Enabling Principal Propagation on the Fiori Front-End Server

Use

Configure the ICM to trust the system certificate you created for principal propagation, and map temporary certificates to ABAP users.

Prerequisites

Procedure

Configure the ICM to Trust the Technical User Certificate

  1. Start the Profile Editor (transaction RZ10)

  2. Use the value help to select the profile to edit, for example, the DEFAULT profile.

  3. Select the Extended maintenance radio button, and then choose Change.

  4. Create the following parameters:

    • Issuer of the technical user certificate:

      Parameter name: icm/HTTPS/trust_client_with_issuer

      Example values: CN=MyCompany CA, O=Trust Community, C=DE

    • Subject of the technical user certificate:

      Parameter name: icm/HTTPS/trust_client_with_subject

      Example values: CN=SCC, OU=HCP Scenarios, O=Trust Community, C=DE

  5. Save the profile.

  6. Open the ICM Monitor (transaction SMICM) and restart the ICM:

    Choose Start of the navigation pathAdministration Next navigation step ICM Next navigation step Exit Hard Next navigation step GlobalEnd of the navigation path.

  7. Verify that the two profile parameters have been taken over by ICM as desired:

    Choose Start of the navigation pathGoto Next navigation step Parameters Next navigation step DisplayEnd of the navigation path.

Map Temporary Certificates to Users

You can do this manually in the system as described below or make use of an identity management solution (IDM) for a more comfortable approach. For large numbers of users, rule-based certificate mapping is a good way to save time and effort. For more information, see “Rule-Based Certificate Mapping” in the NetWeaver Platform documentation at http://help.sap.com/nw_platformInformation published on SAP site.

  1. Open Assignment of External ID to Users (transaction EXTID_DN).

  2. Switch to edit mode.

  3. Create a new entry.

    Specify the subject of the certificate as External ID.

    In the User field, provide the appropriate ABAP user, for example JOHNDOE.

  4. Save the mapping.

  5. Repeat the steps for all users that shall be supported for the scenario.