Dear SAP community,

Summary:

In this blog posting we will see one sample connecting SAP SuccessFactors Intelligent Service Center(ISC) > Integration Center(IC) > Cloud Integration (CPI) with X.509 based authentication (client certificate key) generated in Admin center > Security Center.

This method can be used to have better security instead of using Basic Authentication.

Let’s check the activity in the sequence.

Access the SAP SuccessFactors > Admin center > Security Center > X509 Certificates > “Add” button and fill the details like the sample below:

For your reference, we used the selections:

In the sample above, we created this integration center Interface named “ISC_IC_CPI_SAP” that will be triggered “When event is published”.

Don’t forget that in ISC you need to use the button “Actions” > “Save Flow“.

Access your SAP Cloud Integration tenant and create your custom artifact to receive this incoming API call from Integration center.

One easy way to achieve this is using HTTPS connector. Under “Connection”, select the field “Authentication” the option “Client Certificate”.

Using the button “Add”, select the file with .CRT extension created in the step 01 stored locally in your computer and upload in your tenant. Save and deploy your artifact!

After you deploy, you can get your endpoint generated in the Overview > Manage Integration Content > your artifact name.

This endpoint will be used in the Integration center “Destination Settings” (next step).

Open your Admin center > Integration Center > “Destination Settings” and edit the integration created in the step 02 from your ISC custom activity.

In the sample above, we used the REST API URL from the CPI (step 03) and the Authentication Type “Client based Authentication”. In the field X509 Certificate = we selected from the dropdown the certificate created in the initial part of Security center (step 01).

The mentioned steps above covered in general the end to end setup.

When your ISC event is triggered, this will send the message to IC and later on to your CPI custom artifact.

If everything was setup correctly, will see the successful message in your Monitor from your tenant.

Conclusion:

Certificate based authentication (X.509) is the market standard secure way of API connectivity.

Using the steps of this blog posting, our objective was helping our customers and partners achieving the same with our cloud tools:

• SAP SuccessFactors Intelligent Service Center (ISC)
• Integration Center (IC)
• Cloud Integration (CPI)

Hope this sample could be helpful for you

Cheers

Soliman