BP Replication between C4C and S4 is failing in CPI

[former_member738581]

Hello All,

I am trying to establish Client Certificate based Integration between S4 on premise and C4C systems using CPI as a middle-ware. I was able to perform this integration using basic authentication but when I switched to Certificate based Authorization I am getting the below error for both iFlows i.e

Replicate Business Partner to SAP Business Suite

Error: "org.apache.cxf.interceptor.Fault: Could not send Message., cause: org.apache.cxf.transport.http.HTTPException: HTTP response '401: Unauthorized' when communicating with https://<S4 URL>/sap/bc/srt/scs/sap/businesspartnersuitebulkreplic?sap-client=<Client>&MessageId=00163EB2-27EE-1EEB-AD9B-AF20CA42AEC8&QueueId=A1F7E68D70A3BDEB&QualityOfService=ExactlyOnce"

Replicate Business Partner from SAP Business Suite

"org.apache.cxf.interceptor.Fault: Could not send Message., cause: org.apache.cxf.transport.http.HTTPException: HTTP response '401: Unauthorized' when communicating with https://my<tenant>.crm.ondemand.com:443/sap/bc/srt/scs/sap/businesspartnerreplicationin?MessageId=00...;

I followed the integration guide provided on help.sap.com step-by-step but could not rectify this error. From my research I can only gather that CPI is not accepting the client certificates I have uploaded in key store from C4C (outbound communication arrangement) and S4 (STRUST).

Have anyone faced this issue before ? Are there any other steps / Certificates I need to maintain which is not mentioned in the guide.

Thanks in advance.

Regards

Amir

[dnguyen_31]

Hi Amir, We ran into the same issue. Were able to resolved the issue? If so, can you please share with us.

Thanks in advance,

David

[manideepsatya]

Hello amir.ansari_createch,

Inorder to use certificate based authentication -
For C4C to CPI - C4C M-User /Client certificate needs to be uploaded in the receiver adapter in the CPI iflow. Whole chain needs to be uploaded in the CPI keystore
For CPI to C4C - CPI Client certificate needs to be uploaded in the C4C communication arrangement under inbound credentials and whole certificate chain to be uploaded in the C4C Certificate trust list.

Same will be the case with CPI & S4 as well. In S4 you need to import the CPI client certificate in STRUST. Relevant changes like uploading the certificates and certificate forwarding needs to be takencare if you have any other firewall or web dispatcher protecting your S4.

You can report an incident to SAP if the problem still persists. Better use the Schedule An Expert session provided by SAP.

Regards,
Satya

[former_member738581]

Hi manideepsatya ,

Thanks for your answer. Yes I have already uploaded certificates to the correct places. One thing is that we have not setup a cloud connector on our backend system. I will check with our BASIS team and update you with the result.

For now I have reverted back to basic authentication to test other scenarios in the integration . The master data replication and External Pricing is working fine but when I am trying to Create a followup document from C4C Quote in SAP S4 On premise or Trying to transfer C4C sales order to S4 I am getting below error in CPI.

I have checked the credentials and they are correct since I am using the same in other iFlows which are successful. I have already activated and register Idoc service endpoint in S4 (Tcode : SICF and SRTIDOC). Is there anything else I am missing here. I checked SAP KBA 2473005 but it does not apply to my situation since there is no cloud connector is setup.

Thanks in advance.