activate IDOC service path in S4 for IDOC receiver connection with CI

[ramu_g4]

Hi Experts,

We are working on SOAP -> IDOC scenario in Cloud Integration(SAP Integration Suite).

As a pre-requisite, we are trying to establish the IDOC connection from "Cloud Integration" to S4.

But we notice that activation of IDOC service path ‘/sap/bc/srt/idoc’ in SAP backend is needed.

But, our BASIS team declines our request stating that it is not allowed as per our organization hardening guidelines. They are asking to find an alternative way to achieve the required functionality.

Could you please let me know the alternate options available to achieve the requirement without additional efforts like interface redesign etc., Thank you!

Regards,

Ramu

[Ryan-Crosby]

Sounds like a reason for escalation because suggesting any form of custom handling for basic IDoc integration is ludicrous, and there is no reason to fall back to file-based IDocs when there is a perfectly viable HTTP handler available in the system.

[MAVR]

Hi @ramu_g4 

Your solution should use SAP Cloud Connector to have a secure and encrypted connection to the Network from your BTP subaccount / Cloud Integration tenant. This solution should be compliant with your organization's security policies.

But within the S/4HANA as part of the Web Service Runtime, there is the standard configuration 

TCODE: SRTIDOC

There are other ways to process IDocs, but all of them require exposing a service plus custom development.

Hope this helps you.

Best regards 🖖🏻

[ramu_g4]

Hello MAVR,

[ThomasZwerg]

Hi Ramu, 

not sure if it is part of your setup or design, but usually there is a cloud connector in place to connect BTP with on premise network. Thus, there is no open port towards the internet which is mostly the reason for security/ network/ basis to refuse a connection from CI into S/4. 

Cloud connector is a piece of software typically installed in on premise DMZ and initiates a connection (like a tunnel) from on premise into SAP Cloud. Since that connection originates from on premise, no opening of firewall is required. 

SAP Help https://help.sap.com/docs/connectivity/sap-btp-connectivity-cf/connectivity

Example setup: https://community.sap.com/t5/technology-blogs-by-sap/use-sap-cloud-connector-sap-cloud-platform-java... 

(they have a custom app on BTP as example, that is comparable to CI in your case)

Best Regards, 

Thomas