Connecting Integration tenant (CPI) to on-prem ECC via SAP Cloud Connector (SCC)

[shahbhat]

Hi,

I am running an end-to-end connectivity test report on C4C. It goes to ECC via CPI and SCC. The report successfully runs when I am using Basic Auth on the IFlow (Check Connectivity to SAP Business Suite) receiver config:

However, because we are connecting via SCC, the Authentication should work when set to None but it doesn't. As per my understanding, because the SCC creates a private tunnel between ECC and integration tenant, we shouldn't have to use any authentication between CPI and ECC. SCC should trust both cloud system as well as backend system (on-prem) if I I don't have any allow list setup for trusted connections.

Here's the screenshot of the ECC webservice config:

Do I need to maintain any certificates in SCC trust store?

NOTE: I have already imported CPI client cert into STRUST and mapped the CPI cert to the integration user in ECC.

Thanks

[avinash_mallashetty_scpla]

Hello,

No. SCC act as reverse proxy, and it allows or block the calls coming from internet or CPI. its like gate keeper.

Authentication part depends on what is defined in S4 hana side. if service is enabled with username / pwd, you have to provide it in the iflow and if its certificate based auth, you need to do the required configurations in CPI.

- Avinash