Message security in PI

[Former Member]

Hi SDNers,

In my current assignment I have a requirement where there is an interface between SAP MDM & SAP R/3. The interface has vendor master details with Bank details. The requirement is that the interface needs to be secured such that nobody can change the bank details at the middleware level. Please throw some light on how this can be achieved?

At MDM side we plan to use MDM PI Adapter & at R/3 side we will be using the IDoc adapter.

Regards,

Gautam Purohit

[baskar_gopalakrishnan2]

Hi Gautham

>>>The requirement is that the interface needs to be secured such that nobody can change the bank details at the middleware level

Use Digital Signature at the message level. Basically we are signing the message at the time of sending and verify at the time of receiving it . We do in our areas. Using Digital signature is to make sure that nobody make changes in the middle of mesg routing between source and target.

Currently we use apache open source web service security package wss4j to achieve this. You can use any standard to implement this.

SAP has digital signature help ... this coding snippet will be helpful

http://help.sap.com/saphelp_nwpi71/helpdata/EN/a4/d0201854fb6a4cb9545892b49d4851/content.htm

[deepak_shah]

Hi,

please check following thread:

Regards,

Deepak.

[RaghuVamseedhar]

Hi Gautam Purohit,

Please check out [Security Configuration at Message Level|http://help.sap.com/saphelp_nwpi711/helpdata/en/48/a9bb487e28674be10000000a421937/frameset.htm].

Regards,

Raghu_Vamsee

[Former Member]

Hi Gautham,

Ref: http://weblogs.sdn.sap.com/cs/blank/view/wlg/22415

Thanks,

[Former Member]

U can encrypt the data and at the receiver side u can decrypt it and send.

many blogs available on SDN

May be this can help

http://weblogs.sdn.sap.com/cs/blank/view/wlg/22776

chirag