CPI-versus-PI - sap-hci-a-complementary-offering-to-sap-po

Introduction

• SAP CPI is an on demand integration solution hosted in the SAP Cloud Platform

• Multi-tenancy is an architecture in which a single instance of application serves multiple customers with cluster of different Virtual Machine VM implementation.

• For each customer, separate tenant/ resources (memory, CPU, file system, DB schema) are allocated – although all customers might share the same hardware.

Architecture

Apache Camel - Open Source Integration Framework

OSGi - Open Services Gateway Initiative(Equinox) - Platform for running module systems for java

Tenant Cluster

• Management Console Node - Start/stop runtime nodes, helps in monitoring

• Runtime Nodes - helps in message monitoring

• Messaging Service

Node Type for a tenant/account

• Tenant Management (atleast 1 VM)

  • • Supports Web UI, Workspace | Operations

• IFLMAP + CXF Services ( atleast 2 nodes or VM)

  • • Supports runtime for value mapping, Integration flow, ODATA Service

Authentication

• Basic Authentication - SCN credentials for test and productive tenant

• Certificate based Authentication

  • Sender

  • Receiver - KeyStore(system.jks) per tenant is used to store the CPI keypair (key + public certificate) and the list of trusted issuer certificate. It is similar to Trusted CA used in PO for receiver channel for SOAP/HTTP receiver.

Security

Since SAP CPI uses SAP Cloud Identity provider (global standard account.sap.com) by default, all the users must have valid S-user or P-user IDs. You can also configure Cloud Integration to use your own custom identity provider. For more information, see Using Custom IDP with SAP Cloud Platform Integration.

• Transport Level Security

• Message Level Security

  • Encryption/Decryption -

    • PGP | PKCS#7/CMS Enveloped Data and Signed data

  • Signing/Verification

    • XML Digital Signature | PKCS#7/CMS Enveloped Data and Signed data

http://scn.sap.com/thread/3664325

cd C:\Program Files\Java\jre6\bin\

keytool -import -alias testgate -file "C:\Users\cg-sunil\Desktop\testgate.cer" -keystore ..\lib\security\cacerts -storepass changeit

Web UI - Discover > Design > Monitor > Settings

Discover - Display available standard integration Content catalog and allow copy to private workspace

Design - Modelling of integration flow

> Create/Import >Integration Package > Artifacts > Add

1. Data Integration

2. Integration Flow - Create/Upload, Configure, Deploy, Delete

3. OData Service

4. Value Mapping

Web UI > Settings

• Product Profiles | ES Repository | Transport

Integration Flow

Based on BPMN notation | Integration Flow Editor - Palette

Access Header and Property

https://blogs.sap.com/2018/06/08/cloud-integration-accessing-existing-headers-xpath-via-content-modifier-write-variables/

https://blogs.sap.com/2018/03/27/sap-cpi-accessing-header-and-property/

Integration Flow Extension | Integration-flow-extension-using-processdirect-adapter/

Product Profile

Externalization | Partner Directory | ProcessDirect Adapter