Skip to content

SNC Authentication

This page shows how to configure an XTRACT Connection Manager to use encrypted communication via Secure Network Communication (SNC) between Xtract IS and SAP.

Prerequisites

  • SNC must be configured in your SAP system. For more information about SNC configuration in SAP, see SAP Help: Configuring the Application Server.
  • Check the SAP profile parameter snc/gssapi_lib in SAP (transaction RZ10) to determine, which library is used for encryption in your SAP system. Your SAP Basis has to import and configure the same library on the application server and on the machine that runs Xtract IS, e.g., sapcrypto.dll.

For information on how to set up SNC via X.509 certificate, refer to the Knowledge Base Article: Enable Secure Network Communication (SNC) via X.509 certificate.

Configure an XTRACT Connection Manager to use SNC

Follow the steps below to set up an SAP connection that uses SNC:

  1. Create or open an XTRACT Connection Manager. For more information, see Connect to SAP.

  2. Enter the system details of your SAP system and enter the SAP username and password of an SAP system or dialogue user.

    Tip

    Input values for the SAP connection can be found in the Properties of the SAP Logon Pad or they can be requested from the SAP Basis team.

  3. In the "XTRACT Connection Manager" window, click Additions. The window "XTRACT Connection Manager Additions" opens.

  4. Activate the option SNC enabled.
    SNC
  5. Enter the path to the SNC library for 32 Bit & 64 Bit in the SNC library fields, e.g., C:\Program Files (x86)\SAP\FrontEnd\SecureLogin\sapcrypto.dll.
  6. Enter the SAP Partner Name configured for the SAP application server in the field Partner Name, e.g., p:SAPserviceERP/Alice@THEOBALD.LOCAL.
  7. Select the SNC level of protection in the field Quality of protection. The default value is 9 - Maximum.
    For more information, see SAP Help: Secure Network Communications (SNC) - Levels of Protection.
  8. Click [OK] to confirm your input.
  9. Click [Test Connection] to validate the connection parameters.
  10. Click [OK] to save the XTRACT Connection Manager.

Download Kerberos DLLs

It is possible to use Kerberos libraries for encryption between the client and the SAP server. For more information, see SAP Note 2115486.
Different DLLs for 32-bit (gsskrb5.dll) and 64-bit (gx64krb5.dll) platforms are provided with SAP Note 2115486.

Last update: July 25, 2024