Adobe Forms Services on BTP to S/4HANA On Premise Integration

[saroopreddy88]

Architecture:

Prerequisites:

The following ABAP systems/environments are supported:

• SAP NetWeaver 7.50 SP24 or higher.
• S/4HANA on-premise 1809 (SP8+), 1909 (SP6+), 2020 (SP4+), 2021, or higher.
• ABAP environment on SAP BTP.

Involved Components:

This document talks in detail about integrating S/4HANA On-Premise to ADS on BTP and includes below servers/components.

1. S/4HANA On-Premise 1809 or higher
2. SAP Cloud Connector
3. SAP BTP with Adobe Forms Service (Cloud Foundry) enabled or created.

Integration:

Go to Adobe Forms Service sub account from BTP and create the service key.

Give any name for the service and save it.

Once service key is created, we need to open the key and save the details as they will be needed when we are doing configuration steps in S/4HANA on premise.

Login to BTP and go to the Adobe Forms Service subaccount.

Save the ClientId, Clientsecret, url and uri.

SSL Setup to BTP:

Establish the SSL setup to SAP BTP in your ABAP system by importing the required security certificates from https://www.digicert.com/digicert-root-certificates.htm

Download below certificates and import them under SSL Client Standard and SSL Client Anonymous.

• DigiCert Global Root CA
• DigiCert Global Root G2

Configure OAuth2 client:

Ensure below SICF services are active.

We need to establish OAuth 2.0 client connection between S/4 and SAP Adobe Forms Service. Go to OA2C_CONFIG transaction code

Choose ADS_OAUTH2_PROFILE, give any Configuration Name, OAuth 2.0 Client ID will be the Client ID that we saved from the service key in previous step and click OK.

We need to maintain the Client Secret which will be there in the service that we have generated and saved in previous steps.

Authentication Endpoint à <urlfrom service key>/oauth/authorization

Token Endpoint à <urlfrom service key>/oauth/token

Go to Access Settings section and change grant type to Client Credentials and save the configuration.

We can see the configuration that we have saved as below.

RFC Destination to Adobe Forms Service on BTP:

We have to create a type G RFC from S/4 to ADS on BTP.

Go to Logon & Security tab and click on OAuth Settings under Logon Procedure.

Click on the Lens and select the configuration that we have done in OA2C_CONFIG and click OK.

Set Security options as shows below and save the RFC.

Ensure fp and fpads services are active in SICF under default_host.

Create Destination from Cloud Connector to S/4 on-premise:

Login to SAP Cloud connector admin page and add the new BTP Adobe Forms Sub account.

Enter all the Sub Account details which will be available under BTP à Sub account and save.

If you are connecting multiple cloud connectors to same Adobe Forms Service subaccount, then maintain Location ID. This Location ID will be used in BTP configuration as it plays an important part in establishing the connection.

Once the sub account is added to cloud connector we need to create a destination to S/4 on premise. In Cloud Connector Admin page click on select Subaccount and select the sub account that we have added in above step

Then click on Cloud to On Premise and create the destination.

Enter the hostname and https port from SMICM of your S/4.

Enter any virtual name and http port from SMICM. This virtual name and port will be used in configuration that we have to do in BTP in further steps

We are not selecting any Principal Propagation SSO method.

Enter description (Optional)

Validate the details and click Finish.

We need to add the resources under the entry we created in above step. Select the entry and click buttons as shown below.

Enter the resource, access policy and save.

Do the connection test and ensure it is reachable.

BTP Destinations:

We have to creation the destination in BTP under the Adobe Forms Service subaccount.

Enter the details as shown below.

Name à FP_ICF_DATA_<SID>

URL à Should be the virtual hostname and port that we have given in Cloud Connection Destination step.

Location ID à If we are using multiple cloud connectors then we need to maintain the location ID that we have used while we were adding Adobe Forms Services to Cloud Connector in previous steps.

User à User ID with all ADS required authorization from S/4.

Ensure that Connection test is successful.

Validations:

Run the regular ADS related reports that we use like FP_TEST_00, FP_CHECK_DESTINATION_SERVICE, FP_PDF_TEST_00

To validate Oauth configuration run the report OA2C_GENERIC_ACCESS

Additional Reference:

https://help.sap.com/docs/forms-service-by-adobe/sap-forms-service-cf/sap-forms-service-by-adobe?q=l...