Enable certificate based logon – 4 Import WD client certificate into ABAP system using STRUST

For the backend SAP NetWeaver ABAP system to trust the WD client certificate, it must be imported into the PSE. I am not 100% sure about this, as importing the root CA certificate should also do the trick.

Transaction: STRUST

Change to edit mode:

Select SSL standard server

Import WD certificate of Client PSE.



Let the world know

FND – 42 – Define trust between SAP Gateway and SAP backend

The configuration steps to be executed on the HUB system (FND) are detailed at SAP Help. The steps are for the OData Channel Service for backend system.

  1. Basic configuration activities: SAP Help
    • Set profile parameters to support SSO2 SAP Help
    • Activate ICF Services SAP Help
  2. User & Authorization SAP Help
  3. SAP Gateway to Consumer (FND to SMP3) SAP Help
    1. Creating a bgRFC destination for outbound queues SAP Help
    2. Registering bgRFC destination for the oubound queue SAP Help
    3. Creating bgRFC supervisor destination SAP Help
  4. SAP Gateway to SAP Backend (FND to BEP) SAP Help
    1. Create RFC on SAP Gateway (FND) to SAP backend (BEP) SAP Help
    2. Define trust between SAP Gateway and SAP backend (FND <-> BEP) SAP Help
    3. Configure SAP backend system (BEP) to accept assertion ticket from SAP Gateway SAP Help
    4. Configure SAP Gateway (FND) to accept assertion ticket from SAP backend (BEP) SAP Help
    5. Configure SAP system alias for applications SAP Help
  5. Activate SAP NetWeaver Gateway SAP Help

This document explains how to execute step 4.2.

A trust relationship between IWFND and BEP is needed to allow for SSO.
SAP Help

No SPRO activity.

Transaction SMT1

Trust relationship wizard opens

Inform a RFC destination: ECCCLNT001 (created in previous step)

Click continue. Basic connection checks are done




Let the world know