With SAP Fiori apps, you communicate with both the ABAP front-end server and the SAP HANA system through a browser. When communicating with those systems, you must ensure queries from the browser are correctly directed to the appropriate system. To do so, you use SAP Web Dispatcher for which you specify routing rules to define which URL is forwarded to which system.
As SAP Fiori apps access multiple back-end systems but JavaScript code is constrained by the Same Origin Policy, all systems are exposed to the browser through SAP Web Dispatcher (or another reverse proxy), which brings them into a common origin (combination of protocol, hostname, and port).
You have implemented SAP Web Dispatcher and enabled it for multiple systems.
You have enabled single sign-on (SSO).
Configure SAP Web Dispatcher to use HTTPS requests.
All communication to back-end systems should be handled using HTTPS requests and SAP Web Dispatcher itself should be called using only HTTPS.
To configure HTTPS settings, you can copy the following source code and adapt it to your business requirements:
Syntax
ssl/ssl_lib = <sapcrypto dll>
ssl/server_pse = <pse>
icm/HTTPS/verify_client = 0
ssl/client_pse = <pse>
wdisp/ssl_encrypt = 1
wdisp/ssl_auth = 2
wdisp/ssl_cred = <pse>
icm/HTTPS/forward_ccert_as_header = true
Configure SAP Web Dispatcher ports.
To configure the ports, you can copy the following source code and adapt it to your business requirements:
Syntax
cm/server_port_0 = PROT=HTTPS,PORT=443,TIMEOUT=120
wdisp/system_conflict_resolution = 1
wdisp/add_clientprotocol_header = 1
wdisp/handle_webdisp_ap_header = 1
wdisp/add_xforwardedfor_header = true
Define the routing rules to the required target systems.
Recommendation
SAP recommends that only those requests corresponding to the services required for the applications that you want to use should be routed to the application servers.
URL Prefix | Target System |
---|---|
/sap/bc | SAP NetWeaver Gateway |
/sap/public | SAP NetWeaver Gateway |
/sap/opu | SAP NetWeaver Gateway |
/sap/hba | SAP HANA |
/sap/hana | SAP HANA |
Configure SAP Web Dispatcher for the SAP NetWeaver Gateway server.
To configure the SAP Web Dispatcher for the SAP NetWeaver Gateway server, you can copy the following source code and adapt it to your business requirements:
Syntax
wdisp/system_0 = SID=<GW SID>, NR=<instnot>, MSHOST=<GW MSHOST>, MSPORT=<GW MSPORT>, SRCSRV=*443, SRCULF=/sap/opu/odata
Configure SAP Web Dispatcher for the front-end server.
To configure the SAP Web Dispatcher for the SAP NetWeaver Gateway server, you can copy the following source code and adapt it to your business requirements:
Syntax
wdisp/system_1 = SID=<FE SID>, NR=<instnot>, MSHOST=<FE MSHOST>, MSPORT=<FE MSPORT>, SRCSRV=*443, SRCULF=/sap/public/bc/;/sap/bc/
Configure SAP Web Dispatcher for SAP HANA XS.
To configure the SAP Web Dispatcher for the SAP NetWeaver Gateway server, you can copy the following source code and adapt it to your business requirements:
Syntax
wdisp/system_2= SID=EXT, EXTSRV=https://<HANAXSHOST>:<XSPRT>, SRCSRV=*:443, SRCURL=/sap/hba/;/sap/hana
If you have different application components deployed on different SAP Business Suite-on-HANA systems, you must define the following additional routing rules:
URL Prefix | Target System |
---|---|
/sap/hba/r/ecc/ | SAP HANA system with ECC data |
/sap/hba/r/<<vdm>>/ | SAP HANA system with <<vdm>> data |
/sap/hba/apps/kpi/ | SAP HANA system that hosts the KPI Modeler (SAP Smart Business only) |
/sap/hba/apps/<<app>>/ | SAP HANA system with <<app>> application |
Note that <<vdm>> is a placeholder for a VDM area, such as ECC or CRM, and <<app>> is a placeholder for an application.
Note
For all routing rules, if you use a reverse proxy other than SAP Web Dispatcher, you must ensure it is configured to preserve the host name of the reverse proxy. If the reverse proxy overwrites or replaces the host name, responses from the ABAP and SAP HANA systems cannot be sent back to the reverse proxy. For this reason, SAP Web Dispatcher automatically preserves the host name; however, other reverse proxies may not do so.
For more information about SAP Web Dispatcher for SAP NetWeaver 7.31, see SAP Help Portal at
.For more information about SAP Web Dispatcher for SAP NetWeaver 7.40, see SAP Help Portal at
.