Multi-tenant Azure Logic App SAP Connector network diagram

Published Dec 16 2020 06:29 PM 1,913 Views
Microsoft

SAP Connector

SAP S4 HANA.pngSAP ECC.jpg

The Logic App SAP Connector is a Generally Available component for Azure which allows easy integration with SAP ECC and S/4 HANA today.

 

This connector enables:

  • RFC based integrations - IDOC/BAPI
  • Bi-directional SAP integration
  • Advanced capabilities - SNC, stateful sessions
    • tRFC for IDOC – Send IDOCs to SAP only once
    • Implicit Commit to commit BAPI calls
    • Stateful BAPI calls
    • SNC with certificate

 

Additional capabilities are coming soon:

  • SNC support for ISE
  • Stateful RFC calls

Multi-tenant setup

 

When using this connector in our multi-tenant offering, customer needs to deploy the On-Premises Data Gateway (OPDG) to bridge from the Azure cloud to the private network containing the SAP instance to connect to. Generally no production SAP system is directly exposed to the Internet. Furthermore the OPDG allows the customer to install the necessary SAP client libraries "SAP .NET Connector" also known as SAP NCo.

 

The detailed installation instructions are available in the connector's public documentation, with this subsection specific to multi-tenant environment.

 

From Logic App to SAP
Logic App to SAP.png

Logic App SAP Connector (LA) makes calls to the gateway cloud service (CS) which acts as relay to the OPDG. Internally the CS uses Azure Service Bus and the OPDG can be used to connect to a range of other back-end services besides SAP such as SQL, SharePoint, File shares. Full architecture for the gateway service can be learned in this public documentation article.

On the OPDG the SAP adapter creates an RFC Client (RFC-C) via the SAP NCo library which finally talks with the SAP system.

The messages send this way may have a synchronous response. Such is the case when calling a list method on a BAPI business object for instance.

Some other messages are asynchronous by nature, like sending an IDOC, and while there is no response from the SAP system, the transaction Id of the underlying call is returned by the SAP adapter to allow later de-duplication and troubleshooting.

For advanced used it is also possible to transmit payloads larger than the 2.5 MB allowed by the gateway Azure Service Bus relay. This requires uploading the payload to an Azure Storage blob accessible from the private network, and provide the full SAS URL instead of the payload in the call to the LA SAP Connector.

 

SAP to Logic App

SAP to Logic App.png

For SAP to initiate calls to Logic App via the SAP Connector Trigger, LA sends an initial registration message when the trigger is first saved and each time it is modified. The SAP Adapter on the OPDG will register an RFC Server (RFC-S) with the SAP system. This RFC Server is identified by a Program Id inside SAP such that RFCs and BAPI methods may be call against it, or IDOC may be send to a Logic System (LS) partner configured for this Program Id. The OPDG SAP adapter will relay the calls from SAP to the RFC Server as HTTP Webhook callbacks to Logic App. The Logic App may further synchronously respond on the Webhook with a response payload for SAP.

The detailed steps to configure sending IDOCs to SAP are part of the public documentation for the connector in this subsection.

