Open topic with navigation

SAP Connection

In order to be able to exchange data with SAP it is required to define an SAP connection.

This SAP connection is used for amongst others:

• Download of tables from SAP.
• Download STAD data.
• Synchronize user - role assignments.
• Retrieve actuals for defined norms in Controls Organizer.

Supported logon types

• Direct logon to application server.
• Login using logon groups.
• Login using SNC (Secure Network Communications).

Note: SAP connection details can be obtained by clicking on the button or by manual definition.

General settings

Following settings that apply to all logon types can be maintained.

General section

• Destination name: Name of the SAP connection (as indicated in SAP Logon).
• SAP system: SAP System ID.
• SAP router: Only required in case SAP router has been configured for the system concerned.
• System number: System number used to access the SAP system.

Language preferences section

• Code page: Only to be used in case a non default code page needs to be used for logon.

Application server logon settings

Following settings need to be maintained, in case the connection concerns a direct logon to an application server.

Application server logon section

• Application server: Hostname or IP address of the application server concerned.
• App server service: Optional field to indicate the application server service name (as defined in %windir%\system32\drivers\etc\services) or the port number concerned
  Please note that in most cases this field can be omitted.

Group logon section

• All fields: Must be omitted.

Gateway section

• All fields: Should be omitted. However, in case of gateway host related issues when connecting to SAP, please refer to this topic.

SNC

• All fields: Must be omitted.

Note: General settings also need to be maintained.

Logon groups settings

When using logon groups (e.g. in case of load balancing) it is not recommended (and mostly not desirable) to directly logon to an application server.

In order to be able to use logon groups, following settings must be made.

Application server logon section

• All fields: Must be omitted.

Group logon section

• Message server: Hostname or IP address of the message server concerned.
• Msg server service: Optional field to indicate the application server service name (as defined in %windir%\system32\drivers\etc\services) or the port number concerned. By default RFC uses the service name  "sapmsXXX" where XXX is the system ID of the SAP system concerned.
  Please note that in most cases this field can be omitted.

Gateway section

• Gateway: Hostname or IP address of the SAP Gateway host.
  Please read this topic for how to determine the gateway host in SAP.
  Note: this entry must be maintained manually as it cannot be retrieved from SAP Logon.
• Gateway service: Optional field to indicate the application server service name (as defined in %windir%\system32\drivers\etc\services) or the port number under which the gateway is listening.
  Please note that in most cases this field can be omitted.

SNC section

• All fields: Must be omitted.

Note: General settings also need to be maintained

SNC logon settings

In case SNC (Secure Network Connections) is used to logon to SAP, e.g. in case of Single Sign On using SAP GUI for Windows, following settings need to be maintained.

See the FAQ section for an example.

Application server logon section

• Application server: Hostname or IP address of the application server concerned.
• App server service: Optional field to indicate the application server service name (as defined in %windir%\system32\drivers\etc\services) or the port number concerned.
  Please note that in most cases this field can be omitted.

Group logon section

• All fields: Must be omitted.

Gateway section

• All fields: Should be omitted. However, in case of gateway host related issues when connecting to SAP, please refer to this topic.

SNC section

• SnC partner name: The back end's SNC name. This is normally retrieved from SAP Logon.
  Example for Kerberos: p/krb5:<AD system user>/<AD controller>@<FQDN>.
• Snc QoP: Indicates the Quality of Service/Quality of Protection to be used.
  1 - Authentication only
  2 - Integrity
  3 - Encryption
  9 - Maximum security settings available

Note: General settings also need to be maintained

Note: When logging on to SAP, on the Logon popup only client number and language are required