Start Free Trial   Support

SAP ERP Advanced Settings

Connecting to SAP ERP

Set Host, User, Password, Client, and SystemNumber. Additionally, set Language to the ISO 639-1 language code you use to log into SAP ERP. The default is "EN".

To connect to a machine different from the Host machine, set GatewayHost. The GatewayService property indicates the service on the machine; by default this is HTTP.

Connecting with the RFC APIs

The Lyftrondata Provider for SAP ERP uses the SAP RFC interface to connect to an SAP system. The ConnectionType specifies the RFC API you want to use to connect.

Certificate Authentication 

In addition to User and Password, the Lyftrondata ADO.NET Provider for SAP ERP 2019 also supports certificate authentication. To use certificate authentication, set the X509Certificate connection property to either point to a file that contains an X509 certificate in PEM format, or the PEM blob directly used for authentication during SAP Logon. In addition to setting X509Certificate, you will need to specify the appropriate SNC connection properties. The SNC conneciton properties are described under Advanced Settings.

Fine Tuning Data Access

  • UseSimpleNames: SAP ERP supports attribute names with special characters that many database-oriented tools do not support. You can use this property to replace any nonalphanumeric character with an underscore.
  • InitialValueMode: Set this to return null or the exact value returned by SAP for fields that have an undefined or unknown value. By default the provider returns null.

Connecting to a Distributed SAP System

If you are connecting to a distributed SAP system, such as a system using load balancing, you must set the following additional properties. An administrator can obtain these connection properties on the Connection tab of the System Entry Properties dialog.

  • SystemId: Set this property to the value in the System Id box.

The SystemId property is the System Id or R3Name of the SAP system. The system Id is a string with a maximum of three characters.

  • MessageServer: Set this property to the value in the Message Server box. If a value is specified in the SAProuter box, prepend the value in the SAProuter box onto the value for the MessageServer connection string property.

The MessageServer property must be specified when connecting to an SAP system using load balancing.

  • Group: If a value is specified, set this property to the value in the Group/Server box.

The Group property specifies the logon group being used. The default in most SAP systems will be PUBLIC.

If you are using a message server service other than HTTP, set MessageServerService.

Connecting to a Custom Application Server

If you are connecting to an SAP system with a dedicated application server or a custom application server, you can obtain the following connection properties on the Connection tab of the System Entry Properties dialog.

  • SystemId: Set this property to the value in the System Id box.

The SystemId property is the System Id or R3Name of the SAP system. The system Id is a string with a maximum of three characters.

  • Host: Set this property to the value in the Application Server box.

The Host property specifies the host name of the target system. This value can be a regular host name, IP address, or SAProuter address.

  • SystemNumber: Set this property to the value in the SystemNumber box.

The SystemNumber property defines the target system.

Configuring Secure Network Connections

If the administrator has configured Secure Network Communication (SNC), you need to set the following additional properties. You can obtain the following SNC connection string properties on the Network tab of the System Entry Properties dialog.

  • SNCMode: If the "Activate Secure Network Connections" checkbox is enabled, set the SNCMode connection string property to True. If this checkbox is disabled, set the SNCMode connection property to False.

The SNCMode connection property is a boolean value determining if you are using SNC. The default value is False.

  • SNCPartnerName: Set this property to the value in the SNC Name box.

The SNCPartnerName property specifies the application server's SNC name. For example: p:CN=IDS, OU=IT, O=CSW, C=DE

  • SNCName: Optional. Set this property to the value in the SNC Name box.

The SNCName property specifies the name of the SNC connection. Set this property to make sure that the correct SNC name is used for the connection.

  • SNCQop: Set this property to the selected option in the Secure Network Settings section. For example, if the Integrity option is selected, set the SNCQop property to 3.

The SNCQop property specifies the level (or quality) of data protection. If this property is not specified, the integer -1 is set for this property. Valid values are 1, 2, 3, 8, or 9, which correspond to the following protection levels:

  • SNCLibPath: Set this property to the path and filename of your SNC library.

The SNCLibPath property specifies the full path to the security library you are using. For example, C:\Secude\secude.xll.

Customizing the SSL Configuration

By default, the provider attempts to negotiate SSL/TLS by checking the server's certificate against the system's trusted certificate store. To specify another certificate, see the SSLServerCert property for the available formats to do so.

Connecting Through a Firewall or Proxy

HTTP Proxies

To connect through the Windows system proxy, you do not need to set any additional connection properties. To connect to other proxies, set ProxyAutoDetect to false.

In addition, to authenticate to an HTTP proxy, set ProxyAuthScheme, ProxyUser, and ProxyPassword, in addition to ProxyServer and ProxyPort.

Other Proxies

Set the following properties:

  • To use a proxy-based firewall, set FirewallType, FirewallServer, and FirewallPort.
  • To tunnel the connection, set FirewallType to TUNNEL.
  • To authenticate, specify FirewallUser and FirewallPassword.
  • To authenticate to a SOCKS proxy, additionally set FirewallType to SOCKS5.

Troubleshooting the Connection

To show provider activity from query execution to network traffic, use Logfile and Verbosity. The examples of common connection errors below show how to use these properties to get more context. Contact the support team for help tracing the source of an error or circumventing a performance issue.

  • Authentication errors: Typically, recording a Logfile at Verbosity 4 is necessary to get full details on an authentication error.
  • Queries time out: A server that takes too long to respond will exceed the provider's client-side timeout. Often, setting the Timeout property to a higher value will avoid a connection error. Another option is to disable the timeout by setting the property to 0. Setting Verbosity to 2 will show where the time is being spent.
  • The certificate presented by the server cannot be validated: This error indicates that the provider cannot validate the server's certificate through the chain of trust. If you are using a self-signed certificate, there is only one certificate in the chain.

To resolve this error, you must verify yourself that the certificate can be trusted and specify to the provider that you trust the certificate. One way you can specify that you trust a certificate is to add the certificate to the trusted system store; another is to set SSLServerCert.