%3CLINGO-SUB%20id%3D%22lingo-sub-1996146%22%20slang%3D%22en-US%22%3EMulti-tenant%20Azure%20Logic%20App%20SAP%20Connector%20network%20diagram%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1996146%22%20slang%3D%22en-US%22%3E%3CH2%20id%3D%22toc-hId--1178941618%22%20id%3D%22toc-hId--1178941618%22%3ESAP%20Connector%3C%2FH2%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-left%22%20image-alt%3D%22SAP%20S4%20HANA.png%22%20style%3D%22width%3A%20200px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F241225iD073A3CFAB4CD85F%2Fimage-size%2Fsmall%3Fv%3D1.0%26amp%3Bpx%3D200%22%20role%3D%22button%22%20title%3D%22SAP%20S4%20HANA.png%22%20alt%3D%22SAP%20S4%20HANA.png%22%20%2F%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-left%22%20image-alt%3D%22SAP%20ECC.jpg%22%20style%3D%22width%3A%20200px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F241226iDC60447D29F5A6AF%2Fimage-size%2Fsmall%3Fv%3D1.0%26amp%3Bpx%3D200%22%20role%3D%22button%22%20title%3D%22SAP%20ECC.jpg%22%20alt%3D%22SAP%20ECC.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3EThe%26nbsp%3BLogic%20App%20SAP%20Connector%20is%20a%20Generally%20Available%20component%20for%20Azure%20which%20allows%20easy%20integration%20with%20SAP%20ECC%20and%20S%2F4%20HANA%20today.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThis%20connector%20enables%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3ERFC%20based%20integrations%20-%20IDOC%2FBAPI%3C%2FLI%3E%0A%3CLI%3EBi-directional%20SAP%20integration%3C%2FLI%3E%0A%3CLI%3EAdvanced%20capabilities%20-%20SNC%2C%20stateful%20sessions%3CUL%3E%0A%3CLI%3EtRFC%20for%20IDOC%20%E2%80%93%20Send%20IDOCs%20to%20SAP%20only%20once%3C%2FLI%3E%0A%3CLI%3EImplicit%20Commit%20to%20commit%20BAPI%20calls%3C%2FLI%3E%0A%3CLI%3EStateful%20BAPI%20calls%3C%2FLI%3E%0A%3CLI%3ESNC%20with%20certificate%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CI%3EAdditional%20capabilities%20are%20coming%20soon%3A%3C%2FI%3E%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3ESNC%20support%20for%20ISE%3C%2FLI%3E%0A%3CLI%3EStateful%20RFC%20calls%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CH2%20id%3D%22toc-hId-1308571215%22%20id%3D%22toc-hId-1308571215%22%3EMulti-tenant%20setup%3C%2FH2%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWhen%20using%20this%20connector%20in%20our%20multi-tenant%20offering%2C%20customer%20needs%20to%20deploy%20the%20On-Premises%20Data%20Gateway%20(OPDG)%20to%20bridge%20from%20the%20Azure%20cloud%20to%20the%20private%20network%20containing%20the%20SAP%20instance%20to%20connect%20to.%20Generally%20no%20production%20SAP%20system%20is%20directly%20exposed%20to%20the%20Internet.%20Furthermore%20the%20OPDG%20allows%20the%20customer%20to%20install%20the%20necessary%20SAP%20client%20libraries%20%22SAP%20.NET%20Connector%22%20also%20known%20as%20SAP%20NCo.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20detailed%20installation%20instructions%20are%20available%20in%20the%20connector's%20public%20documentation%2C%20with%20this%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Flogic-apps%2Flogic-apps-using-sap-connector%23multi-tenant-azure-prerequisites%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3Esubsection%20specific%20to%20multi-tenant%20environment%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId--498883248%22%20id%3D%22toc-hId--498883248%22%3EFrom%20Logic%20App%20to%20SAP%3CBR%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20image-alt%3D%22Logic%20App%20to%20SAP.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F241223i389B1994705D3652%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22Logic%20App%20to%20SAP.png%22%20alt%3D%22Logic%20App%20to%20SAP.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FH2%3E%0A%3CP%3ELogic%20App%20SAP%20Connector%20(LA)%20makes%20calls%20to%20the%20gateway%20cloud%20service%20(CS)%20which%20acts%20as%20relay%20to%20the%20OPDG.%20Internally%20the%20CS%20uses%20Azure%20Service%20Bus%20and%20the%20OPDG%20can%20be%20used%20to%20connect%20to%20a%20range%20of%20other%20back-end%20services%20besides%20SAP%20such%20as%20SQL%2C%20SharePoint%2C%20File%20shares.