SAP RFC Connection
This page contains an overview of all settings for SAP RFC connections.
About SAP RFC
SAP RFC connections allow you to access SAP data using the RFC (Remote Function Call) protocol. The RFC connectivity supports connections to single application servers and message servers (Load Balancing). For more information, see SAP Help: RFC.
SAP RFC Connection Settings
To open the connection settings of an existing SAP connection:
- Open the Connections menu.
- Select an SAP RFC connection.
- Click [ Edit].
The connection settings of the SAP RFC connection open and can be modified.
System
The section System defines which SAP system Xtract Universal.iQ connects to. Select one of the following connections from the System dropdown:
- Single Application Server: connects to a standalone, centralized SAP instance.
- Load Balancing: connects to an SAP message server.
- WebSocket: connects to an SAP single application server or SAP Private Cloud or SAP Public Cloud instance via RFC over WebSocket.
Single Application Server
An SAP single application server setup refers to a standalone, centralized SAP instance.
Host
Enter the hostname or IP address of the application server (Property Host).
Instance No
Enter the two-digit instance number of the SAP system between 00 and 99 (Property SystemNumber).
Client
Enter the three-digit number of the SAP client between 000 and 999, e.g., 800.
Language
Enter the logon language for the SAP system, e.g., EN for English or DE for German.
Load Balancing (message server)
Load Balancing refers to a connection to a message server, see SAP Help: Load Balancing.
Logon group
Enter the logon group for the SAP message server, usually PUBLIC (property LogonGroup).
Message Server
Enter the name or IP address of the SAP message server (property MessageServer).
System ID
Enter the three-digit system ID of the SAP message server (Property SID, e.g., MSS).
Client
Enter the three-digit number of the SAP client between 000 and 999, e.g., 800.
Language
Enter the logon language for the SAP system, e.g., EN for English or DE for German.
WebSocket
WebSocket refers to an RFC connections via WebSocket, e.g., to an SAP single application server or SAP Private Cloud or SAP Public Cloud instance. For information on how to use the WebSocket connection to access data in the SAP Public Cloud, see Knowledge Base Article: Access Data in the SAP Public Cloud using RFC BAPI.
Host
Enter the hostname or IP address of the SAP (cloud) system.
Port
Enter the port of the SAP (cloud) system, e.g., 443.
Library
Click [Pick Library] to select an SAP Cryptographic Library that can be used to connect to SAP. You can download the cryptographic library from the SAP Service Marketplace. Move the library file to the input/lib/ directory inside the volume used by the Xtract Universal.iQ container to make it available in the "Pick Library" window.
Client PSE
Click [Pick Client PSE] to select a client PSE file that can be used to connect to SAP cloud systems. Create a Personal Security Environment (PSE), see Knowledge Base Article: Create a Client PSE to connect to SAP Cloud Systems. Move the resulting PSE file to the input/pse/ directory inside the volume used by the Xtract Universal.iQ container to make it available in the "Pick Client PSE" window.
Client
Enter the three-digit number of the SAP client between 000 and 999, e.g., 800.
Language
Enter the logon language for the SAP system, e.g., EN for English or DE for German.
Authentication
The section Authentication defines how to connect to the SAP system. Xtract Universal.iQ supports plain authentication and SNC authentication.
Plain
Plain authentication uses the SAP username and password of a system or dialog user for authentication against SAP.
User
Enter the username of an SAP dialog user with access rights to the SAP objects you want to access with Xtract Universal.iQ.
Password
Enter the password of the SAP user.
Request credentials from callers when running services
When enabled, SAP credentials need to be passed as Basic Authentication when running services. To pass SAP credentials during runtime, Anonymous Access must be enabled.
Username is Alias
If this option is active, the name entered in the field User is used as an internet user alias, e.g., the communication user in the SAP Public Cloud. Activate this option when connecting to an SAP cloud system using the WebSocket connection method, see Knowledge Base Article: Access Data in the SAP Public Cloud.
Secure Network Connection (SNC)
Secure Network Communication (SNC) enables authentication and transport encryption between SAP systems and third-party tools like Xtract Universal.iQ. Use the toggle in the authentication settings to switch from Plain authentication to Secure Network Communication (SNC).
For more information, see SAP SNC Authentication with Xtract Universal.iQ.
SNC Library
Click [Pick Library] to select an SAP Cryptographic Library that can be used to connect to SAP. You can download the cryptographic library from the SAP Service Marketplace. Make sure to use the same library as in your SAP system. Move the library file to the input/lib/ directory inside the volume used by the Xtract Universal.iQ container to make it available in the "Pick Library" window.
Tip
To check which library is used for the encryption in your SAP system, go to SAP transaction RZ10 and check the SAP profile parameter snc/gssapi_lib.
SNC Partner Name
Enter the SAP SNC partner name configured for the SAP application server, e.g., p:SAPserviceERP/Alice@THEOBALD.LOCAL.
Test Connection
Clicking [Test Connection] validates the connection parameters. A window with a status message opens in the bottom right corner of the window.