SAP PI Rest Security

[Sunslayer86]

We are looking for a way to manage access control/authorization to Rest services based on user identity. Our organization offers various Rest services that run on SAP Process Integration (PI). Currently, all rest services calls have to be authenticated in SAP PI where PI users are already required that they send their credentials on every request. A user with a valid PI logon has access to any of the rest web services in PI. Managing access control is not possible in SAP PI Rest. Does anyone have any ideas of solutions to allow only specific users to access specific Rest services in PI?

[bhavesh_kantilal · Accepted solution]

Hello Chris,

In your Integrated Configuration, have you looked at the Assigned Users Tab? This is equivalent to the ACL concept where once you enter a list of Users here, only those users will be allowed access to the Interface.

Would this work?

Regards,

Bhavesh

[Sunslayer86 · Accepted solution]

We've already looked at ACL based authorization. Per SAP, ACL does not support REST adapters.

http://help.sap.com/saphelp_nw73/helpdata/en/e7/dfad6ca36342f2ba30d7fce5f3d816/content.htm

[bhavesh_kantilal · Accepted solution]

My bad, thanks for pointing out..!

[vadimklimov · Accepted solution]

Hi Chris, Bhavesh,

REST adapter didn't support ACLs at a time when it was introduced, but some time later ACLs support was added to it (starting from 7.31 SP17 / 7.4 SP13 / 7.5 SP01) - refer to SAP Note 2182880.

Regards,

Vadim