idea to bring a false proof solution in place – Let’s automate – Manage Security.

Good thing, SAP does provide some life-saving APIs and we can consume those to build an automated integration alert process.

For more details on the available list of OData APIs visit API Business Hub

Explore Security Content APIs –




In our case we will consume “KeystoreEntries” GET – Operation. As per our need we can explore other operations and APIs.

Time to make our hands dirty…simple and crisp 😊..



ODATA Channel Configuration:

  • Address: https://<TenentURL>
  • Operation Details: GET
  • Resource Path:  KeystoreEntries
  • Query Options: $select=Hexalias,Alias,KeyType,ValidNotBefore,ValidNotAfter,Validity,Type,Owner,LastModifiedBy,CreatedBy,Status,SubjectDN


Once we have the data, we can build our transformation logic (Step 5 above – Message mapping or Script) to filter the records which are getting due in next 30 Days.


Output Payload

Final action – Send an alert message to the concerned teams to take necessary action.

Now, it is your turn to automate the manage security content through a custom integration by consuming APIs from API Business Hub and add value to your monitoring capability!

Any question or feedback will be appreciated!

Happy learning!

Assigned Tags

      You must be Logged on to comment or reply to a post.
      Author's profile photo Morten Wittrock
      Morten Wittrock

      Nice solution. One of the really cool things about cloud software is the availability of APIs, that you can use to build new tools. Exciting times!

      Author's profile photo Raphael Lechner
      Raphael Lechner

      Hi Kris,

      nice solution. However i thought SAP is sending an email anyhow to the responsible CPI Person when certificates gets outdated. Without the need to do anything.

      Best regards,


      Author's profile photo Kris Chau
      Kris Chau
      Blog Post Author

      Hello Raphael,

      Thanks for taking out your time. Appreciate it.

      This solution is just to seed an idea to take best use of some of the out-of-box APIs provided through SAP Business Hub.