%20Full%20architecture%20for%20the%20gateway%20service%20can%20be%20learned%20in%20this%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fdata-integration%2Fgateway%2Fservice-gateway-onprem-indepth%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3Epublic%20documentation%20article%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3EOn%20the%20OPDG%20the%20SAP%20adapter%20creates%20an%20RFC%20Client%20(RFC-C)%20via%20the%20SAP%20NCo%20library%20which%20finally%20talks%20with%20the%20SAP%20system.%3C%2FP%3E%0A%3CP%3EThe%20messages%20send%20this%20way%20may%20have%20a%20synchronous%20response.%20Such%20is%20the%20case%20when%20calling%20a%20list%20method%20on%20a%20BAPI%20business%20object%20for%20instance.%3C%2FP%3E%0A%3CP%3ESome%20other%20messages%20are%20asynchronous%20by%20nature%2C%20like%20sending%20an%20IDOC%2C%20and%20while%20there%20is%20no%20response%20from%20the%20SAP%20system%2C%20the%20transaction%20Id%20of%20the%20underlying%20call%20is%20returned%20by%20the%20SAP%20adapter%20to%20allow%20later%20de-duplication%20and%20troubleshooting.%3C%2FP%3E%0A%3CP%3EFor%20advanced%20used%20it%20is%20also%20possible%20to%20transmit%20payloads%20larger%20than%20the%202.5%20MB%20allowed%20by%20the%20gateway%20Azure%20Service%20Bus%20relay.%20This%20requires%20uploading%20the%20payload%20to%20an%20Azure%20Storage%20blob%20accessible%20from%20the%20private%20network%2C%20and%20provide%20the%20full%20SAS%20URL%20instead%20of%20the%20payload%20in%20the%20call%20to%20the%20LA%20SAP%20Connector.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId-1988629585%22%20id%3D%22toc-hId-1988629585%22%3ESAP%20to%20Logic%20App%3C%2FH2%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22SAP%20to%20Logic%20App.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F241229iB682331CFE0F0910%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22SAP%20to%20Logic%20App.png%22%20alt%3D%22SAP%20to%20Logic%20App.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3EFor%20SAP%20to%20initiate%20calls%20to%20Logic%20App%20via%20the%20SAP%20Connector%20Trigger%2C%20LA%20sends%20an%20initial%20registration%20message%20when%20the%20trigger%20is%20first%20saved%20and%20each%20time%20it%20is%20modified.%20The%20SAP%20Adapter%20on%20the%20OPDG%20will%20register%20an%20RFC%20Server%20(RFC-S)%20with%20the%20SAP%20system.%20This%20RFC%20Server%20is%20identified%20by%20a%20Program%20Id%20inside%20SAP%20such%20that%20RFCs%20and%20BAPI%20methods%20may%20be%20call%20against%20it%2C%20or%20IDOC%20may%20be%20send%20to%20a%20Logic%20System%20(LS)%20partner%20configured%20for%20this%20Program%20Id.%20The%20OPDG%20SAP%20adapter%20will%20relay%20the%20calls%20from%20SAP%20to%20the%20RFC%20Server%20as%20HTTP%20Webhook%20callbacks%20to%20Logic%20App.%20The%20Logic%20App%20may%20further%20synchronously%20respond%20on%20the%20Webhook%20with%20a%20response%20payload%20for%20SAP.%3C%2FP%3E%0A%3CP%3EThe%20detailed%20steps%20to%20configure%20sending%20IDOCs%20to%20SAP%20are%20part%20of%20the%20public%20documentation%20for%20the%20connector%20in%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Flogic-apps%2Flogic-apps-using-sap-connector%23test-sending-idocs-from-sap%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3Ethis%20subsection%3C%2FA%3E.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-1996146%22%20slang%3D%22en-US%22%3E%3CP%3EAn%20update%20on%20the%20current%20state%20of%20SAP%20integration%20with%20Azure%20Logic%20App%2C%20including%20a%20convenient%20reference%20network%20diagram%20for%20the%20multi-tenant%20environment.%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22SAP%20to%20Logic%20App.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F241228iD37190BCBB512DD9%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22SAP%20to%20Logic%20App.png%22%20alt%3D%22SAP%20to%20Logic%20App.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1996146%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ELogic%20Apps%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Version history
Last update:
‎Dec 16 2020 07:28 PM
Updated by: