Call SCP Workflow API from ABAP program

[former_member639664]

Dear experts

I need to develop an application that triggers a SCP Workflow api, implementing principal propagation. The application that calls the api is an ABAP report in my on-premise system and user that start the process need to be propagated to cloud.

SCP Application Identity Provider trusts in a custom SAP IAS, so i can't call workflow api using basic authentication, only using SAML 2.0 mode.

My backend system, S/4HANA, trusts in the same SAP IAS. I can authenticate in SAP IAS and launch Fiori Launchpad (on-premise) and launch SCP application using the same username, due SSO.

How can i call the workflow api using SAML authentication mode in an ABAP report and Is it possible to implement principal propagation?
Note: report will run in background.

I know that i can do this using OAuth, but using this authentication mode, i can't implement principal propagation.

Cloud Connector does not work in this case because is on-premise pushing data to cloud.

Best regards,

Guilherme

[gregorw]

Hi Guilherme,

very interesting scenario. Please let us know if you're in the Neo or Cloud Foundry environment.

Would it be an option to send the user a notification in the Cloud Launchpad and the Workflow API is then triggered by the user starting the process?

Best regards
Gregor

[former_member639664]

Hi Gregor,

Neo environment.

No, it's not an option to send the user a notification in the Cloud Launchpad, but we would like to monitor who is starting the process.

Using OAuth authentication, user oauth_client_MY_ID is the workflow initiator and is the user displayed in the My Inbox application for end users.

[ManjunathGudisi]

Hi Guilherme - Did you find an answer for this. Thanks, Manju

[former_member639664]

Unfortunately not.

[gregorw · Accepted solution]

Have you tried to use the Access SAP Business Technology Platform - Neo Environment using the OAuth 2.0 Client API description?

[quyen_sap_viet · Accepted solution]

Do we have any documents for Cloud Foundry ?

[tobias_breyer]

Hi Guilherme,

have you tried using the ABAP OAuth2 Client (CL_OAUTH2_CLIENT) with a SAP Cloud Platform client profile?

It seems to me it supports SAML 2.0 Bearer Assertion which is kind of the connection between the two approaches of authentication.

Regards,

Tobias