Sender SOAP Adapter issue.

[Former Member]

Hi All,          

       This is an inbound scenario where my vendor wants to send POR file via a URL to my client PI system.

https://:port/XISOAPAdapter/MessageServlet?channel=:XXXXX:YYYYYY&nosoap=true where XXXXX = BusinessComponent; YYYYYY = Communication Channel In the comm. channel I've selected HTTP Security level as "HTTP". With my(PI 7.3) system userid and password. I successfully tested with the above URL in SOAP UI 3.5 tool. Also the POR xCBL file got converted the ORDRSP IDOC and posted successfully into SAP

system. Please see the attachement of my SOAP UI tool userid and password setting.

I tried without giving the userid and password in my SOAP UI tool but unable to send files to my PI system. As per the policy, my client can not share the PI7.3 system userid and password to outside world. Vendor is able to reach to PI7.3 system but seeing a userid and password pop-up screen.

It is very clear that my client need to share the login credentials but not sure what kind of userid we need to create and share with them.

Note: 1. In SOAP UI tool I tried without my userid and password and I’m unable to send file to PI system.

         2. This is not a WebService scenario. I’m not sharing any WSDL file with the vendor.

         3. I tried "HTTPS without Clinet Authentication" option but I was not successful from SOAP UI tool. So I dropped this option.

Can you please share your inputs to resolve this issue?

Thanks,

raj

[markangelo_dihiansan · Accepted solution]

Hello,

Here is an excerpt from SAP Note 856597 - FAQ: XI 3.0/ PI 7.0/7.1/7.3 SOAP Adapter

Q: I get an authorization error "401 Unauthorized" from the adapter's servlet. What went wrong?
           A: The adapter's servlet is protected by default.  You must use one of the user names assigned in security role xi_adapter_soap_message for component XISOAPAdapter. Please consult the documentation for Visual Administrator to view and change the security setting. 
           The user authentication of the SOAP adapter is not part of the SOAP adapter but of the web container of the J2EE engine. The default authentication setting is defined in the web.xml descriptor file of the SOAP dapter web application. This setting may be modified from Visual Administrator with some restriction. Please refer to the security documentation for the J2EE engine. 
           Please note that 710 onwards there is no Visual Administrator instead  the Netweaver Administrator is to be used to assign the roles to the  user to access the SOAP adater servlet.The user must be assigned one of  the following roles SAP_XI_IS_SERV_USER, SAP_XI_APPL_SERV_USER, SAP_XI_DEVELOPER_J2EE, SAP_XI_ADMINISTRATOR_J2EE. Assigning any one of these roles to the user provides necessary permissions for the user to access the SOAP adapter servlet.To assign these roles to the user, path in Netweaver Administrator is Operation Management -> Identity Management 

You need to create a user with one of the mentioned roles and then provide it to the third-party. You can also turn the authentication off but this applies to the whole SOAP Adapter.

Hope this helps,

Mark

[Former Member · Accepted solution]

Thanks Mark for your immediate reply on that same day. We followed the note and got it resolved. Thanks once again for your guidance.