Client certificate based authentication from Cloud Integration (CPI) to S/4HANA public cloud

Introduction: This document describes about client certification authentication while sending data from cloud integration (CPI) to S/4HANA cloud system or any other system which is compatible to receive data with client certification authentication.

In other words, we can say that how to use client certification authentication at receiver adapter in  CPI.

Go to CPI tenant and click on key store tile under Monitoring Overview

There you will get sap_cloudintegrationcertificate which is SAP provided Key Pair certificate.(Figure1)

****We can also use any other key pair which is generated and singed out side SAP.

Figure1

This is an X.509 certificate chain that is provided as part of the CPI tenant.
You can use them in the following channels and integration flow steps:

• HTTPS outbound connections with client-certificate authentication

• Signature creator steps (XML Signature, CMS/PKCS#7, WS Security in SOAP adapter)

• Decryptor steps (CMS/PKCX#7, WS Security in SOAP adapter)

*In CPI trial account this certificate is not provided for customers. Client 
certificate-based authentication is not supported in CF trial account

Now download the certificate and save it on local drive(Figure 2)

     Figure 2

Login to S/4HANA cloud system the click on Maintain Communication Users tile under Communication Management.

Click on new to create a new user(Figure 3)

Figure 3

Enter any username as per your naming convention, give some description and upload downloaded certificate.(Figure 4)

Figure 4

Add this user to communication system.(Figure 5)

Figure 5

Use same communication system in communication arrangement to access APIs with client certificate authentication.

Now in CPI, use authentication type as client certificate to connect S/4 Hana to access API.

Conclusion:

After reading this blog, you have learnt that how to use sap_cloudintegrationcertificate or client certification authentication from Cloud Integration (CPI) to S/4 Hana public cloud

Instead of S/4HANA if you have any other system then in that case import the downloaded certificate from CPI to that system.

Thanks for reading this blog.

– Please share feedback or thoughts in a comment

– Ask questions about Cloud Integration and follow (https://answers.sap.com/tags/67837800100800007389)

– Read other Cloud Integration blog posts and follow (https://blogs.sap.com/tags/67837800100800007389/)

.