Setting Up SAP S/4HANA for Principal Propagation


After completing this lesson, you will be able to:

  • Propogate user information from SAP BTP to SAP S/4HANA

Set Up Backend for Principal Propagation

This section explains the following steps to be executed in SAP S/4HANA system:

  • Import system certificate
  • Define rule-based mapping
  • Define Reverse Proxy Parameter and additional parameters in RZ10
  • Restart the ICM

Watch the following video to learn how to set up the backend for principal propagation:

The following parameters are mentioned in the video and are included here for your reference:

  • Reverse Proxy Parameter:

    Name: icm/trusted_reverse_proxy

    Example value: SUBJECT=", L=WDF, O=SAP, C=DE", ISSUER=", L=WDF, O=SAP, C=DE" 

    Make sure that you use straight double quotes and not curly quotes.
  • Additional parameters:
    • login/certificate_mapping_rulebased = 1
    • icm/HTTPS/verify_client = 1

Test the Setup

To verify that the change to principal propagation is working correctly, log on to the site from a desktop browser and open one of the assigned apps. If it opens correctly and shows the expected data, you have done everything correctly. If you get any sort of error message or you do not see the data, please run through this and the previous exercise one more time and verify that all the configuration steps were done correctly.


See this wiki site for troubleshooting.

Also, this help page on setting up the Cloud Connector provides some general information.

Log in to track your progress & complete quizzes