Securing CPI iFlows with API Proxy using SAP APIM

[Hira]

Good day reader, 

I am working on the project where we are migrating PI PO integrations to SAP BTP Cloud Integrations. We have many SOAP based integrations, these integrations are used by our third party vendors. I plan to develop these SOAP integrations in below manner, I need expert advice on it.

Steps followed.

1. First, I made a generic SOAP API (CPI) that takes as soap request and send to RFC Adapter for processing.

2. Next, I am creating proxy in API Management (SAP) to call the above created SOAP API to process the request. Here I would apply authentication (OAuth2), validation of payload  (Message Validation), Injection Policies and so on to create a secure layer. 

3. Third, create a product project wise and added APIs according to the project.  

4. Last, share the credentials by creating Applications of each product with the developer team.  

[PRAGSMATIC]

how would you design your error handling ?

[Hira]

@PRAGSMATIC.,

For frontend side handling done on Proxy end such as validation of message, authentication, traffic management etc

and for integration flow error handling will be done at that end, a custom message will be return and details will be sent to email or write on a file.