SNC Authentication for DeltaQ and OHS

This article shows how to enable Secure Network Connection (SNC) authentication for SSIS packages using Xtract DeltaQ or Xtract OHS components. When using SNC, the application server, RFC destination (SM59), and SAP user must enable SNC via partner name. Communication between the application server and Xtract IS then occurs via an RFC destination for Xtract DeltaQ or Xtract OHS components.

User Configuration in SAP

To enable SNC for the SAP user in Xtract IS:

1. Open SAP and run the SAP transaction SU01.
2. Enter the name of the SAP user that is used in the XTRACT Connection Manager and click [Change].
3. Open the SNC tab and provide the SNC name of the SAP user . In the depicted example, MALAPATI is the user and THEOBALD.LOCAL is the domain.
   
4. Click [Save].

The SAP user can now be used for the SAP connection in Xtract IS.

SAP Connection Settings in Xtract IS

To enable SNC in Xtract IS:

1. Open the Connection Manager of the SAP connection.
2. Enter the credentials of an SAP user with SNC enabled .
   
3. Click Additions. The window "XTRACT Connection Manager Additions" opens.
   
   1. Check the SNC checkbox .
   2. Enter the full path to the Kerberos library in SNC library 32 Bit .
   3. Enter the full path to the Kerberos library in SNC library 64 Bit .
   4. Enter the SAP service account SPN in Partner name . Use the notation p:[SPN]@[Domain-FQDN-Uppercase].
   5. Set Quality of Protection to 8 - Default .
   6. Click [OK] to save the settings.
4. Click [Test connection] . A confirmation window opens if the connection succeeds.
5. Click [OK] to confirm.

Xtract IS now uses SNC to communicate with the SAP system.

RFC Destination Configuration in SAP

Enable SNC for the RFC destination using the Service Principal Name (SPN) of the SAP user account:

1. Open SAP and run the SAP transaction SM59.
2. Double-click on an existing TCP/IP RFC destination, see Create an RFC Destination.
3. Navigate to Edit > SNC Options. The window "Change View "SNC Extension": Details" opens.
   
   1. Enter the SAP user account SPN in Partners , e.g., p:RfcServer/Malapati@THEOBALD.LOCAL.
   2. Set Quality of Protection to 8 - Default .
   3. Activate the SNC Active checkbox .
4. Open the Unicode tab and activate Unicode.
   
5. Click [Save] to save your changes.

Xtract IS now uses SNC to communicate with the SAP RFC destination.

Related Topics

• Documentation: Create an RFC Destination
• Documentation: Connect to SAP
• Documentation: SAP Connection with SNC
• SAP Help: Maintaining RFC destinations and their SNC options