Question Re: Call SCP Workflow API from ABAP program in Technology Q&A

Call SCP Workflow API from ABAP program

former_member639664 — Wed, 15 Apr 2020 03:45:49 GMT

Dear experts

I need to develop an application that triggers a SCP Workflow api, implementing principal propagation. The application that calls the api is an ABAP report in my on-premise system and user that start the process need to be propagated to cloud.

SCP Application Identity Provider trusts in a custom SAP IAS, so i can't call workflow api using basic authentication, only using SAML 2.0 mode.

My backend system, S/4HANA, trusts in the same SAP IAS. I can authenticate in SAP IAS and launch Fiori Launchpad (on-premise) and launch SCP application using the same username, due SSO.

How can i call the workflow api using SAML authentication mode in an ABAP report and Is it possible to implement principal propagation?
Note: report will run in background.

I know that i can do this using OAuth, but using this authentication mode, i can't implement principal propagation.

Cloud Connector does not work in this case because is on-premise pushing data to cloud.

Best regards,

Guilherme

Re: Call SCP Workflow API from ABAP program

gregorw — Wed, 15 Apr 2020 05:53:40 GMT

Hi Guilherme,

very interesting scenario. Please let us know if you're in the Neo or Cloud Foundry environment.

Would it be an option to send the user a notification in the Cloud Launchpad and the Workflow API is then triggered by the user starting the process?

Best regards
Gregor

Re: Call SCP Workflow API from ABAP program

former_member639664 — Wed, 15 Apr 2020 14:27:35 GMT

Hi Gregor,

Neo environment.

No, it's not an option to send the user a notification in the Cloud Launchpad, but we would like to monitor who is starting the process.

Using OAuth authentication, user oauth_client_MY_ID is the workflow initiator and is the user displayed in the My Inbox application for end users.

Re: Call SCP Workflow API from ABAP program

ManjunathGudisi — Fri, 15 May 2020 14:08:42 GMT

Hi Guilherme - Did you find an answer for this. Thanks, Manju

Re: Call SCP Workflow API from ABAP program

former_member639664 — Sat, 16 May 2020 03:57:30 GMT

Unfortunately not.

Re: Call SCP Workflow API from ABAP program

tobias_breyer — Mon, 18 May 2020 05:43:44 GMT

Hi Guilherme,

have you tried using the ABAP OAuth2 Client (CL_OAUTH2_CLIENT) with a SAP Cloud Platform client profile?

It seems to me it supports SAML 2.0 Bearer Assertion which is kind of the connection between the two approaches of authentication.

Regards,

Tobias

Re: Call SCP Workflow API from ABAP program

gregorw — Fri, 21 Jan 2022 20:03:27 GMT

Have you tried to use the Access SAP Business Technology Platform - Neo Environment using the OAuth 2.0 Client API description?

Re: Call SCP Workflow API from ABAP program

quyen_sap_viet — Wed, 04 May 2022 02:37:34 GMT

Do we have any documents for Cloud Foundry ?